$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8cc99daf-866f-3294-894c-cd40fbacd7a7.roa File: 8cc99daf-866f-3294-894c-cd40fbacd7a7.roa (raw, json) Hash identifier: 0tN5lrO84QkM9FVuFWy76l29Nu2uEQoDkl+viacymLQ= Subject key identifier: 9C:1C:58:4F:1E:77:E6:97:6A:D4:0D:16:06:B0:F0:CF:F1:B9:3F:C1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498CFF17B6256845DB49EFE220 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8cc99daf-866f-3294-894c-cd40fbacd7a7.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 32787 IP address blocks: 209.200.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:17:b6:25:68:45:db:49:ef:e2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=b06dd841-2b0c-4d5b-b27e-90e065fe530d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5a:53:6b:cd:5e:6f:34:ef:78:a3:11:96:a2: 66:86:07:41:60:c9:2a:c3:ab:49:00:fa:9b:7e:a1: 4a:24:d9:45:c2:51:6b:78:f9:4a:a0:d4:a0:72:5d: 44:db:0a:34:d7:73:48:8f:2b:32:e6:ab:f1:20:18: d0:4f:2e:2c:90:84:da:a2:4a:c7:f9:ce:96:d8:4c: f9:43:b6:f5:bd:d6:f3:00:73:de:cd:a9:4a:c1:b6: da:56:ea:5d:7d:ec:25:8d:cc:7c:73:a8:d0:d7:fb: 8f:d3:9a:8b:c2:93:32:99:20:07:2f:ab:87:9e:dc: ed:d0:f5:41:89:44:29:de:5a:b5:40:d8:8e:f0:1f: e6:13:2e:41:dd:ce:6f:0b:68:b3:f8:78:78:a4:75: a1:05:79:fb:24:e6:ef:08:c4:1d:15:f6:5f:5a:af: a9:b2:9c:d8:21:80:2c:fa:ca:cb:0b:fb:ef:6c:06: 58:bb:60:97:0d:9a:e6:c8:fd:9a:ce:7f:46:ab:d1: 90:36:b0:65:c5:7b:7f:b7:7e:cb:8d:8d:98:6d:eb: 7f:dd:3a:38:91:dd:a5:1f:6f:0b:72:e0:a4:5a:75: ff:79:4a:ae:5c:89:f1:b5:a4:fe:1c:c7:52:fc:97: 43:70:26:e3:26:5e:17:e2:6a:61:33:07:8d:1d:67: 64:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:1C:58:4F:1E:77:E6:97:6A:D4:0D:16:06:B0:F0:CF:F1:B9:3F:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8cc99daf-866f-3294-894c-cd40fbacd7a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:1e:71:0a:3b:70:b3:e7:b6:53:21:a2:f6:64:34:1b:72:f1: 18:e2:c6:fe:fd:19:51:fa:8d:1e:7c:28:5f:fd:c1:1c:48:7e: ac:7e:6c:2c:78:34:af:2c:10:04:3b:b5:0b:87:ea:04:35:3b: 90:7a:d0:4f:a4:52:d4:f7:a5:7b:61:b5:fa:a0:b6:26:52:d0: 1d:4f:fd:ac:a1:d6:97:81:f9:b9:19:97:af:70:1e:5c:15:76: c5:b2:c1:34:58:76:21:f2:8d:0d:65:a5:41:74:a1:7d:c3:58: c3:fb:bf:73:91:22:a8:23:a5:37:4d:8a:db:c4:fa:eb:74:c6: d6:44:39:da:62:ac:d4:12:06:1b:35:f3:73:8c:5f:8c:1a:da: 22:8c:b4:3a:50:08:c6:ac:7c:49:7e:31:93:9a:77:11:6f:63: 48:4a:73:b7:61:af:b4:6f:ec:8d:b4:a8:5d:13:21:fb:51:a0: cf:fb:c0:e9:9b:a4:54:05:aa:b4:33:ce:94:78:08:c6:a5:d0: 53:90:aa:e1:c9:de:d4:58:78:41:2b:08:f6:92:98:98:57:12: 23:58:9d:1f:81:21:df:b0:86:62:5f:9f:c7:8d:31:48:3a:bc: a5:1b:5b:c5:d8:3b:10:86:9a:38:3b:e9:fa:83:fd:63:05:b1: ca:07:ad:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/xe2JWhF20nv4iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk YjA2ZGQ4NDEtMmIwYy00ZDViLWIyN2UtOTBlMDY1ZmU1MzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1pTa81ebzTveKMRlqJmhgdBYMkqw6tJAPqb fqFKJNlFwlFrePlKoNSgcl1E2wo013NIjysy5qvxIBjQTy4skITaokrH+c6W2Ez5 Q7b1vdbzAHPezalKwbbaVupdfewljcx8c6jQ1/uP05qLwpMymSAHL6uHntzt0PVB iUQp3lq1QNiO8B/mEy5B3c5vC2iz+Hh4pHWhBXn7JObvCMQdFfZfWq+pspzYIYAs +srLC/vvbAZYu2CXDZrmyP2azn9Gq9GQNrBlxXt/t37LjY2Ybet/3To4kd2lH28L cuCkWnX/eUquXInxtaT+HMdS/JdDcCbjJl4X4mphMweNHWdkQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwcWE8ed+aXatQNFgaw8M/xuT/BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGNjOTlkYWYtODY2Zi0z Mjk0LTg5NGMtY2Q0MGZiYWNkN2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cisMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwecQo7cLPntlMhovZkNBty8Rjixv79GVH6jR58KF/9wRxIfqx+bCx4 NK8sEAQ7tQuH6gQ1O5B60E+kUtT3pXthtfqgtiZS0B1P/ayh1peB+bkZl69wHlwV dsWywTRYdiHyjQ1lpUF0oX3DWMP7v3ORIqgjpTdNitvE+ut0xtZEOdpirNQSBhs1 83OMX4wa2iKMtDpQCMasfEl+MZOadxFvY0hKc7dhr7Rv7I20qF0TIftRoM/7wOmb pFQFqrQzzpR4CMal0FOQquHJ3tRYeEErCPaSmJhXEiNYnR+BId+whmJfn8eNMUg6 vKUbW8XYOxCGmjg76fqD/WMFscoHrfg= -----END CERTIFICATE-----Generated at Sat Apr 26 15:15:28 2025 by rpki-client