$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/67ef0949-c298-330b-aabd-6a4c950d7ad6.roa File: 67ef0949-c298-330b-aabd-6a4c950d7ad6.roa (raw, json) Hash identifier: zGfNGjt22CJ3qiV5l8c2ou4Zm85Qtg2tlkhkXNzlkmU= Subject key identifier: C5:AA:87:E6:25:75:97:FC:38:29:5B:25:F7:A4:72:A5:E5:58:A4:90 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584905B6B5E042FD6AECFA81EE80 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/67ef0949-c298-330b-aabd-6a4c950d7ad6.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 16696 IP address blocks: 209.20.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:b5:e0:42:fd:6a:ec:fa:81:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=050ca930-dadf-43c8-801a-9dcd2d5e623a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:54:81:a0:e2:fa:96:6b:e0:9f:e7:ad:a7:3b: 62:44:59:2f:a5:73:03:21:2a:61:b7:fd:93:0f:39: fc:da:09:9e:96:67:55:64:7e:e9:df:41:00:af:bc: 79:39:8c:f8:7a:2d:1f:e2:3a:9f:5d:93:48:82:52: 97:80:0a:2e:cb:ed:1a:33:90:99:69:e4:f0:ac:64: 00:d6:18:54:3d:5e:e3:a8:20:aa:9e:40:40:cd:34: 1d:d6:24:4a:36:c7:b4:62:1a:7b:21:8c:80:a7:69: a6:56:bc:a1:53:ab:a0:1f:81:07:ac:b2:ce:0a:a9: 95:a5:34:28:71:7a:4e:f1:a6:b4:d4:fc:25:d9:dd: ff:5a:97:17:91:77:34:cf:c4:b9:4c:02:a0:c5:c2: 04:be:a7:39:10:5a:73:dd:f0:61:1a:05:2c:bb:6b: e2:80:74:2e:72:30:7b:e3:86:99:35:bb:82:2f:33: cd:e3:52:09:0d:4b:9d:02:07:a0:13:55:9c:7f:ac: ad:ea:16:86:50:08:8e:fb:1a:4d:fc:35:64:f1:d2: 59:0e:92:24:c3:5c:78:72:09:aa:10:a9:75:28:7b: 31:68:c4:6e:31:2f:3b:95:42:38:d6:42:96:66:1d: 08:56:2c:25:85:55:b3:32:3f:3c:33:85:15:8e:60: 36:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:AA:87:E6:25:75:97:FC:38:29:5B:25:F7:A4:72:A5:E5:58:A4:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/67ef0949-c298-330b-aabd-6a4c950d7ad6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 209.20.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:01:4c:3d:40:8c:c9:58:68:84:72:15:63:19:6c:ff:62:15: 4a:cb:93:f9:b9:dd:f3:2e:61:d1:85:06:19:91:69:e7:b0:b4: 89:eb:76:f2:14:16:23:e7:46:12:30:72:55:87:2e:f4:6e:93: 58:dd:d7:e6:35:84:0f:9f:ad:5d:70:8c:55:18:37:66:d3:80: 00:03:3d:11:15:85:af:ba:1b:ee:31:ff:a0:6a:91:af:79:0b: b5:80:53:3b:3d:1b:4f:84:b4:ab:cb:da:64:8e:1e:b6:bb:12: e5:d2:ad:1d:ae:8c:5d:ac:a8:ea:c7:a8:f0:9b:cc:8d:0c:40: 1b:52:da:d9:57:52:ca:5c:66:ef:7d:10:99:ba:8b:d0:5e:8a: 34:21:f4:e3:38:78:b9:8b:59:a6:d4:16:cc:e1:4e:d6:b9:6c: 67:c1:e3:7e:69:b9:49:b5:e2:1c:57:54:ac:34:39:6f:36:d6: 08:1e:98:b5:3d:90:3e:d7:4f:49:c9:db:24:e3:a5:59:b1:9c: 64:1b:0f:bf:56:20:73:22:11:56:9b:05:21:67:f2:3f:c4:83: bd:1d:4e:6a:4e:e8:a8:27:e6:eb:d1:a2:6f:de:2b:68:69:6d: cb:c7:13:a4:cb:56:26:49:fe:f3:f1:ce:46:93:b4:3c:1c:aa: 34:6e:64:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtrXgQv1q7PqB7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk MDUwY2E5MzAtZGFkZi00M2M4LTgwMWEtOWRjZDJkNWU2MjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFSBoOL6lmvgn+etpztiRFkvpXMDISpht/2T Dzn82gmelmdVZH7p30EAr7x5OYz4ei0f4jqfXZNIglKXgAouy+0aM5CZaeTwrGQA 1hhUPV7jqCCqnkBAzTQd1iRKNse0Yhp7IYyAp2mmVryhU6ugH4EHrLLOCqmVpTQo cXpO8aa01Pwl2d3/WpcXkXc0z8S5TAKgxcIEvqc5EFpz3fBhGgUsu2vigHQucjB7 44aZNbuCLzPN41IJDUudAgegE1Wcf6yt6haGUAiO+xpN/DVk8dJZDpIkw1x4cgmq EKl1KHsxaMRuMS87lUI41kKWZh0IViwlhVWzMj88M4UVjmA2OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWqh+YldZf8OClbJfekcqXlWKSQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvNjdlZjA5NDktYzI5OC0z MzBiLWFhYmQtNmE0Yzk1MGQ3YWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RSDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQBTD1AjMlYaIRyFWMZbP9iFUrLk/m53fMuYdGFBhmRaeewtInrdvIU FiPnRhIwclWHLvRuk1jd1+Y1hA+frV1wjFUYN2bTgAADPREVha+6G+4x/6Bqka95 C7WAUzs9G0+EtKvL2mSOHra7EuXSrR2ujF2sqOrHqPCbzI0MQBtS2tlXUspcZu99 EJm6i9BeijQh9OM4eLmLWabUFszhTta5bGfB435puUm14hxXVKw0OW821ggemLU9 kD7XT0nJ2yTjpVmxnGQbD79WIHMiEVabBSFn8j/Eg70dTmpO6Kgn5uvRom/eK2hp bcvHE6TLViZJ/vPxzkaTtDwcqjRuZIM= -----END CERTIFICATE-----Generated at Fri Apr 4 19:51:20 2025 by rpki-client