$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/c914ae45-f96a-379f-b2e6-986e217df7d0.roa File: c914ae45-f96a-379f-b2e6-986e217df7d0.roa (raw, json) Hash identifier: m8AekKPEC4mJ87JxO7ROSYbeCHgvp00aChFsjDkGoMk= Subject key identifier: BA:37:E3:42:0E:81:AA:6D:50:69:D2:13:A0:89:14:4F:A1:62:0E:72 Certificate issuer: /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b Certificate serial: 010D0C9F43285849D594D364E361E30DD8224A80 Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/c914ae45-f96a-379f-b2e6-986e217df7d0.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 16904 IP address blocks: 209.237.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:d3:64:e3:61:e3:0d:d8:22:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=0916cfea-7898-48a0-ad74-104bea8eceb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:69:b8:03:2a:c5:9d:ee:5e:4f:e1:64:e0:58: 12:ae:8e:7f:c4:7e:e3:9b:be:68:bb:58:ef:99:21: b9:99:c7:f6:f1:c4:d1:5c:cf:f4:4a:b7:2a:a0:1b: 7d:03:cc:b5:1d:f1:3a:d5:8a:b0:e2:8c:0a:b3:72: 6d:f1:10:6d:5b:c5:f1:ab:8c:b0:00:dc:97:b0:93: 9e:37:22:6c:22:51:3b:ed:30:4c:4a:30:e1:98:53: 3a:6a:85:70:a0:aa:30:c7:58:1f:f9:1c:36:cf:8e: f6:a5:bf:aa:a0:26:20:44:da:ed:9f:74:9d:c1:6d: aa:3e:dc:16:09:c6:e5:a7:9f:e8:58:ed:3f:06:d4: 02:f0:54:15:df:7f:36:e7:d4:fa:69:13:95:08:00: 9d:86:de:36:9a:81:98:ad:a9:58:90:4d:52:51:25: 62:3e:db:5a:c9:15:fa:1e:f6:43:ea:71:02:b7:41: 37:b9:93:71:03:14:47:1e:2c:4b:7d:88:8c:4f:f9: 1a:bd:24:6f:4a:f8:75:61:3d:ee:f3:97:09:ad:ec: 0f:d0:cb:39:8e:6d:6d:dc:27:c8:5f:4d:8d:55:63: c1:eb:75:4b:b9:09:f4:33:49:e5:26:08:c7:c5:20: 61:87:24:1e:aa:96:63:48:de:fe:0a:6f:cb:e7:8d: 05:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:37:E3:42:0E:81:AA:6D:50:69:D2:13:A0:89:14:4F:A1:62:0E:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/c914ae45-f96a-379f-b2e6-986e217df7d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl X509v3 Authority Key Identifier: keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer sbgp-ipAddrBlock: critical IPv4: 209.237.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:af:e5:c1:91:cd:21:1a:b6:4e:1c:05:3a:59:de:db:84:b5: 3e:0b:ba:10:1f:c7:de:ec:8b:98:80:62:af:22:d7:0b:27:69: 7e:c4:5f:2d:64:47:6d:cf:a9:01:3a:94:ba:f8:9d:1a:5b:4b: 43:81:82:5c:94:40:4d:22:cc:c3:15:31:9c:8d:fa:f8:aa:73: 8a:3f:42:5a:98:55:9b:ec:2c:f0:2e:93:d9:0b:49:c9:20:a9: 2f:2e:5d:29:30:e1:87:05:af:96:cd:64:7d:2a:cb:5e:51:f8: 48:89:6e:79:f3:c3:fb:51:10:2c:62:83:37:de:72:5c:fd:05: d9:82:bf:da:af:b5:da:33:23:6b:3c:b7:53:74:6c:f5:63:6a: 54:4f:3f:af:06:e0:04:bd:0b:ac:97:4a:b7:94:be:22:00:51: ca:37:f7:59:66:bf:d9:e7:86:fe:b3:02:86:62:57:6d:8e:c9: 2f:c0:8e:43:29:34:50:87:17:3c:d4:ec:2d:4e:8a:af:39:6f: 34:54:e4:82:ea:11:b1:cc:6e:6d:c4:8d:dd:56:f7:f4:73:c5: 9f:eb:60:70:5e:1b:54:0a:0e:92:a2:e0:5b:fe:a1:b0:38:d1: da:0f:12:16:73:b4:fb:27:88:f5:69:7c:ba:81:47:e1:ce:70: 54:b5:ef:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlNNk42HjDdgiSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA0NWMyNWEtMDVlMy00MGJhLWEyZGMtNWM1YmRhYjAx MzFiMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk MDkxNmNmZWEtNzg5OC00OGEwLWFkNzQtMTA0YmVhOGVjZWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGm4AyrFne5eT+Fk4FgSro5/xH7jm75ou1jv mSG5mcf28cTRXM/0SrcqoBt9A8y1HfE61Yqw4owKs3Jt8RBtW8Xxq4ywANyXsJOe NyJsIlE77TBMSjDhmFM6aoVwoKowx1gf+Rw2z472pb+qoCYgRNrtn3SdwW2qPtwW Ccblp5/oWO0/BtQC8FQV338259T6aROVCACdht42moGYralYkE1SUSViPttayRX6 HvZD6nECt0E3uZNxAxRHHixLfYiMT/kavSRvSvh1YT3u85cJrewP0Ms5jm1t3CfI X02NVWPB63VLuQn0M0nlJgjHxSBhhyQeqpZjSN7+Cm/L540FbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLo340IOgaptUGnSE6CJFE+hYg5yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1 YzI1YS0wNWUzLTQwYmEtYTJkYy01YzViZGFiMDEzMWIvYzkxNGFlNDUtZjk2YS0z NzlmLWIyZTYtOTg2ZTIxN2RmN2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA0NWMyNWEtMDVlMy00MGJhLWEy ZGMtNWM1YmRhYjAxMzFiLzAwNDVjMjVhLTA1ZTMtNDBiYS1hMmRjLTVjNWJkYWIw MTMxYi5jcmwwHwYDVR0jBBgwFoAUbbgrxbTjT35CXDlBEzNufGgjfl8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1YzI1YS0wNWUzLTQwYmEtYTJkYy01YzVi ZGFiMDEzMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0e1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyv5cGRzSEatk4cBTpZ3tuEtT4LuhAfx97si5iAYq8i1wsnaX7EXy1k R23PqQE6lLr4nRpbS0OBglyUQE0izMMVMZyN+viqc4o/QlqYVZvsLPAuk9kLSckg qS8uXSkw4YcFr5bNZH0qy15R+EiJbnnzw/tRECxigzfeclz9BdmCv9qvtdozI2s8 t1N0bPVjalRPP68G4AS9C6yXSreUviIAUco391lmv9nnhv6zAoZiV22OyS/AjkMp NFCHFzzU7C1Oiq85bzRU5ILqEbHMbm3Ejd1W9/RzxZ/rYHBeG1QKDpKi4Fv+obA4 0doPEhZztPsniPVpfLqBR+HOcFS172M= -----END CERTIFICATE-----Generated at Sun Jun 15 04:52:44 2025 by rpki-client