$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/c9602d06-8bc6-3bbe-95ba-a304efa8de8b.roa File: c9602d06-8bc6-3bbe-95ba-a304efa8de8b.roa (raw, json) Hash identifier: ya9fTh7FRygE/t0LLkDR4nhGl/B5X7JTBg9ARiR5mtw= Subject key identifier: 21:0C:47:6E:26:6D:DA:5C:33:11:A4:ED:86:65:48:09:30:6A:87:23 Certificate issuer: /CN=4a1bda30-5045-4ded-bf47-7fd03a594092 Certificate serial: 010D0C9F43285849D42FAA193B4326EDFA1BB8E0 Authority key identifier: 83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/c9602d06-8bc6-3bbe-95ba-a304efa8de8b.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7169 IP address blocks: 209.166.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:aa:19:3b:43:26:ed:fa:1b:b8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a1bda30-5045-4ded-bf47-7fd03a594092 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=41aa639c-cd3f-4181-ae13-9d1edbc02a15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1a:45:3f:0c:52:03:67:2a:37:a7:10:9f:02: 09:13:38:d0:4c:da:3f:b4:91:35:3a:f9:36:73:f6: 0f:cc:cf:1c:72:f8:1e:e6:09:fe:a5:68:c4:8e:1c: 76:54:7f:76:c3:2d:2d:60:76:af:0f:ed:3c:e4:da: 21:c4:56:8a:06:28:fb:24:eb:22:ab:1e:af:f6:14: 49:64:97:31:63:a5:3c:10:3e:70:9b:16:bd:98:ca: c6:a9:60:e9:8a:50:f9:20:9e:ec:44:67:27:ba:ad: 8d:6e:f4:f4:0c:f2:17:d8:f9:df:97:de:c1:2e:61: ad:75:4a:52:14:0e:f0:9b:e2:80:3e:26:8b:8f:61: ea:64:ca:f8:af:8c:3c:fa:b0:4c:08:27:75:b5:b1: 07:6d:1a:1a:20:5d:15:a9:08:bf:57:4a:e6:8a:16: be:d9:9a:90:6f:7c:47:3f:3e:80:55:db:9f:8f:4b: 91:ff:b4:c0:90:50:f2:46:f8:05:8d:7c:d2:ea:e7: a2:c3:ca:55:41:d4:af:54:17:f4:4e:ab:5a:2b:a1: 40:3d:72:99:54:a3:1e:a4:16:bc:17:73:90:d0:f4: 72:04:c2:a1:67:fe:ca:53:03:83:c3:c1:2f:be:f1: e0:9e:26:90:23:22:d8:f8:9d:03:dd:3e:7e:8f:cb: 6f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:0C:47:6E:26:6D:DA:5C:33:11:A4:ED:86:65:48:09:30:6A:87:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/c9602d06-8bc6-3bbe-95ba-a304efa8de8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl X509v3 Authority Key Identifier: keyid:83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer sbgp-ipAddrBlock: critical IPv4: 209.166.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:64:96:55:76:c6:f3:67:f5:21:7d:09:15:af:13:72:1b:18: a2:24:16:85:f3:22:c9:9d:f4:3c:6a:e9:16:5a:18:80:97:e2: 84:f1:c1:e6:e2:f7:8c:cd:c2:33:b5:de:3b:40:e6:20:9e:54: bf:97:d5:42:c1:fc:a3:c0:2a:20:71:03:f5:d3:3b:47:21:ff: 73:09:65:59:49:7a:12:af:f7:61:2c:bd:54:7a:01:13:9c:3e: 2d:b0:33:56:2c:73:63:94:d6:34:bd:8e:d3:20:92:f8:87:51: 91:f1:8d:20:05:fc:21:de:44:4d:cb:28:e1:5e:36:f7:b6:f1: 67:91:d3:68:69:2e:a0:2f:fd:fc:5b:70:c3:13:82:d2:6c:82: 8a:76:cd:7d:4e:24:ef:f5:7f:ca:09:23:42:c1:f8:4f:33:10: 3b:8d:26:dd:a7:00:52:40:ab:5b:a3:e9:94:b0:be:ef:ff:25: 37:12:b6:94:23:d9:94:63:d3:ff:c8:2e:69:75:74:f8:25:f1: d8:77:69:33:fd:2d:2c:1b:da:31:e8:14:ff:d9:5e:52:27:a5: 4e:31:b5:30:0e:c5:37:61:0f:2f:7c:e8:a0:26:9f:04:6d:2a: 3b:ef:d3:b9:1a:cd:6c:ac:fe:58:01:92:54:e8:7d:4a:a0:87: a9:d1:93:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL6oZO0Mm7fobuOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGExYmRhMzAtNTA0NS00ZGVkLWJmNDctN2ZkMDNhNTk0 MDkyMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NDFhYTYzOWMtY2QzZi00MTgxLWFlMTMtOWQxZWRiYzAyYTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRpFPwxSA2cqN6cQnwIJEzjQTNo/tJE1Ovk2 c/YPzM8ccvge5gn+pWjEjhx2VH92wy0tYHavD+085NohxFaKBij7JOsiqx6v9hRJ ZJcxY6U8ED5wmxa9mMrGqWDpilD5IJ7sRGcnuq2NbvT0DPIX2Pnfl97BLmGtdUpS FA7wm+KAPiaLj2HqZMr4r4w8+rBMCCd1tbEHbRoaIF0VqQi/V0rmiha+2ZqQb3xH Pz6AVdufj0uR/7TAkFDyRvgFjXzS6ueiw8pVQdSvVBf0TqtaK6FAPXKZVKMepBa8 F3OQ0PRyBMKhZ/7KUwODw8EvvvHgniaQIyLY+J0D3T5+j8tvWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEMR24mbdpcMxGk7YZlSAkwaocjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YTFi ZGEzMC01MDQ1LTRkZWQtYmY0Ny03ZmQwM2E1OTQwOTIvYzk2MDJkMDYtOGJjNi0z YmJlLTk1YmEtYTMwNGVmYThkZThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGExYmRhMzAtNTA0NS00ZGVkLWJm NDctN2ZkMDNhNTk0MDkyLzRhMWJkYTMwLTUwNDUtNGRlZC1iZjQ3LTdmZDAzYTU5 NDA5Mi5jcmwwHwYDVR0jBBgwFoAUg9WJsYZCUYnHW+3xTeETLIiJodYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YTFiZGEzMC01MDQ1LTRkZWQtYmY0Ny03ZmQw M2E1OTQwOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0abAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpkllV2xvNn9SF9CRWvE3IbGKIkFoXzIsmd9Dxq6RZaGICX4oTxwebi 94zNwjO13jtA5iCeVL+X1ULB/KPAKiBxA/XTO0ch/3MJZVlJehKv92EsvVR6AROc Pi2wM1Ysc2OU1jS9jtMgkviHUZHxjSAF/CHeRE3LKOFeNve28WeR02hpLqAv/fxb cMMTgtJsgop2zX1OJO/1f8oJI0LB+E8zEDuNJt2nAFJAq1uj6ZSwvu//JTcStpQj 2ZRj0//ILml1dPgl8dh3aTP9LSwb2jHoFP/ZXlInpU4xtTAOxTdhDy986KAmnwRt Kjvv07kazWys/lgBklTofUqgh6nRk58= -----END CERTIFICATE-----Generated at Sun Jun 15 16:09:15 2025 by rpki-client