$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a8c470dd-40a2-3faa-87d8-a951faf3d8de.roa File: a8c470dd-40a2-3faa-87d8-a951faf3d8de.roa (raw, json) Hash identifier: cVGnoi8C9Rp35RgewAKFXQs6lWWkaRhMo12fm3813Fw= Subject key identifier: 1C:9B:DC:E4:8C:56:04:92:AB:AF:02:9E:4D:0C:9A:15:27:DA:E3:47 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584A2ABAD2C5B8207259DB6DF510 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a8c470dd-40a2-3faa-87d8-a951faf3d8de.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 13414 IP address blocks: 209.237.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:d2:c5:b8:20:72:59:db:6d:f5:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=c3ddff07-fef0-4433-851d-acd0f8e06bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b0:c8:7d:1f:53:7c:68:7f:79:9d:a1:77:91: 71:a8:86:a3:52:36:2c:b4:f7:4c:87:7d:c4:f5:35: 06:27:72:fc:1d:b5:26:91:44:db:81:75:75:20:fb: 41:c0:26:41:6c:bf:6c:4b:70:25:04:ad:e0:42:29: 5f:2b:ee:b5:47:ad:c2:f7:f6:e8:aa:79:5c:df:06: 90:ca:5d:d6:8a:52:74:e5:bd:48:78:21:58:ee:65: d0:96:c5:44:21:2b:10:4b:b8:a1:b1:5b:0e:50:ad: d9:19:bb:1d:02:4f:b8:d2:f6:ae:8d:3e:4e:82:06: 17:d0:60:90:eb:fc:33:5a:54:c4:fd:fd:23:d9:cc: 50:d2:33:89:65:a6:cf:56:eb:f5:90:00:f1:ba:77: 34:4c:84:ae:25:18:a9:d1:e2:69:70:6b:c0:53:54: 3b:60:e1:3c:7f:a7:c8:3b:dd:d8:7c:8f:50:ec:56: ad:a0:ae:49:13:be:2c:f9:65:51:f7:37:6f:e0:87: b4:85:13:a8:33:8a:82:0c:c2:3f:22:9a:1a:a3:d0: ee:b7:b2:ec:55:3d:39:52:34:51:c9:4d:fc:8a:b3: 42:08:31:82:80:c8:d7:b0:aa:23:3e:12:32:89:4c: 11:4a:86:fd:f0:d9:27:6d:49:e0:c8:6f:7f:a6:eb: c1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:9B:DC:E4:8C:56:04:92:AB:AF:02:9E:4D:0C:9A:15:27:DA:E3:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a8c470dd-40a2-3faa-87d8-a951faf3d8de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:9c:b6:ba:c2:ef:44:f1:80:41:28:e4:59:39:eb:9a:f5:79: fd:2f:61:20:e7:db:7b:40:c1:db:fd:ac:10:e4:a3:92:0a:c9: 10:4b:6b:c5:22:11:dd:24:20:29:68:af:45:f8:17:56:ed:b6: cb:fb:ab:e3:c8:4e:af:1c:f7:c9:fe:49:93:61:8c:f1:2c:32: 7a:32:f2:d7:a4:d4:ca:76:4c:18:4b:45:46:07:58:6c:17:5d: c9:34:2f:75:5c:97:da:5a:18:31:f6:d1:c2:67:98:71:bc:4f: 7d:f3:15:62:6c:d2:6d:50:71:5f:4e:9b:bf:7c:5f:07:27:eb: 63:18:35:40:99:52:dd:44:17:75:f2:06:11:8f:3e:e3:e4:8d: ff:a8:d0:17:f3:9f:90:e6:16:a6:07:bf:7b:a5:31:87:9c:ef: d0:d7:36:76:ff:bd:2a:1a:43:5e:00:42:89:90:d7:e5:7e:b1: 04:05:8a:dc:35:0f:3c:8d:56:13:e9:7d:2b:96:d7:94:41:85: 48:67:fc:f0:2e:f7:99:4c:0f:47:3e:07:76:6f:31:90:fe:24: 32:86:e4:db:56:e3:28:68:07:57:61:d7:59:c7:70:0d:04:cd: da:c3:8e:62:a1:0e:77:35:fb:b2:6c:84:6f:32:fb:4a:79:56: 0a:4c:02:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoqutLFuCByWdtt9RAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk YzNkZGZmMDctZmVmMC00NDMzLTg1MWQtYWNkMGY4ZTA2YmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7DIfR9TfGh/eZ2hd5FxqIajUjYstPdMh33E 9TUGJ3L8HbUmkUTbgXV1IPtBwCZBbL9sS3AlBK3gQilfK+61R63C9/boqnlc3waQ yl3WilJ05b1IeCFY7mXQlsVEISsQS7ihsVsOUK3ZGbsdAk+40vaujT5OggYX0GCQ 6/wzWlTE/f0j2cxQ0jOJZabPVuv1kADxunc0TISuJRip0eJpcGvAU1Q7YOE8f6fI O93YfI9Q7FatoK5JE74s+WVR9zdv4Ie0hROoM4qCDMI/Ipoao9Dut7LsVT05UjRR yU38irNCCDGCgMjXsKojPhIyiUwRSob98NknbUngyG9/puvBVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByb3OSMVgSSq68Cnk0MmhUn2uNHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvYThjNDcwZGQtNDBhMi0z ZmFhLTg3ZDgtYTk1MWZhZjNkOGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuctrrC70TxgEEo5Fk565r1ef0vYSDn23tAwdv9rBDko5IKyRBLa8Ui Ed0kIClor0X4F1bttsv7q+PITq8c98n+SZNhjPEsMnoy8tek1Mp2TBhLRUYHWGwX Xck0L3Vcl9paGDH20cJnmHG8T33zFWJs0m1QcV9Om798Xwcn62MYNUCZUt1EF3Xy BhGPPuPkjf+o0Bfzn5DmFqYHv3ulMYec79DXNnb/vSoaQ14AQomQ1+V+sQQFitw1 DzyNVhPpfSuW15RBhUhn/PAu95lMD0c+B3ZvMZD+JDKG5NtW4yhoB1dh11nHcA0E zdrDjmKhDnc1+7JshG8y+0p5VgpMAsY= -----END CERTIFICATE-----Generated at Tue Jun 17 16:09:42 2025 by rpki-client