$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/7f09899c-fefe-3fed-afbd-feabe7f67aa8.roa File: 7f09899c-fefe-3fed-afbd-feabe7f67aa8.roa (raw, json) Hash identifier: Fx23B6ST0pZe6YwlcmIEgBbzAzAsYtOkxzbSa84WdJw= Subject key identifier: 36:9B:AF:D1:06:C8:6C:7F:EC:41:2E:BD:FA:ED:A5:70:5E:61:5C:9F Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069 Certificate serial: 010D0C9F43285849F9DFCCCCC98D40D37C1DBE80 Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/7f09899c-fefe-3fed-afbd-feabe7f67aa8.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 15290 IP address blocks: 209.112.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:cc:cc:c9:8d:40:d3:7c:1d:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069 Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=37ef3f4b-594b-4381-83a6-f1b93513ec96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b5:81:51:fd:cc:10:c3:ef:a2:02:58:fa:bd: ff:9c:b3:9f:6c:58:d9:ae:a2:42:92:2f:dc:a9:80: 74:30:75:eb:85:74:5c:8f:69:9a:1d:64:45:13:bb: 01:1a:07:6f:0b:a3:06:28:af:6c:73:ab:96:56:62: 1c:96:d4:af:0f:0e:a8:3b:6b:9c:b2:ce:af:47:24: 5a:2d:17:6d:2b:dd:0b:ca:97:29:d3:02:39:f7:90: cf:b1:cc:08:3f:d5:1f:82:75:9d:8d:75:d9:b6:98: d3:21:e1:df:52:c2:a5:f0:2c:f9:f8:2d:41:79:52: 49:ac:c4:8a:55:c2:5e:21:4f:57:60:c2:99:5a:5b: 21:b8:06:f6:04:f4:79:ee:ca:ec:27:f8:a5:67:10: d7:58:bb:06:7f:33:a8:a7:5d:c3:21:6c:a0:41:14: 6a:f6:19:87:f6:45:db:d1:75:2f:76:f0:3e:de:bf: 8b:b0:ca:02:f2:8e:dd:da:59:5e:4d:27:5b:6f:c0: aa:50:ba:c5:03:87:1d:d2:7e:e7:aa:86:e9:4c:0f: 2b:c3:50:2f:4b:5e:48:29:d5:a5:25:70:b3:96:47: 93:fe:83:78:cb:23:3b:56:48:14:c0:cb:c3:0c:d4: 6b:90:8e:47:a0:3b:7a:59:0e:7c:d7:9f:61:ab:d1: 97:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:9B:AF:D1:06:C8:6C:7F:EC:41:2E:BD:FA:ED:A5:70:5E:61:5C:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/7f09899c-fefe-3fed-afbd-feabe7f67aa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl X509v3 Authority Key Identifier: keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer sbgp-ipAddrBlock: critical IPv4: 209.112.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:c1:e2:fb:12:f5:ea:d5:44:a9:4b:c2:1c:98:35:d9:0a:5d: 7e:31:3d:6f:7a:64:0c:68:d4:3a:a1:98:d0:33:95:cd:75:53: 7c:77:40:e8:11:3e:d0:0e:c7:09:06:94:ab:35:9e:3e:d3:9b: 38:4b:60:91:9f:d0:78:47:b7:97:21:81:cb:1e:d9:e0:fe:04: c0:55:dc:84:6a:eb:5c:02:48:4d:09:23:d0:0e:16:56:ba:8a: ee:49:b1:c1:3b:b8:39:8c:a2:8e:fe:f0:0a:6b:00:06:a1:c1: 45:c7:4a:30:b9:65:a1:39:a6:12:50:4e:06:ce:71:01:35:ce: 47:82:1d:83:72:9e:f9:82:1d:43:23:a6:59:6f:90:1e:3a:d9: 01:1c:e1:ab:65:ba:67:18:ae:f2:21:4c:12:d0:ee:17:2c:b1: ec:53:a6:5a:1c:a7:5a:88:85:00:3b:98:da:31:d0:dd:4e:6f: 4c:9b:b7:4a:4f:ba:eb:1a:5d:b5:92:f1:89:e0:08:43:96:8d: 34:9c:59:47:16:83:9a:f1:96:51:2c:79:3a:9c:d8:89:3e:a4: 0a:23:68:ab:4b:c0:ae:78:1f:57:13:77:76:2d:98:f3:a0:71: 85:99:57:46:2d:cf:7d:2f:a7:58:cd:b3:a1:60:22:18:f8:8b: 5b:27:e8:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn538zMyY1A03wdvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz MDY5MB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk MzdlZjNmNGItNTk0Yi00MzgxLTgzYTYtZjFiOTM1MTNlYzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7WBUf3MEMPvogJY+r3/nLOfbFjZrqJCki/c qYB0MHXrhXRcj2maHWRFE7sBGgdvC6MGKK9sc6uWVmIcltSvDw6oO2ucss6vRyRa LRdtK90Lypcp0wI595DPscwIP9UfgnWdjXXZtpjTIeHfUsKl8Cz5+C1BeVJJrMSK VcJeIU9XYMKZWlshuAb2BPR57srsJ/ilZxDXWLsGfzOop13DIWygQRRq9hmH9kXb 0XUvdvA+3r+LsMoC8o7d2lleTSdbb8CqULrFA4cd0n7nqobpTA8rw1AvS15IKdWl JXCzlkeT/oN4yyM7VkgUwMvDDNRrkI5HoDt6WQ58159hq9GXKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDabr9EGyGx/7EEuvfrtpXBeYVyfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvN2YwOTg5OWMtZmVmZS0z ZmVkLWFmYmQtZmVhYmU3ZjY3YWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3 NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4 MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XAqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrB4vsS9erVRKlLwhyYNdkKXX4xPW96ZAxo1DqhmNAzlc11U3x3QOgR PtAOxwkGlKs1nj7TmzhLYJGf0HhHt5chgcse2eD+BMBV3IRq61wCSE0JI9AOFla6 iu5JscE7uDmMoo7+8AprAAahwUXHSjC5ZaE5phJQTgbOcQE1zkeCHYNynvmCHUMj pllvkB462QEc4atlumcYrvIhTBLQ7hcssexTplocp1qIhQA7mNox0N1Ob0ybt0pP uusaXbWS8YngCEOWjTScWUcWg5rxllEseTqc2Ik+pAojaKtLwK54H1cTd3YtmPOg cYWZV0Ytz30vp1jNs6FgIhj4i1sn6EE= -----END CERTIFICATE-----Generated at Sun Jun 8 00:43:10 2025 by rpki-client