$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/c8effb7c-3ff5-367a-9768-2bfe031beb26.roa File: c8effb7c-3ff5-367a-9768-2bfe031beb26.roa (raw, json) Hash identifier: apNygH62ZB9zM3cALOJSm0KvNKR0sh7hvRbtFHzGdOk= Subject key identifier: A8:8D:5F:90:8A:13:3B:5A:34:A5:F4:DC:3A:4C:1C:0A:B8:4E:B7:C6 Certificate issuer: /CN=f4f85718-cda0-442f-9727-709a536e1e27 Certificate serial: 010D0C9F43285849CE9A3FCF5A8CB6C9AD14BB80 Authority key identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/c8effb7c-3ff5-367a-9768-2bfe031beb26.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 6639 IP address blocks: 209.27.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:3f:cf:5a:8c:b6:c9:ad:14:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f85718-cda0-442f-9727-709a536e1e27 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=47665a22-0c32-4928-83fb-c2507623f4e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:58:80:c5:0c:ee:41:09:e8:fa:a0:76:5f:5d: ad:4c:73:d4:63:e3:b4:d0:a9:86:d0:a2:7f:9f:38: 07:f0:1e:78:71:af:52:2a:04:76:d6:11:0c:7d:2c: 6b:1c:9d:c0:08:b2:ae:88:4f:32:53:b4:de:c3:0d: 21:81:1b:8b:3a:31:c8:39:81:97:56:af:b5:79:e4: 27:ff:c3:c5:f4:a9:fc:a5:28:af:42:f7:f6:07:2c: b1:77:ed:33:60:0f:75:4f:8e:d6:78:c4:5e:66:d5: 5b:f1:1d:c3:67:bf:f4:91:1c:ee:79:59:50:7a:22: fd:56:5b:d3:84:f4:9f:67:78:f3:49:34:80:9c:f6: 7c:99:d3:50:c5:8e:90:84:d3:b1:70:a8:18:af:11: e6:a9:aa:e6:9d:20:45:b9:b3:f3:5c:37:26:d4:98: 7e:61:2a:9a:37:e1:3a:10:f1:20:6c:50:33:f1:93: 3e:df:a4:4a:bc:3d:8f:93:2e:7b:3c:28:47:9e:d7: d0:02:df:e1:d0:dc:90:2f:ef:fa:49:b8:4d:dd:f1: 5f:53:c5:0f:99:ee:bd:95:1e:fb:3e:a6:7f:39:38: b1:55:ff:38:02:55:7d:c6:59:17:c3:4b:f2:f6:d1: 0a:61:e3:5e:ea:5f:0e:d5:60:cf:5b:ab:0c:7c:dd: 08:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:8D:5F:90:8A:13:3B:5A:34:A5:F4:DC:3A:4C:1C:0A:B8:4E:B7:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/c8effb7c-3ff5-367a-9768-2bfe031beb26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl X509v3 Authority Key Identifier: keyid:6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer sbgp-ipAddrBlock: critical IPv4: 209.27.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:ac:50:70:bc:c8:9b:82:3f:b7:39:8d:ec:a1:7b:8b:89:fc: a1:a9:68:83:60:f3:a7:6a:5f:25:93:8b:5c:32:04:86:5c:a2: 37:e2:fe:b7:db:c6:09:d5:4f:cf:de:83:8a:4c:3a:19:aa:a1: 9c:27:b5:9e:d3:b7:0d:16:78:ae:43:9a:4c:97:35:a9:b7:50: 02:bc:d6:5d:19:65:f2:97:3d:06:f1:95:85:9d:79:c8:05:d7: 1e:da:7c:db:c7:3d:b8:5a:b2:8f:8d:95:c9:10:0e:93:97:59: 1e:1f:5a:3b:a7:ed:e4:94:a1:26:59:c7:18:d1:e9:37:9c:af: 77:8c:12:a3:1d:7e:c8:12:3b:a0:f0:0f:fb:30:e6:d6:62:98: c9:b7:03:fc:31:0e:28:b4:1f:b3:5c:38:80:2b:c2:35:83:80: 22:d7:88:ba:af:b4:36:e3:66:d5:42:06:c4:39:ea:fb:10:81: db:f4:e5:87:2a:89:48:52:7d:8d:d9:f6:db:5b:18:11:01:48: bd:95:fc:46:71:52:6d:78:26:bc:f8:b1:8e:cb:27:b1:b9:07: b7:0b:f4:b7:fc:6e:f2:51:dc:a0:2e:ea:dc:12:be:e5:d6:17: 41:93:c2:f5:d0:69:85:80:8e:79:7e:c1:29:95:dd:4f:f5:3d: 21:cb:ea:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmj/PWoy2ya0Uu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRmODU3MTgtY2RhMC00NDJmLTk3MjctNzA5YTUzNmUx ZTI3MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk NDc2NjVhMjItMGMzMi00OTI4LTgzZmItYzI1MDc2MjNmNGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoliAxQzuQQno+qB2X12tTHPUY+O00KmG0KJ/ nzgH8B54ca9SKgR21hEMfSxrHJ3ACLKuiE8yU7Teww0hgRuLOjHIOYGXVq+1eeQn /8PF9Kn8pSivQvf2Byyxd+0zYA91T47WeMReZtVb8R3DZ7/0kRzueVlQeiL9VlvT hPSfZ3jzSTSAnPZ8mdNQxY6QhNOxcKgYrxHmqarmnSBFubPzXDcm1Jh+YSqaN+E6 EPEgbFAz8ZM+36RKvD2Pky57PChHntfQAt/h0NyQL+/6SbhN3fFfU8UPme69lR77 PqZ/OTixVf84AlV9xlkXw0vy9tEKYeNe6l8O1WDPW6sMfN0IzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiNX5CKEztaNKX03DpMHAq4TrfGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4 NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlhNTM2ZTFlMjcvYzhlZmZiN2MtM2ZmNS0z NjdhLTk3NjgtMmJmZTAzMWJlYjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjRmODU3MTgtY2RhMC00NDJmLTk3 MjctNzA5YTUzNmUxZTI3L2Y0Zjg1NzE4LWNkYTAtNDQyZi05NzI3LTcwOWE1MzZl MWUyNy5jcmwwHwYDVR0jBBgwFoAUa2/guyMG6CGl/y1Pb59cNa87Qn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlh NTM2ZTFlMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Rs8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGusUHC8yJuCP7c5jeyhe4uJ/KGpaINg86dqXyWTi1wyBIZcojfi/rfb xgnVT8/eg4pMOhmqoZwntZ7Ttw0WeK5DmkyXNam3UAK81l0ZZfKXPQbxlYWdecgF 1x7afNvHPbhaso+NlckQDpOXWR4fWjun7eSUoSZZxxjR6Tecr3eMEqMdfsgSO6Dw D/sw5tZimMm3A/wxDii0H7NcOIArwjWDgCLXiLqvtDbjZtVCBsQ56vsQgdv05Ycq iUhSfY3Z9ttbGBEBSL2V/EZxUm14Jrz4sY7LJ7G5B7cL9Lf8bvJR3KAu6twSvuXW F0GTwvXQaYWAjnl+wSmV3U/1PSHL6sk= -----END CERTIFICATE-----Generated at Sun Jun 15 15:35:16 2025 by rpki-client