$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/a7e9bf17-b1e9-3e79-a7c6-a16f57b2d08a.roa File: a7e9bf17-b1e9-3e79-a7c6-a16f57b2d08a.roa (raw, json) Hash identifier: YceDZF4k9gxFph9MXwt0v0XWE/GxMMlRviGlxPUj7QY= Subject key identifier: B9:3E:0A:B0:7B:94:55:E1:23:74:D1:21:DE:A9:3C:E8:27:6C:66:8E Certificate issuer: /CN=ae67d891-3b16-4302-bf8b-4adb69436dbe Certificate serial: 010D0C9F432858498B99CE1EEF6BF4AD777D0200 Authority key identifier: A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/a7e9bf17-b1e9-3e79-a7c6-a16f57b2d08a.roa Signing time: Wed 16 Apr 2025 13:01:01 +0000 ROA not before: Wed 16 Apr 2025 13:01:01 +0000 ROA not after: Tue 15 Jul 2025 13:01:01 +0000 asID: 26831 IP address blocks: 209.124.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8b:99:ce:1e:ef:6b:f4:ad:77:7d:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae67d891-3b16-4302-bf8b-4adb69436dbe Validity Not Before: Apr 16 13:01:01 2025 GMT Not After : Jul 15 13:01:01 2025 GMT Subject: CN=baec6822-9dd1-4953-8073-2846bf2e6d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bd:9e:56:d5:f3:99:73:0e:19:5f:f7:5a:3d: 0c:51:91:04:03:7d:d7:6a:31:98:81:69:ea:87:e4: 7d:f3:42:6a:c6:d3:73:de:aa:51:30:84:31:10:94: f0:29:a8:04:3f:ba:92:6b:6d:a3:02:7e:e4:90:93: f7:b0:9c:20:42:f8:74:0e:2a:41:7b:9e:67:be:e4: 62:81:9c:f5:89:ae:2d:06:57:8c:9a:1d:c6:47:1d: 96:ee:ea:fe:67:71:49:f8:d4:06:5d:64:72:37:47: 25:6c:0a:8e:a7:17:ff:b9:ba:8e:35:11:8c:ee:49: b3:95:1c:63:e0:f8:5d:3f:c7:b4:de:14:8a:14:ad: 92:06:27:89:c2:0d:99:f6:62:0b:05:37:bc:8f:78: 94:fb:bf:de:8c:b0:15:67:2a:db:4f:f1:93:87:4b: 72:38:1b:7b:ef:d6:6f:50:22:d7:aa:0a:da:ee:26: 17:6b:ce:6c:44:5c:ad:09:08:f7:ee:86:ef:99:54: 6e:55:86:18:d0:8e:53:ad:86:00:56:2f:df:e4:d9: 45:a6:e6:fa:7a:5d:27:00:be:c6:ea:96:2b:02:d1: 93:27:b5:6d:9e:21:01:17:f7:17:e0:b5:26:b2:97: f8:14:aa:3f:fc:2d:e6:a9:3e:e0:af:14:81:e7:92: 87:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:3E:0A:B0:7B:94:55:E1:23:74:D1:21:DE:A9:3C:E8:27:6C:66:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/a7e9bf17-b1e9-3e79-a7c6-a16f57b2d08a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl X509v3 Authority Key Identifier: keyid:A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer sbgp-ipAddrBlock: critical IPv4: 209.124.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:52:5d:1f:ad:aa:aa:fd:9f:2d:e2:a1:d7:e6:e2:71:ea:f3: 4c:e3:5e:09:f8:ce:5c:af:1e:27:20:aa:a7:02:0b:60:6c:d7: e2:e7:27:3c:0d:ab:c0:73:d9:29:25:65:90:44:db:af:2f:61: d8:b0:ce:59:e4:0d:85:7e:ba:ec:8b:e0:cb:f7:c9:ad:56:76: b5:e3:81:f7:c6:8c:f1:fb:ff:b6:9d:5c:3e:5c:06:cf:f7:8d: 18:45:43:bf:a4:df:85:75:b4:9f:d9:36:3d:d0:4e:91:e8:88: de:9f:c5:1e:c9:95:83:04:5f:94:11:d2:6b:d7:61:63:9d:47: 4f:3c:0e:1d:1f:40:81:1b:a3:77:08:be:e6:ee:a8:ec:ff:0e: 26:62:42:49:71:95:f7:86:ad:08:e9:0b:b5:12:e0:c5:fe:f3: 4b:e7:08:c5:3a:fe:dc:30:86:31:5a:d0:c5:bb:1e:16:e3:d5: 23:25:a8:a1:a7:b5:e5:5f:8c:44:e6:3e:af:86:0a:e0:d6:3f: 0b:e0:92:1d:45:82:71:a7:d5:02:61:fe:3e:0c:23:25:bb:1c: 04:bd:67:54:20:c7:f6:3a:d6:2b:fa:d0:89:66:82:72:0c:89: 6b:c6:5b:bd:6c:44:59:e9:b3:50:8d:47:7f:5f:49:7c:4f:c3: 1c:94:b2:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmLmc4e72v0rXd9AgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU2N2Q4OTEtM2IxNi00MzAyLWJmOGItNGFkYjY5NDM2 ZGJlMB4XDTI1MDQxNjEzMDEwMVoXDTI1MDcxNTEzMDEwMVowLzEtMCsGA1UEAxMk YmFlYzY4MjItOWRkMS00OTUzLTgwNzMtMjg0NmJmMmU2ZDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1b2eVtXzmXMOGV/3Wj0MUZEEA33XajGYgWnq h+R980JqxtNz3qpRMIQxEJTwKagEP7qSa22jAn7kkJP3sJwgQvh0DipBe55nvuRi gZz1ia4tBleMmh3GRx2W7ur+Z3FJ+NQGXWRyN0clbAqOpxf/ubqONRGM7kmzlRxj 4PhdP8e03hSKFK2SBieJwg2Z9mILBTe8j3iU+7/ejLAVZyrbT/GTh0tyOBt779Zv UCLXqgra7iYXa85sRFytCQj37obvmVRuVYYY0I5TrYYAVi/f5NlFpub6el0nAL7G 6pYrAtGTJ7VtniEBF/cX4LUmspf4FKo//C3mqT7grxSB55KHEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLk+CrB7lFXhI3TRId6pPOgnbGaOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hZTY3 ZDg5MS0zYjE2LTQzMDItYmY4Yi00YWRiNjk0MzZkYmUvYTdlOWJmMTctYjFlOS0z ZTc5LWE3YzYtYTE2ZjU3YjJkMDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWU2N2Q4OTEtM2IxNi00MzAyLWJm OGItNGFkYjY5NDM2ZGJlL2FlNjdkODkxLTNiMTYtNDMwMi1iZjhiLTRhZGI2OTQz NmRiZS5jcmwwHwYDVR0jBBgwFoAUqQTSjf5p6pOv5FCHULU1zbydkCgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hZTY3ZDg5MS0zYjE2LTQzMDItYmY4Yi00YWRi Njk0MzZkYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XyNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdSXR+tqqr9ny3iodfm4nHq80zjXgn4zlyvHicgqqcCC2Bs1+LnJzwN q8Bz2SklZZBE268vYdiwzlnkDYV+uuyL4Mv3ya1WdrXjgffGjPH7/7adXD5cBs/3 jRhFQ7+k34V1tJ/ZNj3QTpHoiN6fxR7JlYMEX5QR0mvXYWOdR088Dh0fQIEbo3cI vubuqOz/DiZiQklxlfeGrQjpC7US4MX+80vnCMU6/twwhjFa0MW7Hhbj1SMlqKGn teVfjETmPq+GCuDWPwvgkh1FgnGn1QJh/j4MIyW7HAS9Z1Qgx/Y61iv60IlmgnIM iWvGW71sRFnps1CNR39fSXxPwxyUsr0= -----END CERTIFICATE-----Generated at Mon May 5 23:57:22 2025 by rpki-client