$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e8f9870-df82-3d08-a905-7f984e9a0cb4.roa File: 1e8f9870-df82-3d08-a905-7f984e9a0cb4.roa (raw, json) Hash identifier: +HMwK0mcD82Q06dtCOiAZ8lpy37lT29LVzQKSsC7zcs= Subject key identifier: DD:17:5D:0F:54:64:06:C4:51:2C:51:9E:C3:0E:BC:7C:9C:CF:11:E8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFC853F29C89FCD1FEE1A80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e8f9870-df82-3d08-a905-7f984e9a0cb4.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 14189 IP address blocks: 209.23.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:85:3f:29:c8:9f:cd:1f:ee:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=158e97ea-e3f7-4884-b12c-8d6c57c29c49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a8:df:21:e1:9f:bd:b4:06:00:cf:bf:63:b1: 87:0d:bb:f1:64:9e:35:c5:d1:18:3e:6d:e6:c3:e1: 02:2d:29:cf:a7:97:58:87:4c:50:a1:dd:9f:50:2e: 2c:31:46:21:3e:e5:35:f4:16:29:b7:fd:fe:fe:61: fa:86:d4:cc:eb:49:2d:13:f1:cb:d0:91:cc:67:7c: 16:66:5a:04:44:9f:6e:c8:3c:4a:a8:d7:60:7d:4b: 1e:29:b0:95:c3:81:07:15:98:e7:08:a0:c7:d0:7a: 9f:f4:c0:47:45:5e:18:33:f9:a7:24:b6:c9:84:c4: b7:b8:bd:96:f0:b0:79:11:07:ca:19:61:85:30:28: 43:d0:8b:69:23:ac:38:71:14:ec:2b:e0:30:1e:9f: 4c:3a:9e:0b:ee:d2:49:fb:9a:d2:08:e4:3f:bf:0f: 4e:a8:fa:78:64:8e:4d:5e:70:79:69:9d:ad:df:e2: 73:37:50:1d:1a:06:aa:dd:5c:d3:f9:cf:88:c3:b6: a0:2d:95:ac:98:22:05:52:cf:4f:a8:e5:d8:aa:a4: 41:98:ee:85:2e:9c:9b:72:33:c6:9c:b3:a3:45:c1: 1b:4c:9e:ea:59:f6:62:1c:78:52:20:82:85:e8:c1: 34:56:cc:6b:96:79:27:45:06:00:e1:91:80:a9:c3: c1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:17:5D:0F:54:64:06:C4:51:2C:51:9E:C3:0E:BC:7C:9C:CF:11:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e8f9870-df82-3d08-a905-7f984e9a0cb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 209.23.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:2a:a5:08:f9:b1:51:7c:7a:55:39:96:35:b0:46:07:a2:ca: bf:c7:8a:5c:8f:8c:c8:d5:0b:05:53:24:8c:85:0c:a5:73:20: 55:52:6b:b5:23:47:e9:29:21:01:67:10:43:5e:6c:3d:6d:48: ba:15:3b:3f:3f:8b:4f:29:f4:92:0b:84:5b:ec:bf:04:82:9a: c8:b0:9d:3a:9c:35:3d:8b:8a:9e:cf:81:4a:b5:82:6f:cc:a9: 91:17:67:36:d9:d7:6e:9b:ed:57:f6:a8:61:d7:eb:dd:b1:e9: e7:bf:1c:8e:a7:8b:94:99:14:1d:b4:d0:4a:3d:4d:d7:e8:85: 74:48:e8:3f:fd:de:a7:26:a3:7d:02:82:ed:ea:36:ac:d6:32: dd:b1:3e:51:4b:d7:b1:49:19:7b:17:5d:db:cc:4d:7e:2c:87: 7c:68:e8:34:09:aa:05:65:0f:0c:4e:f8:d4:20:19:d3:21:a6: 43:ad:b3:4a:dd:64:66:5a:fa:69:dc:38:83:3b:9d:47:0c:8c: bd:8c:1d:37:94:24:63:de:a4:08:2c:09:b2:33:a9:90:2b:cd: 17:b7:86:68:2c:02:92:29:ee:b2:14:15:bc:db:c7:f6:19:57: b9:7c:00:51:a3:0b:6d:33:da:bc:00:05:87:33:7e:ca:12:bd: 3c:f5:06:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/IU/KcifzR/uGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk MTU4ZTk3ZWEtZTNmNy00ODg0LWIxMmMtOGQ2YzU3YzI5YzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqjfIeGfvbQGAM+/Y7GHDbvxZJ41xdEYPm3m w+ECLSnPp5dYh0xQod2fUC4sMUYhPuU19BYpt/3+/mH6htTM60ktE/HL0JHMZ3wW ZloERJ9uyDxKqNdgfUseKbCVw4EHFZjnCKDH0Hqf9MBHRV4YM/mnJLbJhMS3uL2W 8LB5EQfKGWGFMChD0ItpI6w4cRTsK+AwHp9MOp4L7tJJ+5rSCOQ/vw9OqPp4ZI5N XnB5aZ2t3+JzN1AdGgaq3VzT+c+Iw7agLZWsmCIFUs9PqOXYqqRBmO6FLpybcjPG nLOjRcEbTJ7qWfZiHHhSIIKF6ME0VsxrlnknRQYA4ZGAqcPB9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0XXQ9UZAbEUSxRnsMOvHyczxHoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWU4Zjk4NzAtZGY4Mi0z ZDA4LWE5MDUtN2Y5ODRlOWEwY2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Rf3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMIqpQj5sVF8elU5ljWwRgeiyr/HilyPjMjVCwVTJIyFDKVzIFVSa7Uj R+kpIQFnEENebD1tSLoVOz8/i08p9JILhFvsvwSCmsiwnTqcNT2Lip7PgUq1gm/M qZEXZzbZ126b7Vf2qGHX692x6ee/HI6ni5SZFB200Eo9TdfohXRI6D/93qcmo30C gu3qNqzWMt2xPlFL17FJGXsXXdvMTX4sh3xo6DQJqgVlDwxO+NQgGdMhpkOts0rd ZGZa+mncOIM7nUcMjL2MHTeUJGPepAgsCbIzqZArzRe3hmgsApIp7rIUFbzbx/YZ V7l8AFGjC20z2rwABYczfsoSvTz1BqU= -----END CERTIFICATE-----Generated at Mon Jul 21 00:02:34 2025 by rpki-client