$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/1239e8b8-22a2-3815-a87b-c7d1cf6427a2.roa File: 1239e8b8-22a2-3815-a87b-c7d1cf6427a2.roa (raw, json) Hash identifier: b7DqVW4+Lw1xjoOp5WaNNbxfJeLHV548YyCweGjUU4k= Subject key identifier: 84:6A:51:A7:BD:CA:56:91:6D:BC:14:50:52:53:91:50:FA:24:2A:7D Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069 Certificate serial: 010D0C9F4328584A00DAC9356887672A2E6EB9C0 Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/1239e8b8-22a2-3815-a87b-c7d1cf6427a2.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 6461 IP address blocks: 209.146.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:c9:35:68:87:67:2a:2e:6e:b9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=c647d792-f792-402d-a8ec-cd1a957d9f31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:13:2f:2d:05:b2:14:12:a6:03:46:41:3e:d0: 00:c5:09:48:c9:29:12:6c:11:5f:44:9c:3b:5c:d6: ef:1e:01:67:e0:20:c3:c8:25:2e:d0:7f:bb:08:90: af:b2:bd:14:03:f4:45:44:e9:1e:71:a3:14:4d:17: 4a:be:1f:08:c1:4e:b2:74:14:3a:ed:9e:11:d2:93: 66:0b:b9:ec:84:b0:39:05:52:d1:52:56:e5:7f:61: fb:d7:c8:9d:7c:49:e7:0f:d4:cd:a5:be:df:79:6a: 86:19:28:c4:b2:16:33:54:d2:46:dc:c2:54:8a:46: fc:86:43:a2:44:cf:e4:48:33:f4:51:79:5e:0c:08: fe:6a:45:29:5b:b7:a9:d7:13:11:a3:26:bb:f8:46: fd:ef:c1:fc:70:5c:a8:fe:3c:86:0a:24:22:1c:71: d8:e3:65:42:ea:f4:83:08:02:c3:f8:c7:ab:f3:3b: 03:62:26:16:ef:72:18:c1:3c:c2:d0:b9:40:69:bb: 5b:16:ff:bc:90:dd:14:a2:e7:33:d7:01:90:b6:82: 9a:a2:84:5d:65:70:45:2b:a9:87:9f:e0:88:92:27: b6:8e:1e:b6:6a:5d:87:d6:f7:67:22:a4:7e:1a:00: 59:b1:7a:0f:03:45:30:0f:d6:ca:d0:bf:7c:c8:5e: 31:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:6A:51:A7:BD:CA:56:91:6D:BC:14:50:52:53:91:50:FA:24:2A:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/1239e8b8-22a2-3815-a87b-c7d1cf6427a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl X509v3 Authority Key Identifier: keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer sbgp-ipAddrBlock: critical IPv4: 209.146.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:7b:93:d6:07:eb:bd:b7:07:f5:78:26:0a:62:84:ec:96:08: 5e:3f:97:c9:e5:d7:9d:82:91:56:7c:82:23:13:93:ce:3c:e5: a1:12:d7:49:bc:17:1e:46:48:f3:59:fa:0f:c5:a9:f5:d5:40: d6:5f:18:c8:5f:a3:c6:e1:dc:fc:21:d3:d8:cc:69:ba:26:74: ae:fb:e1:d0:06:e7:5e:57:3b:f0:9f:ad:b4:24:93:f6:eb:04: 52:f2:11:b3:3c:96:7a:6c:5a:62:3e:32:dd:15:5a:98:7f:4b: a6:10:ce:6e:eb:b5:be:e0:fa:67:52:e9:f3:00:3e:bf:ec:31: b8:21:25:33:85:71:1b:82:a5:7c:dd:39:0e:c0:13:3f:6a:80: 65:12:21:51:30:ce:da:1e:8a:0f:ec:0c:2e:74:b2:f3:17:a8: ec:36:b6:7b:0e:31:50:3f:3c:9e:cf:ff:f0:00:5a:b3:52:45: ec:3c:09:aa:ba:ae:43:50:b0:a8:d2:fc:3a:2e:0f:4b:e1:be: da:69:41:e1:0a:a4:fe:84:66:a3:ac:85:2c:ea:87:ba:9b:ab: 16:2f:27:97:0d:6b:f3:06:25:0a:08:6b:25:d8:83:68:40:e6: 94:0d:3f:fb:a7:16:d4:d9:8d:86:8e:a6:0b:9c:b1:f1:94:bf: 1a:49:0b:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2sk1aIdnKi5uucAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz MDY5MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk YzY0N2Q3OTItZjc5Mi00MDJkLWE4ZWMtY2QxYTk1N2Q5ZjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BMvLQWyFBKmA0ZBPtAAxQlIySkSbBFfRJw7 XNbvHgFn4CDDyCUu0H+7CJCvsr0UA/RFROkecaMUTRdKvh8IwU6ydBQ67Z4R0pNm C7nshLA5BVLRUlblf2H718idfEnnD9TNpb7feWqGGSjEshYzVNJG3MJUikb8hkOi RM/kSDP0UXleDAj+akUpW7ep1xMRoya7+Eb978H8cFyo/jyGCiQiHHHY42VC6vSD CALD+Mer8zsDYiYW73IYwTzC0LlAabtbFv+8kN0Uoucz1wGQtoKaooRdZXBFK6mH n+CIkie2jh62al2H1vdnIqR+GgBZsXoPA0UwD9bK0L98yF4xmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRqUae9ylaRbbwUUFJTkVD6JCp9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvMTIzOWU4YjgtMjJhMi0z ODE1LWE4N2ItYzdkMWNmNjQyN2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3 NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4 MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0ZKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACl7k9YH6723B/V4JgpihOyWCF4/l8nl152CkVZ8giMTk8485aES10m8 Fx5GSPNZ+g/FqfXVQNZfGMhfo8bh3Pwh09jMabomdK774dAG515XO/CfrbQkk/br BFLyEbM8lnpsWmI+Mt0VWph/S6YQzm7rtb7g+mdS6fMAPr/sMbghJTOFcRuCpXzd OQ7AEz9qgGUSIVEwztoeig/sDC50svMXqOw2tnsOMVA/PJ7P//AAWrNSRew8Caq6 rkNQsKjS/DouD0vhvtppQeEKpP6EZqOshSzqh7qbqxYvJ5cNa/MGJQoIayXYg2hA 5pQNP/unFtTZjYaOpgucsfGUvxpJCzU= -----END CERTIFICATE-----Generated at Fri Jun 6 17:48:04 2025 by rpki-client