$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/2ffa2be5-bf0e-3632-ac11-cbf141961a73.roa File: 2ffa2be5-bf0e-3632-ac11-cbf141961a73.roa (raw, json) Hash identifier: pcO3lY09y8Db+gQkd6ezVFl0wt8GkUgiYRGCFOVWsO0= Subject key identifier: 2A:EB:BD:3E:19:AB:BA:45:A2:9A:49:BB:1B:C8:65:1F:3D:DD:A7:0F Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F43285849ED4FD134A974D82E901236E0 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/2ffa2be5-bf0e-3632-ac11-cbf141961a73.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 271 IP address blocks: 207.23.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:d1:34:a9:74:d8:2e:90:12:36:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=ced6c0f5-578a-48c6-bafa-67948875831d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:85:a5:e2:b1:f1:78:a5:95:0e:b0:c7:68:de: 78:8b:54:94:38:e5:f3:30:80:06:23:8c:14:0a:62: 49:47:86:61:35:4d:49:fa:49:a2:3c:32:c5:e5:e2: bd:e7:6c:80:9b:8e:a1:cb:c4:17:e9:8e:57:82:90: 15:7d:ab:50:af:e4:1c:9d:87:98:b6:72:30:58:23: c2:7c:05:63:c5:9c:8e:56:9c:74:02:9e:96:e1:20: c2:61:31:2b:fe:de:d3:81:4a:17:85:8d:e1:d9:60: 55:3b:21:3d:c3:5c:b2:c5:c8:e3:25:9c:05:4f:1a: 94:1f:44:98:77:cb:c1:5f:20:6a:30:92:3e:25:b5: 75:e4:b2:34:2d:ab:f5:50:91:28:df:8b:aa:f3:92: c9:3c:d7:91:d4:1f:4b:97:21:45:62:0d:61:bd:68: 25:88:d1:73:37:cb:92:38:de:63:a2:4b:ae:11:7d: c0:63:2c:f6:fa:08:2d:01:d6:c3:a3:0c:a7:ad:57: 3d:d2:10:ee:97:ef:03:53:dc:1a:a2:c4:5e:ea:44: e0:a1:d5:43:a9:d8:e5:5c:74:3f:59:31:0f:8f:2f: 43:54:5d:cb:d0:1f:bf:74:bf:c4:8a:4c:ed:19:d4: 27:bd:03:3f:4b:f1:f5:f6:0d:94:d2:41:96:e2:e9: c8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:EB:BD:3E:19:AB:BA:45:A2:9A:49:BB:1B:C8:65:1F:3D:DD:A7:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/2ffa2be5-bf0e-3632-ac11-cbf141961a73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 207.23.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:2e:07:41:e0:fb:39:04:0d:b8:78:fd:80:02:78:64:a6:96: 2a:69:3e:d4:2e:43:4d:f0:79:de:e5:29:8b:ec:b9:4e:a3:a1: 76:32:72:ba:60:7d:32:bb:14:55:f6:1a:fc:a5:16:37:ef:03: 69:15:49:94:7c:cd:38:b0:29:c9:73:d5:be:a6:03:d0:64:7d: f9:3e:b2:1b:dc:67:3a:c8:e7:69:f4:cc:5e:ee:54:25:e7:2f: 3e:98:c9:97:07:e4:da:e8:8e:f3:1d:c2:7e:1f:d0:d7:cc:99: a7:93:b3:cb:53:00:85:0a:97:df:32:6a:3b:f6:11:0f:00:da: 44:20:46:df:8a:3c:56:26:10:ef:bc:ae:90:0b:c3:0f:f1:a4: df:50:0e:8f:a7:bb:84:ac:93:23:31:01:c2:f1:be:ee:fc:c0: b7:76:04:59:db:af:e4:24:24:23:7b:39:b2:f3:4a:10:ec:97: c5:75:0a:ca:16:7e:14:23:02:d8:8b:5d:53:f0:ce:c3:f9:b6: 43:d6:9f:cc:d9:f8:d8:40:ff:89:b5:92:cc:f3:09:18:71:4b: c4:4c:a1:f4:d0:f2:1e:b4:71:11:cc:f3:62:f9:e3:0f:d4:4e: 07:4d:22:68:85:8f:92:b5:d1:8f:71:0b:28:15:14:c5:af:48: 66:4c:7c:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT9E0qXTYLpASNuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk Y2VkNmMwZjUtNTc4YS00OGM2LWJhZmEtNjc5NDg4NzU4MzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoWl4rHxeKWVDrDHaN54i1SUOOXzMIAGI4wU CmJJR4ZhNU1J+kmiPDLF5eK952yAm46hy8QX6Y5XgpAVfatQr+QcnYeYtnIwWCPC fAVjxZyOVpx0Ap6W4SDCYTEr/t7TgUoXhY3h2WBVOyE9w1yyxcjjJZwFTxqUH0SY d8vBXyBqMJI+JbV15LI0Lav1UJEo34uq85LJPNeR1B9LlyFFYg1hvWgliNFzN8uS ON5jokuuEX3AYyz2+ggtAdbDowynrVc90hDul+8DU9waosRe6kTgodVDqdjlXHQ/ WTEPjy9DVF3L0B+/dL/EikztGdQnvQM/S/H19g2U0kGW4unI6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrrvT4Zq7pFoppJuxvIZR893acPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvMmZmYTJiZTUtYmYwZS0z NjMyLWFjMTEtY2JmMTQxOTYxYTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzxf+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALEuB0Hg+zkEDbh4/YACeGSmlippPtQuQ03wed7lKYvsuU6joXYycrpg fTK7FFX2GvylFjfvA2kVSZR8zTiwKclz1b6mA9Bkffk+shvcZzrI52n0zF7uVCXn Lz6YyZcH5NrojvMdwn4f0NfMmaeTs8tTAIUKl98yajv2EQ8A2kQgRt+KPFYmEO+8 rpALww/xpN9QDo+nu4SskyMxAcLxvu78wLd2BFnbr+QkJCN7ObLzShDsl8V1CsoW fhQjAtiLXVPwzsP5tkPWn8zZ+NhA/4m1kszzCRhxS8RMofTQ8h60cRHM82L54w/U TgdNImiFj5K10Y9xCygVFMWvSGZMfCA= -----END CERTIFICATE-----Generated at Sat Jun 14 12:22:43 2025 by rpki-client