$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/6326754f-fb2e-3c8f-b430-f0e8b4107969.roa File: 6326754f-fb2e-3c8f-b430-f0e8b4107969.roa (raw, json) Hash identifier: l421SGk+2i7DrZ28+B2uBb22hAZxO1Myk1YtW21+ED4= Subject key identifier: B7:20:1D:E4:C6:28:1D:85:48:D0:5B:AC:A6:2D:00:03:EA:43:A8:4E Certificate issuer: /CN=5b640257-7947-43c1-997a-0af58a465bdc Certificate serial: 010D0C9F43285848F22C6334A15508E821A4BF40 Authority key identifier: E5:30:3C:9A:AD:0F:44:F7:1E:E3:C1:3C:2D:1B:1C:51:F5:1C:34:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/6326754f-fb2e-3c8f-b430-f0e8b4107969.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 209.209.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/5b640257-7947-43c1-997a-0af58a465bdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/5b640257-7947-43c1-997a-0af58a465bdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:63:34:a1:55:08:e8:21:a4:bf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b640257-7947-43c1-997a-0af58a465bdc Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=f8a5f267-5b3a-4f6d-9499-a21ecb4ad439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:24:25:b9:a6:1c:56:fe:16:ad:1b:46:65:dc: ee:4b:aa:82:06:17:60:9c:d9:15:69:eb:ed:a6:41: cb:33:ab:f9:da:ec:db:15:86:db:a0:3f:fc:03:fe: 64:49:ac:c0:64:b7:d9:fe:10:c2:fa:11:77:29:e4: 34:f8:05:b4:a6:d6:85:9d:92:cc:fd:d5:39:eb:28: e3:01:52:c1:4c:66:ad:e2:75:19:11:fb:7d:cf:b2: 37:01:70:32:8a:7b:01:d0:bb:fd:aa:5c:6d:e9:06: 18:e9:25:09:03:94:de:68:15:cd:f3:96:25:bc:4b: 57:98:b9:2d:ce:38:9d:37:7f:0e:ca:2b:5a:68:c1: 51:5c:55:a1:5e:a2:52:83:6d:81:1e:bf:37:7b:38: e4:83:4e:07:f3:53:e3:bd:34:67:f0:8a:49:9f:1b: d0:16:99:09:28:74:7c:9e:4a:3c:63:0d:5b:bb:c3: 23:c1:07:c7:5d:8b:58:d6:a3:89:46:cb:40:db:68: 69:15:1b:52:40:b1:85:59:5c:88:d4:c4:12:25:5d: d9:65:65:f0:be:1b:b5:58:55:57:c5:89:e9:18:86: 61:0d:4a:cb:ff:25:bd:e1:8a:3b:0f:28:7e:ed:36: ce:5b:d1:6c:8b:05:53:56:ff:94:f6:b9:83:74:f3: f1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:20:1D:E4:C6:28:1D:85:48:D0:5B:AC:A6:2D:00:03:EA:43:A8:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/6326754f-fb2e-3c8f-b430-f0e8b4107969.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/5b640257-7947-43c1-997a-0af58a465bdc.crl X509v3 Authority Key Identifier: keyid:E5:30:3C:9A:AD:0F:44:F7:1E:E3:C1:3C:2D:1B:1C:51:F5:1C:34:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc.cer sbgp-ipAddrBlock: critical IPv4: 209.209.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:0a:77:ec:35:b7:79:84:51:7b:96:dc:b9:6c:02:4b:e9:74: a1:bf:a5:2c:7a:6c:5a:3c:0a:19:df:3d:a4:d4:2f:cd:d7:8e: 80:d0:23:e5:df:e3:14:9c:bd:4d:c3:7a:58:4f:85:f1:05:dd: 28:6f:12:b8:d9:26:af:32:e0:2a:85:10:a6:4e:bb:72:b9:20: e9:5c:56:1e:50:9a:1b:6e:38:fc:1c:31:7b:00:88:b1:1f:8f: b9:5a:20:51:b0:53:cb:39:da:3d:22:9d:bc:7b:19:69:50:82: 2b:d9:35:a3:dd:d3:dc:61:2a:86:9e:d8:23:9f:42:28:1a:ca: 73:b4:31:85:aa:bd:bc:e2:c5:e4:b6:55:dc:03:a8:c8:dd:78: b2:4b:d0:32:8d:1b:9e:0f:5e:44:e3:36:2e:88:09:d1:32:cb: de:6e:59:be:24:37:a4:2a:0a:51:11:b4:1c:7d:91:8b:98:f0: c9:dc:02:56:ae:1f:c3:04:87:b7:a7:96:ce:d0:65:34:41:01: f4:9b:5d:c1:63:b8:3d:18:7a:c7:df:45:b5:72:13:6c:46:98: 2e:95:20:b6:ae:7c:7f:3e:50:7d:e7:68:78:dc:c8:a1:1f:6a: ab:e5:bb:06:f5:33:f0:bd:c9:29:35:64:1d:8b:20:b1:d2:ee: 6f:16:f0:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLGM0oVUI6CGkv0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI2NDAyNTctNzk0Ny00M2MxLTk5N2EtMGFmNThhNDY1 YmRjMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk ZjhhNWYyNjctNWIzYS00ZjZkLTk0OTktYTIxZWNiNGFkNDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyQluaYcVv4WrRtGZdzuS6qCBhdgnNkVaevt pkHLM6v52uzbFYbboD/8A/5kSazAZLfZ/hDC+hF3KeQ0+AW0ptaFnZLM/dU56yjj AVLBTGat4nUZEft9z7I3AXAyinsB0Lv9qlxt6QYY6SUJA5TeaBXN85YlvEtXmLkt zjidN38OyitaaMFRXFWhXqJSg22BHr83ezjkg04H81PjvTRn8IpJnxvQFpkJKHR8 nko8Yw1bu8MjwQfHXYtY1qOJRstA22hpFRtSQLGFWVyI1MQSJV3ZZWXwvhu1WFVX xYnpGIZhDUrL/yW94Yo7Dyh+7TbOW9FsiwVTVv+U9rmDdPPx2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcgHeTGKB2FSNBbrKYtAAPqQ6hOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81YjY0 MDI1Ny03OTQ3LTQzYzEtOTk3YS0wYWY1OGE0NjViZGMvNjMyNjc1NGYtZmIyZS0z YzhmLWI0MzAtZjBlOGI0MTA3OTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWI2NDAyNTctNzk0Ny00M2MxLTk5 N2EtMGFmNThhNDY1YmRjLzViNjQwMjU3LTc5NDctNDNjMS05OTdhLTBhZjU4YTQ2 NWJkYy5jcmwwHwYDVR0jBBgwFoAU5TA8mq0PRPce48E8LRscUfUcNMswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81YjY0MDI1Ny03OTQ3LTQzYzEtOTk3YS0wYWY1 OGE0NjViZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dEZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0Kd+w1t3mEUXuW3LlsAkvpdKG/pSx6bFo8ChnfPaTUL83XjoDQI+Xf 4xScvU3DelhPhfEF3ShvErjZJq8y4CqFEKZOu3K5IOlcVh5QmhtuOPwcMXsAiLEf j7laIFGwU8s52j0inbx7GWlQgivZNaPd09xhKoae2COfQigaynO0MYWqvbzixeS2 VdwDqMjdeLJL0DKNG54PXkTjNi6ICdEyy95uWb4kN6QqClERtBx9kYuY8MncAlau H8MEh7enls7QZTRBAfSbXcFjuD0YesffRbVyE2xGmC6VILaufH8+UH3naHjcyKEf aqvluwb1M/C9ySk1ZB2LILHS7m8W8LU= -----END CERTIFICATE-----Generated at Mon Apr 21 04:54:31 2025 by rpki-client