$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d6f41894-5c14-3f8b-9624-39b47f7faed9.roa File: d6f41894-5c14-3f8b-9624-39b47f7faed9.roa (raw, json) Hash identifier: SrnhiHcc3ak9IQy0+Cw3IuZRewkAOcX3t1ZLlhfhtZs= Subject key identifier: 29:A3:E9:EF:B0:80:94:C2:D7:4A:89:96:19:04:3A:75:3E:44:F2:60 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584A03A546F9124278F7D73B4E00 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d6f41894-5c14-3f8b-9624-39b47f7faed9.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 14061 IP address blocks: 134.209.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:46:f9:12:42:78:f7:d7:3b:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=0895948d-be7b-498b-8fb3-9d74068758e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:0d:de:fe:72:7c:0d:97:46:72:43:73:7c:d2: 2d:6c:0e:89:b2:2a:57:16:27:56:8d:7a:30:84:0d: 39:e1:55:87:b4:52:24:3b:1e:52:23:ef:7f:e2:73: e2:23:1b:fb:91:c6:1e:51:dc:3d:c6:e5:60:99:46: e2:b5:aa:f3:cb:85:9b:d3:81:ea:22:ed:97:2a:48: 4d:df:21:15:00:54:62:ed:55:fd:90:4a:c2:20:a1: 80:00:ee:50:9d:76:b5:56:26:05:0a:df:ae:25:03: 19:e5:e8:85:6e:c6:30:6e:1a:9b:e0:e8:1b:c1:61: 3c:fb:4c:70:ba:01:5b:85:41:33:f8:8a:07:23:18: a4:b5:b4:c4:e5:3f:02:9b:24:2e:92:e7:57:23:11: e2:f7:74:71:71:e3:35:64:fb:88:54:b5:59:87:77: 94:ae:04:10:12:54:5b:ce:2e:4d:e1:73:3f:95:88: 60:ef:54:c0:a9:d0:8f:d1:d3:79:8f:b1:40:a9:7f: aa:1b:95:78:05:3c:30:2e:fc:f8:6d:05:b9:e2:b0: 73:4d:3c:0a:1d:0d:7c:3c:b5:77:1a:7d:10:cd:89: 68:21:d4:b4:a0:29:dc:0f:76:e4:ad:5a:22:87:7f: bf:7e:8c:d8:be:8a:5a:dc:6b:89:8b:f5:95:d4:d0: 60:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A3:E9:EF:B0:80:94:C2:D7:4A:89:96:19:04:3A:75:3E:44:F2:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d6f41894-5c14-3f8b-9624-39b47f7faed9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 134.209.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:b9:e8:04:01:80:0e:7d:b1:b2:ad:29:80:58:6c:9a:f6:d3: 14:05:21:eb:6a:3f:34:4f:b3:c1:26:29:6c:11:76:9f:7f:e1: 1c:ce:b5:59:2b:30:db:32:f8:22:f8:ce:04:ca:65:5a:26:56: 7b:44:9e:09:44:40:98:b4:ed:f7:e9:cb:24:fb:95:5a:ff:37: 71:ee:9c:86:4b:27:2a:9f:37:9c:c8:2c:73:c9:c8:a3:85:bd: 42:70:8b:1a:c9:16:45:a8:e2:85:34:ea:3d:cf:b6:42:fe:ff: d2:03:ef:0c:67:b5:a7:8a:bf:4f:f0:bc:cd:93:0d:21:0d:47: b2:b0:ec:7a:95:ed:2e:5a:c9:6e:db:85:25:c0:ff:ef:d6:42: cc:e0:8a:d3:6b:81:39:07:4d:3c:79:28:6c:64:fb:f4:1b:35: b4:ac:85:55:1a:d6:77:1d:b4:68:e8:3a:a0:2c:27:86:1a:9c: 6d:0d:43:fa:1c:2a:64:f7:31:dd:e5:63:06:9f:79:60:b6:95: be:db:27:14:9e:9c:c9:d8:4c:c3:51:96:8c:ef:6f:ef:70:d5: 5f:d5:b4:38:b3:05:12:9b:9c:3c:ff:1c:5a:a6:07:f8:5a:ab: 47:7b:31:b8:92:d2:c8:40:ef:06:09:54:a5:e9:2e:06:d7:ac: d5:49:ad:9e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEoDpUb5EkJ499c7TgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk MDg5NTk0OGQtYmU3Yi00OThiLThmYjMtOWQ3NDA2ODc1OGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgg3e/nJ8DZdGckNzfNItbA6JsipXFidWjXow hA054VWHtFIkOx5SI+9/4nPiIxv7kcYeUdw9xuVgmUbitarzy4Wb04HqIu2XKkhN 3yEVAFRi7VX9kErCIKGAAO5QnXa1ViYFCt+uJQMZ5eiFbsYwbhqb4OgbwWE8+0xw ugFbhUEz+IoHIxiktbTE5T8CmyQukudXIxHi93RxceM1ZPuIVLVZh3eUrgQQElRb zi5N4XM/lYhg71TAqdCP0dN5j7FAqX+qG5V4BTwwLvz4bQW54rBzTTwKHQ18PLV3 Gn0QzYloIdS0oCncD3bkrVoih3+/fozYvopa3GuJi/WV1NBgFwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCmj6e+wgJTC10qJlhkEOnU+RPJgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvZDZmNDE4OTQtNWMxNC0z ZjhiLTk2MjQtMzliNDdmN2ZhZWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhtEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEASbnoBAGADn2xsq0pgFhsmvbTFAUh62o/NE+zwSYpbBF2n3/hHM61WSsw 2zL4IvjOBMplWiZWe0SeCURAmLTt9+nLJPuVWv83ce6chksnKp83nMgsc8nIo4W9 QnCLGskWRajihTTqPc+2Qv7/0gPvDGe1p4q/T/C8zZMNIQ1HsrDsepXtLlrJbtuF JcD/79ZCzOCK02uBOQdNPHkobGT79Bs1tKyFVRrWdx20aOg6oCwnhhqcbQ1D+hwq ZPcx3eVjBp95YLaVvtsnFJ6cydhMw1GWjO9v73DVX9W0OLMFEpucPP8cWqYH+Fqr R3sxuJLSyEDvBglUpekuBtes1Umtng== -----END CERTIFICATE-----Generated at Sat Jun 7 15:29:43 2025 by rpki-client