$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/4525d0aa-1b3f-3b6d-bd61-05e3681f767a.roa File: 4525d0aa-1b3f-3b6d-bd61-05e3681f767a.roa (raw, json) Hash identifier: maA8ol4uxakuyyZz4uW0s1AGxca35MUjQMVJyF6cM7w= Subject key identifier: 02:69:9A:8A:39:FA:31:00:91:D6:4F:50:66:0A:1E:87:A4:63:1E:02 Certificate issuer: /CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663 Certificate serial: 010D0C9F4328584A66C0755914902195A5FEB1A0 Authority key identifier: 60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/4525d0aa-1b3f-3b6d-bd61-05e3681f767a.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 8075 IP address blocks: 209.143.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:75:59:14:90:21:95:a5:fe:b1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663 Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=6955d190-cbf3-4945-b93b-4877b6cff4bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f4:5d:ce:a8:31:3a:1d:9c:a3:2d:f6:c9:85: a3:51:05:0c:16:c3:63:5f:48:b5:ec:ff:1d:35:43: 3b:48:12:67:67:23:a0:d7:5a:d7:51:0a:f0:9f:ae: a3:a0:9b:6d:6e:9d:33:c5:f0:68:b4:ce:b9:19:c7: f7:84:ea:37:0c:96:da:22:73:81:6e:87:a0:b3:f4: 76:f4:eb:b5:ad:17:80:fc:23:39:95:a9:72:99:9e: 11:7e:61:d2:9c:06:9a:cf:f5:c2:7d:7d:e2:28:3f: 45:05:74:ec:01:3d:3f:f1:ea:d5:3b:24:f6:f6:1c: ff:dd:5d:64:dc:cb:0c:5d:dd:68:29:15:15:36:7b: b6:fc:38:ad:70:0c:9b:de:f2:2b:4e:71:d8:e4:29: eb:f8:f6:a3:e6:8d:6d:a0:85:80:eb:b3:8d:a6:aa: 28:7b:86:22:e5:bb:77:f9:58:33:96:1d:5b:be:cd: f8:28:5d:26:d3:c5:10:a8:9e:51:a1:36:74:37:14: fa:e5:75:22:a3:4f:77:c7:dd:c7:b8:e1:4a:c6:e0: b9:65:be:44:6b:24:a2:d0:77:0b:9e:93:28:cb:df: 4a:df:95:22:cb:d4:6e:8e:ac:d5:f3:df:8a:57:7f: f9:69:6b:25:9e:a1:f8:5d:e0:fb:4d:16:35:06:a0: 90:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:69:9A:8A:39:FA:31:00:91:D6:4F:50:66:0A:1E:87:A4:63:1E:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/4525d0aa-1b3f-3b6d-bd61-05e3681f767a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl X509v3 Authority Key Identifier: keyid:60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer sbgp-ipAddrBlock: critical IPv4: 209.143.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:7e:cf:77:ae:ef:2b:34:8c:75:7f:8f:54:a7:34:a9:e5:ae: f0:fc:fc:57:63:1e:d3:83:05:de:59:ed:33:fe:0e:bf:ea:6d: 53:6a:20:55:4c:ed:bc:9b:60:88:03:ab:b6:cb:96:87:60:dc: 92:a3:3a:f0:84:9d:11:a2:01:ee:2b:bc:92:13:4d:d6:57:e9: 52:52:3b:b6:f4:fd:bf:36:d2:cd:0f:a6:dc:7d:cb:cd:4f:f9: a5:bc:e8:28:cc:79:d1:58:75:90:63:c9:df:a5:3d:27:db:b3: 2b:ef:25:d4:3d:55:33:77:7c:da:f7:c1:20:9f:37:a4:f6:07: 7e:7b:a8:d1:05:93:59:28:a3:c6:a3:cf:14:f8:e6:a4:6a:66: 4a:07:0c:70:2b:26:8c:54:cb:48:47:15:b9:39:d3:0a:bc:e5: 16:01:69:24:bc:0e:18:2c:23:d8:ac:3c:e6:94:85:a3:1e:ad: 1b:f6:13:57:1f:f1:f6:c2:88:d3:28:1b:c6:32:0b:ef:5d:24: b1:51:ee:11:8a:ae:cd:1b:14:dc:18:29:9d:4e:7b:5a:7a:9f: d5:9a:4f:1c:c3:cf:7f:08:dd:78:53:38:b9:fb:f3:98:11:3c: 90:ea:b6:33:46:3c:1b:24:4b:a0:72:82:a4:1c:6e:68:48:ac: 16:d6:3a:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpmwHVZFJAhlaX+saAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQwZjRhNGEtOGYzMS00N2Y4LTg1MjktMWVjYjExYTRl NjYzMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk Njk1NWQxOTAtY2JmMy00OTQ1LWI5M2ItNDg3N2I2Y2ZmNGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPRdzqgxOh2coy32yYWjUQUMFsNjX0i17P8d NUM7SBJnZyOg11rXUQrwn66joJttbp0zxfBotM65Gcf3hOo3DJbaInOBboegs/R2 9Ou1rReA/CM5lalymZ4RfmHSnAaaz/XCfX3iKD9FBXTsAT0/8erVOyT29hz/3V1k 3MsMXd1oKRUVNnu2/DitcAyb3vIrTnHY5Cnr+Paj5o1toIWA67ONpqooe4Yi5bt3 +Vgzlh1bvs34KF0m08UQqJ5RoTZ0NxT65XUio093x93HuOFKxuC5Zb5EaySi0HcL npMoy99K35Uiy9RujqzV89+KV3/5aWslnqH4XeD7TRY1BqCQVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJpmoo5+jEAkdZPUGYKHoekYx4CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDBm NGE0YS04ZjMxLTQ3ZjgtODUyOS0xZWNiMTFhNGU2NjMvNDUyNWQwYWEtMWIzZi0z YjZkLWJkNjEtMDVlMzY4MWY3NjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDQwZjRhNGEtOGYzMS00N2Y4LTg1 MjktMWVjYjExYTRlNjYzLzA0MGY0YTRhLThmMzEtNDdmOC04NTI5LTFlY2IxMWE0 ZTY2My5jcmwwHwYDVR0jBBgwFoAUYBryhPLVze+SLIFZvhWKznYxnRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDBmNGE0YS04ZjMxLTQ3ZjgtODUyOS0xZWNi MTFhNGU2NjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y/UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJ+z3eu7ys0jHV/j1SnNKnlrvD8/FdjHtODBd5Z7TP+Dr/qbVNqIFVM 7bybYIgDq7bLlodg3JKjOvCEnRGiAe4rvJITTdZX6VJSO7b0/b820s0Pptx9y81P +aW86CjMedFYdZBjyd+lPSfbsyvvJdQ9VTN3fNr3wSCfN6T2B357qNEFk1koo8aj zxT45qRqZkoHDHArJoxUy0hHFbk50wq85RYBaSS8DhgsI9isPOaUhaMerRv2E1cf 8fbCiNMoG8YyC+9dJLFR7hGKrs0bFNwYKZ1Oe1p6n9WaTxzDz38I3XhTOLn785gR PJDqtjNGPBskS6BygqQcbmhIrBbWOgI= -----END CERTIFICATE-----Generated at Thu Jul 10 06:38:12 2025 by rpki-client