$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/daf81975-b5e4-386a-ad75-9c616d2d967a.roa File: daf81975-b5e4-386a-ad75-9c616d2d967a.roa (raw, json) Hash identifier: Kqq7FTp1zspfOeXjdCxV8QkhJds4ZpGkrLuRxQyMjlc= Subject key identifier: FC:C5:38:0C:AC:29:19:76:A6:55:22:10:1A:E1:BC:07:D9:AC:55:50 Certificate issuer: /CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4 Certificate serial: 010D0C9F43285849C904ECA399125130957D43C0 Authority key identifier: 96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/daf81975-b5e4-386a-ad75-9c616d2d967a.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 399646 IP address blocks: 209.135.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:ec:a3:99:12:51:30:95:7d:43:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4 Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=1a5b090b-ff99-4bd0-bf2b-2b3ed6c9f803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6f:20:53:d0:1e:2a:45:cb:77:25:f6:da:4a: e9:7f:e4:43:2a:c8:c1:b4:8f:92:8d:56:9c:f4:a3: 3f:f3:5f:e8:95:53:28:a9:99:02:c7:e5:fa:ee:34: 9e:1a:b1:b2:8f:04:bf:71:7b:97:ed:de:d4:2c:f2: d7:9d:ca:b6:9d:07:5b:87:f4:37:2e:e3:e3:77:86: a1:60:68:75:aa:1b:7b:9f:3f:f6:6d:d1:d1:31:00: 23:fb:ee:8d:1a:6e:36:7e:09:7e:ac:66:98:ec:1d: b5:11:b9:e0:e3:5e:ec:84:5c:8e:01:13:a2:a2:c7: ea:25:90:e8:37:46:90:21:71:14:a3:22:0b:50:57: e3:9a:20:15:a6:ea:4b:89:d0:30:4e:5e:19:d2:69: 1d:d1:c1:27:98:b7:cf:04:23:f9:78:52:5c:1c:a3: 19:2a:ce:dc:ab:7b:a6:b6:41:58:d3:d8:86:0e:cc: b2:81:d9:78:4d:ff:af:41:16:2e:44:84:81:b5:98: c2:6b:b0:e2:16:67:1d:c7:69:5a:bd:49:73:ff:bc: 77:7c:a1:f8:79:ac:4e:77:48:69:ad:46:0a:d6:e9: b6:3d:77:11:92:d4:a3:40:95:dc:19:69:11:31:5d: 13:b6:82:3b:10:24:38:f9:1d:b4:be:30:cd:74:0a: ed:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C5:38:0C:AC:29:19:76:A6:55:22:10:1A:E1:BC:07:D9:AC:55:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/daf81975-b5e4-386a-ad75-9c616d2d967a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.crl X509v3 Authority Key Identifier: keyid:96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer sbgp-ipAddrBlock: critical IPv4: 209.135.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:a3:f3:ca:5b:3a:5b:64:39:46:a5:b3:0f:28:ff:ca:fc:e7: 6d:4f:4d:ee:39:40:51:bf:d3:14:68:77:1f:c4:ea:47:2a:72: 62:b2:1e:f4:06:38:31:e2:85:0d:3b:31:17:57:85:cc:b3:91: d8:c0:3c:41:ea:ea:d8:3d:69:b4:f3:0e:a8:6a:0a:11:7d:d0: 19:ad:c3:de:8c:5f:b6:fc:28:06:da:0a:86:b3:30:42:a2:ff: 64:0c:d4:c1:80:8a:a4:58:49:ae:d5:f8:a7:b5:58:03:5c:9a: fd:44:a3:b2:6b:09:3b:ed:91:a6:1c:d6:f5:db:15:61:37:1d: 8a:d3:cb:89:f9:c8:d0:6f:e9:0a:bb:1d:be:f1:04:a4:e5:c3: 35:81:c5:f8:a4:d0:ae:35:a8:aa:21:89:de:af:96:d0:cb:af: a0:84:7d:ae:ec:43:79:25:e8:7d:2e:0d:e8:b5:53:1b:d1:93: 63:af:e5:6e:ab:5f:4c:55:cb:62:13:e4:6c:90:cb:44:76:c3: 25:52:a2:3d:a3:49:ae:09:3a:ad:fd:78:02:4d:b2:5b:9c:8a: 94:c3:45:e1:48:60:95:c7:2a:90:b2:cd:32:83:99:18:46:2d: c2:44:dd:45:40:d3:ee:96:3d:d0:1c:94:21:cd:92:b7:20:ee: 5f:65:ee:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBOyjmRJRMJV9Q8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQ2MThjYzgtOTIzMi00ZGE4LThiZjUtZGNjMDM4NmUx M2M0MB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk MWE1YjA5MGItZmY5OS00YmQwLWJmMmItMmIzZWQ2YzlmODAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgG8gU9AeKkXLdyX22krpf+RDKsjBtI+SjVac 9KM/81/olVMoqZkCx+X67jSeGrGyjwS/cXuX7d7ULPLXncq2nQdbh/Q3LuPjd4ah YGh1qht7nz/2bdHRMQAj++6NGm42fgl+rGaY7B21Ebng417shFyOAROiosfqJZDo N0aQIXEUoyILUFfjmiAVpupLidAwTl4Z0mkd0cEnmLfPBCP5eFJcHKMZKs7cq3um tkFY09iGDsyygdl4Tf+vQRYuRISBtZjCa7DiFmcdx2lavUlz/7x3fKH4eaxOd0hp rUYK1um2PXcRktSjQJXcGWkRMV0TtoI7ECQ4+R20vjDNdArtbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzFOAysKRl2plUiEBrhvAfZrFVQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNDYx OGNjOC05MjMyLTRkYTgtOGJmNS1kY2MwMzg2ZTEzYzQvZGFmODE5NzUtYjVlNC0z ODZhLWFkNzUtOWM2MTZkMmQ5NjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTQ2MThjYzgtOTIzMi00ZGE4LThi ZjUtZGNjMDM4NmUxM2M0LzE0NjE4Y2M4LTkyMzItNGRhOC04YmY1LWRjYzAzODZl MTNjNC5jcmwwHwYDVR0jBBgwFoAUliL1hIIsuSIXyfgcHVDhpAiPYyMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xNDYxOGNjOC05MjMyLTRkYTgtOGJmNS1kY2Mw Mzg2ZTEzYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0YeoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmj88pbOltkOUalsw8o/8r8521PTe45QFG/0xRodx/E6kcqcmKyHvQG ODHihQ07MRdXhcyzkdjAPEHq6tg9abTzDqhqChF90Bmtw96MX7b8KAbaCoazMEKi /2QM1MGAiqRYSa7V+Ke1WANcmv1Eo7JrCTvtkaYc1vXbFWE3HYrTy4n5yNBv6Qq7 Hb7xBKTlwzWBxfik0K41qKohid6vltDLr6CEfa7sQ3kl6H0uDei1UxvRk2Ov5W6r X0xVy2IT5GyQy0R2wyVSoj2jSa4JOq39eAJNslucipTDReFIYJXHKpCyzTKDmRhG LcJE3UVA0+6WPdAclCHNkrcg7l9l7ss= -----END CERTIFICATE-----Generated at Sun Jun 15 12:15:06 2025 by rpki-client