$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/6848c4ce-b333-3c71-aa12-08fa68db7b9a.roa File: 6848c4ce-b333-3c71-aa12-08fa68db7b9a.roa (raw, json) Hash identifier: hsKGuENgfScaHn3gVT/bHv1j7mbFtbmb4sdhhJTCqas= Subject key identifier: 66:A8:BB:4C:AC:9C:A6:44:4E:3B:81:9E:24:41:16:BC:63:13:2D:B8 Certificate issuer: /CN=ae67d891-3b16-4302-bf8b-4adb69436dbe Certificate serial: 010D0C9F432858498B99CE72FD7ED9ABA6B0CD80 Authority key identifier: A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/6848c4ce-b333-3c71-aa12-08fa68db7b9a.roa Signing time: Wed 16 Apr 2025 13:01:01 +0000 ROA not before: Wed 16 Apr 2025 13:01:01 +0000 ROA not after: Tue 15 Jul 2025 13:01:01 +0000 asID: 26831 IP address blocks: 209.124.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8b:99:ce:72:fd:7e:d9:ab:a6:b0:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae67d891-3b16-4302-bf8b-4adb69436dbe Validity Not Before: Apr 16 13:01:01 2025 GMT Not After : Jul 15 13:01:01 2025 GMT Subject: CN=70b4632c-b787-4464-a207-72529e9af5f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:aa:db:69:20:bb:4a:28:46:ef:af:94:d3:a4: 99:ef:01:ef:9c:c0:73:03:da:3e:c5:bd:05:a5:3c: 4a:00:b4:f5:32:5e:01:5f:cb:36:e0:c6:80:4a:0a: ef:76:71:eb:2b:d3:37:db:bb:06:f0:66:4b:dd:5b: 60:03:b1:ff:c0:30:1d:7c:9e:a2:35:f1:b1:fc:73: f6:73:45:f5:f4:b8:eb:6d:03:60:3f:d1:79:c6:ac: 29:2f:d2:fa:e4:b2:5c:aa:6c:c3:b8:08:a5:78:bb: ca:db:0b:7f:cc:9c:4e:3b:72:92:ba:49:f4:a2:7a: 23:28:42:ec:8a:04:24:86:b0:d6:69:6c:73:60:b7: af:db:67:76:40:2e:b4:3c:cc:a8:41:f1:83:43:18: 75:73:9e:b0:69:1a:c8:4b:67:c3:55:b8:57:b7:63: 65:be:1f:7e:93:9e:58:4e:f4:f7:d2:33:55:35:1e: 51:b7:a9:a9:23:88:2d:d4:85:40:e1:bb:57:a3:ca: f1:87:4b:32:c2:a6:c0:4f:f7:9e:18:d0:15:4c:8e: a6:f3:d3:d9:5d:e8:5d:8c:b1:0b:80:0a:9e:db:5d: 91:4c:0e:df:98:da:dd:85:9b:68:46:59:d3:7f:91: b1:e2:fd:c4:78:8d:89:bb:bd:3c:73:78:fa:14:0c: d7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A8:BB:4C:AC:9C:A6:44:4E:3B:81:9E:24:41:16:BC:63:13:2D:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/6848c4ce-b333-3c71-aa12-08fa68db7b9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl X509v3 Authority Key Identifier: keyid:A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer sbgp-ipAddrBlock: critical IPv4: 209.124.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:c0:07:24:61:29:b9:71:d2:1c:98:88:1e:e5:4f:e6:9f:37: 76:59:ce:74:74:c9:2d:aa:bb:31:7b:ac:13:55:17:6c:a7:b1: 14:55:65:82:08:32:89:cd:cf:ac:97:5b:d8:d9:fc:39:2a:65: d6:4d:ed:a5:dd:e4:88:ab:1e:46:d6:74:54:6b:0a:07:0d:42: a4:45:8f:1b:2f:1b:0b:e5:af:be:36:66:f1:c5:43:2e:94:26: f9:13:10:d8:30:71:b7:db:8a:d0:93:92:fc:6b:dc:29:9d:49: c1:af:d5:5c:fd:77:ef:6b:d3:ae:df:5e:11:69:25:d2:18:50: 17:60:4f:44:af:d0:dc:63:37:1e:61:bb:ea:03:9f:ed:fa:da: 5b:8c:93:60:f5:b2:b4:75:61:08:e7:b0:7b:4e:fb:b8:df:c2: 63:67:1c:c5:21:22:16:c1:63:23:9e:29:6a:c9:3c:71:59:48: 8a:82:11:a5:e9:d0:4a:48:ba:77:9f:01:33:7c:eb:55:1c:7b: 54:11:b9:02:79:4e:e9:28:6f:99:a1:7a:50:e6:5a:1e:1d:05: d0:53:13:e4:1f:0d:4f:03:3b:89:4b:94:55:f5:33:32:f4:d8: 5a:1a:d1:fa:89:a0:db:28:d1:1a:d0:8c:46:17:e5:1b:20:04: 65:6b:1d:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmLmc5y/X7Zq6awzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU2N2Q4OTEtM2IxNi00MzAyLWJmOGItNGFkYjY5NDM2 ZGJlMB4XDTI1MDQxNjEzMDEwMVoXDTI1MDcxNTEzMDEwMVowLzEtMCsGA1UEAxMk NzBiNDYzMmMtYjc4Ny00NDY0LWEyMDctNzI1MjllOWFmNWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKrbaSC7SihG76+U06SZ7wHvnMBzA9o+xb0F pTxKALT1Ml4BX8s24MaASgrvdnHrK9M327sG8GZL3VtgA7H/wDAdfJ6iNfGx/HP2 c0X19LjrbQNgP9F5xqwpL9L65LJcqmzDuAileLvK2wt/zJxOO3KSukn0onojKELs igQkhrDWaWxzYLev22d2QC60PMyoQfGDQxh1c56waRrIS2fDVbhXt2Nlvh9+k55Y TvT30jNVNR5Rt6mpI4gt1IVA4btXo8rxh0sywqbAT/eeGNAVTI6m89PZXehdjLEL gAqe212RTA7fmNrdhZtoRlnTf5Gx4v3EeI2Ju708c3j6FAzXHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaou0ysnKZETjuBniRBFrxjEy24MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hZTY3 ZDg5MS0zYjE2LTQzMDItYmY4Yi00YWRiNjk0MzZkYmUvNjg0OGM0Y2UtYjMzMy0z YzcxLWFhMTItMDhmYTY4ZGI3YjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWU2N2Q4OTEtM2IxNi00MzAyLWJm OGItNGFkYjY5NDM2ZGJlL2FlNjdkODkxLTNiMTYtNDMwMi1iZjhiLTRhZGI2OTQz NmRiZS5jcmwwHwYDVR0jBBgwFoAUqQTSjf5p6pOv5FCHULU1zbydkCgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hZTY3ZDg5MS0zYjE2LTQzMDItYmY4Yi00YWRi Njk0MzZkYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XyEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDAByRhKblx0hyYiB7lT+afN3ZZznR0yS2quzF7rBNVF2ynsRRVZYII MonNz6yXW9jZ/DkqZdZN7aXd5IirHkbWdFRrCgcNQqRFjxsvGwvlr742ZvHFQy6U JvkTENgwcbfbitCTkvxr3CmdScGv1Vz9d+9r067fXhFpJdIYUBdgT0Sv0NxjNx5h u+oDn+362luMk2D1srR1YQjnsHtO+7jfwmNnHMUhIhbBYyOeKWrJPHFZSIqCEaXp 0EpIunefATN861Uce1QRuQJ5Tukob5mhelDmWh4dBdBTE+QfDU8DO4lLlFX1MzL0 2Foa0fqJoNso0RrQjEYX5RsgBGVrHTw= -----END CERTIFICATE-----Generated at Tue May 6 05:51:14 2025 by rpki-client