$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12/5e96c0cf-3077-3854-81df-de74836c1b82.roa File: 5e96c0cf-3077-3854-81df-de74836c1b82.roa (raw, json) Hash identifier: d0ul/kmO5iZMIpZSjwNXD5YnULorXYZaSh+E9hwafVQ= Subject key identifier: 3D:F8:22:1A:CC:55:5C:29:66:1E:1B:A4:0F:6F:9A:83:11:B7:E7:0E Certificate issuer: /CN=914c4a10-97c5-4f06-914d-13485f7f3e12 Certificate serial: 010D0C9F43285849F44A55A37523E1F3C61F11C0 Authority key identifier: DB:B8:B2:F4:DF:9F:2E:9D:14:08:37:EE:78:0A:A2:6A:31:0A:96:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12/5e96c0cf-3077-3854-81df-de74836c1b82.roa Signing time: Sat 24 May 2025 01:00:49 +0000 ROA not before: Sat 24 May 2025 01:00:49 +0000 ROA not after: Fri 22 Aug 2025 01:00:49 +0000 asID: 398032 IP address blocks: 209.151.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12/914c4a10-97c5-4f06-914d-13485f7f3e12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12/914c4a10-97c5-4f06-914d-13485f7f3e12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f4:4a:55:a3:75:23:e1:f3:c6:1f:11:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914c4a10-97c5-4f06-914d-13485f7f3e12 Validity Not Before: May 24 01:00:49 2025 GMT Not After : Aug 22 01:00:49 2025 GMT Subject: CN=9c20a4e7-7596-438a-b4ef-03c175a834e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:05:f9:4b:de:1b:ae:34:6e:ec:b9:dd:92:52: bd:79:8e:a9:c7:e3:64:d6:98:a0:2a:8d:8d:c7:95: fe:2e:eb:92:79:cc:ec:6a:7a:2d:6b:a9:3f:c2:7d: b5:35:b5:6a:04:91:e1:6c:86:b5:66:20:17:53:dc: ae:b3:b5:1f:fd:e9:15:7b:cf:d5:a7:e3:11:36:68: b7:1f:01:2a:3f:51:01:2a:b7:cb:9c:e0:ae:e5:5b: 8d:23:59:7c:f9:11:21:43:34:db:b5:d1:d6:06:ad: ff:b2:3a:0d:27:f2:ba:df:7b:73:6b:28:df:5b:f8: a4:bf:70:b0:64:62:be:0f:cd:28:fb:c9:a6:c7:0b: bb:a0:6d:04:5a:99:03:24:0d:c4:00:64:97:bb:b4: ce:14:33:e6:b0:1e:7e:a8:42:e0:c5:de:98:a1:df: e0:6b:ec:62:1a:5b:c6:98:34:37:d4:d7:1c:69:4d: 9a:89:61:79:2b:15:c5:34:77:7c:ab:f8:54:67:28: 2a:ff:94:4a:a0:b3:df:9a:d3:4b:c4:49:5f:21:7c: ad:27:91:d6:18:1a:ca:a8:34:6f:ed:58:0c:c2:fa: 09:46:dd:d2:0c:00:cf:9d:86:d3:cd:85:4e:75:57: 11:69:ab:47:9e:13:8a:15:c3:33:29:20:97:19:4f: 15:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F8:22:1A:CC:55:5C:29:66:1E:1B:A4:0F:6F:9A:83:11:B7:E7:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12/5e96c0cf-3077-3854-81df-de74836c1b82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12/914c4a10-97c5-4f06-914d-13485f7f3e12.crl X509v3 Authority Key Identifier: keyid:DB:B8:B2:F4:DF:9F:2E:9D:14:08:37:EE:78:0A:A2:6A:31:0A:96:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12.cer sbgp-ipAddrBlock: critical IPv4: 209.151.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:7d:25:16:df:a3:bb:ee:1b:45:9f:ef:08:48:ad:d0:6a:be: 58:63:32:01:47:34:47:51:da:87:c1:71:62:9a:dd:2b:f4:b6: df:0e:aa:0a:e5:ff:e8:c9:9c:5a:32:13:97:e3:f2:dd:6b:99: e9:1d:8b:ea:ce:09:51:81:3c:23:da:5d:22:cf:9f:fe:be:1f: 68:63:bd:3a:dd:1c:da:0c:b6:ee:32:ff:ef:16:cf:4f:70:3f: f8:ef:1b:e7:93:b5:b1:73:d1:7c:7d:f6:2c:b4:b7:c2:c0:75: c8:8f:42:8c:6d:f1:b9:1b:30:94:17:ad:54:f2:dd:0e:86:91: 4f:f6:f8:42:24:da:70:fc:e1:84:e6:cd:69:5a:a4:47:fd:48: b7:ed:8c:4f:09:91:eb:4c:f6:53:d9:d5:18:a4:80:0d:46:c6: 89:0b:30:24:26:b0:59:62:bc:95:8c:8b:8b:9c:02:f4:08:22: 12:84:8c:29:2d:0a:6a:73:fc:4d:a6:0f:8b:01:8d:4c:29:fd: 84:8e:0f:65:f8:37:72:61:3d:06:bb:3d:6f:c1:18:ef:d0:3a: 07:c8:63:82:f8:b4:1e:c8:2d:ce:3d:10:fd:09:54:ab:54:ab: c1:56:ce:7d:2c:42:91:ca:22:54:96:db:91:ab:f5:d9:dc:49: bb:45:69:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn0SlWjdSPh88YfEcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0YzRhMTAtOTdjNS00ZjA2LTkxNGQtMTM0ODVmN2Yz ZTEyMB4XDTI1MDUyNDAxMDA0OVoXDTI1MDgyMjAxMDA0OVowLzEtMCsGA1UEAxMk OWMyMGE0ZTctNzU5Ni00MzhhLWI0ZWYtMDNjMTc1YTgzNGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgX5S94brjRu7LndklK9eY6px+Nk1pigKo2N x5X+LuuSeczsanota6k/wn21NbVqBJHhbIa1ZiAXU9yus7Uf/ekVe8/Vp+MRNmi3 HwEqP1EBKrfLnOCu5VuNI1l8+REhQzTbtdHWBq3/sjoNJ/K633tzayjfW/ikv3Cw ZGK+D80o+8mmxwu7oG0EWpkDJA3EAGSXu7TOFDPmsB5+qELgxd6Yod/ga+xiGlvG mDQ31NccaU2aiWF5KxXFNHd8q/hUZygq/5RKoLPfmtNLxElfIXytJ5HWGBrKqDRv 7VgMwvoJRt3SDADPnYbTzYVOdVcRaatHnhOKFcMzKSCXGU8VKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD34IhrMVVwpZh4bpA9vmoMRt+cOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85MTRj NGExMC05N2M1LTRmMDYtOTE0ZC0xMzQ4NWY3ZjNlMTIvNWU5NmMwY2YtMzA3Ny0z ODU0LTgxZGYtZGU3NDgzNmMxYjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTE0YzRhMTAtOTdjNS00ZjA2LTkx NGQtMTM0ODVmN2YzZTEyLzkxNGM0YTEwLTk3YzUtNGYwNi05MTRkLTEzNDg1Zjdm M2UxMi5jcmwwHwYDVR0jBBgwFoAU27iy9N+fLp0UCDfueAqiajEKloMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85MTRjNGExMC05N2M1LTRmMDYtOTE0ZC0xMzQ4 NWY3ZjNlMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Zd/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE99JRbfo7vuG0Wf7whIrdBqvlhjMgFHNEdR2ofBcWKa3Sv0tt8Oqgrl /+jJnFoyE5fj8t1rmekdi+rOCVGBPCPaXSLPn/6+H2hjvTrdHNoMtu4y/+8Wz09w P/jvG+eTtbFz0Xx99iy0t8LAdciPQoxt8bkbMJQXrVTy3Q6GkU/2+EIk2nD84YTm zWlapEf9SLftjE8JketM9lPZ1RikgA1GxokLMCQmsFlivJWMi4ucAvQIIhKEjCkt Cmpz/E2mD4sBjUwp/YSOD2X4N3JhPQa7PW/BGO/QOgfIY4L4tB7ILc49EP0JVKtU q8FWzn0sQpHKIlSW25Gr9dncSbtFaVQ= -----END CERTIFICATE-----Generated at Sun Jun 15 17:37:38 2025 by rpki-client