$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/f7a20a53-9f00-3a53-9e38-bc73bcdd932d.roa File: f7a20a53-9f00-3a53-9e38-bc73bcdd932d.roa (raw, json) Hash identifier: 27m7RC5Bp8zQSB9fktUYnR6xcArT931pu3kMCcOig+0= Subject key identifier: 56:07:A9:6B:95:4F:76:FF:A1:5B:05:E4:25:13:C1:2A:78:C1:AF:56 Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069 Certificate serial: 010D0C9F43285849F9DFCD26CB13B634DF4FC400 Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/f7a20a53-9f00-3a53-9e38-bc73bcdd932d.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 15290 IP address blocks: 209.146.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:cd:26:cb:13:b6:34:df:4f:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069 Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=30128f39-bf68-4058-b158-5f056de8e437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:dc:07:f5:43:72:3d:e3:c3:4a:61:23:4a:f7: b5:01:f2:c6:31:47:a7:58:af:cd:cb:2b:f1:9b:63: 4a:16:c1:57:2e:3b:7a:c0:f2:fe:65:10:04:22:78: ca:96:d2:b9:01:72:19:31:5b:16:49:0d:35:c3:4b: 3d:1c:9d:3c:51:17:b1:96:d9:59:05:95:8e:8c:93: 07:2f:18:61:a5:43:bd:f0:e9:3b:68:63:c3:cc:38: fe:89:cf:08:32:28:59:9c:33:8b:79:34:a8:62:8d: 15:51:17:e1:a7:6c:16:4b:95:ed:c0:cd:c0:2b:c7: 52:b2:1b:5d:f9:f0:09:4e:3f:b2:08:44:41:91:d8: 8f:07:82:57:fe:d9:7a:bb:3e:c2:65:e3:a8:81:a3: 26:0e:32:95:89:b6:32:5e:8c:f8:26:8e:ad:55:4b: 70:7d:e2:d1:3b:cb:e3:61:80:25:0a:28:58:32:e1: 3a:b8:7c:d7:66:32:3d:02:00:fe:c2:65:82:87:ec: 4c:d7:fe:9a:b3:87:e4:1e:24:25:b5:1f:e6:48:b1: 7a:ed:21:33:18:65:38:2c:42:d0:ec:e6:1a:bd:10: 8b:fa:a6:87:4b:a8:92:cf:d3:27:70:2c:40:e8:84: e5:09:cc:88:b6:27:a2:b8:b4:33:fb:4b:6c:3f:59: f7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:07:A9:6B:95:4F:76:FF:A1:5B:05:E4:25:13:C1:2A:78:C1:AF:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/f7a20a53-9f00-3a53-9e38-bc73bcdd932d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl X509v3 Authority Key Identifier: keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer sbgp-ipAddrBlock: critical IPv4: 209.146.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:78:88:b5:46:8f:e2:e6:8d:5a:f5:fb:c1:d8:56:78:53:43: 47:c4:95:35:83:42:69:a5:af:6c:4e:09:7a:1e:88:4e:31:75: 8c:ad:db:2b:19:ac:60:6b:91:d8:1a:56:55:85:57:28:f5:56: f3:db:2d:61:5e:3e:de:c5:7a:ed:47:dc:f5:18:30:62:93:ef: 3e:3d:c0:3c:0d:1f:3c:01:92:8c:ca:94:f3:6c:33:4b:00:5a: 8f:60:56:47:85:8b:6f:5d:78:7c:e8:77:ef:28:18:a1:0d:72: 35:10:75:f9:e5:e1:fd:01:9c:f5:7f:b3:18:12:b9:cd:60:b3: 12:18:6a:29:80:72:20:8e:e4:59:56:d7:82:e5:fe:58:0c:23: 30:eb:3c:f9:80:3c:58:eb:ff:57:30:d3:f0:86:ed:d4:07:e4: 40:3c:48:fb:e3:21:b0:b2:ef:fa:56:02:71:7a:68:30:43:00: 48:7b:64:30:56:8b:ec:2d:c3:55:10:42:c5:69:3a:c5:0e:1a: 96:48:c1:68:fd:cd:9f:bc:17:90:04:f9:34:32:17:35:cc:17: 2b:21:03:37:2c:7e:28:f4:29:1e:f6:7c:7d:6c:5a:6e:12:92: d8:6a:2d:e1:3b:b8:6e:31:a1:f5:9f:dc:43:13:70:9b:e6:bc: a4:64:8e:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn5380myxO2NN9PxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz MDY5MB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk MzAxMjhmMzktYmY2OC00MDU4LWIxNTgtNWYwNTZkZThlNDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldwH9UNyPePDSmEjSve1AfLGMUenWK/Nyyvx m2NKFsFXLjt6wPL+ZRAEInjKltK5AXIZMVsWSQ01w0s9HJ08URexltlZBZWOjJMH LxhhpUO98Ok7aGPDzDj+ic8IMihZnDOLeTSoYo0VURfhp2wWS5XtwM3AK8dSshtd +fAJTj+yCERBkdiPB4JX/tl6uz7CZeOogaMmDjKVibYyXoz4Jo6tVUtwfeLRO8vj YYAlCihYMuE6uHzXZjI9AgD+wmWCh+xM1/6as4fkHiQltR/mSLF67SEzGGU4LELQ 7OYavRCL+qaHS6iSz9MncCxA6ITlCcyItieiuLQz+0tsP1n36QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFYHqWuVT3b/oVsF5CUTwSp4wa9WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvZjdhMjBhNTMtOWYwMC0z YTUzLTllMzgtYmM3M2JjZGQ5MzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3 NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4 MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZLcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEN4iLVGj+LmjVr1+8HYVnhTQ0fElTWDQmmlr2xOCXoeiE4xdYyt2ysZ rGBrkdgaVlWFVyj1VvPbLWFePt7Feu1H3PUYMGKT7z49wDwNHzwBkozKlPNsM0sA Wo9gVkeFi29deHzod+8oGKENcjUQdfnl4f0BnPV/sxgSuc1gsxIYaimAciCO5FlW 14Ll/lgMIzDrPPmAPFjr/1cw0/CG7dQH5EA8SPvjIbCy7/pWAnF6aDBDAEh7ZDBW i+wtw1UQQsVpOsUOGpZIwWj9zZ+8F5AE+TQyFzXMFyshAzcsfij0KR72fH1sWm4S kthqLeE7uG4xofWf3EMTcJvmvKRkjgI= -----END CERTIFICATE-----Generated at Fri Jun 6 17:47:09 2025 by rpki-client