$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b/472fa167-d88a-3495-b0cc-b1db53f85330.roa File: 472fa167-d88a-3495-b0cc-b1db53f85330.roa (raw, json) Hash identifier: XvVF2sRyoCGBLxXY/guac9JI3EaeNotMqV2Vv5Sw0bk= Subject key identifier: EB:D0:C2:29:BC:8F:70:0A:5B:EA:57:70:64:AE:BC:9F:97:D3:BB:5D Certificate issuer: /CN=6094ff48-2cdc-4ee0-879b-8cc25ddb855b Certificate serial: 010D0C9F4328584A0EF3D83BFCFB5E189E54C700 Authority key identifier: B6:06:67:28:64:96:0A:3D:B3:F7:18:26:4B:BE:3B:9F:5F:79:2B:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b/472fa167-d88a-3495-b0cc-b1db53f85330.roa Signing time: Mon 02 Jun 2025 14:13:24 +0000 ROA not before: Mon 02 Jun 2025 14:13:24 +0000 ROA not after: Sun 31 Aug 2025 14:13:24 +0000 asID: 53356 IP address blocks: 209.20.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b/6094ff48-2cdc-4ee0-879b-8cc25ddb855b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b/6094ff48-2cdc-4ee0-879b-8cc25ddb855b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0e:f3:d8:3b:fc:fb:5e:18:9e:54:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6094ff48-2cdc-4ee0-879b-8cc25ddb855b Validity Not Before: Jun 2 14:13:24 2025 GMT Not After : Aug 31 14:13:24 2025 GMT Subject: CN=b166860d-767c-4209-8a0c-f06c8121853d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d0:a9:a0:94:71:79:aa:1a:1a:38:ef:83:2f: 7c:02:78:e8:4f:05:84:65:f7:38:d9:4c:7d:af:5f: 32:60:e0:06:df:13:21:f0:95:4d:a7:06:d2:41:f4: a2:ad:5c:de:cf:d1:bf:2c:20:fd:74:56:72:5b:90: 84:8f:af:ad:d6:20:43:cb:8b:ed:ce:d8:66:47:0a: 84:a8:cb:b5:7f:10:be:5e:47:69:bb:5c:0d:f0:32: fa:90:85:3d:0e:12:8a:8b:34:f4:bf:f1:43:02:b0: 6e:0a:12:90:89:4e:df:46:f0:4a:87:2c:b0:19:4f: fc:32:35:b7:4b:60:0a:1b:79:c4:45:b7:46:f8:35: d8:a0:7c:84:3a:c3:4f:6b:7d:18:56:35:df:c1:22: 0a:90:25:a0:e1:69:58:9c:34:4c:28:90:d2:1b:43: 61:22:91:87:22:26:44:2c:8b:82:2c:54:28:cd:09: 42:2e:c9:76:99:3e:56:42:4c:fa:34:02:64:12:01: 59:fd:c1:48:c0:cd:fd:71:31:7b:51:1d:f6:37:90: fa:4a:0d:33:d0:a1:72:6b:f8:ce:80:0b:f4:21:eb: 65:cd:8e:e4:67:6c:bb:21:12:a5:34:4a:fd:f4:7a: 4d:50:3a:44:c2:d0:bb:0f:ce:1c:63:e1:4c:02:93: 71:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D0:C2:29:BC:8F:70:0A:5B:EA:57:70:64:AE:BC:9F:97:D3:BB:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b/472fa167-d88a-3495-b0cc-b1db53f85330.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b/6094ff48-2cdc-4ee0-879b-8cc25ddb855b.crl X509v3 Authority Key Identifier: keyid:B6:06:67:28:64:96:0A:3D:B3:F7:18:26:4B:BE:3B:9F:5F:79:2B:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b.cer sbgp-ipAddrBlock: critical IPv4: 209.20.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:b8:6b:94:b2:57:de:e3:a4:a7:c3:04:b0:a7:35:95:a5:79: fe:4e:55:a6:8e:77:ce:a8:09:0d:3c:2f:a8:cc:2c:47:c6:61: e8:37:31:9c:04:1f:58:c0:27:90:98:3f:b8:7c:1c:36:e0:5d: 3d:c3:9e:29:86:40:33:a4:71:e0:e4:0d:7a:49:9c:34:cc:cb: 04:8f:58:98:b3:7e:84:1a:8c:72:5d:41:a7:3a:bc:38:1c:54: bf:74:5f:5e:3f:16:54:33:6e:66:7a:8d:01:cc:9f:95:d1:ed: a1:e3:fd:f4:96:d6:fc:a9:90:23:8a:54:d9:08:7b:17:76:59: ca:53:83:a0:20:75:58:9c:bb:7b:25:6d:6f:85:81:32:df:78: 72:0e:64:6b:75:be:93:8d:cd:fe:84:64:5e:00:bf:fe:47:66: ed:5a:8c:16:21:e2:74:83:bb:f9:9e:f4:a4:59:54:9e:78:83: d0:d4:67:3a:71:c3:55:80:6c:f5:03:b8:42:7c:13:55:35:33: 45:fa:7c:69:cb:8f:5e:7b:7c:d2:6e:82:9b:7b:f1:42:c3:c8: 89:d2:ea:35:4c:43:ad:45:13:c2:62:86:c0:c4:a6:68:13:f2: 65:f7:9c:c4:95:3d:df:86:0c:ad:e1:b6:f6:2b:9b:f4:71:c3: 89:32:92:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoO89g7/PteGJ5UxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA5NGZmNDgtMmNkYy00ZWUwLTg3OWItOGNjMjVkZGI4 NTViMB4XDTI1MDYwMjE0MTMyNFoXDTI1MDgzMTE0MTMyNFowLzEtMCsGA1UEAxMk YjE2Njg2MGQtNzY3Yy00MjA5LThhMGMtZjA2YzgxMjE4NTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39CpoJRxeaoaGjjvgy98AnjoTwWEZfc42Ux9 r18yYOAG3xMh8JVNpwbSQfSirVzez9G/LCD9dFZyW5CEj6+t1iBDy4vtzthmRwqE qMu1fxC+Xkdpu1wN8DL6kIU9DhKKizT0v/FDArBuChKQiU7fRvBKhyywGU/8MjW3 S2AKG3nERbdG+DXYoHyEOsNPa30YVjXfwSIKkCWg4WlYnDRMKJDSG0NhIpGHIiZE LIuCLFQozQlCLsl2mT5WQkz6NAJkEgFZ/cFIwM39cTF7UR32N5D6Sg0z0KFya/jO gAv0IetlzY7kZ2y7IRKlNEr99HpNUDpEwtC7D84cY+FMApNxxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOvQwim8j3AKW+pXcGSuvJ+X07tdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82MDk0 ZmY0OC0yY2RjLTRlZTAtODc5Yi04Y2MyNWRkYjg1NWIvNDcyZmExNjctZDg4YS0z NDk1LWIwY2MtYjFkYjUzZjg1MzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjA5NGZmNDgtMmNkYy00ZWUwLTg3 OWItOGNjMjVkZGI4NTViLzYwOTRmZjQ4LTJjZGMtNGVlMC04NzliLThjYzI1ZGRi ODU1Yi5jcmwwHwYDVR0jBBgwFoAUtgZnKGSWCj2z9xgmS747n195KzkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi82MDk0ZmY0OC0yY2RjLTRlZTAtODc5Yi04Y2My NWRkYjg1NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0RSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACe4a5SyV97jpKfDBLCnNZWlef5OVaaOd86oCQ08L6jMLEfGYeg3MZwE H1jAJ5CYP7h8HDbgXT3DnimGQDOkceDkDXpJnDTMywSPWJizfoQajHJdQac6vDgc VL90X14/FlQzbmZ6jQHMn5XR7aHj/fSW1vypkCOKVNkIexd2WcpTg6AgdVicu3sl bW+FgTLfeHIOZGt1vpONzf6EZF4Av/5HZu1ajBYh4nSDu/me9KRZVJ54g9DUZzpx w1WAbPUDuEJ8E1U1M0X6fGnLj157fNJugpt78ULDyInS6jVMQ61FE8JihsDEpmgT 8mX3nMSVPd+GDK3htvYrm/Rxw4kykjM= -----END CERTIFICATE-----Generated at Thu Jun 5 18:35:13 2025 by rpki-client