$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/3123dd87-4931-3dcf-87ea-bfa126e10ea8.roa File: 3123dd87-4931-3dcf-87ea-bfa126e10ea8.roa (raw, json) Hash identifier: X0Nyt8CCfibiL2H3t6xtTmsyzRstNQzrOcBjYZLqYXE= Subject key identifier: 1F:8F:A6:71:86:E2:B7:C9:44:8C:37:F2:25:00:08:4F:C5:97:2A:29 Certificate issuer: /CN=883ca040-a898-4e47-b1e1-f2461996a058 Certificate serial: 010D0C9F43285849EB50327CC5066B90E6A50900 Authority key identifier: BD:0F:53:5E:2E:CC:2D:87:40:F4:DE:A1:FC:0E:1C:C9:4B:B8:70:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/3123dd87-4931-3dcf-87ea-bfa126e10ea8.roa Signing time: Tue 20 May 2025 19:50:22 +0000 ROA not before: Tue 20 May 2025 19:50:22 +0000 ROA not after: Mon 18 Aug 2025 19:50:22 +0000 asID: 54249 IP address blocks: 209.189.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/883ca040-a898-4e47-b1e1-f2461996a058.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/883ca040-a898-4e47-b1e1-f2461996a058.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:50:32:7c:c5:06:6b:90:e6:a5:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=883ca040-a898-4e47-b1e1-f2461996a058 Validity Not Before: May 20 19:50:22 2025 GMT Not After : Aug 18 19:50:22 2025 GMT Subject: CN=375a5093-31e4-4245-8ded-e762bccbda56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fb:6b:c8:9e:9c:ac:de:1b:d9:6e:65:5b:12: 4d:b0:f6:0f:b1:86:e6:c2:0d:98:55:e9:ad:fa:6f: 48:23:6e:05:bf:d0:85:db:32:30:38:06:d0:bd:27: bc:a9:b9:fb:54:52:59:13:58:a2:8c:e8:0f:d9:ed: b3:fc:ce:91:4b:48:c5:aa:87:9c:ad:cf:7b:b4:33: dd:11:59:07:67:c4:7c:2b:6b:7c:7d:7b:57:b2:cb: c2:ef:9a:02:75:bc:37:85:e9:c6:69:1a:b2:d7:5f: a8:01:fa:43:dc:6f:ab:16:19:f0:40:6b:a0:fe:11: ea:e3:a6:4b:d7:99:34:04:31:be:98:2e:ec:47:11: fa:08:60:09:5f:f3:61:11:25:ce:80:9d:3a:90:ad: 08:aa:02:c1:f0:c4:68:4b:4a:74:37:40:c3:c7:4f: 74:5d:ea:ea:06:41:f1:99:59:eb:77:9c:14:a4:f4: ba:80:7e:e8:ee:6f:80:db:ff:16:7e:91:d3:ea:22: 21:8b:c9:b0:35:44:47:42:d4:bb:f6:c9:f0:35:b3: d4:b0:79:94:79:b9:37:48:1e:7c:57:30:4b:7e:24: 70:2c:77:01:0e:2c:ae:06:70:86:fe:45:e5:0c:c2: c7:ce:b9:df:04:c3:da:9c:3d:23:d0:a0:5a:b9:52: 3c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:8F:A6:71:86:E2:B7:C9:44:8C:37:F2:25:00:08:4F:C5:97:2A:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/3123dd87-4931-3dcf-87ea-bfa126e10ea8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/883ca040-a898-4e47-b1e1-f2461996a058.crl X509v3 Authority Key Identifier: keyid:BD:0F:53:5E:2E:CC:2D:87:40:F4:DE:A1:FC:0E:1C:C9:4B:B8:70:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058.cer sbgp-ipAddrBlock: critical IPv4: 209.189.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:5d:1f:c7:8f:3d:e3:fc:9b:50:7d:6a:b2:9b:58:ec:e1:96: dc:56:e9:c8:43:10:95:b9:99:0d:a9:d0:a2:bd:66:56:06:9e: 9a:d5:fd:77:b0:31:72:0f:98:09:52:8b:b3:4f:97:0f:27:5a: e4:51:71:98:e4:ae:3f:68:e7:c5:04:72:44:cb:a2:70:b9:f8: 70:7a:27:40:26:01:3f:25:26:36:c6:f4:14:bc:55:66:8b:be: 8d:42:34:7f:71:f1:96:1d:d0:a8:00:05:75:89:0a:d7:7f:8a: b6:15:ac:a3:fb:42:06:ae:be:66:7f:ff:b7:d0:9f:34:02:f7: 7d:1b:2b:17:3e:b0:43:d1:77:46:7e:15:0a:60:62:32:04:85: 53:49:0b:0e:d0:4d:0c:cb:0e:7b:15:f3:56:4b:d3:39:35:0e: 1c:a0:8f:94:2a:d1:3f:3e:59:a2:30:50:b2:b6:99:89:3b:a7: ac:b5:3b:b8:dc:9f:d7:d7:ae:2f:f6:48:8a:c6:9c:d9:30:87: 4f:08:ad:60:b7:52:19:55:47:c9:e4:2c:16:a9:f8:ce:9d:5b: 17:86:be:eb:9b:f7:f8:51:25:61:f2:7c:d7:5e:8e:c2:d1:8b: cd:03:7f:89:35:44:98:5e:16:95:b5:37:6e:4d:20:c2:8d:c4: 85:54:a4:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnrUDJ8xQZrkOalCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODgzY2EwNDAtYTg5OC00ZTQ3LWIxZTEtZjI0NjE5OTZh MDU4MB4XDTI1MDUyMDE5NTAyMloXDTI1MDgxODE5NTAyMlowLzEtMCsGA1UEAxMk Mzc1YTUwOTMtMzFlNC00MjQ1LThkZWQtZTc2MmJjY2JkYTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPtryJ6crN4b2W5lWxJNsPYPsYbmwg2YVemt +m9II24Fv9CF2zIwOAbQvSe8qbn7VFJZE1iijOgP2e2z/M6RS0jFqoecrc97tDPd EVkHZ8R8K2t8fXtXssvC75oCdbw3henGaRqy11+oAfpD3G+rFhnwQGug/hHq46ZL 15k0BDG+mC7sRxH6CGAJX/NhESXOgJ06kK0IqgLB8MRoS0p0N0DDx090XerqBkHx mVnrd5wUpPS6gH7o7m+A2/8WfpHT6iIhi8mwNURHQtS79snwNbPUsHmUebk3SB58 VzBLfiRwLHcBDiyuBnCG/kXlDMLHzrnfBMPanD0j0KBauVI8dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+PpnGG4rfJRIw38iUACE/FlyopMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84ODNj YTA0MC1hODk4LTRlNDctYjFlMS1mMjQ2MTk5NmEwNTgvMzEyM2RkODctNDkzMS0z ZGNmLTg3ZWEtYmZhMTI2ZTEwZWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODgzY2EwNDAtYTg5OC00ZTQ3LWIx ZTEtZjI0NjE5OTZhMDU4Lzg4M2NhMDQwLWE4OTgtNGU0Ny1iMWUxLWYyNDYxOTk2 YTA1OC5jcmwwHwYDVR0jBBgwFoAUvQ9TXi7MLYdA9N6h/A4cyUu4cJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84ODNjYTA0MC1hODk4LTRlNDctYjFlMS1mMjQ2 MTk5NmEwNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0b2wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVdH8ePPeP8m1B9arKbWOzhltxW6chDEJW5mQ2p0KK9ZlYGnprV/Xew MXIPmAlSi7NPlw8nWuRRcZjkrj9o58UEckTLonC5+HB6J0AmAT8lJjbG9BS8VWaL vo1CNH9x8ZYd0KgABXWJCtd/irYVrKP7QgauvmZ//7fQnzQC930bKxc+sEPRd0Z+ FQpgYjIEhVNJCw7QTQzLDnsV81ZL0zk1Dhygj5Qq0T8+WaIwULK2mYk7p6y1O7jc n9fXri/2SIrGnNkwh08IrWC3UhlVR8nkLBap+M6dWxeGvuub9/hRJWHyfNdejsLR i80Df4k1RJheFpW1N25NIMKNxIVUpB8= -----END CERTIFICATE-----Generated at Thu Jun 19 23:00:07 2025 by rpki-client