$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d00c3ed-4b32-36f6-83f1-b51fe189ca5b.roa File: 2d00c3ed-4b32-36f6-83f1-b51fe189ca5b.roa (raw, json) Hash identifier: ZcPruwvB1oM1+vxX1dDiUB0ZnFJaXFlTanrbb92Rz5g= Subject key identifier: 2C:98:56:72:A6:40:65:EE:4C:BB:A7:2F:A6:6D:C7:17:4D:2F:1C:4D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849CE9A4401D52E864C950E0780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d00c3ed-4b32-36f6-83f1-b51fe189ca5b.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 32787 IP address blocks: 209.200.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:44:01:d5:2e:86:4c:95:0e:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=c85bfdf5-267f-4904-9d80-fea7bb6ee435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:81:a1:70:98:2d:b7:13:94:7c:c1:14:01:41: fc:08:14:a5:ea:04:6b:77:32:d6:41:89:4f:69:84: 10:0d:01:b5:08:66:e7:0c:bc:de:c2:ea:67:7b:a1: 04:b4:84:2c:f9:45:d2:db:9d:73:1c:74:e7:81:12: be:6e:55:72:ca:fc:dd:17:a0:a6:ce:03:5b:56:cf: a2:bf:1e:a8:86:70:bb:e9:e2:fe:46:30:6a:32:e9: 4d:d8:64:0e:f8:9e:da:32:12:9b:05:f2:d5:ae:2f: 14:b2:4b:47:63:d3:41:53:e8:49:85:57:41:db:72: e9:49:c2:94:08:98:ec:bb:09:2b:87:6f:19:7e:3f: 62:24:f9:13:a0:1c:d8:fa:fe:c6:27:b2:bc:22:06: d4:39:87:a6:7e:1b:01:33:eb:63:ac:45:6f:1e:af: 81:23:5a:e0:9f:b5:04:33:60:5a:7e:b8:cc:50:b0: c0:a1:39:c9:9a:67:66:fc:76:b8:28:82:a4:95:07: c4:2e:2d:12:02:56:33:90:a3:66:52:93:23:17:ab: 7d:bc:a6:b1:5a:f9:77:4a:2b:b2:32:4b:ef:5e:41: b5:aa:d0:37:0c:ad:cd:23:51:3c:3b:7d:50:1a:1d: 3b:c1:09:28:6e:19:0a:62:ee:98:33:71:95:59:f2: 0c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:98:56:72:A6:40:65:EE:4C:BB:A7:2F:A6:6D:C7:17:4D:2F:1C:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d00c3ed-4b32-36f6-83f1-b51fe189ca5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:4e:ec:b7:3c:82:d7:e9:14:0e:c5:59:d2:b2:42:11:78:5b: 64:15:f4:1d:45:39:0f:27:5d:25:f7:77:91:b8:67:86:db:09: f2:89:4c:82:f3:18:55:cb:92:1f:59:55:2e:8a:7b:c4:79:a0: 9a:8e:3d:c4:64:46:2e:b2:87:09:aa:49:c5:a6:e9:c4:95:e6: d9:bb:78:27:89:78:e0:ef:d3:c5:b9:19:7b:56:27:f3:80:de: b2:7e:d2:a4:2c:4b:5b:7c:59:52:31:50:4a:a9:61:0f:1a:4b: 1e:dd:3e:64:f0:85:3f:dc:af:85:ea:61:63:ac:a5:00:d8:5c: 3a:d2:ce:d2:56:a0:6b:65:c7:e5:8d:6e:87:99:4f:c0:03:38: e9:ae:02:2e:7c:a4:e9:39:55:c7:b9:67:4f:23:c6:ab:9e:9e: 43:37:74:35:19:c7:0c:38:9c:3b:f6:89:f3:ef:15:50:4c:42: 93:3b:17:ff:3b:87:4b:7f:92:07:17:87:9b:6e:16:3c:8b:e6: 85:c5:61:7c:df:22:2c:b0:b1:56:f8:dd:74:ec:c6:98:50:9d: 32:db:01:bb:31:ef:ae:26:b9:4d:b1:57:1c:9b:38:01:60:b4: 22:80:e1:84:c2:9d:6b:c6:09:34:86:57:37:ef:0f:4f:6e:df: b2:bc:1b:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmkQB1S6GTJUOB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk Yzg1YmZkZjUtMjY3Zi00OTA0LTlkODAtZmVhN2JiNmVlNDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIGhcJgttxOUfMEUAUH8CBSl6gRrdzLWQYlP aYQQDQG1CGbnDLzewupne6EEtIQs+UXS251zHHTngRK+blVyyvzdF6CmzgNbVs+i vx6ohnC76eL+RjBqMulN2GQO+J7aMhKbBfLVri8UsktHY9NBU+hJhVdB23LpScKU CJjsuwkrh28Zfj9iJPkToBzY+v7GJ7K8IgbUOYemfhsBM+tjrEVvHq+BI1rgn7UE M2BafrjMULDAoTnJmmdm/Ha4KIKklQfELi0SAlYzkKNmUpMjF6t9vKaxWvl3Siuy MkvvXkG1qtA3DK3NI1E8O31QGh07wQkobhkKYu6YM3GVWfIMgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyYVnKmQGXuTLunL6ZtxxdNLxxNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmQwMGMzZWQtNGIzMi0z NmY2LTgzZjEtYjUxZmUxODljYTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0ciwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJO7Lc8gtfpFA7FWdKyQhF4W2QV9B1FOQ8nXSX3d5G4Z4bbCfKJTILz GFXLkh9ZVS6Ke8R5oJqOPcRkRi6yhwmqScWm6cSV5tm7eCeJeODv08W5GXtWJ/OA 3rJ+0qQsS1t8WVIxUEqpYQ8aSx7dPmTwhT/cr4XqYWOspQDYXDrSztJWoGtlx+WN boeZT8ADOOmuAi58pOk5Vce5Z08jxquenkM3dDUZxww4nDv2ifPvFVBMQpM7F/87 h0t/kgcXh5tuFjyL5oXFYXzfIiywsVb43XTsxphQnTLbAbsx764muU2xVxybOAFg tCKA4YTCnWvGCTSGVzfvD09u37K8G40= -----END CERTIFICATE-----Generated at Thu Jun 5 18:13:18 2025 by rpki-client