$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/04a09eab-355b-3055-8dec-cbb659cc0dbf.roa File: 04a09eab-355b-3055-8dec-cbb659cc0dbf.roa (raw, json) Hash identifier: 9PlR1Csa/2FuTMnvFYhRNlkEfY7jGg07XSHorz7nlgs= Subject key identifier: 17:FA:BB:4F:D5:2D:AF:A9:4E:EA:E1:B6:36:46:0D:C1:A3:BF:9C:B1 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584A050A746D5ADED6543F3DCD54 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/04a09eab-355b-3055-8dec-cbb659cc0dbf.roa Signing time: Fri 30 May 2025 01:00:48 +0000 ROA not before: Fri 30 May 2025 01:00:48 +0000 ROA not after: Thu 28 Aug 2025 01:00:48 +0000 asID: 13576 IP address blocks: 208.53.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:05:0a:74:6d:5a:de:d6:54:3f:3d:cd:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: May 30 01:00:48 2025 GMT Not After : Aug 28 01:00:48 2025 GMT Subject: CN=38149a87-2638-4078-8eaf-259931b55fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:25:9f:08:14:59:02:fb:e5:21:98:c3:f6:ca: b5:98:dd:85:0f:bc:ed:80:49:33:8e:02:20:30:65: 92:48:e9:c6:2c:f2:67:d5:6e:9d:96:ea:6c:0c:3c: 1a:c3:49:bc:fb:01:e4:91:54:b2:05:58:d6:7e:a7: 64:c4:ce:e0:33:a8:d7:f6:55:76:ff:b8:79:62:8e: 87:64:5b:1f:70:c7:a7:83:db:8e:d1:50:ac:99:06: df:bb:ad:ef:82:ff:5c:ed:3b:97:04:7a:b2:98:6a: ab:56:f2:f2:21:70:25:cb:4c:32:77:b6:9c:5a:a2: 62:9a:f1:97:6c:1b:a6:fe:d6:1a:19:1e:5f:c7:d2: 92:87:25:d1:6f:e8:40:26:2e:aa:0d:7a:da:4d:0e: 22:b8:74:75:cc:59:f0:c7:4e:6a:26:f2:ce:1d:b8: 36:ff:2e:da:57:22:2f:dd:4d:6a:16:09:b1:f4:1c: 11:f6:16:69:6e:62:67:0c:08:75:c5:0e:0f:22:0a: e7:71:f0:89:25:ef:ed:eb:4c:53:c8:59:a9:40:b3: cb:83:d4:94:54:2d:4c:0e:bc:8e:98:4a:e7:c1:4a: 20:79:8f:1e:6b:3e:3e:a0:45:53:b7:6d:2a:c0:83: 82:31:09:14:ba:8b:95:51:44:ce:f6:d5:55:ea:68: 2e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FA:BB:4F:D5:2D:AF:A9:4E:EA:E1:B6:36:46:0D:C1:A3:BF:9C:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/04a09eab-355b-3055-8dec-cbb659cc0dbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:b5:93:db:52:d5:e4:e4:82:5e:95:07:bb:4c:46:ac:48:c3: a8:b1:04:13:1a:d6:7e:23:a6:7e:d1:c8:46:9f:a4:fb:39:f2: 54:04:59:e6:1c:93:08:e7:a0:c8:42:94:8f:97:fc:a1:8f:7f: 09:b3:17:4a:68:12:13:8e:84:a2:c5:70:1b:07:c7:12:e5:77: c1:49:77:1c:72:d2:ac:84:67:43:0d:71:22:08:f4:48:e7:ba: b3:07:c4:71:89:1f:9d:12:60:b4:51:f3:f6:8a:06:1b:ae:6b: 59:4c:1d:2b:04:09:72:59:3a:8d:26:05:1a:35:20:0d:ed:f2: ca:21:b3:a9:47:b5:52:80:f0:4e:54:0d:c3:b0:84:02:32:ba: 07:86:63:9e:7a:11:ba:f7:20:49:0b:ff:2c:79:9f:47:1c:c7: f8:ce:a3:2d:6f:8e:7a:5a:fb:96:0b:b1:7b:27:d2:7f:ad:46: 59:64:f6:60:0e:dd:d6:59:de:f1:78:ed:45:37:c6:b9:13:0a: f6:2d:c3:4e:4d:69:1b:7f:68:c2:0f:95:09:52:27:64:bf:15: d9:92:6d:0e:a8:47:e4:4f:31:d3:14:3a:9d:b9:57:39:a2:31: 43:83:df:06:95:f2:30:57:80:59:81:45:c8:fd:f7:23:62:40: 0a:db:f5:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoFCnRtWt7WVD89zVQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDUzMDAxMDA0OFoXDTI1MDgyODAxMDA0OFowLzEtMCsGA1UEAxMk MzgxNDlhODctMjYzOC00MDc4LThlYWYtMjU5OTMxYjU1ZmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCWfCBRZAvvlIZjD9sq1mN2FD7ztgEkzjgIg MGWSSOnGLPJn1W6dlupsDDwaw0m8+wHkkVSyBVjWfqdkxM7gM6jX9lV2/7h5Yo6H ZFsfcMeng9uO0VCsmQbfu63vgv9c7TuXBHqymGqrVvLyIXAly0wyd7acWqJimvGX bBum/tYaGR5fx9KShyXRb+hAJi6qDXraTQ4iuHR1zFnwx05qJvLOHbg2/y7aVyIv 3U1qFgmx9BwR9hZpbmJnDAh1xQ4PIgrncfCJJe/t60xTyFmpQLPLg9SUVC1MDryO mErnwUogeY8eaz4+oEVTt20qwIOCMQkUuouVUUTO9tVV6mguGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBf6u0/VLa+pTurhtjZGDcGjv5yxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMDRhMDllYWItMzU1Yi0z MDU1LThkZWMtY2JiNjU5Y2MwZGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0DXsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMC1k9tS1eTkgl6VB7tMRqxIw6ixBBMa1n4jpn7RyEafpPs58lQEWeYc kwjnoMhClI+X/KGPfwmzF0poEhOOhKLFcBsHxxLld8FJdxxy0qyEZ0MNcSII9Ejn urMHxHGJH50SYLRR8/aKBhuua1lMHSsECXJZOo0mBRo1IA3t8sohs6lHtVKA8E5U DcOwhAIyugeGY556Ebr3IEkL/yx5n0ccx/jOoy1vjnpa+5YLsXsn0n+tRllk9mAO 3dZZ3vF47UU3xrkTCvYtw05NaRt/aMIPlQlSJ2S/FdmSbQ6oR+RPMdMUOp25Vzmi MUOD3waV8jBXgFmBRcj99yNiQArb9WY= -----END CERTIFICATE-----Generated at Sun Jun 8 05:11:23 2025 by rpki-client