$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/f44d1fc1-7b77-3156-9214-4a2a059c2b3f.roa File: f44d1fc1-7b77-3156-9214-4a2a059c2b3f.roa (raw, json) Hash identifier: Spn9Lsw0tMI/e7vWfL6oQvszjOByOaBuUo6hIsAsj/I= Subject key identifier: 1E:06:80:AE:10:B8:AC:C7:CB:03:C5:06:9D:D8:5F:04:2D:A4:DE:94 Certificate issuer: /CN=ae67d891-3b16-4302-bf8b-4adb69436dbe Certificate serial: 010D0C9F4328584944694555BF343C4837A5D400 Authority key identifier: A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/f44d1fc1-7b77-3156-9214-4a2a059c2b3f.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 16604 IP address blocks: 209.124.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:45:55:bf:34:3c:48:37:a5:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae67d891-3b16-4302-bf8b-4adb69436dbe Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=26a4a0d6-0aea-4076-9334-89fa2bde186a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ed:dd:b2:ff:8e:c2:0e:86:0d:b8:a5:ea:f8: f6:73:5f:62:7e:46:9b:6a:a1:00:ff:4a:38:69:40: 7f:89:21:5d:bb:e2:9e:76:f3:1c:2e:f5:26:96:fc: ad:43:89:04:f9:15:cb:26:ab:27:a2:15:47:7b:fd: 18:b7:d8:97:22:ce:c4:b7:c6:b3:9f:a5:e4:81:c4: 41:95:66:6f:85:c0:47:a0:a3:59:e4:39:ed:be:41: 30:6d:81:13:05:69:54:9d:12:7a:dd:70:46:97:c2: c5:4b:f4:73:e3:85:b4:14:c4:eb:07:38:81:d4:c1: 7d:6e:5f:d5:d9:dd:2c:fd:fb:85:5b:fd:58:a3:62: 2a:2f:70:e2:c9:18:81:25:ad:19:51:df:25:cc:92: a9:7b:d6:09:bc:58:54:8e:0c:39:59:b4:41:e2:e0: 85:b0:bb:b3:2a:ff:4c:74:8b:50:6e:41:2d:7d:9c: 2f:33:5a:cb:e8:59:1e:e3:9a:b8:d8:f4:71:b9:14: 43:f9:e4:2c:57:e1:d0:e6:91:de:07:2b:56:94:db: 22:0c:b3:25:5a:4f:73:33:61:a9:7e:3d:e0:d0:2e: 07:f2:f4:95:60:1b:7f:69:13:e9:17:02:ef:b7:e6: 44:a3:dc:9d:41:de:ff:23:be:1f:5c:32:7a:2d:a7: bf:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:06:80:AE:10:B8:AC:C7:CB:03:C5:06:9D:D8:5F:04:2D:A4:DE:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/f44d1fc1-7b77-3156-9214-4a2a059c2b3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl X509v3 Authority Key Identifier: keyid:A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer sbgp-ipAddrBlock: critical IPv4: 209.124.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:55:e9:81:f0:ec:c8:ff:5d:63:bc:2d:1c:a0:81:ee:e6:a2: de:23:9b:70:86:7a:42:bf:2a:ff:9c:c6:ae:7a:53:3e:77:07: e3:c9:d7:07:f1:ab:ea:6a:e3:bc:3d:bc:e1:23:a3:ed:fb:d1: 71:c0:d8:fb:11:58:25:20:3d:81:ff:40:b1:1a:a8:a8:93:51: 1d:a2:2a:c5:9c:49:1d:7c:08:bb:37:c3:a8:84:b4:dc:cd:66: f2:29:59:99:d4:88:f4:f4:0b:e8:17:02:92:fd:c8:c2:04:4f: 53:96:40:d0:4d:2e:7d:6d:d6:27:e1:5b:2c:5d:80:2f:9c:75: 44:c9:e6:ab:e4:5c:23:73:f4:69:ec:72:ce:25:51:37:07:75: a7:be:fa:25:7f:aa:57:09:92:39:6d:a4:a6:88:3b:1f:a4:72: 63:1a:71:dc:01:aa:fe:7c:78:d5:9d:4f:f8:4e:22:d6:7d:cf: 26:f1:9c:48:e1:91:c7:2f:4f:91:fb:72:80:df:b0:e7:c6:20: 6c:f7:66:a8:d0:9f:e8:7b:1e:05:d1:33:12:f4:6d:01:f1:7a: 21:57:63:7b:3e:a3:7d:c2:cc:38:54:14:7f:57:af:f3:ea:38: d4:95:ec:6e:5f:93:32:4b:49:8b:1c:19:10:b4:fa:22:9e:2f: 7b:91:cc:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaUVVvzQ8SDel1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU2N2Q4OTEtM2IxNi00MzAyLWJmOGItNGFkYjY5NDM2 ZGJlMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk MjZhNGEwZDYtMGFlYS00MDc2LTkzMzQtODlmYTJiZGUxODZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu3dsv+Owg6GDbil6vj2c19ifkabaqEA/0o4 aUB/iSFdu+KedvMcLvUmlvytQ4kE+RXLJqsnohVHe/0Yt9iXIs7Et8azn6XkgcRB lWZvhcBHoKNZ5DntvkEwbYETBWlUnRJ63XBGl8LFS/Rz44W0FMTrBziB1MF9bl/V 2d0s/fuFW/1Yo2IqL3DiyRiBJa0ZUd8lzJKpe9YJvFhUjgw5WbRB4uCFsLuzKv9M dItQbkEtfZwvM1rL6Fke45q42PRxuRRD+eQsV+HQ5pHeBytWlNsiDLMlWk9zM2Gp fj3g0C4H8vSVYBt/aRPpFwLvt+ZEo9ydQd7/I74fXDJ6Lae/pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4GgK4QuKzHywPFBp3YXwQtpN6UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hZTY3 ZDg5MS0zYjE2LTQzMDItYmY4Yi00YWRiNjk0MzZkYmUvZjQ0ZDFmYzEtN2I3Ny0z MTU2LTkyMTQtNGEyYTA1OWMyYjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWU2N2Q4OTEtM2IxNi00MzAyLWJm OGItNGFkYjY5NDM2ZGJlL2FlNjdkODkxLTNiMTYtNDMwMi1iZjhiLTRhZGI2OTQz NmRiZS5jcmwwHwYDVR0jBBgwFoAUqQTSjf5p6pOv5FCHULU1zbydkCgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hZTY3ZDg5MS0zYjE2LTQzMDItYmY4Yi00YWRi Njk0MzZkYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XyEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtV6YHw7Mj/XWO8LRygge7mot4jm3CGekK/Kv+cxq56Uz53B+PJ1wfx q+pq47w9vOEjo+370XHA2PsRWCUgPYH/QLEaqKiTUR2iKsWcSR18CLs3w6iEtNzN ZvIpWZnUiPT0C+gXApL9yMIET1OWQNBNLn1t1ifhWyxdgC+cdUTJ5qvkXCNz9Gns cs4lUTcHdae++iV/qlcJkjltpKaIOx+kcmMacdwBqv58eNWdT/hOItZ9zybxnEjh kccvT5H7coDfsOfGIGz3ZqjQn+h7HgXRMxL0bQHxeiFXY3s+o33CzDhUFH9Xr/Pq ONSV7G5fkzJLSYscGRC0+iKeL3uRzAo= -----END CERTIFICATE-----Generated at Mon May 5 22:22:20 2025 by rpki-client