$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/912cfb8a-8b5e-3b5d-af3c-42743283f352.roa File: 912cfb8a-8b5e-3b5d-af3c-42743283f352.roa (raw, json) Hash identifier: 5xIccihMVUleRvqHF9yCWvGAlszZ878rG6VSeVehxTs= Subject key identifier: 7A:B2:94:2C:EB:C6:99:4A:F6:E9:63:16:A7:BA:75:BE:B1:1C:A9:D7 Certificate issuer: /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114 Certificate serial: 010D0C9F4328584A71EB3216698B75A89C0A2730 Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/912cfb8a-8b5e-3b5d-af3c-42743283f352.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 46455 IP address blocks: 209.51.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:32:16:69:8b:75:a8:9c:0a:27:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114 Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=3e21831b-343d-4f45-8f5a-ae63b4c4f033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:2c:4b:ed:ab:41:23:f5:5e:df:37:c2:df:ef: f4:6c:33:53:7f:3a:e8:9e:5b:40:4c:e3:13:7f:a3: c5:0c:8f:8e:6b:8d:b1:bb:21:1f:e8:d2:8a:06:e3: b6:04:2a:3d:69:3d:03:a2:19:91:0e:31:d9:40:fc: 42:d7:9e:c4:f7:de:04:11:dd:06:26:ed:b0:0a:8d: af:60:84:52:03:6e:d4:ab:27:1a:a9:96:ab:55:fc: a5:12:b4:7a:fe:0d:54:81:31:0b:d6:22:f8:05:43: f9:b9:55:df:9f:5a:34:ed:f7:af:8b:9e:a5:3a:e5: 1a:5a:41:38:76:f4:e0:ae:57:46:1a:72:51:21:bc: 4b:06:d7:79:4a:5e:7a:89:8e:cd:fa:5b:57:b2:6a: 1e:ac:8b:fb:4f:12:30:6f:f3:bd:ad:02:2c:18:3e: 2d:f1:b9:67:f4:37:2f:33:8b:90:71:7a:8f:da:1a: bb:8d:ad:11:09:8b:31:05:8d:59:9b:00:2e:f3:35: ed:d1:b7:bb:b6:69:2e:44:f3:11:28:86:46:ed:2a: ec:dd:d7:09:cb:c6:22:1f:47:95:e5:08:e5:ac:25: 3a:ad:3a:a1:6f:83:79:6e:cc:7d:8c:c2:70:32:be: 98:7a:e3:43:b6:6d:58:92:6c:b7:e9:d6:81:f5:7f: d6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B2:94:2C:EB:C6:99:4A:F6:E9:63:16:A7:BA:75:BE:B1:1C:A9:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/912cfb8a-8b5e-3b5d-af3c-42743283f352.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl X509v3 Authority Key Identifier: keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer sbgp-ipAddrBlock: critical IPv4: 209.51.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:d9:8f:c9:63:9d:8a:69:c1:2c:4f:25:8c:5b:72:e0:13:23: f1:95:f5:a4:26:2c:6f:14:72:6e:39:ee:e7:0d:65:3b:af:1b: 90:76:9b:80:15:6a:a8:24:2c:39:66:06:6b:d2:98:a5:a1:55: a1:c1:9a:38:46:f1:9a:65:f4:24:f9:56:e6:b4:e0:b2:9e:ec: cb:74:19:8c:2f:56:15:ea:c6:cc:f8:25:5a:6d:4d:7a:8d:58: 7b:5b:93:d1:4a:b1:bd:af:d6:73:61:53:39:f3:38:16:b4:13: e7:a4:0f:db:c2:e3:b4:6b:2f:bc:bc:9e:35:cc:b2:d8:56:0b: 75:ca:54:4b:37:97:f1:ca:12:98:6d:5e:4d:02:a3:1a:01:86: 70:44:09:e5:be:9b:0b:b5:e5:48:aa:45:d3:4a:a0:35:49:97: 01:b1:8a:55:7f:c2:a3:bf:71:3d:b2:27:1b:d1:8e:4d:fe:ad: 8f:6e:ca:9a:1d:1e:19:0b:7d:88:e0:2b:7f:2f:dd:e7:91:30: de:32:6e:03:d3:26:a0:79:2c:46:86:89:cb:33:26:ad:69:12: a6:ed:f6:cd:3c:ac:7e:b2:fd:1e:61:db:ae:72:41:7c:94:07: ea:81:d3:27:2c:61:0c:e3:97:c6:bd:d9:67:c5:d2:c4:e4:b3: 8d:0f:7d:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx6zIWaYt1qJwKJzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFjNTk5NTktZTg5OC00MmFkLTlkMGEtZjFiODdhN2Qw MTE0MB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk M2UyMTgzMWItMzQzZC00ZjQ1LThmNWEtYWU2M2I0YzRmMDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+CxL7atBI/Ve3zfC3+/0bDNTfzronltATOMT f6PFDI+Oa42xuyEf6NKKBuO2BCo9aT0DohmRDjHZQPxC157E994EEd0GJu2wCo2v YIRSA27UqycaqZarVfylErR6/g1UgTEL1iL4BUP5uVXfn1o07fevi56lOuUaWkE4 dvTgrldGGnJRIbxLBtd5Sl56iY7N+ltXsmoerIv7TxIwb/O9rQIsGD4t8bln9Dcv M4uQcXqP2hq7ja0RCYsxBY1ZmwAu8zXt0be7tmkuRPMRKIZG7Srs3dcJy8YiH0eV 5QjlrCU6rTqhb4N5bsx9jMJwMr6YeuNDtm1Ykmy36daB9X/WVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqylCzrxplK9uljFqe6db6xHKnXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1 OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4N2E3ZDAxMTQvOTEyY2ZiOGEtOGI1ZS0z YjVkLWFmM2MtNDI3NDMyODNmMzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWFjNTk5NTktZTg5OC00MmFkLTlk MGEtZjFiODdhN2QwMTE0L2FhYzU5OTU5LWU4OTgtNDJhZC05ZDBhLWYxYjg3YTdk MDExNC5jcmwwHwYDVR0jBBgwFoAUul4Dp25dfBcjybWEUNyNWEuvgL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4 N2E3ZDAxMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0TMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPZj8ljnYppwSxPJYxbcuATI/GV9aQmLG8Ucm457ucNZTuvG5B2m4AV aqgkLDlmBmvSmKWhVaHBmjhG8Zpl9CT5Vua04LKe7Mt0GYwvVhXqxsz4JVptTXqN WHtbk9FKsb2v1nNhUznzOBa0E+ekD9vC47RrL7y8njXMsthWC3XKVEs3l/HKEpht Xk0CoxoBhnBECeW+mwu15UiqRdNKoDVJlwGxilV/wqO/cT2yJxvRjk3+rY9uypod HhkLfYjgK38v3eeRMN4ybgPTJqB5LEaGicszJq1pEqbt9s08rH6y/R5h265yQXyU B+qB0ycsYQzjl8a92WfF0sTks40PfSA= -----END CERTIFICATE-----Generated at Wed Aug 6 09:42:05 2025 by rpki-client