$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/d1c97a1a-4e55-364a-b407-9f6e1a9bc993.roa File: d1c97a1a-4e55-364a-b407-9f6e1a9bc993.roa (raw, json) Hash identifier: XEHlTbC8R9/hdt8ALrqS0vHKGLixjtnj715/BmRFNPA= Subject key identifier: 23:A6:F2:17:9E:88:7D:EB:1C:84:2A:62:7D:5C:98:F4:FD:89:3E:8A Certificate issuer: /CN=11f590b6-eb6e-4969-824b-0df247220283 Certificate serial: 010D0C9F43285849DB2A2CAF5B9E10FD8B9EDA80 Authority key identifier: 82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/d1c97a1a-4e55-364a-b407-9f6e1a9bc993.roa Signing time: Thu 15 May 2025 01:00:47 +0000 ROA not before: Thu 15 May 2025 01:00:47 +0000 ROA not after: Wed 13 Aug 2025 01:00:47 +0000 asID: 395301 IP address blocks: 209.251.28.0/24 maxlen: 24 209.251.29.0/24 maxlen: 24 209.251.30.0/24 maxlen: 24 209.251.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:db:2a:2c:af:5b:9e:10:fd:8b:9e:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11f590b6-eb6e-4969-824b-0df247220283 Validity Not Before: May 15 01:00:47 2025 GMT Not After : Aug 13 01:00:47 2025 GMT Subject: CN=7172ff07-4b84-4898-a056-1dd9099ed009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0e:87:99:db:f7:23:50:9a:32:95:8d:3c:dd: bb:60:4f:9f:83:b8:6e:1e:bc:01:97:20:bc:f1:e4: cd:74:f1:de:ac:ff:8c:22:56:f8:88:79:78:14:3e: 1c:23:ed:9e:fc:80:b6:c5:26:93:01:a6:fb:62:da: 8c:df:e3:34:b8:5f:3b:bf:16:99:1b:dd:54:0e:e2: 66:fb:2d:16:d4:69:36:0a:d1:12:1b:ce:2f:80:d4: 91:76:66:98:f1:09:f3:7a:be:46:fc:c4:ca:48:68: 3d:65:a3:d9:47:e1:78:9b:34:9d:03:4f:3f:98:48: dc:da:ed:2a:50:30:90:7a:23:87:64:48:ea:2e:17: 94:72:09:56:ce:26:db:5a:cf:60:50:f5:49:e1:fb: 35:f0:94:e7:bf:ad:a0:ea:45:03:1a:42:b3:f6:5d: bc:96:95:88:58:26:31:93:9d:19:68:2d:9b:92:86: ff:bd:2b:74:d9:e7:77:bd:48:8b:47:f5:49:45:d2: 7d:2e:b6:89:5c:40:6f:65:9f:15:a7:0d:5c:00:73: d6:c9:b8:81:20:7e:97:ac:07:dc:a0:7f:b0:7c:ee: cb:d9:05:61:8e:a2:8d:17:61:90:92:4a:50:a7:7b: b5:47:e6:47:55:27:a8:f1:5b:d0:bf:7c:cb:36:7f: f6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A6:F2:17:9E:88:7D:EB:1C:84:2A:62:7D:5C:98:F4:FD:89:3E:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/d1c97a1a-4e55-364a-b407-9f6e1a9bc993.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl X509v3 Authority Key Identifier: keyid:82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer sbgp-ipAddrBlock: critical IPv4: 209.251.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:f2:6c:c2:21:22:68:ba:28:cc:e7:e2:21:d8:bc:8d:82:2b: 5e:86:67:65:75:09:b0:6c:7d:c8:94:3e:ba:4e:d2:77:5f:36: df:e3:32:dd:65:23:00:eb:cc:21:85:87:b1:6f:ce:16:2c:8f: 5a:88:8f:ed:c5:f7:28:fb:aa:79:15:bc:f4:08:31:48:93:06: 69:5e:e5:7c:f7:40:79:1f:30:4e:e7:04:75:56:52:7f:53:8c: 4d:be:16:46:da:a8:e8:bc:23:8f:83:c7:f0:9c:25:df:62:48: 76:eb:cc:2e:0b:dc:2a:10:d8:af:f4:89:f3:0d:4e:cf:e7:90: 6d:6b:d3:91:e1:62:b4:0c:72:1d:fa:91:29:8c:ca:b5:4e:37: f8:58:f1:cc:28:9c:2e:f2:4d:bd:33:0c:5b:df:75:36:fc:0f: 2b:e8:36:eb:97:47:14:2d:0b:43:ef:4f:82:95:ad:2d:89:de: d2:31:2e:7b:77:0a:35:1a:c7:f6:fa:c9:40:ac:7f:0b:dc:64: d7:6d:b4:31:50:bc:94:2d:2a:c6:04:1e:23:af:e2:b4:bb:3e: 52:ae:a7:b1:dc:80:83:1d:1d:cd:04:38:5b:da:44:c4:cc:39: 45:45:55:e1:65:2a:2d:ce:eb:b2:63:d3:d5:cd:bf:be:a7:7c: de:b6:b7:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnbKiyvW54Q/Yue2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFmNTkwYjYtZWI2ZS00OTY5LTgyNGItMGRmMjQ3MjIw MjgzMB4XDTI1MDUxNTAxMDA0N1oXDTI1MDgxMzAxMDA0N1owLzEtMCsGA1UEAxMk NzE3MmZmMDctNGI4NC00ODk4LWEwNTYtMWRkOTA5OWVkMDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApA6Hmdv3I1CaMpWNPN27YE+fg7huHrwBlyC8 8eTNdPHerP+MIlb4iHl4FD4cI+2e/IC2xSaTAab7YtqM3+M0uF87vxaZG91UDuJm +y0W1Gk2CtESG84vgNSRdmaY8Qnzer5G/MTKSGg9ZaPZR+F4mzSdA08/mEjc2u0q UDCQeiOHZEjqLheUcglWzibbWs9gUPVJ4fs18JTnv62g6kUDGkKz9l28lpWIWCYx k50ZaC2bkob/vSt02ed3vUiLR/VJRdJ9LraJXEBvZZ8Vpw1cAHPWybiBIH6XrAfc oH+wfO7L2QVhjqKNF2GQkkpQp3u1R+ZHVSeo8VvQv3zLNn/2iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOm8heeiH3rHIQqYn1cmPT9iT6KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMWY1 OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYyNDcyMjAyODMvZDFjOTdhMWEtNGU1NS0z NjRhLWI0MDctOWY2ZTFhOWJjOTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTFmNTkwYjYtZWI2ZS00OTY5LTgy NGItMGRmMjQ3MjIwMjgzLzExZjU5MGI2LWViNmUtNDk2OS04MjRiLTBkZjI0NzIy MDI4My5jcmwwHwYDVR0jBBgwFoAUguMk2L7Ghd1PatUmk2y+CkgxGFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMWY1OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYy NDcyMjAyODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0fscMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7ybMIhImi6KMzn4iHYvI2CK16GZ2V1CbBsfciUPrpO0ndfNt/jMt1l IwDrzCGFh7FvzhYsj1qIj+3F9yj7qnkVvPQIMUiTBmle5Xz3QHkfME7nBHVWUn9T jE2+FkbaqOi8I4+Dx/CcJd9iSHbrzC4L3CoQ2K/0ifMNTs/nkG1r05HhYrQMch36 kSmMyrVON/hY8cwonC7yTb0zDFvfdTb8DyvoNuuXRxQtC0PvT4KVrS2J3tIxLnt3 CjUax/b6yUCsfwvcZNdttDFQvJQtKsYEHiOv4rS7PlKup7HcgIMdHc0EOFvaRMTM OUVFVeFlKi3O67Jj09XNv76nfN62t50= -----END CERTIFICATE-----Generated at Mon Jun 16 17:08:43 2025 by rpki-client