$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/275dad88-147b-3524-8dd1-125da05ff542.roa File: 275dad88-147b-3524-8dd1-125da05ff542.roa (raw, json) Hash identifier: e1YqsH8LTF6H4dGVcOTCRpVUPKRSpXg1JVxwP4Lp3+4= Subject key identifier: E4:12:EA:AC:53:17:D2:94:28:58:30:6B:58:1A:0B:B9:47:AA:4C:9B Certificate issuer: /CN=c0311fc7-1b9e-4472-8780-7822d83e32fc Certificate serial: 010D0C9F4328584A331AE27909EB1EEA30BC2A00 Authority key identifier: 24:6F:82:F4:AD:78:85:9C:6C:6C:3F:7B:F9:F1:FA:17:12:FC:0E:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/275dad88-147b-3524-8dd1-125da05ff542.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 400519 IP address blocks: 209.25.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1a:e2:79:09:eb:1e:ea:30:bc:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0311fc7-1b9e-4472-8780-7822d83e32fc Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=50996b56-5fda-45da-91a6-9a7049d73f11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:50:62:59:37:6b:2d:d6:3f:b8:e3:0f:6a:02: 0b:28:0a:f8:a2:96:a8:ec:53:42:b8:db:88:48:d0: b0:5a:8e:41:7b:99:96:1d:0c:a8:db:7d:78:71:ab: 59:ed:ce:e9:81:ce:c4:25:37:62:dd:68:4f:54:e4: ee:0c:32:51:8d:bf:f1:62:c1:ed:e9:86:c9:7a:9b: 11:c5:94:cf:7b:b9:7a:cc:bb:45:b9:67:b9:a8:fa: a7:04:0f:d6:8b:bd:66:8b:3a:a3:c1:13:3c:6c:fb: 0e:f6:15:da:2d:9c:b5:1b:cb:7e:fd:92:77:79:08: 84:00:d6:d7:4c:cf:25:37:21:f5:f4:e0:7e:0e:4d: 12:3c:b2:8c:3d:f8:2d:08:c5:ba:dd:39:74:c9:14: 1e:34:2c:a1:88:28:db:5d:d9:03:e6:dd:51:9d:cd: d4:63:53:8e:44:d8:ff:66:47:26:bb:45:75:c8:9e: aa:bd:e0:2a:2a:7f:82:df:8b:e8:39:74:61:95:70: 3a:5a:40:8d:e2:06:3d:6c:56:27:5a:e8:dc:91:ce: bf:31:ca:86:4e:cd:3a:b5:81:4b:9c:59:53:4d:59: 2a:b1:ac:f5:ef:d9:c3:eb:56:25:00:3a:70:e2:b3: 4d:c6:82:b9:89:f0:d2:53:23:21:0f:fe:ee:53:a0: 34:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:12:EA:AC:53:17:D2:94:28:58:30:6B:58:1A:0B:B9:47:AA:4C:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/275dad88-147b-3524-8dd1-125da05ff542.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.crl X509v3 Authority Key Identifier: keyid:24:6F:82:F4:AD:78:85:9C:6C:6C:3F:7B:F9:F1:FA:17:12:FC:0E:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer sbgp-ipAddrBlock: critical IPv4: 209.25.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:6c:fa:07:79:38:12:b2:68:0c:60:2e:a9:3e:b1:79:62:a1: 64:16:c1:33:4c:8c:0e:95:a3:67:bb:f2:51:b9:89:a4:40:a0: fb:13:a8:2e:de:d1:47:44:0c:1e:17:c3:c1:96:f3:e1:08:1c: 6b:6d:25:18:61:40:b7:42:3c:75:3c:86:57:b8:bc:01:38:c4: ef:98:22:d4:1f:1a:e7:71:f7:b0:26:02:29:a0:67:ba:ee:8f: 0f:6b:57:d8:17:ef:36:42:96:01:af:04:93:bc:00:4a:76:67: 4f:6a:c7:79:01:de:25:66:b2:26:99:e6:88:74:2c:3b:ff:05: 7a:95:b6:6e:6b:a8:1b:fb:53:81:9b:be:e8:6b:a9:51:02:42: 0d:28:f3:dc:36:d6:9c:17:3c:f4:21:94:c0:cf:28:8b:b8:3e: 7f:21:03:82:68:31:42:e9:42:6e:80:89:11:28:c5:37:92:4c: a8:b0:e7:75:9a:b6:c5:12:2b:68:b0:79:35:93:ca:89:7b:b0: c9:e4:bb:55:5d:d2:a2:c9:d4:1b:59:0b:19:e5:e0:16:d3:c0: 08:3f:83:fd:84:9a:9d:0b:66:90:d3:de:d2:b9:9e:e4:4f:5b: 78:46:e9:fc:28:d9:d0:1d:ca:9c:a9:5e:49:a3:c4:64:3b:6c: 2e:09:30:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGuJ5Cese6jC8KgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzAzMTFmYzctMWI5ZS00NDcyLTg3ODAtNzgyMmQ4M2Uz MmZjMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk NTA5OTZiNTYtNWZkYS00NWRhLTkxYTYtOWE3MDQ5ZDczZjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlBiWTdrLdY/uOMPagILKAr4opao7FNCuNuI SNCwWo5Be5mWHQyo2314catZ7c7pgc7EJTdi3WhPVOTuDDJRjb/xYsHt6YbJepsR xZTPe7l6zLtFuWe5qPqnBA/Wi71mizqjwRM8bPsO9hXaLZy1G8t+/ZJ3eQiEANbX TM8lNyH19OB+Dk0SPLKMPfgtCMW63Tl0yRQeNCyhiCjbXdkD5t1Rnc3UY1OORNj/ Zkcmu0V1yJ6qveAqKn+C34voOXRhlXA6WkCN4gY9bFYnWujckc6/McqGTs06tYFL nFlTTVkqsaz179nD61YlADpw4rNNxoK5ifDSUyMhD/7uU6A0RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQS6qxTF9KUKFgwa1gaC7lHqkybMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMDMx MWZjNy0xYjllLTQ0NzItODc4MC03ODIyZDgzZTMyZmMvMjc1ZGFkODgtMTQ3Yi0z NTI0LThkZDEtMTI1ZGEwNWZmNTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzAzMTFmYzctMWI5ZS00NDcyLTg3 ODAtNzgyMmQ4M2UzMmZjL2MwMzExZmM3LTFiOWUtNDQ3Mi04NzgwLTc4MjJkODNl MzJmYy5jcmwwHwYDVR0jBBgwFoAUJG+C9K14hZxsbD97+fH6FxL8DjAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMDMxMWZjNy0xYjllLTQ0NzItODc4MC03ODIy ZDgzZTMyZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0RmMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJs+gd5OBKyaAxgLqk+sXlioWQWwTNMjA6Vo2e78lG5iaRAoPsTqC7e 0UdEDB4Xw8GW8+EIHGttJRhhQLdCPHU8hle4vAE4xO+YItQfGudx97AmAimgZ7ru jw9rV9gX7zZClgGvBJO8AEp2Z09qx3kB3iVmsiaZ5oh0LDv/BXqVtm5rqBv7U4Gb vuhrqVECQg0o89w21pwXPPQhlMDPKIu4Pn8hA4JoMULpQm6AiREoxTeSTKiw53Wa tsUSK2iweTWTyol7sMnku1Vd0qLJ1BtZCxnl4BbTwAg/g/2Emp0LZpDT3tK5nuRP W3hG6fwo2dAdypypXkmjxGQ7bC4JMCE= -----END CERTIFICATE-----Generated at Tue Jul 1 13:21:48 2025 by rpki-client