$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/865aced0-1cfd-3e8c-a338-971637c211bf.roa File: 865aced0-1cfd-3e8c-a338-971637c211bf.roa (raw, json) Hash identifier: X1jgPD8GP/Mi1Rl6vIMth9SpNIFE0aoPuvkyGfeXLPM= Subject key identifier: 81:C1:64:57:AA:FD:D1:D3:E1:1E:03:89:A2:86:DF:48:35:0C:09:A4 Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Certificate serial: 010D0C9F43285849AA4F6C913734A3FBE4362FC0 Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/865aced0-1cfd-3e8c-a338-971637c211bf.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 55293 IP address blocks: 209.124.90.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:6c:91:37:34:a3:fb:e4:36:2f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=b23205a7-d196-4822-a656-b2354d813948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:82:82:26:71:38:d5:d5:cd:ae:53:3e:21:e5: b9:8a:fa:9f:49:01:35:34:72:1a:54:cf:31:4f:cd: ec:f0:41:02:f7:b2:02:04:cc:47:9c:83:b5:d7:51: 0e:2c:7e:dc:54:f1:b0:3d:0b:71:31:25:02:88:cc: 68:09:5d:c6:31:93:85:82:7d:09:1d:7d:c1:b8:86: 7b:19:60:dd:50:7b:8f:8b:81:db:74:78:cf:dc:f3: b1:04:47:41:29:4c:d0:c0:6b:85:ab:63:3e:4e:59: 52:51:41:18:08:cd:60:8e:bf:ef:f3:e3:4b:66:bc: 51:9d:b1:49:d1:2f:85:61:69:93:bf:1f:a1:ff:1c: 4c:fb:c8:f1:7c:98:52:4d:56:43:d4:25:6a:16:ac: 93:58:e6:e8:3e:2b:ee:71:3e:b5:e0:df:d7:1b:55: 9e:4b:08:2f:57:52:21:29:55:22:3f:95:34:c6:98: 2d:da:87:2f:a4:ab:9a:d1:0e:78:43:1e:3e:70:cb: 39:d2:0e:97:3a:ae:49:57:5d:d8:17:d5:74:13:d9: 84:0e:e8:24:68:ca:74:2b:cc:f5:5b:48:9b:92:4e: c7:b5:8a:8d:b7:c3:29:d8:dd:c8:84:1c:14:ce:e4: 4a:45:03:77:72:ed:f4:44:3a:17:28:9c:ea:71:b6: 81:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C1:64:57:AA:FD:D1:D3:E1:1E:03:89:A2:86:DF:48:35:0C:09:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/865aced0-1cfd-3e8c-a338-971637c211bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl X509v3 Authority Key Identifier: keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer sbgp-ipAddrBlock: critical IPv4: 209.124.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:91:2d:aa:87:fc:e9:3d:46:c1:c6:64:8d:3c:e1:6b:bd:a6: 01:9b:42:d7:6e:b4:8a:07:05:45:3f:95:be:e4:8d:d8:95:6d: e1:a9:ee:8c:48:43:85:f5:df:bb:bc:17:72:68:bc:3d:6e:cf: a7:99:a9:14:18:d5:70:17:a3:05:ab:78:11:b8:8d:f3:5c:04: 3c:77:ac:a2:81:ad:5c:5b:2b:5c:0b:93:f3:9a:3e:7f:77:ca: 6f:ab:e0:f5:1c:83:3c:6c:81:5e:e7:fc:40:f9:93:6e:80:b0: 35:cd:94:0e:1d:bd:ea:67:04:cc:d0:d2:99:3b:a1:ae:76:6b: 3c:92:33:2f:20:c6:9c:9b:71:c6:2e:c6:99:d6:cd:69:0c:7f: 69:51:13:58:26:2c:99:75:46:27:b6:19:2c:ea:5d:d0:57:88: 88:5f:6e:87:fd:43:94:37:69:5e:b4:ea:e2:6f:b8:17:6c:98: ca:0c:85:50:48:f8:6b:5c:2e:ed:33:d1:90:4f:8b:41:27:a0: 1b:14:1e:9e:f1:3e:e9:97:c3:88:4d:17:b1:f5:b4:e8:2c:ab: 1a:f4:ae:63:64:d8:fc:05:17:b2:83:07:1c:fc:39:86:28:68: 28:a2:34:44:3e:d7:6a:26:83:97:9e:34:4e:22:98:98:d8:77: 62:b6:5e:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT2yRNzSj++Q2L8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1 YjU4MB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk YjIzMjA1YTctZDE5Ni00ODIyLWE2NTYtYjIzNTRkODEzOTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YKCJnE41dXNrlM+IeW5ivqfSQE1NHIaVM8x T83s8EEC97ICBMxHnIO111EOLH7cVPGwPQtxMSUCiMxoCV3GMZOFgn0JHX3BuIZ7 GWDdUHuPi4HbdHjP3POxBEdBKUzQwGuFq2M+TllSUUEYCM1gjr/v8+NLZrxRnbFJ 0S+FYWmTvx+h/xxM+8jxfJhSTVZD1CVqFqyTWOboPivucT614N/XG1WeSwgvV1Ih KVUiP5U0xpgt2ocvpKua0Q54Qx4+cMs50g6XOq5JV13YF9V0E9mEDugkaMp0K8z1 W0ibkk7HtYqNt8Mp2N3IhBwUzuRKRQN3cu30RDoXKJzqcbaBNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHBZFeq/dHT4R4DiaKG30g1DAmkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvODY1YWNlZDAtMWNmZC0z ZThjLWEzMzgtOTcxNjM3YzIxMWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5 ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0XxaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGRLaqH/Ok9RsHGZI084Wu9pgGbQtdutIoHBUU/lb7kjdiVbeGp7oxI Q4X137u8F3JovD1uz6eZqRQY1XAXowWreBG4jfNcBDx3rKKBrVxbK1wLk/OaPn93 ym+r4PUcgzxsgV7n/ED5k26AsDXNlA4dvepnBMzQ0pk7oa52azySMy8gxpybccYu xpnWzWkMf2lRE1gmLJl1Rie2GSzqXdBXiIhfbof9Q5Q3aV606uJvuBdsmMoMhVBI +GtcLu0z0ZBPi0EnoBsUHp7xPumXw4hNF7H1tOgsqxr0rmNk2PwFF7KDBxz8OYYo aCiiNEQ+12omg5eeNE4imJjYd2K2XqA= -----END CERTIFICATE-----Generated at Fri Jun 6 23:45:13 2025 by rpki-client