$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1a7758bd-319b-30e7-aaee-1b8878c6d78c.roa File: 1a7758bd-319b-30e7-aaee-1b8878c6d78c.roa (raw, json) Hash identifier: YEDbVMWI0PPTC7Ut5wWieUr2UbPHpitnZvcPjIT3+5U= Subject key identifier: A8:6E:1C:B5:46:45:F3:9B:F7:7A:FE:01:F9:65:7D:72:ED:42:D3:3F Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584A1465659EA7BEAFBE8FD9FE80 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1a7758bd-319b-30e7-aaee-1b8878c6d78c.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 1239 IP address blocks: 209.20.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:65:9e:a7:be:af:be:8f:d9:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=34109712-d1e2-4cea-8681-9cfc409ca33b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b8:d4:59:a8:ec:07:a3:64:83:de:cd:25:ad: 74:7d:f8:8e:0b:d3:1e:52:cc:6c:02:cf:47:ad:3a: de:95:13:6f:1a:87:31:a3:28:bb:cc:ee:57:ff:3b: a2:03:f7:65:14:ae:29:e3:be:cd:f5:94:c4:3a:54: 3c:52:22:ee:e6:65:1e:23:e5:25:72:8d:77:30:ba: 35:c3:99:06:c3:33:7f:c9:b9:cd:99:bb:2b:78:d1: 4d:ac:14:6a:08:dc:f5:0b:a9:a9:ff:bf:43:e8:ef: a9:55:ff:56:1d:b1:00:f0:63:d0:59:51:20:5b:c1: ae:e5:b3:39:8e:c2:cf:b1:ac:55:40:b8:0f:39:38: df:b4:f7:91:2c:2b:be:c8:35:f1:8e:d3:55:a6:e6: f8:4a:63:0d:9e:8e:41:15:df:23:5b:d1:3f:30:49: 7a:af:98:b9:3d:4d:5c:ca:07:1d:f3:96:c7:5e:44: 6e:5f:8d:56:76:16:cf:41:ae:1b:85:0e:96:b5:3c: a4:77:1a:ef:f5:38:69:ae:91:d2:47:1c:8f:18:2f: f6:a0:15:86:d9:35:58:5e:96:0e:db:a0:22:3b:12: de:c3:14:22:aa:b6:67:d7:68:ee:a4:be:20:f4:aa: 53:fc:a9:a9:a0:89:fe:aa:63:dd:ea:10:44:f5:f0: 1e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:6E:1C:B5:46:45:F3:9B:F7:7A:FE:01:F9:65:7D:72:ED:42:D3:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1a7758bd-319b-30e7-aaee-1b8878c6d78c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 209.20.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:05:1f:fc:fd:ce:37:e3:21:a0:c7:1e:bc:9c:20:64:d4:55: a7:46:5b:6c:60:32:94:cf:b0:4c:83:19:2b:a2:98:3c:6d:d1: 16:ed:bb:e4:3c:5d:69:e7:6b:43:08:3a:eb:e2:68:eb:2a:a2: 76:aa:aa:d9:3b:cd:ae:4e:d2:e7:38:61:77:0f:25:a4:a5:c1: e8:2e:d6:0b:af:8b:0b:64:eb:50:78:0c:e6:0f:db:53:dc:dc: 97:a2:97:fa:24:c1:97:3e:99:c2:06:b2:9d:db:7f:e6:80:a5: 6e:58:1c:d5:f6:ad:4e:fc:74:b6:01:35:d3:51:13:e8:87:2f: 94:e1:0a:03:26:1b:9f:c0:6e:cd:7b:94:83:f8:f2:35:16:25: 33:3d:1a:0a:b5:72:af:62:00:0d:d0:d0:49:e2:40:04:9d:57: f0:14:6e:3d:f6:ef:15:48:31:55:82:e5:5f:41:90:09:3d:92: c4:21:2c:86:ef:80:94:59:73:55:5f:b2:5f:64:b3:e8:f4:ab: 17:bd:e4:bd:0d:4b:ba:47:e5:4a:8b:a5:29:75:46:79:de:72: b0:9a:dc:2e:5b:2b:f2:a1:ce:82:c7:02:ab:8b:cf:39:b5:c8: 34:ee:93:1b:71:51:11:59:ba:98:81:94:52:c4:36:89:10:3f: a2:82:fc:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZWWep76vvo/Z/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk MzQxMDk3MTItZDFlMi00Y2VhLTg2ODEtOWNmYzQwOWNhMzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7jUWajsB6Nkg97NJa10ffiOC9MeUsxsAs9H rTrelRNvGocxoyi7zO5X/zuiA/dlFK4p477N9ZTEOlQ8UiLu5mUeI+Ulco13MLo1 w5kGwzN/ybnNmbsreNFNrBRqCNz1C6mp/79D6O+pVf9WHbEA8GPQWVEgW8Gu5bM5 jsLPsaxVQLgPOTjftPeRLCu+yDXxjtNVpub4SmMNno5BFd8jW9E/MEl6r5i5PU1c ygcd85bHXkRuX41WdhbPQa4bhQ6WtTykdxrv9ThprpHSRxyPGC/2oBWG2TVYXpYO 26AiOxLewxQiqrZn12jupL4g9KpT/KmpoIn+qmPd6hBE9fAegQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhuHLVGRfOb93r+AfllfXLtQtM/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvMWE3NzU4YmQtMzE5Yi0z MGU3LWFhZWUtMWI4ODc4YzZkNzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0RTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoFH/z9zjfjIaDHHrycIGTUVadGW2xgMpTPsEyDGSuimDxt0Rbtu+Q8 XWnna0MIOuviaOsqonaqqtk7za5O0uc4YXcPJaSlwegu1guviwtk61B4DOYP21Pc 3Jeil/okwZc+mcIGsp3bf+aApW5YHNX2rU78dLYBNdNRE+iHL5ThCgMmG5/Abs17 lIP48jUWJTM9Ggq1cq9iAA3Q0EniQASdV/AUbj327xVIMVWC5V9BkAk9ksQhLIbv gJRZc1Vfsl9ks+j0qxe95L0NS7pH5UqLpSl1RnnecrCa3C5bK/KhzoLHAquLzzm1 yDTukxtxURFZupiBlFLENokQP6KC/C8= -----END CERTIFICATE-----Generated at Sun Jun 15 19:11:01 2025 by rpki-client