$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5c6a2600-430c-3c39-a484-f05a9a811305.roa File: 5c6a2600-430c-3c39-a484-f05a9a811305.roa (raw, json) Hash identifier: pBwCgRY3O6pUAAxFqgHBkk6UlpNUarp6RIUoPMvGNB8= Subject key identifier: EA:8B:03:3A:15:3D:8D:94:21:08:BC:4C:3A:CF:E1:AA:FA:22:A4:34 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A225AC74BEF46181E92A44840 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5c6a2600-430c-3c39-a484-f05a9a811305.roa Signing time: Mon 09 Jun 2025 13:01:01 +0000 ROA not before: Mon 09 Jun 2025 13:01:01 +0000 ROA not after: Sun 07 Sep 2025 13:01:01 +0000 asID: 852 IP address blocks: 209.171.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:22:5a:c7:4b:ef:46:18:1e:92:a4:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jun 9 13:01:01 2025 GMT Not After : Sep 7 13:01:01 2025 GMT Subject: CN=caac3984-a6e7-41cc-b213-387814fe5b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:70:0f:8d:05:79:b0:31:53:e9:c8:3a:cf:8f: 8c:43:84:35:b6:a2:ef:97:06:77:8d:15:8d:08:68: 8b:b1:2e:15:fa:70:39:3b:c8:6a:68:40:4e:bf:57: 12:c0:2b:4c:d5:03:05:bd:2c:22:9c:98:1c:52:51: 7e:4f:de:ab:8e:c2:1e:d9:d4:5e:ca:53:0d:f7:d6: 61:b4:6e:22:ad:04:02:e4:25:2b:82:48:30:30:0a: 02:57:12:40:d4:28:b8:da:90:06:67:ce:84:41:7c: 81:23:b7:a1:5a:7a:72:89:11:3b:84:bb:92:15:be: 34:83:64:64:65:1d:49:d6:9b:91:a1:bd:a0:22:0a: 8c:d9:25:b6:fe:88:ed:f3:dc:99:81:da:9c:c0:49: f9:6e:d4:c6:47:78:99:24:80:c6:6f:bf:ec:60:b5: 95:6b:3c:b3:7e:c4:54:54:d2:0f:b0:de:6b:ff:80: 7d:61:45:14:b0:72:76:67:1c:af:6b:4e:8d:52:3b: 10:b4:aa:72:5a:19:34:dd:5f:dc:e3:b4:31:e9:3c: bb:69:66:93:5d:24:fb:6e:b2:51:56:ae:ba:06:2e: 8a:f3:61:7a:23:e0:4c:04:a6:a2:cf:b4:ba:5d:77: 63:73:15:06:65:51:33:54:75:3b:00:c8:3c:84:b4: bb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:8B:03:3A:15:3D:8D:94:21:08:BC:4C:3A:CF:E1:AA:FA:22:A4:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5c6a2600-430c-3c39-a484-f05a9a811305.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.171.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:25:33:7b:e2:30:1a:df:45:72:72:dd:33:7a:50:e0:5c:79: 7f:e8:2c:69:28:37:3c:5d:f4:23:ac:57:b7:82:cb:19:e9:fa: b9:3d:e3:50:ad:7d:18:0f:d8:5a:13:94:a7:95:dc:ff:a6:fd: 7a:2b:4e:1a:b5:89:91:ca:1f:70:97:06:7e:65:2e:3f:e5:ca: ab:53:b6:29:4d:a9:8d:0d:10:fa:46:9d:ba:7c:d1:77:b0:a0: 99:59:7a:54:a6:2c:b3:04:c1:9a:4c:03:0a:c8:cd:c4:14:b7: b9:4d:79:8c:d2:0d:2d:5e:bd:e3:5b:bf:5d:cb:10:af:44:89: f2:76:46:e4:0a:01:00:8f:6c:ea:be:e2:83:d9:e3:0b:a3:7b: dd:b1:eb:11:57:e3:dd:29:24:52:fa:6f:00:2a:59:b4:0a:59: 88:95:25:5d:ff:01:28:2b:fb:64:db:97:bc:3d:1d:b9:84:cd: fc:ee:93:8e:f0:2a:0e:04:1a:5a:13:55:41:47:d5:ae:50:b2: 5b:9c:cd:2a:18:26:be:4c:59:72:a3:27:4e:ca:41:f8:a2:e7: 01:11:a2:80:64:2a:0a:5a:40:54:91:0a:1c:6d:03:66:80:bf: 84:1b:9f:d1:98:4d:b7:1f:d4:f8:97:1e:56:4c:8a:de:c2:30: 93:38:f6:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoiWsdL70YYHpKkSEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDYwOTEzMDEwMVoXDTI1MDkwNzEzMDEwMVowLzEtMCsGA1UEAxMk Y2FhYzM5ODQtYTZlNy00MWNjLWIyMTMtMzg3ODE0ZmU1YjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXAPjQV5sDFT6cg6z4+MQ4Q1tqLvlwZ3jRWN CGiLsS4V+nA5O8hqaEBOv1cSwCtM1QMFvSwinJgcUlF+T96rjsIe2dReylMN99Zh tG4irQQC5CUrgkgwMAoCVxJA1Ci42pAGZ86EQXyBI7ehWnpyiRE7hLuSFb40g2Rk ZR1J1puRob2gIgqM2SW2/ojt89yZgdqcwEn5btTGR3iZJIDGb7/sYLWVazyzfsRU VNIPsN5r/4B9YUUUsHJ2Zxyva06NUjsQtKpyWhk03V/c47Qx6Ty7aWaTXST7brJR Vq66Bi6K82F6I+BMBKaiz7S6XXdjcxUGZVEzVHU7AMg8hLS7dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqLAzoVPY2UIQi8TDrP4ar6IqQ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNWM2YTI2MDAtNDMwYy0z YzM5LWE0ODQtZjA1YTlhODExMzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0atVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFglM3viMBrfRXJy3TN6UOBceX/oLGkoNzxd9COsV7eCyxnp+rk941Ct fRgP2FoTlKeV3P+m/XorThq1iZHKH3CXBn5lLj/lyqtTtilNqY0NEPpGnbp80Xew oJlZelSmLLMEwZpMAwrIzcQUt7lNeYzSDS1eveNbv13LEK9EifJ2RuQKAQCPbOq+ 4oPZ4wuje92x6xFX490pJFL6bwAqWbQKWYiVJV3/ASgr+2Tbl7w9HbmEzfzuk47w Kg4EGloTVUFH1a5QsluczSoYJr5MWXKjJ07KQfii5wERooBkKgpaQFSRChxtA2aA v4Qbn9GYTbcf1PiXHlZMit7CMJM49s4= -----END CERTIFICATE-----Generated at Mon Jun 16 04:15:17 2025 by rpki-client