$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/1b6b8cdc-f4a2-37cc-9980-2d8976fa1a28.roa File: 1b6b8cdc-f4a2-37cc-9980-2d8976fa1a28.roa (raw, json) Hash identifier: 8KfMm/vwYu9k/BPPRvyjvhJuF0MebVVoQXuTQPKLOfg= Subject key identifier: 52:0C:3B:A6:BC:77:1D:D3:D6:39:4A:F7:19:27:32:5A:CB:63:4C:1A Certificate issuer: /CN=4a1bda30-5045-4ded-bf47-7fd03a594092 Certificate serial: 010D0C9F43285849D42FA8ABDDE75681CB227440 Authority key identifier: 83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/1b6b8cdc-f4a2-37cc-9980-2d8976fa1a28.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 16509 IP address blocks: 209.166.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:a8:ab:dd:e7:56:81:cb:22:74:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a1bda30-5045-4ded-bf47-7fd03a594092 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=1a015408-2cc3-46e7-b5e8-a2d5ff66f172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ef:04:97:b3:de:2d:fa:61:ce:30:8c:0b:40: 53:6b:c0:2b:00:80:0c:ba:a2:bf:14:78:19:99:e6: 28:0c:af:b5:99:0e:cd:e1:aa:02:9c:a4:7c:53:49: d0:fe:87:0c:10:4b:cc:bb:74:59:cd:a2:12:b2:fd: 53:d3:c0:c2:3f:b2:b6:4c:b8:c7:f0:3a:25:5a:f3: ec:2a:e1:ed:97:cd:17:47:7f:85:cc:63:9b:9c:d1: 01:14:3e:18:75:2a:44:eb:97:d8:19:e1:dc:38:cb: 79:74:df:06:bb:84:ab:55:aa:50:94:87:39:aa:92: e7:5d:98:aa:ed:1e:ab:fb:68:81:26:97:44:98:6c: 4d:03:d9:49:b3:50:39:7a:f6:67:19:56:0b:50:fe: ff:91:e1:87:54:98:75:c7:12:fc:85:a0:e7:d8:b5: 79:02:1e:73:7f:2d:45:d5:c4:66:73:b9:0b:84:d9: fe:f5:71:42:33:86:3c:ce:63:1a:e9:4d:e1:e2:19: 3a:53:43:e0:eb:22:82:b7:62:58:86:f1:b2:1c:90: ef:65:2a:1d:db:88:27:ac:38:f4:29:b9:d1:1a:ae: fd:a0:da:75:23:8f:45:8a:fd:64:f7:49:12:4d:00: fc:8a:cd:7b:8d:8f:92:7e:29:d1:c9:62:81:2b:34: eb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:0C:3B:A6:BC:77:1D:D3:D6:39:4A:F7:19:27:32:5A:CB:63:4C:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/1b6b8cdc-f4a2-37cc-9980-2d8976fa1a28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl X509v3 Authority Key Identifier: keyid:83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer sbgp-ipAddrBlock: critical IPv4: 209.166.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:c8:c9:61:e4:44:a3:90:11:42:56:f6:6e:5b:01:6b:95:04: d2:29:95:c8:84:20:66:d7:5c:ca:13:99:25:e7:9f:8e:29:6b: 1e:db:74:18:58:86:d4:6e:28:d0:04:1c:5d:d6:37:17:6b:cb: 26:63:6d:70:6a:4d:f3:58:6b:5c:df:02:aa:9e:a4:35:32:25: 11:42:d2:af:41:fc:90:a3:48:c1:09:0e:03:cf:d7:11:e3:a5: d8:60:af:27:11:d7:db:87:11:cd:a1:20:af:74:f6:d2:b0:ed: 38:6c:2f:17:bc:5c:da:1a:78:a9:d7:1b:5c:fb:02:04:7a:d9: 4a:15:52:40:58:01:f1:b2:b0:77:0f:7c:5c:57:20:35:e6:e8: 7f:9c:41:c4:84:84:6a:8d:47:2a:e5:9d:86:df:b3:1c:66:2f: 33:d7:8a:91:ab:44:f2:8d:e8:7c:64:74:2c:46:0a:f2:84:61: 61:23:82:42:0f:7c:a2:fc:55:1b:2f:38:21:b9:9a:c7:13:7f: db:e2:6e:8f:2b:92:2f:01:88:79:ed:7d:a5:52:64:8d:09:8b: c7:2d:24:21:e9:f2:cd:c2:af:51:99:5a:2c:4e:0b:b8:62:e4: a1:0d:9f:a9:c2:e6:c0:54:59:e2:79:08:62:4a:40:a2:36:0b: 46:f0:7f:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL6ir3edWgcsidEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGExYmRhMzAtNTA0NS00ZGVkLWJmNDctN2ZkMDNhNTk0 MDkyMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MWEwMTU0MDgtMmNjMy00NmU3LWI1ZTgtYTJkNWZmNjZmMTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu8El7PeLfphzjCMC0BTa8ArAIAMuqK/FHgZ meYoDK+1mQ7N4aoCnKR8U0nQ/ocMEEvMu3RZzaISsv1T08DCP7K2TLjH8DolWvPs KuHtl80XR3+FzGObnNEBFD4YdSpE65fYGeHcOMt5dN8Gu4SrVapQlIc5qpLnXZiq 7R6r+2iBJpdEmGxNA9lJs1A5evZnGVYLUP7/keGHVJh1xxL8haDn2LV5Ah5zfy1F 1cRmc7kLhNn+9XFCM4Y8zmMa6U3h4hk6U0Pg6yKCt2JYhvGyHJDvZSod24gnrDj0 KbnRGq79oNp1I49Fiv1k90kSTQD8is17jY+SfinRyWKBKzTr3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIMO6a8dx3T1jlK9xknMlrLY0waMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YTFi ZGEzMC01MDQ1LTRkZWQtYmY0Ny03ZmQwM2E1OTQwOTIvMWI2YjhjZGMtZjRhMi0z N2NjLTk5ODAtMmQ4OTc2ZmExYTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGExYmRhMzAtNTA0NS00ZGVkLWJm NDctN2ZkMDNhNTk0MDkyLzRhMWJkYTMwLTUwNDUtNGRlZC1iZjQ3LTdmZDAzYTU5 NDA5Mi5jcmwwHwYDVR0jBBgwFoAUg9WJsYZCUYnHW+3xTeETLIiJodYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YTFiZGEzMC01MDQ1LTRkZWQtYmY0Ny03ZmQw M2E1OTQwOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0abAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL/IyWHkRKOQEUJW9m5bAWuVBNIplciEIGbXXMoTmSXnn44pax7bdBhY htRuKNAEHF3WNxdryyZjbXBqTfNYa1zfAqqepDUyJRFC0q9B/JCjSMEJDgPP1xHj pdhgrycR19uHEc2hIK909tKw7ThsLxe8XNoaeKnXG1z7AgR62UoVUkBYAfGysHcP fFxXIDXm6H+cQcSEhGqNRyrlnYbfsxxmLzPXipGrRPKN6HxkdCxGCvKEYWEjgkIP fKL8VRsvOCG5mscTf9vibo8rki8BiHntfaVSZI0Ji8ctJCHp8s3Cr1GZWixOC7hi 5KENn6nC5sBUWeJ5CGJKQKI2C0bwfxQ= -----END CERTIFICATE-----Generated at Sat Jun 14 06:18:24 2025 by rpki-client