$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3495d15c-fa42-330f-b8d8-37281c835c5c.roa File: 3495d15c-fa42-330f-b8d8-37281c835c5c.roa (raw, json) Hash identifier: xWvBQANatOCfL0lc5hVvlQShaOifW2++xSA2AFRy0k4= Subject key identifier: 7E:0B:C8:BB:72:EB:63:BF:96:41:FA:96:82:70:9D:28:60:62:7B:59 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849E7BA77B51F8730ED8D03BC00 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3495d15c-fa42-330f-b8d8-37281c835c5c.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 22612 IP address blocks: 209.188.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:77:b5:1f:87:30:ed:8d:03:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=d538270c-c016-46b2-9508-71e9640b7444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f5:b1:c3:02:95:4e:53:f5:d0:39:31:aa:94: 0e:2d:e5:82:a3:72:02:4f:8e:cf:2c:8e:fa:8d:df: 11:eb:7f:0c:2a:48:c4:46:ae:16:c3:08:de:47:f4: 28:08:20:09:b6:44:66:49:a1:64:0a:fb:f4:3f:71: 17:03:0c:26:c7:54:30:e1:3a:77:3d:31:d4:91:db: fb:f1:2b:b1:27:a3:85:04:58:4a:f7:f2:e6:2d:f8: bb:44:4e:34:33:49:d7:4f:6d:a1:f2:23:a1:ce:ac: f0:3b:31:af:2c:de:ac:f9:cf:d4:4a:97:56:da:64: 3b:6b:94:37:a1:8f:4e:97:cd:89:b9:0e:58:49:e7: 8c:dd:8a:79:90:99:bb:e8:e2:87:d0:4a:f9:b8:08: e6:32:ee:cc:62:3b:4a:59:6d:14:4f:c2:bc:90:06: ae:3c:46:b9:a2:fb:b1:58:c0:66:fe:e9:0c:2f:8f: 7f:46:26:87:95:e6:16:8f:af:ed:d9:3f:7c:a3:e8: e0:23:ca:42:e7:1b:da:d2:79:5e:f3:ff:31:e3:ec: 8a:1d:17:32:21:f1:c9:d2:fc:80:18:9d:c2:df:97: 88:0a:fb:4f:78:20:ba:79:e5:6a:98:39:af:f2:ad: 37:23:82:9a:f0:96:0a:eb:53:b4:bd:c0:66:ee:c5: 55:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:0B:C8:BB:72:EB:63:BF:96:41:FA:96:82:70:9D:28:60:62:7B:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3495d15c-fa42-330f-b8d8-37281c835c5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 209.188.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:8c:dc:d5:a6:10:89:0c:0b:25:13:fc:b1:87:69:f5:f7:14: 69:d5:eb:c5:7c:bc:63:94:06:3a:c2:03:af:cd:bf:3e:b4:f0: ed:72:33:b8:2c:ea:df:03:11:d5:91:03:9f:76:a1:18:de:36: 03:d9:c8:91:ec:ad:33:f4:23:65:72:97:34:c8:8d:a6:e3:fa: a4:04:a9:bf:61:43:ca:48:d0:bc:c5:b3:29:87:23:a5:cc:83: f2:a6:42:24:d4:93:33:75:63:07:55:7a:fe:51:ea:a8:f3:e2: ce:e8:42:c5:0f:1c:90:f6:2c:43:7e:c5:22:bc:a8:a6:b8:8a: de:6f:9f:db:a9:b4:ea:56:47:23:d1:ef:ca:2d:79:5a:40:30: 3e:0e:ea:8b:4e:15:47:68:21:2f:d0:93:90:ed:01:16:c2:80: 8b:40:9d:32:3f:56:26:d2:cf:2f:5a:1c:f5:c2:a0:33:ac:55: 70:8a:04:ba:5d:f7:05:0a:e6:94:57:4c:88:59:7c:55:10:92: a1:00:ef:70:e1:35:5e:eb:23:1b:26:fb:61:df:20:3b:52:69: ef:3d:c2:c7:7b:fd:df:c4:61:55:25:23:f8:e5:68:4e:32:2c: ed:f9:b3:49:f3:7a:ed:68:27:7c:b7:08:6e:ec:b7:16:6f:15: 22:2c:5a:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnune1H4cw7Y0DvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk ZDUzODI3MGMtYzAxNi00NmIyLTk1MDgtNzFlOTY0MGI3NDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvWxwwKVTlP10DkxqpQOLeWCo3ICT47PLI76 jd8R638MKkjERq4WwwjeR/QoCCAJtkRmSaFkCvv0P3EXAwwmx1Qw4Tp3PTHUkdv7 8SuxJ6OFBFhK9/LmLfi7RE40M0nXT22h8iOhzqzwOzGvLN6s+c/USpdW2mQ7a5Q3 oY9Ol82JuQ5YSeeM3Yp5kJm76OKH0Er5uAjmMu7MYjtKWW0UT8K8kAauPEa5ovux WMBm/ukML49/RiaHleYWj6/t2T98o+jgI8pC5xva0nle8/8x4+yKHRcyIfHJ0vyA GJ3C35eICvtPeCC6eeVqmDmv8q03I4Ka8JYK61O0vcBm7sVVxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4LyLty62O/lkH6loJwnShgYntZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMzQ5NWQxNWMtZmE0Mi0z MzBmLWI4ZDgtMzcyODFjODM1YzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bwVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWM3NWmEIkMCyUT/LGHafX3FGnV68V8vGOUBjrCA6/Nvz608O1yM7gs 6t8DEdWRA592oRjeNgPZyJHsrTP0I2VylzTIjabj+qQEqb9hQ8pI0LzFsymHI6XM g/KmQiTUkzN1YwdVev5R6qjz4s7oQsUPHJD2LEN+xSK8qKa4it5vn9uptOpWRyPR 78oteVpAMD4O6otOFUdoIS/Qk5DtARbCgItAnTI/VibSzy9aHPXCoDOsVXCKBLpd 9wUK5pRXTIhZfFUQkqEA73DhNV7rIxsm+2HfIDtSae89wsd7/d/EYVUlI/jlaE4y LO35s0nzeu1oJ3y3CG7stxZvFSIsWn4= -----END CERTIFICATE-----Generated at Sun Jun 15 15:04:28 2025 by rpki-client