$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/c3ac29bf-e89b-314f-95de-e9ba9ed1070f.roa File: c3ac29bf-e89b-314f-95de-e9ba9ed1070f.roa (raw, json) Hash identifier: xC4tpRQ+hmeO43Hm27qenaPBLND+0PE51wGqvJ+xE2I= Subject key identifier: E3:25:32:BB:AB:42:A5:9A:C9:93:F5:40:BD:18:59:31:19:C8:83:F7 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584A2ABAD2FD95B0F603FACBBA00 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/c3ac29bf-e89b-314f-95de-e9ba9ed1070f.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 13414 IP address blocks: 209.237.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:d2:fd:95:b0:f6:03:fa:cb:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=c3e8ce91-3351-4a17-bf84-9ae1a789df68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:82:41:a2:c4:21:f7:b4:b8:ff:cd:58:96:30: ea:d7:3d:3d:56:49:81:0a:8e:8c:1f:5c:1e:f5:f3: 77:14:cf:dd:ef:90:1b:52:3b:d3:fe:fa:3c:2f:96: 74:d2:5f:87:51:82:5e:db:d0:d2:00:45:85:d0:f4: c8:53:37:e2:aa:13:78:bc:19:4c:5e:84:e8:f2:81: 0f:8f:62:a9:1e:14:38:9f:7d:b9:eb:57:12:85:79: 51:5d:b5:6d:65:85:41:6b:b9:4a:ee:cd:b1:01:10: ec:60:e5:63:06:38:3b:8e:98:09:b6:2f:26:18:1e: dc:32:c8:6e:25:08:06:4d:36:31:db:87:66:d6:c5: c6:69:e9:5c:2d:52:77:65:90:b1:a1:b1:41:13:3d: a7:2e:51:ca:c1:c7:62:07:80:a6:eb:4c:ec:cd:3a: 13:08:c4:40:1c:0c:2d:96:ec:ea:da:0f:b0:ab:3e: c8:d8:6a:3d:9b:7a:1d:6a:2a:90:9e:91:25:b5:a4: ba:9f:7a:f8:0b:c1:90:1f:0b:9d:af:18:16:bc:b8: 9e:3f:c9:13:24:db:6b:d5:ec:71:22:ce:1a:3a:1d: 12:7e:66:f0:55:38:59:9e:49:b9:bb:7c:40:44:b9: 50:cf:c7:9d:f1:3a:1f:b6:4d:c5:26:93:99:1f:a6: d4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:25:32:BB:AB:42:A5:9A:C9:93:F5:40:BD:18:59:31:19:C8:83:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/c3ac29bf-e89b-314f-95de-e9ba9ed1070f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:fd:84:b4:aa:ed:d4:e0:a0:e6:7d:46:66:48:17:67:72:6e: 2a:6a:58:58:d0:02:91:01:c4:aa:32:6e:59:ef:24:a3:a9:a6: d4:6e:9a:90:49:b7:7c:6f:84:cd:f5:ed:bd:99:97:11:0e:ed: c3:10:da:cf:63:da:0a:e1:0b:94:b4:9d:33:c0:ed:c0:81:76: be:a1:ac:ba:d9:ad:53:c2:b2:b0:09:13:fa:53:55:6d:84:dd: ad:ce:b7:ae:f6:ea:c8:b1:86:b4:3f:51:8d:a2:06:5b:18:cf: 8f:68:35:d2:fb:54:e5:eb:a0:ca:4b:f7:a6:3a:fc:d9:cf:b1: 99:6c:81:d9:66:de:91:a8:21:19:44:17:1d:41:8b:4c:19:a4: 72:4e:85:27:7f:d5:1e:7c:1e:a6:c2:3d:0c:c9:a6:b9:d4:1f: 07:e2:1c:df:b2:be:79:eb:0b:1b:a7:d3:e5:80:34:d8:1a:55: 83:a0:83:f0:ed:21:9e:3a:dd:ff:61:8c:49:4f:5f:a2:3f:08: bf:1a:8a:67:5e:63:99:f1:26:51:dd:c8:bc:90:7d:52:2f:57: e1:96:be:44:b9:4e:37:b3:e7:18:1e:4f:8a:8c:48:e8:d7:33: 5f:ef:6e:6b:5f:71:db:4a:90:1d:fe:3a:96:84:48:53:4c:1f: c5:78:fa:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoqutL9lbD2A/rLugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk YzNlOGNlOTEtMzM1MS00YTE3LWJmODQtOWFlMWE3ODlkZjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoJBosQh97S4/81YljDq1z09VkmBCo6MH1we 9fN3FM/d75AbUjvT/vo8L5Z00l+HUYJe29DSAEWF0PTIUzfiqhN4vBlMXoTo8oEP j2KpHhQ4n32561cShXlRXbVtZYVBa7lK7s2xARDsYOVjBjg7jpgJti8mGB7cMshu JQgGTTYx24dm1sXGaelcLVJ3ZZCxobFBEz2nLlHKwcdiB4Cm60zszToTCMRAHAwt luzq2g+wqz7I2Go9m3odaiqQnpEltaS6n3r4C8GQHwudrxgWvLieP8kTJNtr1exx Is4aOh0SfmbwVThZnkm5u3xARLlQz8ed8Toftk3FJpOZH6bU5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMlMrurQqWayZP1QL0YWTEZyIP3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvYzNhYzI5YmYtZTg5Yi0z MTRmLTk1ZGUtZTliYTllZDEwNzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADz9hLSq7dTgoOZ9RmZIF2dybipqWFjQApEBxKoyblnvJKOpptRumpBJ t3xvhM317b2ZlxEO7cMQ2s9j2grhC5S0nTPA7cCBdr6hrLrZrVPCsrAJE/pTVW2E 3a3Ot6726sixhrQ/UY2iBlsYz49oNdL7VOXroMpL96Y6/NnPsZlsgdlm3pGoIRlE Fx1Bi0wZpHJOhSd/1R58HqbCPQzJprnUHwfiHN+yvnnrCxun0+WANNgaVYOgg/Dt IZ463f9hjElPX6I/CL8aimdeY5nxJlHdyLyQfVIvV+GWvkS5Tjez5xgeT4qMSOjX M1/vbmtfcdtKkB3+OpaESFNMH8V4+u4= -----END CERTIFICATE-----Generated at Tue Jun 17 07:24:01 2025 by rpki-client