$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/e47f2fe4-1e5f-3090-b945-e3342aa127a3.roa File: e47f2fe4-1e5f-3090-b945-e3342aa127a3.roa (raw, json) Hash identifier: lrNBeon3rVeT0/cHr0WGNbn7KQrDbOcbyyTCa9W9eEc= Subject key identifier: 96:18:AB:29:34:F1:70:7B:06:81:51:D7:36:BF:A4:79:A9:F4:9A:D7 Certificate issuer: /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Certificate serial: 010D0C9F43285849D594DCF72F47CCDA6E7D2900 Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/e47f2fe4-1e5f-3090-b945-e3342aa127a3.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 13984 IP address blocks: 209.151.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:dc:f7:2f:47:cc:da:6e:7d:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=01e3a7fe-5e23-423f-acd4-5d2ceb719d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ac:25:04:56:51:7c:41:07:e7:10:c8:3b:86: 47:c9:33:3a:60:93:f4:f5:80:7f:13:36:4d:2c:3c: 63:3a:a6:67:d1:e1:35:a4:4c:ea:57:81:5a:71:69: f0:61:ff:06:73:73:f1:1f:79:78:09:05:5d:c1:9d: b8:aa:b0:8a:12:16:c8:fb:03:7e:60:06:1b:69:c7: ae:21:c3:4a:88:8d:ad:9d:99:4c:ba:9c:02:6b:46: fe:8e:49:06:d1:15:fc:d1:44:77:f8:a9:ee:76:f4: a6:50:67:63:31:53:f4:41:3f:9e:12:91:2b:80:63: 16:80:22:25:77:08:7f:62:36:59:77:05:42:c7:d0: b0:6a:61:5d:38:9b:f9:07:13:3c:e6:d7:2b:05:06: d1:e5:d7:cf:e7:f3:09:f7:b4:d1:24:57:98:71:4f: 38:1f:ae:ca:a8:f8:2e:72:ad:f0:71:1e:6c:f1:03: 5f:63:c6:6b:c4:a3:06:64:52:99:15:dc:20:01:16: 39:94:4b:1c:00:ad:3e:ec:d1:12:64:12:4f:44:01: 19:d9:d6:c2:e7:0a:4f:2a:db:a9:4a:6b:95:5a:2d: 41:dc:f9:29:b6:24:00:d4:72:3f:4c:2f:44:be:eb: 38:f1:26:3e:a7:1b:5c:2a:fc:77:4d:b6:99:07:19: d4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:18:AB:29:34:F1:70:7B:06:81:51:D7:36:BF:A4:79:A9:F4:9A:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/e47f2fe4-1e5f-3090-b945-e3342aa127a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl X509v3 Authority Key Identifier: keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer sbgp-ipAddrBlock: critical IPv4: 209.151.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:de:8d:f2:78:ce:a1:4f:5f:d4:c8:76:a5:b2:f9:f1:9f:8c: fe:85:44:00:24:02:3f:dc:69:52:84:9f:a0:a2:3b:b0:97:db: e0:2d:58:71:97:6c:f7:67:17:fa:93:bc:bb:bf:e3:78:07:0f: 21:ac:82:f8:39:8d:da:8a:50:50:35:cf:98:f5:d9:4f:6a:d1: 92:62:eb:32:86:44:44:f5:1e:da:d3:df:dc:bf:52:de:22:92: 6c:25:f4:be:ad:ca:c5:7c:5d:36:c7:e8:ac:67:0c:9b:13:b9: 78:5a:35:97:ed:86:8f:03:dc:0a:f5:21:12:ad:e4:a2:7c:4d: 89:89:8a:f0:fa:73:10:1b:18:4b:57:04:62:9f:6b:bf:c2:54: 95:28:05:2e:ec:e3:f7:a8:5a:82:4f:23:61:a7:c6:ae:ff:fb: 27:c0:4b:ca:7d:b3:09:81:b6:4a:38:aa:61:ac:ec:fd:7e:6b: cf:15:8a:cd:4c:f8:1a:fb:f0:a9:09:4f:dc:97:d5:8b:65:48: e6:95:8f:95:88:fe:8c:6a:87:64:5f:24:4e:80:d2:1d:e1:cc: e4:dc:1e:05:97:a1:cc:eb:e7:52:4c:3f:ef:b1:7f:ec:2d:f1: d2:a6:b9:f7:86:0c:15:ac:38:5b:5e:74:63:a8:89:29:0a:d9: 04:fb:2d:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlNz3L0fM2m59KQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1YWY5ZTYtNTAwOS00NGRhLWJkMTMtYWY1YzhlYjU2 NGMzMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk MDFlM2E3ZmUtNWUyMy00MjNmLWFjZDQtNWQyY2ViNzE5ZDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7KwlBFZRfEEH5xDIO4ZHyTM6YJP09YB/EzZN LDxjOqZn0eE1pEzqV4FacWnwYf8Gc3PxH3l4CQVdwZ24qrCKEhbI+wN+YAYbaceu IcNKiI2tnZlMupwCa0b+jkkG0RX80UR3+KnudvSmUGdjMVP0QT+eEpErgGMWgCIl dwh/YjZZdwVCx9CwamFdOJv5BxM85tcrBQbR5dfP5/MJ97TRJFeYcU84H67KqPgu cq3wcR5s8QNfY8ZrxKMGZFKZFdwgARY5lEscAK0+7NESZBJPRAEZ2dbC5wpPKtup SmuVWi1B3PkptiQA1HI/TC9Evus48SY+pxtcKvx3TbaZBxnUnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYYqyk08XB7BoFR1za/pHmp9JrXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh ZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVjOGViNTY0YzMvZTQ3ZjJmZTQtMWU1Zi0z MDkwLWI5NDUtZTMzNDJhYTEyN2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWY5ZTYtNTAwOS00NGRhLWJk MTMtYWY1YzhlYjU2NGMzLzFjNWFmOWU2LTUwMDktNDRkYS1iZDEzLWFmNWM4ZWI1 NjRjMy5jcmwwHwYDVR0jBBgwFoAUip3SRpI+SzXC0JUmHwmxRVsznagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVj OGViNTY0YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0ZfIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETejfJ4zqFPX9TIdqWy+fGfjP6FRAAkAj/caVKEn6CiO7CX2+AtWHGX bPdnF/qTvLu/43gHDyGsgvg5jdqKUFA1z5j12U9q0ZJi6zKGRET1HtrT39y/Ut4i kmwl9L6tysV8XTbH6KxnDJsTuXhaNZftho8D3Ar1IRKt5KJ8TYmJivD6cxAbGEtX BGKfa7/CVJUoBS7s4/eoWoJPI2Gnxq7/+yfAS8p9swmBtko4qmGs7P1+a88Vis1M +Br78KkJT9yX1YtlSOaVj5WI/oxqh2RfJE6A0h3hzOTcHgWXoczr51JMP++xf+wt 8dKmufeGDBWsOFtedGOoiSkK2QT7Ldw= -----END CERTIFICATE-----Generated at Sun Jun 8 07:07:28 2025 by rpki-client