$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/8d49b5f3-420f-3eb8-b537-40a6e2988035.roa File: 8d49b5f3-420f-3eb8-b537-40a6e2988035.roa (raw, json) Hash identifier: JAbY1c7IxSotAr8H615M5z9i3X6hPSQZIO0hb9ThPcg= Subject key identifier: AD:4A:7A:72:01:DF:B1:2F:AC:56:1D:EF:35:57:E5:E2:5C:48:CC:8A Certificate issuer: /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f Certificate serial: 010D0C9F4328584A119AA7060142BC89ECFC5E40 Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/8d49b5f3-420f-3eb8-b537-40a6e2988035.roa Signing time: Tue 03 Jun 2025 13:01:03 +0000 ROA not before: Tue 03 Jun 2025 13:01:03 +0000 ROA not after: Mon 01 Sep 2025 13:01:03 +0000 asID: 13213 IP address blocks: 209.95.32.0/20 maxlen: 24 209.95.48.0/23 maxlen: 24 209.95.53.0/24 maxlen: 24 209.95.54.0/23 maxlen: 24 209.95.56.0/24 maxlen: 24 209.95.58.0/23 maxlen: 24 209.95.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:9a:a7:06:01:42:bc:89:ec:fc:5e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f Validity Not Before: Jun 3 13:01:03 2025 GMT Not After : Sep 1 13:01:03 2025 GMT Subject: CN=2e380a6a-8b77-4abd-b5c7-39809cb3b735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:cb:eb:8b:8e:2b:f4:5a:05:22:e8:bd:a2:cf: e9:4e:58:ed:d3:ec:15:07:4a:10:14:19:aa:3c:9d: 29:10:61:37:76:d2:99:1a:1f:db:bb:b3:2f:90:ee: 4f:5a:84:b2:cd:df:6f:21:3e:25:e6:c1:7e:d4:f9: 80:7f:60:a0:a4:80:9e:ab:46:cb:8c:e9:30:1d:15: f5:9c:07:c6:cd:cb:87:c3:f4:dc:5e:76:09:57:3a: ff:12:ef:e4:0b:fd:cc:cc:67:0b:53:cd:17:1a:b3: 5f:69:3d:e1:8f:cf:e9:08:6b:5b:fb:cf:2e:90:c2: 85:32:d2:73:e6:49:a0:c4:45:10:c0:ed:ce:df:1d: 00:30:ee:65:95:79:19:3d:c0:26:ea:59:c9:2c:90: 65:83:06:8d:96:a7:a0:b6:cb:e3:3b:e9:f6:74:f7: 61:00:59:43:8e:ce:56:79:b3:d6:6d:04:0a:82:ba: 19:c2:fc:91:5b:e1:0e:15:be:cf:27:44:55:61:df: 59:34:6a:8d:83:c6:cb:3f:48:87:b7:86:34:43:de: 69:1b:ae:fe:6f:70:79:99:e0:c6:b4:69:7b:64:0f: c3:24:53:9e:b5:30:64:85:0c:0d:4a:e9:84:d7:fb: 74:76:7e:3f:5a:68:b6:86:38:e5:48:43:d2:fb:64: 2c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:4A:7A:72:01:DF:B1:2F:AC:56:1D:EF:35:57:E5:E2:5C:48:CC:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/8d49b5f3-420f-3eb8-b537-40a6e2988035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl X509v3 Authority Key Identifier: keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer sbgp-ipAddrBlock: critical IPv4: 209.95.32.0-209.95.49.255 209.95.53.0-209.95.56.255 209.95.58.0/23 209.95.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:c2:b6:b9:0b:24:c1:54:4a:d4:0f:71:8f:9d:bb:b8:9b:e1: aa:91:86:8c:d8:de:0d:80:e9:4a:07:79:3a:62:02:0b:0c:77: 8d:2a:e0:f4:e4:7d:c1:f5:4f:2b:78:ea:67:4b:02:c4:de:00: c7:46:1f:44:c5:7b:ae:6c:4a:89:32:a3:86:19:b1:f9:5c:33: 48:9b:b2:d0:00:e4:09:01:01:5a:48:ed:2e:4a:6e:c3:f9:4e: cd:77:ae:a0:0d:ab:19:45:6f:23:3e:29:29:96:ba:a3:cb:0a: c6:e6:e8:38:21:4a:7b:6a:33:37:06:66:16:3a:bc:fa:42:15: ae:64:c3:42:be:4d:ba:2c:c8:40:04:d3:39:49:69:4c:da:14: 41:5b:3b:ec:38:5d:7c:73:2a:03:ee:06:de:3c:df:76:1a:23: 30:73:38:4d:5d:f4:81:3c:4a:86:0b:af:b2:92:f2:53:7a:d6: d3:20:0f:db:94:38:32:d5:79:2a:1a:09:18:cd:2f:02:27:e2: 3e:2f:fc:c7:9d:ba:a1:fb:42:f2:37:37:fb:a5:46:df:70:f8: 18:2a:c4:98:d9:62:eb:cf:36:63:c4:38:10:b6:6d:aa:33:63: 9b:1a:f5:65:1d:98:3b:31:e9:c2:af:d5:29:21:33:14:13:14: a2:4f:ab:1e -----BEGIN CERTIFICATE----- MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWEoRmqcGAUK8iez8XkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE0MDdjZDgtYzgzMC00OWU2LTlkYjQtN2RkYWM3NWVi MDNmMB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk MmUzODBhNmEtOGI3Ny00YWJkLWI1YzctMzk4MDljYjNiNzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMvri44r9FoFIui9os/pTljt0+wVB0oQFBmq PJ0pEGE3dtKZGh/bu7MvkO5PWoSyzd9vIT4l5sF+1PmAf2CgpICeq0bLjOkwHRX1 nAfGzcuHw/TcXnYJVzr/Eu/kC/3MzGcLU80XGrNfaT3hj8/pCGtb+88ukMKFMtJz 5kmgxEUQwO3O3x0AMO5llXkZPcAm6lnJLJBlgwaNlqegtsvjO+n2dPdhAFlDjs5W ebPWbQQKgroZwvyRW+EOFb7PJ0RVYd9ZNGqNg8bLP0iHt4Y0Q95pG67+b3B5meDG tGl7ZA/DJFOetTBkhQwNSumE1/t0dn4/Wmi2hjjlSEPS+2QsawIDAQABo4IDdzCC A3MwHQYDVR0OBBYEFK1KenIB37EvrFYd7zVX5eJcSMyKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81MTQw N2NkOC1jODMwLTQ5ZTYtOWRiNC03ZGRhYzc1ZWIwM2YvOGQ0OWI1ZjMtNDIwZi0z ZWI4LWI1MzctNDBhNmUyOTg4MDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTE0MDdjZDgtYzgzMC00OWU2LTlk YjQtN2RkYWM3NWViMDNmLzUxNDA3Y2Q4LWM4MzAtNDllNi05ZGI0LTdkZGFjNzVl YjAzZi5jcmwwHwYDVR0jBBgwFoAUy7XVgkiqTdjWioVCA8Spu4nGVq4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81MTQwN2NkOC1jODMwLTQ5ZTYtOWRiNC03ZGRh Yzc1ZWIwM2YuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAXRXyAD BAHRXzAwDAMEANFfNQMEANFfOAMEAdFfOgMEANFfPTBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBGwra5CyTB VErUD3GPnbu4m+GqkYaM2N4NgOlKB3k6YgILDHeNKuD05H3B9U8reOpnSwLE3gDH Rh9ExXuubEqJMqOGGbH5XDNIm7LQAOQJAQFaSO0uSm7D+U7Nd66gDasZRW8jPikp lrqjywrG5ug4IUp7ajM3BmYWOrz6QhWuZMNCvk26LMhABNM5SWlM2hRBWzvsOF18 cyoD7gbePN92GiMwczhNXfSBPEqGC6+ykvJTetbTIA/blDgy1XkqGgkYzS8CJ+I+ L/zHnbqh+0LyNzf7pUbfcPgYKsSY2WLrzzZjxDgQtm2qM2ObGvVlHZg7MenCr9Up ITMUExSiT6se -----END CERTIFICATE-----Generated at Sun Jun 15 19:12:51 2025 by rpki-client