$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0f9a3968-1572-3d7a-af92-d15e80eb7fe6.roa File: 0f9a3968-1572-3d7a-af92-d15e80eb7fe6.roa (raw, json) Hash identifier: PnfMtmPYcg346hVkQH56UzpwyIRq0gfaT7sqjGdo4XE= Subject key identifier: 2A:1C:1E:65:EE:5C:C4:F6:8A:CA:FB:1F:D5:35:CE:68:80:12:99:06 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F43285849FEA19F9E1712FDF792569B80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0f9a3968-1572-3d7a-af92-d15e80eb7fe6.roa Signing time: Tue 27 May 2025 17:54:48 +0000 ROA not before: Tue 27 May 2025 17:54:48 +0000 ROA not after: Mon 25 Aug 2025 17:54:48 +0000 asID: 53813 IP address blocks: 209.55.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:a1:9f:9e:17:12:fd:f7:92:56:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: May 27 17:54:48 2025 GMT Not After : Aug 25 17:54:48 2025 GMT Subject: CN=1de83379-e4b0-40a0-9605-79f9fd9159f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f9:01:a7:98:d8:4a:6a:1c:7f:08:d9:6a:cf: 6a:cb:d5:3c:97:fb:ff:bd:23:10:09:19:62:66:e8: 3e:a5:86:f5:a2:8a:9e:0d:9e:ab:10:ae:20:5b:da: 83:ea:29:ba:e7:0f:c4:b7:a7:f9:f4:00:71:33:a1: a8:33:06:10:5d:10:ef:92:b6:0f:10:ad:2e:c0:fa: 17:3c:e1:4f:ae:26:94:9f:af:5b:a3:a8:69:3c:ed: 8c:28:c9:22:0c:a3:85:c6:a6:b8:22:62:b8:cb:ad: cd:ca:35:af:44:48:28:a5:ba:d9:01:94:1c:30:51: f7:82:d9:f9:6a:fd:4b:49:b5:cd:16:a1:75:c3:93: dc:13:01:05:f5:4e:d9:d3:bf:72:a2:05:42:62:8d: 66:e2:e6:e4:ca:09:9a:80:d9:e0:d5:71:11:81:c0: 55:e2:41:32:8b:8a:a1:23:b5:0a:59:5c:70:e2:69: dc:9c:c1:e1:bc:78:f6:f6:b5:ec:a9:90:72:f1:55: 04:4e:cc:fe:b4:24:dd:8d:6d:8f:b8:ad:90:4e:65: 1a:db:2a:14:66:3d:97:4b:74:74:d4:88:12:aa:7f: 82:86:f5:ef:f7:30:9b:d4:90:71:b1:fa:65:42:4f: 84:11:7a:82:ad:24:3a:7e:9b:16:b7:2b:2f:96:ce: 6d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1C:1E:65:EE:5C:C4:F6:8A:CA:FB:1F:D5:35:CE:68:80:12:99:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0f9a3968-1572-3d7a-af92-d15e80eb7fe6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 209.55.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:ff:8b:5b:e1:2e:d2:b1:4f:3b:6e:36:bb:06:d1:cc:2f:7e: 4e:ef:fc:18:f0:c8:4f:4c:18:de:a9:2d:a1:74:7f:56:d7:dc: ab:95:fe:9c:53:c6:a5:10:dc:40:f9:e1:68:1f:5a:ea:bf:47: ae:40:0b:6c:2a:79:a6:f7:fa:86:6c:15:3e:20:59:20:5e:12: 76:b7:d9:00:f6:9d:42:eb:99:7c:2c:dd:ea:70:58:84:6d:8a: f3:b5:e0:ad:96:d9:1c:fe:69:59:01:a0:42:3b:cf:4e:0c:74: 64:5e:66:dc:05:ea:b0:45:c5:bc:52:93:15:24:22:c0:29:81: 9a:9c:ae:f9:a0:7a:c6:a4:05:5d:7c:9b:19:8a:27:c0:9b:19: a8:3f:fa:24:f7:63:82:8a:ba:e9:14:07:64:da:48:25:3a:18: 74:2d:e6:ff:0d:54:1f:3f:d6:cd:27:d4:71:a2:e6:92:c9:7e: 9c:23:75:af:a7:08:01:62:40:30:de:86:ba:02:d4:b0:85:7d: 58:ff:e4:d0:00:fd:b9:5a:53:4e:38:0b:5f:db:d2:4b:e3:7f: 51:8c:ef:ea:0d:4d:29:ab:f2:7f:82:d1:d9:06:bd:0a:02:aa: dc:07:e8:ba:67:98:dc:1e:a1:4d:39:df:6d:1f:40:ca:9c:c5: dc:fe:b4:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+oZ+eFxL995JWm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDUyNzE3NTQ0OFoXDTI1MDgyNTE3NTQ0OFowLzEtMCsGA1UEAxMk MWRlODMzNzktZTRiMC00MGEwLTk2MDUtNzlmOWZkOTE1OWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPkBp5jYSmocfwjZas9qy9U8l/v/vSMQCRli Zug+pYb1ooqeDZ6rEK4gW9qD6im65w/Et6f59ABxM6GoMwYQXRDvkrYPEK0uwPoX POFPriaUn69bo6hpPO2MKMkiDKOFxqa4ImK4y63NyjWvREgopbrZAZQcMFH3gtn5 av1LSbXNFqF1w5PcEwEF9U7Z079yogVCYo1m4ubkygmagNng1XERgcBV4kEyi4qh I7UKWVxw4mncnMHhvHj29rXsqZBy8VUETsz+tCTdjW2PuK2QTmUa2yoUZj2XS3R0 1IgSqn+ChvXv9zCb1JBxsfplQk+EEXqCrSQ6fpsWtysvls5teQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCocHmXuXMT2isr7H9U1zmiAEpkGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMGY5YTM5NjgtMTU3Mi0z ZDdhLWFmOTItZDE1ZTgwZWI3ZmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TfKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALz/i1vhLtKxTztuNrsG0cwvfk7v/BjwyE9MGN6pLaF0f1bX3KuV/pxT xqUQ3ED54WgfWuq/R65AC2wqeab3+oZsFT4gWSBeEna32QD2nULrmXws3epwWIRt ivO14K2W2Rz+aVkBoEI7z04MdGReZtwF6rBFxbxSkxUkIsApgZqcrvmgesakBV18 mxmKJ8CbGag/+iT3Y4KKuukUB2TaSCU6GHQt5v8NVB8/1s0n1HGi5pLJfpwjda+n CAFiQDDehroC1LCFfVj/5NAA/blaU044C1/b0kvjf1GM7+oNTSmr8n+C0dkGvQoC qtwH6LpnmNweoU05320fQMqcxdz+tCI= -----END CERTIFICATE-----Generated at Thu Jun 5 18:27:47 2025 by rpki-client