$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f18820bf-91d8-325d-8b7a-93a1f6b504d6.roa File: f18820bf-91d8-325d-8b7a-93a1f6b504d6.roa (raw, json) Hash identifier: hngI7ZrQpuyTQvMTMzkipCrGRxEycMAx++WEGZATAlM= Subject key identifier: 34:AC:D1:A9:51:A0:C4:D9:96:5B:48:EC:AA:F1:D1:A5:1E:CB:9F:0F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858497AD9CC98522EB3B4C06672C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f18820bf-91d8-325d-8b7a-93a1f6b504d6.roa Signing time: Thu 10 Apr 2025 13:00:59 +0000 ROA not before: Thu 10 Apr 2025 13:00:59 +0000 ROA not after: Wed 09 Jul 2025 13:00:59 +0000 asID: 213120 IP address blocks: 209.200.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7a:d9:cc:98:52:2e:b3:b4:c0:66:72:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 10 13:00:59 2025 GMT Not After : Jul 9 13:00:59 2025 GMT Subject: CN=73c65659-2d98-40c6-8f64-90a8ddef3fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9c:22:5d:87:be:9c:e7:dd:00:1f:0b:e4:87: 9c:2c:58:30:f0:4c:0d:30:78:a4:4b:23:07:76:6b: eb:a9:d5:2d:8e:47:ba:32:e7:27:fd:b3:b6:5d:a8: 6a:29:69:ed:80:5f:6f:a3:b4:e7:91:40:6d:33:82: 87:a8:76:e6:2c:16:9a:12:b4:71:d1:03:42:62:27: cf:d4:18:4a:9b:a0:ac:0f:e1:d9:65:4d:4c:d0:1e: 95:a2:0a:a3:ac:10:2d:8d:ca:6b:94:5f:14:ec:58: 85:0e:79:7f:b9:ad:b7:a0:69:22:c6:96:2c:2d:d3: e2:ff:97:97:41:61:a1:f2:e0:81:1d:94:5f:5f:3a: 0c:57:7e:5a:67:d0:a9:ad:71:ab:14:dc:ff:5f:38: f2:1f:0e:9c:96:cd:ef:07:36:a4:41:a2:b2:6d:a3: 18:2b:ef:38:f9:ca:ef:40:44:b9:20:0e:05:32:64: c4:88:ad:f5:cd:95:b9:6d:cc:46:64:a5:b7:c7:4e: b6:a3:a9:0f:61:46:a6:22:7b:66:1a:ab:a8:40:08: 8f:b8:fb:46:77:82:0d:ba:ec:5e:8f:f3:88:e5:b4: 75:9d:bf:0f:87:53:fb:e7:bd:6b:99:b3:1d:2e:21: ba:9f:d8:2c:8c:32:0f:6d:a1:5b:55:a7:55:05:64: 41:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:AC:D1:A9:51:A0:C4:D9:96:5B:48:EC:AA:F1:D1:A5:1E:CB:9F:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f18820bf-91d8-325d-8b7a-93a1f6b504d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:db:18:b5:5a:41:1d:e5:84:99:b3:ef:85:bf:a8:c2:67:44: 2c:26:cb:9a:ce:bf:15:e8:08:95:eb:99:9c:93:93:02:8c:8e: b0:39:2d:01:cc:bb:8a:56:83:45:79:49:10:de:fb:87:52:0f: f7:29:26:61:1e:db:e9:48:b2:eb:42:c0:2d:ed:84:01:41:26: 22:07:e2:df:7a:68:ee:a5:75:10:63:12:0e:88:d1:ee:e9:f5: d5:b9:d9:8e:47:b9:28:75:c9:e7:7e:3e:ec:61:eb:8a:d1:42: bb:87:92:9b:75:a4:fb:23:af:11:f2:04:7b:b8:83:f4:38:88: fd:d2:c4:5e:af:29:30:1a:67:06:65:58:7b:89:f6:ce:82:40: 20:6e:bb:56:d1:ba:40:5b:10:54:32:4c:d4:14:8d:c4:62:f6: 3e:31:86:bd:f6:73:c5:93:4b:25:f9:b5:23:37:ab:6c:00:b0: e0:6a:3d:d3:41:7c:cb:56:34:6e:ff:9d:18:43:18:2f:87:eb: 51:55:3a:96:29:d9:97:c9:06:e3:50:0a:39:be:18:7c:d0:b9: d6:20:58:dd:26:62:74:dc:c2:ea:18:8d:29:44:8e:fb:80:bb: 31:c2:80:71:32:99:31:52:77:a7:cc:53:a7:0c:1a:04:12:7f: 5a:12:3a:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl62cyYUi6ztMBmcsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxMDEzMDA1OVoXDTI1MDcwOTEzMDA1OVowLzEtMCsGA1UEAxMk NzNjNjU2NTktMmQ5OC00MGM2LThmNjQtOTBhOGRkZWYzZmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypwiXYe+nOfdAB8L5IecLFgw8EwNMHikSyMH dmvrqdUtjke6Mucn/bO2XahqKWntgF9vo7TnkUBtM4KHqHbmLBaaErRx0QNCYifP 1BhKm6CsD+HZZU1M0B6VogqjrBAtjcprlF8U7FiFDnl/ua23oGkixpYsLdPi/5eX QWGh8uCBHZRfXzoMV35aZ9CprXGrFNz/XzjyHw6cls3vBzakQaKybaMYK+84+crv QES5IA4FMmTEiK31zZW5bcxGZKW3x062o6kPYUamIntmGquoQAiPuPtGd4INuuxe j/OI5bR1nb8Ph1P7571rmbMdLiG6n9gsjDIPbaFbVadVBWRBZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSs0alRoMTZlltI7Krx0aUey58PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjE4ODIwYmYtOTFkOC0z MjVkLThiN2EtOTNhMWY2YjUwNGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ciYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3bGLVaQR3lhJmz74W/qMJnRCwmy5rOvxXoCJXrmZyTkwKMjrA5LQHM u4pWg0V5SRDe+4dSD/cpJmEe2+lIsutCwC3thAFBJiIH4t96aO6ldRBjEg6I0e7p 9dW52Y5HuSh1yed+Puxh64rRQruHkpt1pPsjrxHyBHu4g/Q4iP3SxF6vKTAaZwZl WHuJ9s6CQCBuu1bRukBbEFQyTNQUjcRi9j4xhr32c8WTSyX5tSM3q2wAsOBqPdNB fMtWNG7/nRhDGC+H61FVOpYp2ZfJBuNQCjm+GHzQudYgWN0mYnTcwuoYjSlEjvuA uzHCgHEymTFSd6fMU6cMGgQSf1oSOpY= -----END CERTIFICATE-----Generated at Sun Apr 27 01:07:31 2025 by rpki-client