$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/595f8af2-e8d7-3e25-814e-3372d4edac5e.roa File: 595f8af2-e8d7-3e25-814e-3372d4edac5e.roa (raw, json) Hash identifier: PRNMWL7eAjsA2F79S3/SkR+/GPCxi/8uNAJsRa9feuo= Subject key identifier: 0A:FC:89:23:62:7E:67:22:11:8B:63:8C:96:81:CA:A7:0E:B5:80:89 Certificate issuer: /CN=a278da28-82b3-48fe-bc76-7859a82f5651 Certificate serial: 010D0C9F43285849E91FA45466A34F0DA3DB5100 Authority key identifier: F6:2A:63:3E:5D:7E:81:0B:03:E4:5F:CF:7F:24:96:AE:EF:A3:59:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/595f8af2-e8d7-3e25-814e-3372d4edac5e.roa Signing time: Tue 20 May 2025 01:00:49 +0000 ROA not before: Tue 20 May 2025 01:00:49 +0000 ROA not after: Mon 18 Aug 2025 01:00:49 +0000 asID: 38082 IP address blocks: 209.209.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:1f:a4:54:66:a3:4f:0d:a3:db:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a278da28-82b3-48fe-bc76-7859a82f5651 Validity Not Before: May 20 01:00:49 2025 GMT Not After : Aug 18 01:00:49 2025 GMT Subject: CN=0d3d32af-0c6c-4722-8ae0-1ca1577d322b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d8:23:dd:f3:20:97:68:ce:da:e9:fc:f4:65: d3:b2:2e:f8:43:7e:16:f4:41:34:28:f0:76:4a:3c: 74:dd:2d:d5:9f:f2:4b:c4:61:b8:0c:da:d6:70:c1: eb:e2:9a:4d:ef:0f:b3:33:0e:2c:63:5b:45:57:20: 3c:9c:c8:64:03:7c:ba:c2:08:90:39:5b:48:ff:3a: 68:27:e8:90:28:fe:c2:95:2d:c8:c2:3b:0f:79:6f: 0a:8c:8c:3e:f6:66:f9:69:01:74:6d:4a:63:85:fb: 4a:88:b4:a6:54:90:de:4f:c6:9c:b0:04:17:3d:57: e7:f8:a9:40:7e:e1:3c:b7:dd:fc:ab:7a:d5:0c:e0: 22:67:29:e2:c6:86:f8:df:7d:3a:a4:26:0b:3d:4f: 85:be:1d:09:96:fd:c8:67:33:a0:c2:8d:58:58:54: b7:b8:79:0c:f2:84:29:e4:2d:8d:e8:f8:f2:14:5e: 7a:16:94:bb:af:a8:45:91:80:83:4f:37:8d:fe:d3: ce:a0:3c:7f:ca:94:3f:82:65:19:7d:f5:29:7c:a5: 58:f3:09:ec:74:22:6d:60:32:de:53:b0:99:11:06: a4:3c:c7:ed:76:59:eb:09:de:59:ad:16:6f:31:e8: 44:2a:04:71:8c:ee:2d:e2:2c:60:66:d3:b6:a3:4d: 5b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:FC:89:23:62:7E:67:22:11:8B:63:8C:96:81:CA:A7:0E:B5:80:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/595f8af2-e8d7-3e25-814e-3372d4edac5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.crl X509v3 Authority Key Identifier: keyid:F6:2A:63:3E:5D:7E:81:0B:03:E4:5F:CF:7F:24:96:AE:EF:A3:59:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer sbgp-ipAddrBlock: critical IPv4: 209.209.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:11:3f:ca:35:5e:2b:52:1e:26:e5:d4:79:40:83:c0:01:11: b1:53:f7:cc:f2:bb:b6:40:a9:3e:34:52:0e:28:eb:9b:93:39: d8:b2:b7:85:55:c8:0f:e6:25:84:2c:cf:cd:3c:40:8c:b4:0c: aa:ef:d4:34:3d:3d:1b:f3:7f:a9:68:22:48:44:08:ed:14:da: 3d:d8:04:d0:db:22:70:9c:7f:ca:c7:0b:8b:ff:1f:5d:59:85: 77:3a:aa:f7:c6:36:16:f7:e5:13:40:2e:11:f8:97:f5:51:a1: 81:29:b8:56:fb:68:cc:95:3e:aa:7c:2d:18:93:76:61:7e:65: 9c:1a:d1:f7:b1:4c:74:e6:9a:55:85:c9:af:2f:c8:a7:2b:17: 76:b7:b4:da:2c:78:b0:a7:e3:e2:64:0a:96:df:e1:ab:7b:0e: 6d:9e:bd:73:df:40:54:8b:46:cd:c5:7a:9f:5f:7f:39:10:19: 37:f2:8c:66:8c:25:2b:dd:ea:e9:d2:6a:b6:c1:59:dd:fa:22: 0f:62:20:e2:7e:18:3d:19:bd:e2:72:75:e8:31:6d:9a:09:5f: 36:28:42:57:c7:2c:4a:b5:89:ce:91:d8:7e:df:48:04:b2:88: ac:e0:7b:cc:41:72:5d:d6:51:5b:8e:06:d7:51:e0:2c:69:8b: 40:de:91:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnpH6RUZqNPDaPbUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI3OGRhMjgtODJiMy00OGZlLWJjNzYtNzg1OWE4MmY1 NjUxMB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk MGQzZDMyYWYtMGM2Yy00NzIyLThhZTAtMWNhMTU3N2QzMjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdgj3fMgl2jO2un89GXTsi74Q34W9EE0KPB2 Sjx03S3Vn/JLxGG4DNrWcMHr4ppN7w+zMw4sY1tFVyA8nMhkA3y6wgiQOVtI/zpo J+iQKP7ClS3IwjsPeW8KjIw+9mb5aQF0bUpjhftKiLSmVJDeT8acsAQXPVfn+KlA fuE8t938q3rVDOAiZynixob43306pCYLPU+Fvh0Jlv3IZzOgwo1YWFS3uHkM8oQp 5C2N6PjyFF56FpS7r6hFkYCDTzeN/tPOoDx/ypQ/gmUZffUpfKVY8wnsdCJtYDLe U7CZEQakPMftdlnrCd5ZrRZvMehEKgRxjO4t4ixgZtO2o01baQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAr8iSNifmciEYtjjJaByqcOtYCJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMjc4 ZGEyOC04MmIzLTQ4ZmUtYmM3Ni03ODU5YTgyZjU2NTEvNTk1ZjhhZjItZThkNy0z ZTI1LTgxNGUtMzM3MmQ0ZWRhYzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTI3OGRhMjgtODJiMy00OGZlLWJj NzYtNzg1OWE4MmY1NjUxL2EyNzhkYTI4LTgyYjMtNDhmZS1iYzc2LTc4NTlhODJm NTY1MS5jcmwwHwYDVR0jBBgwFoAU9ipjPl1+gQsD5F/PfySWru+jWRkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMjc4ZGEyOC04MmIzLTQ4ZmUtYmM3Ni03ODU5 YTgyZjU2NTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dFVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFERP8o1XitSHibl1HlAg8ABEbFT98zyu7ZAqT40Ug4o65uTOdiyt4VV yA/mJYQsz808QIy0DKrv1DQ9PRvzf6loIkhECO0U2j3YBNDbInCcf8rHC4v/H11Z hXc6qvfGNhb35RNALhH4l/VRoYEpuFb7aMyVPqp8LRiTdmF+ZZwa0fexTHTmmlWF ya8vyKcrF3a3tNoseLCn4+JkCpbf4at7Dm2evXPfQFSLRs3Fep9ffzkQGTfyjGaM JSvd6unSarbBWd36Ig9iIOJ+GD0ZveJydegxbZoJXzYoQlfHLEq1ic6R2H7fSASy iKzge8xBcl3WUVuOBtdR4Cxpi0Dekcw= -----END CERTIFICATE-----Generated at Sun Jun 15 17:13:26 2025 by rpki-client