$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/78e252cc-bd09-3239-a78c-700cc4a2804d.roa File: 78e252cc-bd09-3239-a78c-700cc4a2804d.roa (raw, json) Hash identifier: ecIXbmMFHu+etcM5Qhk32DYmu83VZJWci3WSNRj2B4Q= Subject key identifier: 7F:C3:6A:A0:EF:DA:F6:1A:D1:FD:72:46:BE:1E:FA:7E:73:68:6A:9E Certificate issuer: /CN=5b640257-7947-43c1-997a-0af58a465bdc Certificate serial: 010D0C9F43285849D165031461622BD499992AE0 Authority key identifier: E5:30:3C:9A:AD:0F:44:F7:1E:E3:C1:3C:2D:1B:1C:51:F5:1C:34:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/78e252cc-bd09-3239-a78c-700cc4a2804d.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 14618 IP address blocks: 209.209.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/5b640257-7947-43c1-997a-0af58a465bdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/5b640257-7947-43c1-997a-0af58a465bdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:03:14:61:62:2b:d4:99:99:2a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b640257-7947-43c1-997a-0af58a465bdc Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=16202b61-668c-4b08-b9a7-236ef7b7b87f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:59:34:40:7e:a1:7a:3d:33:ae:71:20:84:5e: f2:6e:6d:5c:43:20:b3:24:1c:ac:01:d7:09:b3:53: 2b:be:cb:a1:52:87:3d:a5:23:d6:21:e5:d8:98:7b: 99:cd:2d:fd:18:d2:d0:6b:0e:95:8b:15:ec:e3:64: f4:4b:38:6f:e5:13:fc:96:eb:d3:60:7e:fc:7a:95: 50:7d:c0:1d:3c:31:36:4d:21:7f:0d:78:27:be:7b: dd:a3:af:c6:03:e4:b0:d6:09:47:f1:8c:8d:31:54: e1:d2:54:8a:15:19:b5:16:dc:e5:cc:25:84:b8:d4: 42:16:1e:2c:92:01:27:03:d7:12:d7:0b:a4:16:a7: 80:4b:db:60:77:d9:6c:e6:e8:2d:27:a6:37:2e:f5: 9f:71:c6:32:bd:fe:d5:e3:70:6e:63:c8:e6:86:ad: 37:6a:e5:ee:4e:28:5d:41:f0:53:3d:cb:66:16:46: 7c:2c:4c:9d:be:50:10:87:95:8e:b2:1d:fd:6c:95: a4:0b:22:ec:b1:e4:61:92:f3:64:17:18:ba:0c:2b: de:09:e9:74:3f:b6:ee:8f:36:85:e8:86:75:7a:b7: 34:a4:4c:66:22:b1:c5:90:88:c4:a7:df:4f:c6:01: af:9c:1a:8e:ac:22:26:83:bb:49:61:63:15:67:40: 7d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C3:6A:A0:EF:DA:F6:1A:D1:FD:72:46:BE:1E:FA:7E:73:68:6A:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/78e252cc-bd09-3239-a78c-700cc4a2804d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/5b640257-7947-43c1-997a-0af58a465bdc.crl X509v3 Authority Key Identifier: keyid:E5:30:3C:9A:AD:0F:44:F7:1E:E3:C1:3C:2D:1B:1C:51:F5:1C:34:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc.cer sbgp-ipAddrBlock: critical IPv4: 209.209.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:06:5b:4d:f1:3a:f5:a6:39:4c:12:5b:22:90:28:70:6d:80: 8a:e9:6e:e3:4f:78:1c:64:fe:5b:25:44:95:e9:7e:42:e3:73: d0:53:39:8a:c5:03:5c:18:4f:24:b9:37:ce:f7:2c:83:a7:c8: f0:a0:e6:56:b4:28:3b:b2:c2:e9:72:d8:1d:19:3b:6b:eb:a7: d9:36:bd:59:f2:1d:64:8b:11:84:97:c8:c9:1d:08:6f:15:dc: 40:b5:f8:c6:66:72:f9:22:f2:ff:fb:5c:4a:d0:c1:bf:bc:bd: 81:79:29:04:43:bb:8f:b5:2e:6c:ac:0d:23:ec:9c:22:7d:a2: e9:a4:e1:9a:1b:f6:69:17:28:cb:22:6f:00:e9:9c:46:f7:0b: a9:3d:d4:ae:41:ac:4a:4b:92:21:b1:a4:e6:d2:d6:bd:e5:59: 1c:c6:8d:09:2d:69:4d:cf:21:6a:2a:f1:09:9f:27:11:2f:a2: 4e:08:9b:f7:f0:71:2b:ad:23:b9:ca:29:fb:0b:b3:75:b1:46: a7:90:96:83:ef:0e:85:42:32:c8:d3:22:c8:1c:7c:20:a8:39: 4b:20:a0:90:e5:06:2b:47:fb:44:62:70:66:60:e3:7c:e2:4b: 22:4a:dd:88:3b:ef:89:bc:85:e1:65:cc:07:f2:81:99:5b:9a: bc:62:47:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZQMUYWIr1JmZKuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI2NDAyNTctNzk0Ny00M2MxLTk5N2EtMGFmNThhNDY1 YmRjMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk MTYyMDJiNjEtNjY4Yy00YjA4LWI5YTctMjM2ZWY3YjdiODdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1k0QH6hej0zrnEghF7ybm1cQyCzJBysAdcJ s1MrvsuhUoc9pSPWIeXYmHuZzS39GNLQaw6VixXs42T0Szhv5RP8luvTYH78epVQ fcAdPDE2TSF/DXgnvnvdo6/GA+Sw1glH8YyNMVTh0lSKFRm1FtzlzCWEuNRCFh4s kgEnA9cS1wukFqeAS9tgd9ls5ugtJ6Y3LvWfccYyvf7V43BuY8jmhq03auXuTihd QfBTPctmFkZ8LEydvlAQh5WOsh39bJWkCyLsseRhkvNkFxi6DCveCel0P7bujzaF 6IZ1erc0pExmIrHFkIjEp99PxgGvnBqOrCImg7tJYWMVZ0B9wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/DaqDv2vYa0f1yRr4e+n5zaGqeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81YjY0 MDI1Ny03OTQ3LTQzYzEtOTk3YS0wYWY1OGE0NjViZGMvNzhlMjUyY2MtYmQwOS0z MjM5LWE3OGMtNzAwY2M0YTI4MDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWI2NDAyNTctNzk0Ny00M2MxLTk5 N2EtMGFmNThhNDY1YmRjLzViNjQwMjU3LTc5NDctNDNjMS05OTdhLTBhZjU4YTQ2 NWJkYy5jcmwwHwYDVR0jBBgwFoAU5TA8mq0PRPce48E8LRscUfUcNMswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81YjY0MDI1Ny03OTQ3LTQzYzEtOTk3YS0wYWY1 OGE0NjViZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dEZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQGW03xOvWmOUwSWyKQKHBtgIrpbuNPeBxk/lslRJXpfkLjc9BTOYrF A1wYTyS5N873LIOnyPCg5la0KDuywuly2B0ZO2vrp9k2vVnyHWSLEYSXyMkdCG8V 3EC1+MZmcvki8v/7XErQwb+8vYF5KQRDu4+1LmysDSPsnCJ9oumk4Zob9mkXKMsi bwDpnEb3C6k91K5BrEpLkiGxpObS1r3lWRzGjQktaU3PIWoq8QmfJxEvok4Im/fw cSutI7nKKfsLs3WxRqeQloPvDoVCMsjTIsgcfCCoOUsgoJDlBitH+0RicGZg43zi SyJK3Yg774m8heFlzAfygZlbmrxiRzE= -----END CERTIFICATE-----Generated at Mon Jun 2 16:47:13 2025 by rpki-client