$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/1a6a88d8-6977-3d13-bdb7-7b74335d6c1d.roa File: 1a6a88d8-6977-3d13-bdb7-7b74335d6c1d.roa (raw, json) Hash identifier: wZqMNIWR5BDJMQ7D3IgOX9QK5ZFnFZPMauaNzcV3u8Y= Subject key identifier: DC:6F:44:DA:EA:AB:80:A2:2D:D6:83:C1:DC:38:71:04:8A:81:9B:41 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F43285848DA70F6354A6C7E3125D80BC0 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/1a6a88d8-6977-3d13-bdb7-7b74335d6c1d.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 397422 IP address blocks: 209.237.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:70:f6:35:4a:6c:7e:31:25:d8:0b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=b8ae79b3-515a-462a-8bd6-fd2485fbc540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:80:83:7e:34:bb:af:fc:9d:e5:95:55:81:e4: 1f:61:43:a8:80:87:90:24:45:04:6a:8b:60:c2:b0: 53:92:8c:c4:ee:09:db:dc:e9:2a:8b:f9:8a:a6:2c: e7:ed:24:26:07:ac:b2:ce:5d:cb:b5:39:21:d2:d9: 6c:28:f8:06:00:bf:1d:0f:09:17:04:63:0a:26:6a: 18:dc:69:7b:79:ce:47:f8:18:58:74:99:2a:10:5e: 10:0e:79:c8:2c:e5:17:d9:21:4e:ee:ab:2f:f1:7f: 11:66:c0:1c:3e:05:4d:f8:63:2a:81:b1:69:b6:dd: 20:0f:a4:7a:26:b7:13:dd:b1:e5:12:a4:c4:51:c2: 02:a8:ab:19:7d:62:e1:9e:a1:85:64:27:a4:67:80: fc:63:29:db:1f:0d:70:3a:2d:87:a9:02:36:29:21: 20:b1:19:65:de:04:94:4c:ea:0a:6d:06:aa:75:f4: 43:87:44:93:d4:81:d0:ab:ce:42:6f:67:d3:42:19: 76:d2:b4:cc:de:59:af:c9:70:59:ad:d3:a1:92:7b: d7:e8:41:eb:51:f0:98:76:10:6f:62:6f:eb:89:26: 60:6b:cc:a6:54:fa:36:4f:1d:27:89:0b:f8:23:1d: c1:31:a4:a8:29:aa:5f:a0:b0:34:bd:29:44:af:88: 70:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:6F:44:DA:EA:AB:80:A2:2D:D6:83:C1:DC:38:71:04:8A:81:9B:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/1a6a88d8-6977-3d13-bdb7-7b74335d6c1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:0f:11:d3:d8:20:ba:0e:e1:7e:2b:e3:66:3e:23:28:a0:b9: 83:10:06:ef:82:79:f2:fa:e1:e8:86:c2:1f:f8:07:fb:65:97: f4:c5:d7:11:b2:84:01:42:13:2f:01:0a:1f:f7:6b:71:21:b1: e9:c5:16:eb:ed:33:06:a0:d4:16:79:eb:2e:4c:46:69:cc:e8: 26:8c:10:97:d1:b5:c2:31:ff:50:22:fc:94:30:12:13:84:41: 19:97:74:b4:21:64:6e:25:36:b5:be:c3:7e:af:94:e8:41:05: c4:96:b9:a4:c7:b0:c0:b0:b8:62:58:70:2f:4c:dd:0a:c5:50: 91:13:72:9a:da:66:bf:00:37:03:7d:af:58:23:e8:8d:c6:04: 7b:fa:7e:4b:54:cc:06:92:56:81:1f:56:cd:12:d0:e6:8e:8c: 17:b7:6a:8b:ae:d2:1c:ad:ca:4e:5f:4d:15:c5:fd:de:f4:37: 70:63:dc:e0:df:4d:e4:3a:fb:ac:2c:01:99:07:2b:bb:45:6d: 12:cf:36:c3:92:87:6e:f3:97:32:ff:2b:fa:1c:2d:2b:18:af: bd:3d:c5:03:e8:c8:1c:6c:75:de:59:09:c4:74:6e:65:df:f1: 4d:08:48:12:59:20:10:d0:96:62:0d:1e:92:cc:40:8a:08:4c: 0a:58:e7:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacPY1Smx+MSXYC8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk YjhhZTc5YjMtNTE1YS00NjJhLThiZDYtZmQyNDg1ZmJjNTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoCDfjS7r/yd5ZVVgeQfYUOogIeQJEUEaotg wrBTkozE7gnb3Okqi/mKpizn7SQmB6yyzl3LtTkh0tlsKPgGAL8dDwkXBGMKJmoY 3Gl7ec5H+BhYdJkqEF4QDnnILOUX2SFO7qsv8X8RZsAcPgVN+GMqgbFptt0gD6R6 JrcT3bHlEqTEUcICqKsZfWLhnqGFZCekZ4D8YynbHw1wOi2HqQI2KSEgsRll3gSU TOoKbQaqdfRDh0ST1IHQq85Cb2fTQhl20rTM3lmvyXBZrdOhknvX6EHrUfCYdhBv Ym/riSZga8ymVPo2Tx0niQv4Ix3BMaSoKapfoLA0vSlEr4hwhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxvRNrqq4CiLdaDwdw4cQSKgZtBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvMWE2YTg4ZDgtNjk3Ny0z ZDEzLWJkYjctN2I3NDMzNWQ2YzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0e1aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUPEdPYILoO4X4r42Y+IyiguYMQBu+CefL64eiGwh/4B/tll/TF1xGy hAFCEy8BCh/3a3EhsenFFuvtMwag1BZ56y5MRmnM6CaMEJfRtcIx/1Ai/JQwEhOE QRmXdLQhZG4lNrW+w36vlOhBBcSWuaTHsMCwuGJYcC9M3QrFUJETcpraZr8ANwN9 r1gj6I3GBHv6fktUzAaSVoEfVs0S0OaOjBe3aouu0hytyk5fTRXF/d70N3Bj3ODf TeQ6+6wsAZkHK7tFbRLPNsOSh27zlzL/K/ocLSsYr709xQPoyBxsdd5ZCcR0bmXf 8U0ISBJZIBDQlmINHpLMQIoITApY5zs= -----END CERTIFICATE-----Generated at Mon Apr 28 19:28:42 2025 by rpki-client