$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/531101ff-f786-3c35-a123-9ef5fd8f5ec4.roa File: 531101ff-f786-3c35-a123-9ef5fd8f5ec4.roa (raw, json) Hash identifier: DyMZuirXWYnDnx9HBRhjlyjg346RgNjUwIK0uo3GB0o= Subject key identifier: 89:F9:F1:4B:92:C9:63:F9:2C:13:7E:3B:97:4E:12:99:F8:A1:F2:CC Certificate issuer: /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Certificate serial: 010D0C9F43285849D594DD09166AB8933645EB40 Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/531101ff-f786-3c35-a123-9ef5fd8f5ec4.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 13984 IP address blocks: 209.151.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:dd:09:16:6a:b8:93:36:45:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=97e8fa50-0c7c-4ce7-8b95-cc9f26955204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1a:e2:62:ef:b9:69:3f:63:41:49:02:99:8f: 36:32:2c:5d:2f:83:58:03:8e:5a:a4:c3:7f:d7:a5: 0b:32:e8:0b:83:9b:8a:71:db:33:f9:2d:40:20:5f: 37:8d:8c:76:b1:0f:5c:01:f2:a9:6f:a1:1a:d5:76: 42:7e:ce:a3:7d:7f:01:2b:72:a2:62:ce:68:2b:09: 40:2f:47:1b:62:09:e1:e2:2b:2c:67:56:33:03:35: dc:78:41:1d:58:61:43:b0:83:01:4d:81:d9:8f:20: 54:13:77:be:4a:fb:cb:c5:60:73:fb:d1:bd:a5:c9: 66:4b:4f:46:64:a0:34:5d:94:53:87:56:6f:c8:4c: 49:16:7d:af:c3:63:7a:89:9f:8b:e7:10:af:08:8d: b1:ac:52:af:fa:f0:7b:ed:9e:d6:d0:0b:78:e4:5e: 0c:3d:5e:90:f2:d3:46:c7:d8:4a:6b:6b:30:6d:1e: c0:8a:47:e6:41:16:52:11:46:6c:5b:4c:bf:41:f7: 08:65:34:a5:7b:fd:b6:50:ba:db:88:35:a2:a8:b4: 93:36:89:7b:fa:5c:d1:b8:ae:0a:52:fb:a7:24:39: bd:09:31:f5:2d:cb:f0:88:63:c0:ce:2b:2b:d6:38: 73:74:88:67:79:7c:82:ac:7d:f4:71:b4:23:5a:83: 8e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F9:F1:4B:92:C9:63:F9:2C:13:7E:3B:97:4E:12:99:F8:A1:F2:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/531101ff-f786-3c35-a123-9ef5fd8f5ec4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl X509v3 Authority Key Identifier: keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer sbgp-ipAddrBlock: critical IPv4: 209.151.218.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:a3:3c:60:c1:ff:f1:ba:22:11:9e:17:fe:12:2a:98:5f:40: 08:f9:d2:23:d7:d9:8b:e3:3c:8c:42:b0:80:3d:c6:98:3b:39: 3f:88:9f:ec:27:46:61:fd:1b:86:79:31:5b:26:8d:9f:bf:00: 87:fd:c6:0c:0f:8e:b4:7d:d3:05:e4:10:59:12:e3:42:e8:56: 18:3c:73:eb:ea:b3:4e:be:c0:0e:43:96:e1:bd:7c:04:c5:b7: 18:7b:fa:d2:3b:a7:ec:ca:60:40:05:70:47:6b:2a:01:fc:95: 74:16:be:08:6d:b3:0b:78:b1:4f:b3:f6:eb:61:03:43:19:6a: e6:fd:66:ac:08:c3:a4:be:76:cf:b4:63:05:ae:47:ce:cf:32: 7b:a2:a8:8d:26:8c:10:a5:29:c0:7f:46:74:02:cd:55:e9:86: 88:bc:15:ef:4a:72:0a:10:f5:6a:84:6f:89:0a:8a:85:52:a9: 46:ab:38:62:c0:ff:e6:00:13:3f:f3:5a:a6:fa:ff:7b:a2:6b: 24:e8:d9:cc:49:b3:4b:67:92:76:2b:df:f2:23:56:a0:19:9d: a0:85:46:64:24:5d:8d:53:69:a5:6b:af:07:59:d6:0f:0b:f4: 27:27:80:0b:1f:4d:03:f5:98:ee:24:4c:b9:ab:06:94:f1:b5: 39:de:1b:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlN0JFmq4kzZF60AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1YWY5ZTYtNTAwOS00NGRhLWJkMTMtYWY1YzhlYjU2 NGMzMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk OTdlOGZhNTAtMGM3Yy00Y2U3LThiOTUtY2M5ZjI2OTU1MjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBriYu+5aT9jQUkCmY82MixdL4NYA45apMN/ 16ULMugLg5uKcdsz+S1AIF83jYx2sQ9cAfKpb6Ea1XZCfs6jfX8BK3KiYs5oKwlA L0cbYgnh4issZ1YzAzXceEEdWGFDsIMBTYHZjyBUE3e+SvvLxWBz+9G9pclmS09G ZKA0XZRTh1ZvyExJFn2vw2N6iZ+L5xCvCI2xrFKv+vB77Z7W0At45F4MPV6Q8tNG x9hKa2swbR7AikfmQRZSEUZsW0y/QfcIZTSle/22ULrbiDWiqLSTNol7+lzRuK4K UvunJDm9CTH1LcvwiGPAzisr1jhzdIhneXyCrH30cbQjWoOOTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIn58UuSyWP5LBN+O5dOEpn4ofLMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh ZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVjOGViNTY0YzMvNTMxMTAxZmYtZjc4Ni0z YzM1LWExMjMtOWVmNWZkOGY1ZWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWY5ZTYtNTAwOS00NGRhLWJk MTMtYWY1YzhlYjU2NGMzLzFjNWFmOWU2LTUwMDktNDRkYS1iZDEzLWFmNWM4ZWI1 NjRjMy5jcmwwHwYDVR0jBBgwFoAUip3SRpI+SzXC0JUmHwmxRVsznagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVj OGViNTY0YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0ZfaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEujPGDB//G6IhGeF/4SKphfQAj50iPX2YvjPIxCsIA9xpg7OT+In+wn RmH9G4Z5MVsmjZ+/AIf9xgwPjrR90wXkEFkS40LoVhg8c+vqs06+wA5DluG9fATF txh7+tI7p+zKYEAFcEdrKgH8lXQWvghtswt4sU+z9uthA0MZaub9ZqwIw6S+ds+0 YwWuR87PMnuiqI0mjBClKcB/RnQCzVXphoi8Fe9KcgoQ9WqEb4kKioVSqUarOGLA /+YAEz/zWqb6/3uiayTo2cxJs0tnknYr3/IjVqAZnaCFRmQkXY1TaaVrrwdZ1g8L 9CcngAsfTQP1mO4kTLmrBpTxtTneGyM= -----END CERTIFICATE-----Generated at Sun Jun 8 09:09:49 2025 by rpki-client