$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/8b382f3e-0a6f-3191-9031-1a3ebc624c59.roa File: 8b382f3e-0a6f-3191-9031-1a3ebc624c59.roa (raw, json) Hash identifier: 3Cc0LyIvnnez/QHeCmXltaMd9SGCaNTt5hdG34tu1xY= Subject key identifier: DD:E9:90:D0:0C:5C:15:FA:E9:3D:1E:39:DC:96:9C:0C:9E:48:A7:14 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F43285849EA852383A43030F85F136460 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/8b382f3e-0a6f-3191-9031-1a3ebc624c59.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 13472 IP address blocks: 209.51.128.0/24 maxlen: 24 209.51.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:23:83:a4:30:30:f8:5f:13:64:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=e7533a60-5951-447a-869c-523ea933a888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:27:41:67:07:47:8c:b8:32:6c:05:68:3a:b2: 77:8b:09:c3:d2:58:b3:d0:91:d4:18:5f:ab:ca:92: ea:d6:31:09:e9:41:78:8e:e5:f6:1e:78:d5:74:e5: f2:4e:e6:47:4f:85:ec:1a:8a:1e:d0:38:69:f7:02: c5:9b:a6:5a:d7:07:e1:a1:b8:99:b4:4d:85:65:f7: 07:51:2c:7f:e9:c7:ae:9c:d3:06:83:4c:8e:5a:a6: 36:a3:dd:91:6a:6f:8b:f9:67:f5:fc:b4:37:f0:83: c1:f8:3b:5e:64:31:d5:ee:c3:06:55:16:35:52:fa: 46:82:67:3e:04:35:ba:b0:60:cb:4a:38:6a:27:14: ac:8c:9e:5b:4d:7c:8b:13:0c:77:86:68:4a:5f:6c: 4f:f8:c3:b8:8d:65:c5:f0:c9:e8:17:95:4e:0c:ec: 13:36:03:f7:40:94:ef:56:d5:7d:42:d9:38:e8:5a: e3:b4:71:23:be:20:3d:fd:77:66:44:b3:ab:d1:e3: 08:37:a1:7e:16:eb:cc:a8:fa:c4:14:2c:77:c6:ad: 28:97:71:08:f2:dd:f9:9c:2d:a2:c8:70:13:97:27: 37:66:39:05:7e:b7:1b:22:4c:20:84:a5:fa:c3:1d: 27:4d:08:ba:78:7d:76:aa:7b:d0:21:00:fe:51:f5: 3b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E9:90:D0:0C:5C:15:FA:E9:3D:1E:39:DC:96:9C:0C:9E:48:A7:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/8b382f3e-0a6f-3191-9031-1a3ebc624c59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 209.51.128.0/24 209.51.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:76:f6:a2:5c:a1:2f:01:f3:cb:04:28:de:3f:be:d2:ed:44: 1d:65:6f:33:9e:0c:d9:7a:fc:ca:65:1f:69:a7:bf:95:63:c4: 0d:d2:b6:34:04:41:66:bc:b3:46:33:d4:0b:1f:62:fd:da:f8: cc:ef:74:b5:f8:f1:21:6f:09:f5:25:8f:eb:c8:9a:46:c3:87: ee:d9:8c:25:36:23:66:4e:5c:79:5b:11:9b:18:e8:e1:a6:ad: a0:4b:93:91:d9:4d:c0:73:71:80:89:cf:5a:6e:d3:b5:12:ce: 03:4f:9c:d1:ae:68:73:cb:b0:76:8a:de:77:06:6b:d5:b3:51: e1:01:d1:3a:02:ff:e8:e1:9b:9e:27:31:f4:2e:ae:14:39:9d: f1:d6:4f:15:0c:c3:df:bd:0b:72:00:d3:fa:78:49:dd:5d:5e: 46:05:98:d5:a6:6c:5c:53:ea:de:cf:3f:11:a9:9f:42:57:ba: 39:b4:78:77:2a:5c:21:54:f7:8f:76:8c:62:7e:77:53:14:ac: e9:98:a1:e2:26:e1:0d:86:8d:c5:f5:62:99:64:56:cb:ad:01: 6f:c7:1c:9a:18:37:f7:a2:75:00:7c:a3:39:20:0f:f9:6c:60: a8:8b:83:50:1d:3a:32:e4:5d:9b:4b:40:ce:ce:3b:47:bd:c8: cc:cf:f1:b0 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnqhSODpDAw+F8TZGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk ZTc1MzNhNjAtNTk1MS00NDdhLTg2OWMtNTIzZWE5MzNhODg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSdBZwdHjLgybAVoOrJ3iwnD0liz0JHUGF+r ypLq1jEJ6UF4juX2HnjVdOXyTuZHT4XsGooe0Dhp9wLFm6Za1wfhobiZtE2FZfcH USx/6ceunNMGg0yOWqY2o92Ram+L+Wf1/LQ38IPB+DteZDHV7sMGVRY1UvpGgmc+ BDW6sGDLSjhqJxSsjJ5bTXyLEwx3hmhKX2xP+MO4jWXF8MnoF5VODOwTNgP3QJTv VtV9Qtk46FrjtHEjviA9/XdmRLOr0eMIN6F+FuvMqPrEFCx3xq0ol3EI8t35nC2i yHATlyc3ZjkFfrcbIkwghKX6wx0nTQi6eH12qnvQIQD+UfU7ewIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFN3pkNAMXBX66T0eOdyWnAyeSKcUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvOGIzODJmM2UtMGE2Zi0z MTkxLTkwMzEtMWEzZWJjNjI0YzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA0TOAAwQA 0TOGMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACl29qJcoS8B88sEKN4/vtLtRB1lbzOeDNl6/MplH2mnv5Vj xA3StjQEQWa8s0Yz1AsfYv3a+MzvdLX48SFvCfUlj+vImkbDh+7ZjCU2I2ZOXHlb EZsY6OGmraBLk5HZTcBzcYCJz1pu07USzgNPnNGuaHPLsHaK3ncGa9WzUeEB0ToC /+jhm54nMfQurhQ5nfHWTxUMw9+9C3IA0/p4Sd1dXkYFmNWmbFxT6t7PPxGpn0JX ujm0eHcqXCFU9492jGJ+d1MUrOmYoeIm4Q2GjcX1YplkVsutAW/HHJoYN/eidQB8 ozkgD/lsYKiLg1AdOjLkXZtLQM7OO0e9yMzP8bA= -----END CERTIFICATE-----Generated at Sun Jun 15 11:59:54 2025 by rpki-client