$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/c4607fb9-cbe0-3b01-99ef-71e1fdc19366.roa File: c4607fb9-cbe0-3b01-99ef-71e1fdc19366.roa (raw, json) Hash identifier: fajxwCFAglKSSdTFqgQlB4cMZ+X8wg0ODhkRkGiqTZg= Subject key identifier: BD:76:D2:37:35:D0:52:C9:B2:3D:FA:2C:8E:5D:D1:10:EB:D4:16:1A Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069 Certificate serial: 010D0C9F43285849EA8523C912E0BDEB18101B80 Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/c4607fb9-cbe0-3b01-99ef-71e1fdc19366.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 21774 IP address blocks: 209.112.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:23:c9:12:e0:bd:eb:18:10:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=ed180cc6-b0bc-4132-885d-ae17ce47b9da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:58:52:af:42:39:29:04:55:cb:0a:85:57:07: b1:51:dc:b9:54:cf:5c:1e:a4:52:bf:33:4b:ae:24: 97:2b:72:8c:98:b4:b8:48:1e:81:a0:af:bc:8c:ca: 1a:79:34:37:45:10:a2:b0:35:01:2e:69:16:fa:fb: b1:9d:22:62:29:90:5d:2c:72:b0:bf:7e:7c:29:1a: 6a:f3:dc:58:f4:12:a3:1c:8c:e0:42:ba:70:08:20: 8b:ea:34:27:6a:9b:df:34:e4:5a:61:77:11:56:a5: fc:79:d8:e9:96:c7:00:2a:be:97:8b:07:9a:95:dd: 2a:fd:26:04:7b:7d:73:8f:f3:6d:7d:77:7a:0b:b5: da:51:04:7f:2c:bc:59:80:a5:5f:95:7b:ab:df:13: 62:4f:b9:56:23:c1:e5:6e:c2:8b:d0:22:79:26:83: c9:52:6d:67:38:fa:a3:63:88:ef:1b:98:4d:a9:af: e4:73:07:7c:5a:84:18:bb:49:5c:cd:83:07:f2:c4: cc:3f:1a:ce:42:88:01:3b:e4:fb:84:c1:a6:70:a0: ad:38:cb:dc:df:4f:70:8e:f6:3e:1f:e6:99:1b:2b: c6:34:9e:80:24:47:f4:d2:d8:36:3b:7a:25:6c:17: be:54:a4:9e:87:f3:8d:84:16:65:74:82:4b:82:48: cc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:76:D2:37:35:D0:52:C9:B2:3D:FA:2C:8E:5D:D1:10:EB:D4:16:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/c4607fb9-cbe0-3b01-99ef-71e1fdc19366.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl X509v3 Authority Key Identifier: keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer sbgp-ipAddrBlock: critical IPv4: 209.112.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:94:9a:98:ec:81:d1:5a:bd:ba:ab:4b:4c:a2:32:ce:bd:ce: d7:05:ba:19:e2:59:8a:36:0c:66:74:14:69:07:5e:36:93:49: 26:4d:79:f2:1a:61:bd:28:90:df:60:bf:80:19:fc:ce:8d:4e: 5b:1d:c4:72:56:11:54:ed:fc:61:c5:06:6f:6d:da:f6:50:ee: fe:d1:31:05:3b:31:cf:ce:82:d2:de:93:eb:cb:10:96:86:d0: 13:d7:88:d8:58:fd:a7:36:c8:7a:21:43:b4:09:4d:d1:59:94: 32:15:5a:50:e9:af:99:18:cb:a1:2b:a0:2f:2d:e9:01:52:63: ea:28:0f:37:7e:48:da:d9:10:19:ba:6c:cc:19:01:d8:5e:e6: cb:8c:e6:d3:1f:c6:d3:4e:78:fe:50:f3:e8:dd:01:c8:c2:2a: 61:fa:29:b3:8f:b6:30:dd:ee:7c:1b:80:14:0a:49:0f:9d:aa: 74:2d:24:15:6c:f4:9c:43:a1:a6:97:e8:95:ef:fd:c9:0a:e8: 8c:52:9f:69:8a:51:05:b0:e4:8a:54:6c:94:89:e6:45:bd:55: df:5e:2c:31:51:e0:34:14:42:cf:82:b4:1a:a0:bc:94:54:6d: cb:1a:ac:7f:f2:4e:a4:dc:b7:29:f3:6d:4b:02:73:d0:ba:3f: 16:70:7e:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhSPJEuC96xgQG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz MDY5MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk ZWQxODBjYzYtYjBiYy00MTMyLTg4NWQtYWUxN2NlNDdiOWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFhSr0I5KQRVywqFVwexUdy5VM9cHqRSvzNL riSXK3KMmLS4SB6BoK+8jMoaeTQ3RRCisDUBLmkW+vuxnSJiKZBdLHKwv358KRpq 89xY9BKjHIzgQrpwCCCL6jQnapvfNORaYXcRVqX8edjplscAKr6Xiweald0q/SYE e31zj/NtfXd6C7XaUQR/LLxZgKVflXur3xNiT7lWI8HlbsKL0CJ5JoPJUm1nOPqj Y4jvG5hNqa/kcwd8WoQYu0lczYMH8sTMPxrOQogBO+T7hMGmcKCtOMvc309wjvY+ H+aZGyvGNJ6AJEf00tg2O3olbBe+VKSeh/ONhBZldIJLgkjMWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL120jc10FLJsj36LI5d0RDr1BYaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvYzQ2MDdmYjktY2JlMC0z YjAxLTk5ZWYtNzFlMWZkYzE5MzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3 NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4 MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XA8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+UmpjsgdFavbqrS0yiMs69ztcFuhniWYo2DGZ0FGkHXjaTSSZNefIa Yb0okN9gv4AZ/M6NTlsdxHJWEVTt/GHFBm9t2vZQ7v7RMQU7Mc/OgtLek+vLEJaG 0BPXiNhY/ac2yHohQ7QJTdFZlDIVWlDpr5kYy6EroC8t6QFSY+ooDzd+SNrZEBm6 bMwZAdhe5suM5tMfxtNOeP5Q8+jdAcjCKmH6KbOPtjDd7nwbgBQKSQ+dqnQtJBVs 9JxDoaaX6JXv/ckK6IxSn2mKUQWw5IpUbJSJ5kW9Vd9eLDFR4DQUQs+CtBqgvJRU bcsarH/yTqTctynzbUsCc9C6PxZwfjc= -----END CERTIFICATE-----Generated at Sat Jun 7 04:28:27 2025 by rpki-client