$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/f1f615a7-b544-390a-b957-864e92a670f9.roa File: f1f615a7-b544-390a-b957-864e92a670f9.roa (raw, json) Hash identifier: XtD42qkcd6TxwHRHOvZK8ECO3fwyw2dAXl6GRD+QvRs= Subject key identifier: C0:E1:1C:8C:70:BB:20:46:A3:99:59:20:C9:3E:A5:59:41:7C:CE:56 Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Certificate serial: 010D0C9F43285849F2E535A5D0F2BA587B86A440 Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/f1f615a7-b544-390a-b957-864e92a670f9.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 32181 IP address blocks: 209.212.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:35:a5:d0:f2:ba:58:7b:86:a4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=e0e2ee26-f60f-44d5-8909-2d8813f221f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0e:b1:4b:7e:6c:8c:ca:7f:1e:25:e3:5c:14: 3a:b3:80:77:de:a8:da:6b:08:53:c4:b9:bc:15:63: 6f:53:49:aa:12:ac:ed:de:ef:69:05:21:e9:a6:5f: bb:08:20:24:e4:8f:5b:f8:3d:b3:6c:f1:c0:6c:6f: 20:0b:ec:30:5c:65:42:98:05:20:e1:68:18:57:c6: 15:d1:3c:10:dd:fa:a1:fb:e3:52:cf:06:74:3c:d0: 9b:cb:61:78:98:a3:2c:9d:80:c4:21:bb:04:bf:6c: cc:eb:97:72:d3:fe:4e:26:d9:36:ce:1d:59:6d:9c: cd:ce:d1:a9:19:bf:db:73:fe:f4:66:2a:7b:36:b0: d9:c8:df:d8:4f:ec:87:16:8b:47:8d:72:bb:f5:44: e6:17:83:ec:cd:4d:3c:f5:85:35:0f:52:d5:30:8b: f5:b5:34:5d:50:5d:e1:19:63:db:3f:64:ac:07:b5: 3e:c1:ba:7b:b8:06:2d:0d:21:3a:22:d7:93:93:b9: 4d:0f:8a:9b:5e:d9:2e:15:95:1e:2b:ed:70:7e:00: dd:61:93:43:85:34:d5:ce:18:6a:88:d8:52:fc:95: e6:b4:ac:fa:a0:c6:87:3d:97:6b:7e:47:39:0b:6b: 42:c8:dc:72:a9:62:2a:81:12:8b:31:57:9a:54:f1: 82:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E1:1C:8C:70:BB:20:46:A3:99:59:20:C9:3E:A5:59:41:7C:CE:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/f1f615a7-b544-390a-b957-864e92a670f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl X509v3 Authority Key Identifier: keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer sbgp-ipAddrBlock: critical IPv4: 209.212.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:e4:09:6d:8b:ae:de:42:5b:d5:ab:0a:33:87:a4:57:0d:f7: f0:34:bc:25:57:bc:7e:ee:df:e7:c0:fa:13:a6:13:9e:75:eb: ba:85:d4:01:31:97:58:69:a3:64:76:52:3e:85:2b:ee:e1:b9: 54:65:51:e5:bc:23:8f:df:69:db:26:8d:77:59:16:fe:44:12: 95:50:e0:25:43:f8:49:a1:3d:4a:64:ff:d1:aa:8b:c2:77:38: d3:3b:49:83:ab:8a:05:21:8e:fc:11:a7:38:e5:3a:4e:5f:25: bf:b3:9e:0c:69:a9:50:cf:67:e0:bf:d4:ec:f5:97:a8:8b:12: e5:fa:35:54:e9:d7:2c:f8:41:40:f0:df:03:06:6e:3e:81:00: de:77:eb:51:f1:e6:6e:c3:9f:f9:54:8d:3a:fa:f3:d7:82:eb: 99:ec:fb:45:fc:02:24:7c:48:aa:bf:30:bf:2f:dd:6a:7e:7b: e2:7e:ed:70:29:fd:a1:6c:10:e3:30:08:67:e2:34:98:5e:af: bf:c7:0a:40:ac:40:ec:ce:3a:1b:cb:47:5b:95:af:b6:ca:c0: 8c:94:fb:0a:22:f0:84:0f:0c:3c:69:85:65:d4:69:69:83:53: 97:1c:1b:95:4a:ae:fa:d9:2f:e3:95:af:15:1b:1f:f4:af:32: c2:9c:7e:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5TWl0PK6WHuGpEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIy MTBjMB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk ZTBlMmVlMjYtZjYwZi00NGQ1LTg5MDktMmQ4ODEzZjIyMWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlw6xS35sjMp/HiXjXBQ6s4B33qjaawhTxLm8 FWNvU0mqEqzt3u9pBSHppl+7CCAk5I9b+D2zbPHAbG8gC+wwXGVCmAUg4WgYV8YV 0TwQ3fqh++NSzwZ0PNCby2F4mKMsnYDEIbsEv2zM65dy0/5OJtk2zh1ZbZzNztGp Gb/bc/70Zip7NrDZyN/YT+yHFotHjXK79UTmF4PszU089YU1D1LVMIv1tTRdUF3h GWPbP2SsB7U+wbp7uAYtDSE6IteTk7lND4qbXtkuFZUeK+1wfgDdYZNDhTTVzhhq iNhS/JXmtKz6oMaHPZdrfkc5C2tCyNxyqWIqgRKLMVeaVPGCaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDhHIxwuyBGo5lZIMk+pVlBfM5WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk NmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvZjFmNjE1YTctYjU0NC0z OTBhLWI5NTctODY0ZTkyYTY3MGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDZmOGMtODVlOS00YTQ3LTk3 YzktZGJjMTFjMTIyMTBjL2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05N2M5LWRiYzExYzEy MjEwYy5jcmwwHwYDVR0jBBgwFoAU0rkksb0h0dn/8sdeo3qMSJ2QuRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMx MWMxMjIxMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0dSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvkCW2Lrt5CW9WrCjOHpFcN9/A0vCVXvH7u3+fA+hOmE55167qF1AEx l1hpo2R2Uj6FK+7huVRlUeW8I4/fadsmjXdZFv5EEpVQ4CVD+EmhPUpk/9Gqi8J3 ONM7SYOrigUhjvwRpzjlOk5fJb+zngxpqVDPZ+C/1Oz1l6iLEuX6NVTp1yz4QUDw 3wMGbj6BAN5361Hx5m7Dn/lUjTr689eC65ns+0X8AiR8SKq/ML8v3Wp+e+J+7XAp /aFsEOMwCGfiNJher7/HCkCsQOzOOhvLR1uVr7bKwIyU+woi8IQPDDxphWXUaWmD U5ccG5VKrvrZL+OVrxUbH/SvMsKcft4= -----END CERTIFICATE-----Generated at Thu Jun 5 18:12:57 2025 by rpki-client