$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/bdaab757-919c-3eca-9fcf-6149df229ffe.roa File: bdaab757-919c-3eca-9fcf-6149df229ffe.roa (raw, json) Hash identifier: 48/4VxEwVuOTfr5jsoeTfiPDIgiLd+RoInE0MI8v5Gs= Subject key identifier: D5:43:66:B6:19:5E:D9:28:72:5A:A6:C2:54:2A:DA:50:92:1B:E0:1D Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584A20F54A954BA76CCADA8E1060 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/bdaab757-919c-3eca-9fcf-6149df229ffe.roa Signing time: Mon 09 Jun 2025 01:00:50 +0000 ROA not before: Mon 09 Jun 2025 01:00:50 +0000 ROA not after: Sun 07 Sep 2025 01:00:50 +0000 asID: 40097 IP address blocks: 209.137.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:20:f5:4a:95:4b:a7:6c:ca:da:8e:10:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Jun 9 01:00:50 2025 GMT Not After : Sep 7 01:00:50 2025 GMT Subject: CN=dab17eaa-d911-43c3-8688-f30e2b622063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:21:a7:8b:e0:b8:bf:15:cb:06:60:08:72:87: 19:a1:ba:1c:d4:75:f2:17:c1:d4:e8:d6:c5:db:bb: 5b:4f:2c:af:ef:0b:53:9c:86:f6:b5:50:06:38:16: ba:66:e8:d6:ec:5c:17:ee:55:f0:7b:5d:a5:e2:f5: 48:f4:b0:4d:96:a2:ad:df:92:e1:81:96:ea:f1:af: b1:a2:f3:d2:5b:e8:b7:44:b9:7d:a3:f6:e9:33:79: 7f:98:0a:e5:c4:82:5c:1a:09:bb:85:d6:6c:4b:71: 9f:e6:6a:4e:42:27:29:0b:8e:32:c6:f6:76:b6:ea: d4:64:56:cb:f6:1b:ce:9a:a5:fb:79:fe:d7:47:67: 12:f3:37:17:5a:fe:1f:01:5e:51:18:42:1d:54:36: 6a:42:fa:91:6a:52:16:b5:3a:0f:b5:5e:ac:14:de: ef:ac:75:62:19:98:a3:23:8a:a3:5a:9b:03:75:94: 7a:75:95:d5:07:6c:3b:1f:22:c7:0d:89:77:9a:33: 7f:52:65:a3:c3:db:c7:fe:6f:08:e6:60:28:88:c1: 5e:f6:32:82:16:04:d7:91:57:d5:dd:93:a1:6c:0d: 2b:e2:93:de:3c:0d:76:2c:a2:b1:dc:1a:e5:30:8f: fc:1f:da:fa:04:d2:41:04:96:ea:59:b8:dc:aa:70: 4f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:43:66:B6:19:5E:D9:28:72:5A:A6:C2:54:2A:DA:50:92:1B:E0:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/bdaab757-919c-3eca-9fcf-6149df229ffe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 209.137.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:c8:46:2b:01:ef:f7:70:bc:f8:ed:22:93:05:98:ab:62:b4: 38:97:e2:e5:52:4f:f5:0f:e0:24:7f:a0:dd:b9:6a:ce:e8:aa: 63:fe:0e:e8:d6:9e:98:17:76:67:7f:27:c2:e9:00:f9:df:97: ea:a8:64:84:cd:a9:f6:f6:dd:ec:27:11:70:e5:22:16:c1:46: f3:23:17:da:5f:5a:d3:61:a5:79:b1:12:5d:88:dc:eb:81:59: 6f:78:3a:20:7e:f7:d6:0d:03:bb:d9:02:46:56:f2:21:8f:7b: ce:d6:2f:b8:85:4b:cb:2b:26:24:e2:f9:8d:78:ce:2d:b3:5c: aa:40:d7:57:99:f5:a1:76:18:5f:ba:07:f8:7c:5d:c8:70:f5: 7d:0d:71:ec:de:43:49:3a:62:cd:8f:d6:bb:e9:dc:0c:d2:9f: 09:50:0b:e3:5d:4d:da:9e:a2:58:7a:98:24:db:bf:f8:6d:b9: 5d:f8:c0:d3:83:64:01:1c:5d:4c:a3:6e:f1:cc:51:3b:7c:e1: 8d:da:6e:3a:89:37:94:46:ae:50:8f:ac:5f:b2:65:22:74:0a: 51:b4:e1:5e:e7:9c:a5:35:4f:f3:eb:e8:11:dc:4e:a1:8b:73: af:7d:ec:c5:84:85:07:0f:28:ee:a4:7a:e4:6d:22:79:e4:98: 31:f1:70:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEog9UqVS6dsytqOEGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI1MDYwOTAxMDA1MFoXDTI1MDkwNzAxMDA1MFowLzEtMCsGA1UEAxMk ZGFiMTdlYWEtZDkxMS00M2MzLTg2ODgtZjMwZTJiNjIyMDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSGni+C4vxXLBmAIcocZoboc1HXyF8HU6NbF 27tbTyyv7wtTnIb2tVAGOBa6ZujW7FwX7lXwe12l4vVI9LBNlqKt35LhgZbq8a+x ovPSW+i3RLl9o/bpM3l/mArlxIJcGgm7hdZsS3Gf5mpOQicpC44yxvZ2turUZFbL 9hvOmqX7ef7XR2cS8zcXWv4fAV5RGEIdVDZqQvqRalIWtToPtV6sFN7vrHViGZij I4qjWpsDdZR6dZXVB2w7HyLHDYl3mjN/UmWjw9vH/m8I5mAoiMFe9jKCFgTXkVfV 3ZOhbA0r4pPePA12LKKx3BrlMI/8H9r6BNJBBJbqWbjcqnBPqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVDZrYZXtkoclqmwlQq2lCSG+AdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvYmRhYWI3NTctOTE5Yy0z ZWNhLTlmY2YtNjE0OWRmMjI5ZmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvIRisB7/dwvPjtIpMFmKtitDiX4uVST/UP4CR/oN25as7oqmP+DujW npgXdmd/J8LpAPnfl+qoZITNqfb23ewnEXDlIhbBRvMjF9pfWtNhpXmxEl2I3OuB WW94OiB+99YNA7vZAkZW8iGPe87WL7iFS8srJiTi+Y14zi2zXKpA11eZ9aF2GF+6 B/h8Xchw9X0NcezeQ0k6Ys2P1rvp3AzSnwlQC+NdTdqeolh6mCTbv/htuV34wNOD ZAEcXUyjbvHMUTt84Y3abjqJN5RGrlCPrF+yZSJ0ClG04V7nnKU1T/Pr6BHcTqGL c6997MWEhQcPKO6keuRtInnkmDHxcMA= -----END CERTIFICATE-----Generated at Mon Jun 16 02:43:10 2025 by rpki-client