$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/529b0c86-e348-332a-90f8-67d60e24a1b7.roa File: 529b0c86-e348-332a-90f8-67d60e24a1b7.roa (raw, json) Hash identifier: Gdi+G4+83SisjW8xtCx1kg0wu+z+TDRWJUR4QWoJa4k= Subject key identifier: 5B:F6:14:AC:DC:13:F2:13:DC:CF:3A:8C:46:90:1A:49:15:81:4A:B4 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F43285849ABB4AC8B54C05453E9005B80 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/529b0c86-e348-332a-90f8-67d60e24a1b7.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 397543 IP address blocks: 134.87.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:ac:8b:54:c0:54:53:e9:00:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=779fce4f-14a7-477d-8ade-c015b77487b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:7b:4e:fd:1b:c2:0d:0a:9c:16:eb:a8:22:22: e0:dd:1d:14:41:3a:7f:07:6c:40:6f:bd:9d:26:75: ee:a5:9b:23:50:8b:49:18:04:6a:e2:6e:df:3e:24: 72:4b:91:2d:8f:2c:41:39:f3:71:bb:4a:36:50:2e: 0f:e1:11:15:df:1a:b9:0d:25:8f:02:6d:bf:ea:1e: b9:89:ed:33:5e:3d:20:59:09:dc:07:67:0a:f2:ce: 19:b6:d3:50:bd:85:0e:5e:fe:20:9e:cd:b6:d8:6e: a7:31:a1:91:77:42:bd:d7:48:75:e1:d8:51:f6:49: ef:49:e9:e7:86:fb:88:c4:0a:28:d4:d6:83:2a:5b: 6b:4f:0f:6a:c4:17:3a:99:61:0a:b6:f0:e7:45:c5: 11:68:b9:17:fd:e8:5c:21:4e:94:d6:c3:62:e5:3a: 07:60:c5:78:5e:90:d3:a9:39:d5:e4:55:10:93:c1: 75:09:17:fe:5c:fc:f7:4e:1b:f6:bc:eb:12:58:14: 53:18:04:e6:b3:13:df:d5:a0:b0:4a:27:75:dd:b1: 85:35:52:47:10:49:c2:0d:f2:3b:0c:d1:a1:fd:01: 98:0d:51:3f:35:07:22:8c:7f:12:cf:84:4c:8b:95: a5:95:dd:72:69:c9:45:18:f0:4a:11:36:e2:fc:76: d4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F6:14:AC:DC:13:F2:13:DC:CF:3A:8C:46:90:1A:49:15:81:4A:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/529b0c86-e348-332a-90f8-67d60e24a1b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 134.87.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:c8:67:5f:1c:d8:a1:f7:b1:98:1e:24:69:31:b8:9b:f4:ce: 5c:21:ee:33:cb:0f:43:b1:26:d5:cc:76:6d:f0:66:8f:65:32: 32:16:89:6a:24:ad:90:a3:17:17:68:f4:8a:61:75:06:50:e4: ff:8e:40:aa:09:5a:59:ac:ed:68:10:ec:8c:05:4b:a4:f2:e1: 42:6c:0f:48:60:d4:77:2e:7b:27:60:5b:16:58:24:84:cf:aa: e5:a4:c4:bc:eb:0f:36:91:b9:a8:a8:98:86:ab:7b:d3:a8:d9: 93:c7:66:ac:21:67:0c:7d:bc:e5:6d:1d:f5:77:d3:cd:e9:40: 47:4d:69:b5:8f:31:ca:3f:59:5b:84:cd:2f:9c:1d:7a:f7:77: a2:05:b4:a1:d7:ea:b6:45:a9:0b:37:4b:b5:3c:6f:ad:3e:f0: 4d:05:3a:61:07:1f:77:3c:97:0e:2b:af:01:5d:64:49:6e:bd: ff:1d:b2:d7:38:87:47:ac:3a:89:87:13:29:d3:27:a2:4b:cb: 76:0b:9b:bc:1b:43:d4:b5:b8:11:1f:0a:35:14:ee:0e:16:ae: 75:67:28:46:a7:d7:1c:44:2a:6d:2a:a5:e6:0c:d2:a5:74:a0: 31:8b:d1:36:04:a6:b7:bc:01:cd:59:2a:61:45:90:b5:78:7b: 69:70:14:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtKyLVMBUU+kAW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk Nzc5ZmNlNGYtMTRhNy00NzdkLThhZGUtYzAxNWI3NzQ4N2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgntO/RvCDQqcFuuoIiLg3R0UQTp/B2xAb72d JnXupZsjUItJGARq4m7fPiRyS5EtjyxBOfNxu0o2UC4P4REV3xq5DSWPAm2/6h65 ie0zXj0gWQncB2cK8s4ZttNQvYUOXv4gns222G6nMaGRd0K910h14dhR9knvSenn hvuIxAoo1NaDKltrTw9qxBc6mWEKtvDnRcURaLkX/ehcIU6U1sNi5ToHYMV4XpDT qTnV5FUQk8F1CRf+XPz3Thv2vOsSWBRTGATmsxPf1aCwSid13bGFNVJHEEnCDfI7 DNGh/QGYDVE/NQcijH8Sz4RMi5Wlld1yaclFGPBKETbi/HbUgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFv2FKzcE/IT3M86jEaQGkkVgUq0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvNTI5YjBjODYtZTM0OC0z MzJhLTkwZjgtNjdkNjBlMjRhMWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChlcYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzIZ18c2KH3sZgeJGkxuJv0zlwh7jPLD0OxJtXMdm3wZo9lMjIWiWok rZCjFxdo9IphdQZQ5P+OQKoJWlms7WgQ7IwFS6Ty4UJsD0hg1HcueydgWxZYJITP quWkxLzrDzaRuaiomIare9Oo2ZPHZqwhZwx9vOVtHfV3083pQEdNabWPMco/WVuE zS+cHXr3d6IFtKHX6rZFqQs3S7U8b60+8E0FOmEHH3c8lw4rrwFdZEluvf8dstc4 h0esOomHEynTJ6JLy3YLm7wbQ9S1uBEfCjUU7g4WrnVnKEan1xxEKm0qpeYM0qV0 oDGL0TYEpre8Ac1ZKmFFkLV4e2lwFEg= -----END CERTIFICATE-----Generated at Tue May 6 22:34:36 2025 by rpki-client