$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/dbbd7782-9eb0-34e1-be21-a8b2f44236fe.roa File: dbbd7782-9eb0-34e1-be21-a8b2f44236fe.roa (raw, json) Hash identifier: ytKe+Cnbq06V7O4lRpwURYVH+oQnuX3EqUlIsEoTXPs= Subject key identifier: D2:F8:FE:40:3E:A3:C9:11:B1:5D:C7:17:32:D5:87:E1:7F:AC:F3:C2 Certificate issuer: /CN=e8522b95-144f-483f-bbfb-bec0605ebf8c Certificate serial: 010D0C9F43285849ED4FCBB567E328DEF6957F00 Authority key identifier: 01:1D:7C:FA:C5:58:E8:48:89:6B:20:DD:D7:D5:CF:15:D3:0E:20:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/dbbd7782-9eb0-34e1-be21-a8b2f44236fe.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 11023 IP address blocks: 209.251.32.0/20 maxlen: 20 209.251.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/e8522b95-144f-483f-bbfb-bec0605ebf8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/e8522b95-144f-483f-bbfb-bec0605ebf8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:cb:b5:67:e3:28:de:f6:95:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8522b95-144f-483f-bbfb-bec0605ebf8c Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=84f8eda7-870d-4329-8009-b42877812b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:90:52:ff:51:b9:0f:8f:c9:17:60:88:cf:45: fc:76:50:cb:f7:6a:75:f4:a3:0b:54:f6:6e:61:01: cc:5d:4a:de:ea:8d:e9:44:5b:47:3b:3b:e7:8c:d4: 71:88:3b:80:9b:8a:06:56:99:7c:2b:2b:ac:84:e2: ab:84:33:8f:84:7d:3b:fd:68:05:37:f4:82:8c:da: 14:6e:1b:a7:6d:26:3a:c5:84:8b:f5:34:d4:9d:93: 8c:4c:73:3d:cb:f2:40:74:a9:f9:b1:08:e7:fa:ba: 28:01:67:e5:de:9a:96:0b:43:03:f7:09:78:3a:3c: fc:eb:a3:9e:20:9a:f8:b7:66:bc:f8:17:4e:b9:44: 51:06:10:b0:cd:cb:d4:f5:57:6b:92:48:60:60:9a: 75:c7:8b:8a:af:a0:70:1a:5b:b7:3e:5c:55:33:f4: f9:77:c7:2e:cf:78:d2:b2:b9:a0:42:59:60:ed:ff: ab:d1:51:35:62:02:e6:fb:8a:72:c3:85:58:42:e9: ad:14:ae:3b:b5:fe:e0:c5:9a:91:e5:e5:b6:de:87: 34:93:18:46:a5:f3:cc:5f:d5:d7:58:fa:f8:72:53: ee:fe:db:bf:d4:f1:1c:32:fb:c6:09:54:b1:b6:07: 90:fc:f2:e8:8d:ef:73:1f:3e:61:12:68:41:a1:b4: c2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F8:FE:40:3E:A3:C9:11:B1:5D:C7:17:32:D5:87:E1:7F:AC:F3:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/dbbd7782-9eb0-34e1-be21-a8b2f44236fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/e8522b95-144f-483f-bbfb-bec0605ebf8c.crl X509v3 Authority Key Identifier: keyid:01:1D:7C:FA:C5:58:E8:48:89:6B:20:DD:D7:D5:CF:15:D3:0E:20:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c.cer sbgp-ipAddrBlock: critical IPv4: 209.251.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:54:25:4c:57:0d:18:77:95:e2:c9:0e:03:e2:a7:84:6d:6a: 9f:d0:21:5b:14:79:75:d3:86:e1:b0:01:af:d5:5e:10:6f:f1: 64:9a:78:a8:33:c8:de:58:d1:ca:00:68:0e:1b:60:b6:1c:48: 8c:e7:1e:53:32:4f:9d:63:5c:1f:a5:bb:4f:3f:04:f2:72:6f: 89:5c:0e:be:3e:4b:92:25:96:0e:af:bd:f0:99:db:f6:88:fc: 68:43:d4:d1:6f:d5:16:24:85:75:dd:1b:16:f9:37:be:c4:1f: 30:83:54:16:11:06:d8:a2:ab:94:a9:5a:b0:c5:b2:48:9f:62: 0a:e2:51:58:ed:d9:1b:87:b6:32:09:95:80:21:e4:3d:cb:30: f2:57:b6:e4:0a:ef:9c:dd:a2:1c:68:73:3f:a3:a4:85:54:e1: 2e:96:6d:a6:cc:a6:6b:3f:68:af:55:c4:1c:2a:53:84:bf:b2: 1f:d8:91:60:b3:fd:bb:fb:24:07:77:5e:b5:89:88:6a:dd:ad: 8d:c2:d5:16:31:42:e1:21:82:96:59:fd:21:18:f2:84:5f:65: 74:e9:c0:8d:35:a8:03:35:04:a2:3c:78:71:2f:0e:80:89:73: 3a:de:2b:c4:62:aa:31:b9:2d:59:b9:8b:d5:65:e1:76:9d:b1: ff:05:9f:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT8u1Z+Mo3vaVfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTg1MjJiOTUtMTQ0Zi00ODNmLWJiZmItYmVjMDYwNWVi ZjhjMB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk ODRmOGVkYTctODcwZC00MzI5LTgwMDktYjQyODc3ODEyYjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJBS/1G5D4/JF2CIz0X8dlDL92p19KMLVPZu YQHMXUre6o3pRFtHOzvnjNRxiDuAm4oGVpl8KyushOKrhDOPhH07/WgFN/SCjNoU bhunbSY6xYSL9TTUnZOMTHM9y/JAdKn5sQjn+rooAWfl3pqWC0MD9wl4Ojz866Oe IJr4t2a8+BdOuURRBhCwzcvU9VdrkkhgYJp1x4uKr6BwGlu3PlxVM/T5d8cuz3jS srmgQllg7f+r0VE1YgLm+4pyw4VYQumtFK47tf7gxZqR5eW23oc0kxhGpfPMX9XX WPr4clPu/tu/1PEcMvvGCVSxtgeQ/PLoje9zHz5hEmhBobTC2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNL4/kA+o8kRsV3HFzLVh+F/rPPCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lODUy MmI5NS0xNDRmLTQ4M2YtYmJmYi1iZWMwNjA1ZWJmOGMvZGJiZDc3ODItOWViMC0z NGUxLWJlMjEtYThiMmY0NDIzNmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTg1MjJiOTUtMTQ0Zi00ODNmLWJi ZmItYmVjMDYwNWViZjhjL2U4NTIyYjk1LTE0NGYtNDgzZi1iYmZiLWJlYzA2MDVl YmY4Yy5jcmwwHwYDVR0jBBgwFoAUAR18+sVY6EiJayDd19XPFdMOIFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lODUyMmI5NS0xNDRmLTQ4M2YtYmJmYi1iZWMw NjA1ZWJmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0fsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZUJUxXDRh3leLJDgPip4Rtap/QIVsUeXXThuGwAa/VXhBv8WSaeKgz yN5Y0coAaA4bYLYcSIznHlMyT51jXB+lu08/BPJyb4lcDr4+S5Illg6vvfCZ2/aI /GhD1NFv1RYkhXXdGxb5N77EHzCDVBYRBtiiq5SpWrDFskifYgriUVjt2RuHtjIJ lYAh5D3LMPJXtuQK75zdohxocz+jpIVU4S6WbabMpms/aK9VxBwqU4S/sh/YkWCz /bv7JAd3XrWJiGrdrY3C1RYxQuEhgpZZ/SEY8oRfZXTpwI01qAM1BKI8eHEvDoCJ czreK8RiqjG5LVm5i9Vl4Xadsf8Fn7Y= -----END CERTIFICATE-----Generated at Sun Jun 15 14:48:06 2025 by rpki-client