$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f25dc22-4324-3ff6-8187-5d46925cf83a.roa File: 3f25dc22-4324-3ff6-8187-5d46925cf83a.roa (raw, json) Hash identifier: GQkyy1FWYbFwGEGsmP7cYCeMb4t31cd5uBTcIR8v9W4= Subject key identifier: 9C:35:A7:84:A5:85:30:A2:63:D0:2A:01:01:80:0B:A3:02:AB:15:DB Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285849F17FEF0844281D0E38447080 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f25dc22-4324-3ff6-8187-5d46925cf83a.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 397219 IP address blocks: 209.173.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:ef:08:44:28:1d:0e:38:44:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=15adbc2e-1fcf-4e11-9f70-5c247aa2607e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4e:6d:36:0f:34:ca:4c:b4:b4:c7:42:58:5e: 29:8e:34:1e:a6:b5:8e:8a:0d:4e:95:da:03:de:73: fd:29:80:15:26:87:71:fa:ea:d4:b7:73:f7:ef:52: a1:70:c7:60:b3:f5:79:33:1e:10:f1:b8:12:8b:b5: 52:72:f1:ab:6a:19:05:09:7a:49:0d:30:6a:a4:6d: dc:7f:bf:69:5e:04:98:9a:0f:60:df:d6:db:f6:10: 29:32:c7:ad:24:f8:07:c4:3a:41:e6:12:23:99:0a: 9c:f3:ad:04:e9:8f:fd:9e:db:5e:d9:ea:b9:47:06: 10:91:eb:81:b7:cb:7b:b2:40:d5:c5:67:96:c7:1c: 8c:e0:28:fa:70:b6:42:db:81:c5:0f:92:2b:22:51: 90:7f:9d:fe:15:79:7f:0f:59:cb:de:26:26:6a:3f: b5:2e:27:21:7c:81:3a:9d:26:60:0a:de:ce:2b:12: ee:a5:39:54:89:73:e9:37:44:25:8b:db:36:7d:08: 13:b2:e1:d2:3b:e1:1f:91:83:ee:ee:a1:78:23:4e: 1a:8e:86:35:70:29:2b:26:17:d8:a9:ba:1c:0e:d9: 2f:7b:fd:d2:88:bd:0f:fb:c5:4e:42:7c:de:0e:6c: 38:27:ed:54:b9:8d:24:5c:3a:bc:97:37:c3:2b:f9: 60:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:35:A7:84:A5:85:30:A2:63:D0:2A:01:01:80:0B:A3:02:AB:15:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f25dc22-4324-3ff6-8187-5d46925cf83a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 209.173.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:1f:5b:ec:85:e0:06:77:a3:57:21:de:68:cf:f9:53:f4:d3: 78:16:e2:51:73:56:f1:d0:e5:ab:06:f9:cc:45:dd:d7:4b:f4: 80:07:61:f4:77:62:b4:a2:00:15:fc:04:c7:83:93:92:b4:96: 84:00:9e:be:e3:06:54:0b:2a:ad:c6:71:7f:c7:c6:e8:f2:5d: bb:11:4d:4f:04:4b:02:e6:cd:60:e6:81:10:33:0b:c9:8c:5d: 47:d6:f6:3a:06:c7:da:aa:33:15:f6:76:0d:c7:40:7b:45:bb: e9:d9:14:ab:d1:9f:8f:e5:a6:5f:46:33:3b:b3:c1:6e:8d:7a: 16:25:7e:62:5a:9f:3f:49:77:c0:ff:b5:70:d3:76:6d:4c:fe: 74:cc:98:90:ad:e2:ea:1e:07:d7:19:65:e6:33:4e:66:a3:b9: c3:e9:73:0e:8a:34:68:df:ba:ef:c4:1c:ae:f4:f7:cd:f6:9a: 36:0f:72:a4:ff:3f:db:ed:79:43:af:42:0e:fa:48:2e:1f:4e: d9:41:39:6b:d8:dc:cb:17:4c:65:ea:50:cb:fc:84:eb:3c:17: f9:73:0e:7f:8b:b7:79:68:5b:b5:b4:c6:a8:d0:5a:ce:e0:d1: ca:16:a1:7f:31:ef:96:f2:d7:eb:4d:8d:6c:a2:b1:81:e2:b9: 94:d3:57:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf+8IRCgdDjhEcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk MTVhZGJjMmUtMWZjZi00ZTExLTlmNzAtNWMyNDdhYTI2MDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk5tNg80yky0tMdCWF4pjjQeprWOig1OldoD 3nP9KYAVJodx+urUt3P371KhcMdgs/V5Mx4Q8bgSi7VScvGrahkFCXpJDTBqpG3c f79pXgSYmg9g39bb9hApMsetJPgHxDpB5hIjmQqc860E6Y/9ntte2eq5RwYQkeuB t8t7skDVxWeWxxyM4Cj6cLZC24HFD5IrIlGQf53+FXl/D1nL3iYmaj+1LichfIE6 nSZgCt7OKxLupTlUiXPpN0Qli9s2fQgTsuHSO+EfkYPu7qF4I04ajoY1cCkrJhfY qbocDtkve/3SiL0P+8VOQnzeDmw4J+1UuY0kXDq8lzfDK/lgsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJw1p4SlhTCiY9AqAQGAC6MCqxXbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2YyNWRjMjItNDMyNC0z ZmY2LTgxODctNWQ0NjkyNWNmODNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0a06MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGofW+yF4AZ3o1ch3mjP+VP003gW4lFzVvHQ5asG+cxF3ddL9IAHYfR3 YrSiABX8BMeDk5K0loQAnr7jBlQLKq3GcX/HxujyXbsRTU8ESwLmzWDmgRAzC8mM XUfW9joGx9qqMxX2dg3HQHtFu+nZFKvRn4/lpl9GMzuzwW6NehYlfmJanz9Jd8D/ tXDTdm1M/nTMmJCt4uoeB9cZZeYzTmajucPpcw6KNGjfuu/EHK709832mjYPcqT/ P9vteUOvQg76SC4fTtlBOWvY3MsXTGXqUMv8hOs8F/lzDn+Lt3loW7W0xqjQWs7g 0coWoX8x75by1+tNjWyisYHiuZTTV0o= -----END CERTIFICATE-----Generated at Sun Jun 8 14:44:37 2025 by rpki-client