$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/91be5bd1-0b9b-3b4e-81f2-f68c7879c74b.roa File: 91be5bd1-0b9b-3b4e-81f2-f68c7879c74b.roa (raw, json) Hash identifier: 0+MX32bTOsNDRZyT/UJZr6B6GKNDDBYoYG2xUj4MquA= Subject key identifier: AB:6A:D2:52:F5:1C:3B:4E:AD:2D:1A:9F:30:E6:76:EE:63:77:18:FD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849350EBC72C579A3351848F200 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/91be5bd1-0b9b-3b4e-81f2-f68c7879c74b.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 7342 IP address blocks: 209.131.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:bc:72:c5:79:a3:35:18:48:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=99a00323-d6a8-4576-831e-0ff612814370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f8:24:bf:d1:f0:fb:a3:f0:c5:62:96:5d:23: c7:f1:a3:5e:3e:e5:60:fb:39:75:46:1b:ab:c7:c7: 1f:6f:3c:e0:55:72:7b:28:93:e4:b4:5c:28:37:cc: 61:22:92:f9:09:58:ca:d3:88:01:82:6f:95:11:7d: dc:ee:1a:ea:36:b4:5d:7e:84:aa:55:22:4d:54:3a: a8:28:6b:44:55:3d:f3:ce:b2:15:ac:6e:5a:d2:f2: a8:85:88:57:f1:25:71:92:44:d8:aa:e1:15:0b:12: 9f:41:0b:aa:67:0f:c7:a9:b1:4e:23:d8:96:87:44: 10:77:44:99:70:89:55:08:f9:ba:41:ff:0c:2b:29: a4:77:38:16:11:93:5f:ee:e3:e5:b7:71:2f:12:61: 7e:50:cc:c9:eb:48:75:53:8a:1a:19:69:bb:4c:37: 76:09:03:83:92:c3:db:ae:e8:92:c6:50:1d:2e:90: e2:26:c4:c2:c1:c4:bf:24:c1:01:6a:ff:0b:d9:a6: 70:b3:3d:c8:e4:6c:43:f2:21:81:46:46:d2:f7:19: 05:4a:e0:33:3c:7f:53:f4:b6:b9:87:82:62:ce:bb: 64:23:a3:7e:8d:15:a6:4a:86:af:e7:24:0e:e5:12: 10:27:2e:f4:ca:6c:3b:a2:68:5e:43:d1:a6:15:ad: e4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:6A:D2:52:F5:1C:3B:4E:AD:2D:1A:9F:30:E6:76:EE:63:77:18:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/91be5bd1-0b9b-3b4e-81f2-f68c7879c74b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:d5:d5:98:86:ee:d9:bb:8e:ae:d7:c3:1f:52:62:22:dc:50: 5d:b6:7e:18:35:ee:e1:f5:a9:cd:0b:0b:12:35:bb:d8:98:27: cc:8d:b0:0b:8e:4f:99:17:0a:0f:c5:e0:54:51:ad:ca:e8:7f: 59:31:a0:1a:1a:e0:40:71:50:76:71:21:9d:4d:9d:a1:55:ed: 5b:aa:8f:14:ee:ce:56:b7:71:81:46:c5:3c:52:6b:b5:cb:04: 92:07:e0:c3:e5:ff:a0:21:28:db:32:31:18:bb:ab:6f:2f:f5: 18:3c:bf:0a:1e:f5:d4:bb:02:dc:ec:b8:c6:e5:68:a9:e1:61: a4:07:71:28:d3:dc:73:6a:6e:3a:67:d3:cf:88:f1:7a:47:82: 83:f6:2e:c7:ca:6f:29:db:a9:53:ae:b2:c5:75:d5:1e:df:03: a6:2e:54:df:ba:39:68:ba:51:88:52:9a:fa:59:19:aa:4b:77: 12:5b:4d:3c:56:92:a4:05:c7:14:d1:54:25:17:b4:82:9c:0d: 7c:f5:c3:39:1a:c6:ed:6d:c4:aa:26:db:67:14:e1:09:93:1c: 8e:b2:b5:d5:d0:4f:f8:f3:b5:71:80:55:e7:43:45:d3:b4:52: e6:9f:28:6d:9f:3a:be:b5:0a:b2:7e:ee:ef:13:f1:14:46:4c: bb:a5:1d:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DrxyxXmjNRhI8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk OTlhMDAzMjMtZDZhOC00NTc2LTgzMWUtMGZmNjEyODE0MzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvgkv9Hw+6PwxWKWXSPH8aNePuVg+zl1Rhur x8cfbzzgVXJ7KJPktFwoN8xhIpL5CVjK04gBgm+VEX3c7hrqNrRdfoSqVSJNVDqo KGtEVT3zzrIVrG5a0vKohYhX8SVxkkTYquEVCxKfQQuqZw/HqbFOI9iWh0QQd0SZ cIlVCPm6Qf8MKymkdzgWEZNf7uPlt3EvEmF+UMzJ60h1U4oaGWm7TDd2CQODksPb ruiSxlAdLpDiJsTCwcS/JMEBav8L2aZwsz3I5GxD8iGBRkbS9xkFSuAzPH9T9La5 h4JizrtkI6N+jRWmSoav5yQO5RIQJy70ymw7omheQ9GmFa3kVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtq0lL1HDtOrS0anzDmdu5jdxj9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTFiZTViZDEtMGI5Yi0z YjRlLTgxZjItZjY4Yzc4NzljNzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALnV1ZiG7tm7jq7Xwx9SYiLcUF22fhg17uH1qc0LCxI1u9iYJ8yNsAuO T5kXCg/F4FRRrcrof1kxoBoa4EBxUHZxIZ1NnaFV7VuqjxTuzla3cYFGxTxSa7XL BJIH4MPl/6AhKNsyMRi7q28v9Rg8vwoe9dS7AtzsuMblaKnhYaQHcSjT3HNqbjpn 08+I8XpHgoP2LsfKbynbqVOussV11R7fA6YuVN+6OWi6UYhSmvpZGapLdxJbTTxW kqQFxxTRVCUXtIKcDXz1wzkaxu1txKom22cU4QmTHI6ytdXQT/jztXGAVedDRdO0 UuafKG2fOr61CrJ+7u8T8RRGTLulHbE= -----END CERTIFICATE-----Generated at Sat May 10 23:05:43 2025 by rpki-client