$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/5166ee8e-831f-340d-ab66-9b4dfc59fe37.roa File: 5166ee8e-831f-340d-ab66-9b4dfc59fe37.roa (raw, json) Hash identifier: SheHTQrvrhDcaNBIyQ4s0rttW1gpXTXWMKXm8uEnbyI= Subject key identifier: BB:5D:52:D2:0F:5A:58:00:F0:AE:F2:68:07:82:7A:4C:8B:8F:08:00 Certificate issuer: /CN=dfe98912-51fc-490e-b52f-0f6db9a2847e Certificate serial: 010D0C9F4328584A71EB2946C65FF82A3D8A6680 Authority key identifier: EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/5166ee8e-831f-340d-ab66-9b4dfc59fe37.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 54004 IP address blocks: 209.240.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:29:46:c6:5f:f8:2a:3d:8a:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfe98912-51fc-490e-b52f-0f6db9a2847e Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=ed6086a8-22a1-4a1f-b1cb-c34c3c3fa930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:76:8f:0e:f8:11:7a:8b:10:55:a0:db:25:11: 38:70:af:ad:47:a2:6b:f1:d1:e5:66:23:83:3e:98: 32:11:65:f8:1e:fc:19:66:13:da:b6:2f:f7:34:e4: 20:6d:35:5c:84:b6:8e:f6:05:6c:67:7d:61:6b:25: aa:47:0e:d9:18:19:07:b7:c9:7a:82:93:3c:94:0c: d1:5f:56:a0:50:a1:11:1f:7f:67:c6:0c:d3:fa:ad: 71:4a:22:5c:71:3a:74:3c:75:4b:96:ee:38:db:ba: 78:bf:97:25:7b:d1:13:33:4b:6b:70:d1:ee:b0:19: a1:59:7d:c4:33:8d:e2:a1:65:98:3b:f7:bb:69:cd: 60:63:48:eb:40:a9:f2:54:fc:b8:3b:a7:67:e0:77: bf:da:24:7e:f6:f3:b3:bf:44:52:d9:e6:a5:43:c7: 5f:11:06:9e:c2:46:ba:36:58:20:25:3c:34:e8:2d: c7:f5:ab:51:47:0f:88:7f:1f:09:53:5e:1f:2a:dc: fb:ba:25:b9:50:64:66:2d:e0:50:7d:36:00:dc:b3: 91:ab:fd:b6:1d:34:69:23:83:10:8c:7e:42:77:a2: 44:3d:99:9a:e7:41:62:3e:cc:78:3c:44:1e:70:c4: 11:95:79:69:3f:b0:63:65:53:84:f2:16:09:3e:1f: 35:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:5D:52:D2:0F:5A:58:00:F0:AE:F2:68:07:82:7A:4C:8B:8F:08:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/5166ee8e-831f-340d-ab66-9b4dfc59fe37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl X509v3 Authority Key Identifier: keyid:EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer sbgp-ipAddrBlock: critical IPv4: 209.240.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:19:c4:04:5f:2f:0b:5a:07:ed:ef:2d:8b:5d:c8:9a:0f:73: 34:f1:14:51:a2:d8:80:5d:3c:6b:89:0f:e2:30:ec:60:96:06: f7:f3:2b:50:eb:94:be:18:78:e0:09:a7:5d:f5:6e:ee:78:d1: 55:93:62:7f:32:67:72:ae:bd:18:8b:7a:45:b1:4c:f2:34:a2: d7:70:dd:12:34:03:d4:83:b1:3e:83:11:0f:f9:a5:c5:6b:f4: 52:8e:6c:1c:65:dd:f0:94:b2:33:76:0c:58:f3:d8:41:00:a5: 42:81:e5:95:4c:ad:d6:c2:52:45:fa:e9:19:61:6a:f6:41:ac: 98:a1:fc:64:96:75:9f:87:64:3b:d3:4c:d2:24:f5:35:2a:03: a5:97:0a:43:64:9d:e2:9c:8b:f8:14:d6:6f:89:bf:fb:68:cd: ed:fc:fc:16:78:f8:a5:aa:9d:91:aa:ea:c0:37:8d:f3:57:62: a6:46:cd:0c:03:4e:6f:78:3c:39:4f:8c:6f:82:8d:04:9a:22: d6:84:44:1b:99:0d:05:ac:61:9f:7e:71:d3:43:4b:b5:38:13: 22:98:f3:42:86:e6:61:6b:a1:2c:50:b8:db:94:cf:46:fa:6e: 6d:2b:b9:80:a6:e5:77:5e:5e:33:40:74:e6:15:24:1f:d8:4f: 9f:7a:8b:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx6ylGxl/4Kj2KZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZlOTg5MTItNTFmYy00OTBlLWI1MmYtMGY2ZGI5YTI4 NDdlMB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk ZWQ2MDg2YTgtMjJhMS00YTFmLWIxY2ItYzM0YzNjM2ZhOTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXaPDvgReosQVaDbJRE4cK+tR6Jr8dHlZiOD PpgyEWX4HvwZZhPati/3NOQgbTVchLaO9gVsZ31hayWqRw7ZGBkHt8l6gpM8lAzR X1agUKERH39nxgzT+q1xSiJccTp0PHVLlu4427p4v5cle9ETM0trcNHusBmhWX3E M43ioWWYO/e7ac1gY0jrQKnyVPy4O6dn4He/2iR+9vOzv0RS2ealQ8dfEQaewka6 NlggJTw06C3H9atRRw+Ifx8JU14fKtz7uiW5UGRmLeBQfTYA3LORq/22HTRpI4MQ jH5Cd6JEPZma50FiPsx4PEQecMQRlXlpP7BjZVOE8hYJPh81xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLtdUtIPWlgA8K7yaAeCekyLjwgAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5 ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZkYjlhMjg0N2UvNTE2NmVlOGUtODMxZi0z NDBkLWFiNjYtOWI0ZGZjNTlmZTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGZlOTg5MTItNTFmYy00OTBlLWI1 MmYtMGY2ZGI5YTI4NDdlL2RmZTk4OTEyLTUxZmMtNDkwZS1iNTJmLTBmNmRiOWEy ODQ3ZS5jcmwwHwYDVR0jBBgwFoAU7IFTNMBbGPl+30NKbxqXz6CvV2kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZk YjlhMjg0N2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0fAYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoZxARfLwtaB+3vLYtdyJoPczTxFFGi2IBdPGuJD+Iw7GCWBvfzK1Dr lL4YeOAJp131bu540VWTYn8yZ3KuvRiLekWxTPI0otdw3RI0A9SDsT6DEQ/5pcVr 9FKObBxl3fCUsjN2DFjz2EEApUKB5ZVMrdbCUkX66RlhavZBrJih/GSWdZ+HZDvT TNIk9TUqA6WXCkNkneKci/gU1m+Jv/toze38/BZ4+KWqnZGq6sA3jfNXYqZGzQwD Tm94PDlPjG+CjQSaItaERBuZDQWsYZ9+cdNDS7U4EyKY80KG5mFroSxQuNuUz0b6 bm0ruYCm5XdeXjNAdOYVJB/YT596i8A= -----END CERTIFICATE-----Generated at Sun Jul 20 14:19:03 2025 by rpki-client