$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b402262a-8386-3116-a157-d8fafaaef3a2.roa File: b402262a-8386-3116-a157-d8fafaaef3a2.roa (raw, json) Hash identifier: WdPF5qy89z5/NUlSwFtCvT2W5W0pa8sLnIU5wOipmlw= Subject key identifier: 28:07:82:87:AE:49:09:F3:34:B1:07:E6:97:28:96:C6:5B:9B:8F:36 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F43285849F7151C5F5BD38A7872F160A0 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b402262a-8386-3116-a157-d8fafaaef3a2.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 13576 IP address blocks: 209.151.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:1c:5f:5b:d3:8a:78:72:f1:60:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=711601c1-9970-4427-bba3-a161c6de769c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2a:9e:2e:19:bf:f1:0c:a1:59:db:7e:4d:a3: 2a:dc:17:bd:92:a3:05:9a:95:56:e7:68:95:b5:5d: 7f:b2:23:57:e1:bf:bf:f5:3c:eb:c5:ee:92:71:e1: f9:4a:38:90:45:65:03:bc:b1:3d:ff:c0:be:da:74: 89:a7:d4:41:d6:fc:df:e8:36:28:96:3e:dc:6c:57: 02:8c:e3:30:77:91:d0:80:fb:7d:5f:b1:e1:76:0d: 2c:85:f9:73:ca:8b:0c:bd:76:3b:d9:2c:7f:e9:ed: 18:d9:f5:b3:56:1e:a4:8a:89:9c:18:49:f8:ba:12: 0a:2d:ae:b4:a2:be:d1:a1:5e:ea:1c:4c:8a:d5:8b: d7:f6:04:02:09:8a:96:c8:e0:1b:14:8f:4b:76:6a: 65:53:c6:71:c4:6b:5c:c9:ac:50:36:a3:68:0f:13: a4:54:55:12:db:06:be:3e:4b:2f:77:87:f3:65:82: 5b:5e:de:f4:b7:d9:3b:8f:d5:6b:24:2b:30:bd:a0: c0:4f:71:ea:50:6e:ec:f0:16:4d:d6:d2:17:62:6c: c6:e5:03:96:15:59:c6:db:b5:85:bd:94:bb:00:cb: b0:26:f2:16:31:ba:1c:48:57:85:3e:b9:14:71:80: d4:ae:84:b3:a5:55:73:66:5d:b0:07:54:99:d2:69: 4f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:07:82:87:AE:49:09:F3:34:B1:07:E6:97:28:96:C6:5B:9B:8F:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b402262a-8386-3116-a157-d8fafaaef3a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 209.151.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:bf:9d:d2:65:e1:b8:66:77:55:84:6d:40:dd:1f:16:a2:af: 4a:e4:f3:2c:9b:60:24:c6:92:4f:82:d1:43:fd:f8:a8:77:72: ce:d8:85:9c:3a:fb:0b:c9:ff:ae:ae:a6:47:5e:75:19:02:8c: 0b:2b:a6:2e:59:dc:d1:51:b8:62:35:72:4c:19:37:3c:4d:ed: 6a:61:b5:a2:28:33:1a:ce:68:5f:53:af:64:81:07:56:16:0e: 08:b6:77:ff:a2:70:49:fa:15:9a:80:ec:00:b5:08:3b:32:a3: 88:ea:4f:b3:b2:c1:0a:9b:95:d8:2a:e4:0b:90:05:31:13:ba: 7b:24:b4:18:91:77:57:0d:06:38:c2:26:ea:e6:3f:fa:ef:10: 72:a3:da:62:bd:de:0e:4a:7f:88:64:46:5f:aa:24:6b:e8:8a: 46:4d:33:ff:80:d6:4c:ce:5c:82:02:8d:b9:df:e7:7a:49:b1: c9:49:0b:25:97:46:c0:13:b1:ca:cb:58:93:64:9c:18:27:c3: 68:af:e1:bb:a4:f9:db:c6:f6:71:c3:90:b2:fb:54:f3:63:8e: 18:24:ef:68:0b:90:ef:6a:a4:57:c8:56:68:6b:3a:06:ee:da: 1b:e8:8a:7d:22:26:76:c2:ef:17:a6:2a:63:c4:bf:89:44:95: 38:c1:e0:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FRxfW9OKeHLxYKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk NzExNjAxYzEtOTk3MC00NDI3LWJiYTMtYTE2MWM2ZGU3NjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyqeLhm/8QyhWdt+TaMq3Be9kqMFmpVW52iV tV1/siNX4b+/9Tzrxe6SceH5SjiQRWUDvLE9/8C+2nSJp9RB1vzf6DYolj7cbFcC jOMwd5HQgPt9X7Hhdg0shflzyosMvXY72Sx/6e0Y2fWzVh6kiomcGEn4uhIKLa60 or7RoV7qHEyK1YvX9gQCCYqWyOAbFI9LdmplU8ZxxGtcyaxQNqNoDxOkVFUS2wa+ Pksvd4fzZYJbXt70t9k7j9VrJCswvaDAT3HqUG7s8BZN1tIXYmzG5QOWFVnG27WF vZS7AMuwJvIWMbocSFeFPrkUcYDUroSzpVVzZl2wB1SZ0mlP8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgHgoeuSQnzNLEH5pcolsZbm482MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYjQwMjI2MmEtODM4Ni0z MTE2LWExNTctZDhmYWZhYWVmM2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0ZewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMO/ndJl4bhmd1WEbUDdHxair0rk8yybYCTGkk+C0UP9+Kh3cs7YhZw6 +wvJ/66upkdedRkCjAsrpi5Z3NFRuGI1ckwZNzxN7WphtaIoMxrOaF9Tr2SBB1YW Dgi2d/+icEn6FZqA7AC1CDsyo4jqT7OywQqbldgq5AuQBTETunsktBiRd1cNBjjC JurmP/rvEHKj2mK93g5Kf4hkRl+qJGvoikZNM/+A1kzOXIICjbnf53pJsclJCyWX RsATscrLWJNknBgnw2iv4buk+dvG9nHDkLL7VPNjjhgk72gLkO9qpFfIVmhrOgbu 2hvoin0iJnbC7xemKmPEv4lElTjB4IY= -----END CERTIFICATE-----Generated at Sun Jun 8 10:30:18 2025 by rpki-client