$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/d54a48a9-f6c9-34f1-bd58-42915ccd49d7.roa File: d54a48a9-f6c9-34f1-bd58-42915ccd49d7.roa (raw, json) Hash identifier: goJyz19j2bwhf6prscI9sIGEttgLCtryagjStxCp0Xk= Subject key identifier: AA:AE:4B:EF:4A:29:FD:F7:86:7F:37:07:E8:4B:1B:51:CA:9A:B6:37 Certificate issuer: /CN=1f60c0cf-9537-4a86-bd67-a1dfd2892507 Certificate serial: 010D0C9F43285848A830B25128E1204FA3D297B0 Authority key identifier: 9D:B7:19:FA:97:3D:4F:D2:FA:41:B6:80:92:4E:D7:18:33:4C:4E:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/d54a48a9-f6c9-34f1-bd58-42915ccd49d7.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 22280 IP address blocks: 209.196.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/1f60c0cf-9537-4a86-bd67-a1dfd2892507.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/1f60c0cf-9537-4a86-bd67-a1dfd2892507.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:b2:51:28:e1:20:4f:a3:d2:97:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f60c0cf-9537-4a86-bd67-a1dfd2892507 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=cab19887-ae82-4cbf-9689-d5ab568bd095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:da:35:ac:25:69:ad:eb:f8:af:0a:e3:67:c0: d8:20:14:f6:2f:9f:d4:49:e0:ea:d0:9d:34:c3:87: 77:43:3a:d5:1a:5c:14:8c:c8:ab:09:99:95:be:0f: 35:e9:b2:75:9f:cc:14:11:87:0f:11:ce:57:db:a3: ef:cd:70:8e:6a:f6:ac:50:52:07:c7:34:ed:e2:78: 15:10:4c:ad:a2:c1:af:51:b0:ad:b1:7e:ee:a9:80: f0:a8:cd:1b:3e:78:c7:a6:45:3a:40:60:d7:cf:1a: a5:97:2b:b3:5a:c1:ed:ed:a7:ee:57:07:d7:9f:9a: 85:25:53:1b:a1:35:cc:58:33:ef:cb:b1:9d:27:65: 29:17:2e:a8:30:71:47:e4:c5:4f:56:6d:40:36:9e: 61:3a:23:8a:11:6e:12:e9:d4:c1:97:15:00:35:0e: 1e:74:70:5e:c2:1f:e1:67:9d:79:24:1d:a8:93:e0: 09:5d:6b:58:8b:3c:ee:37:b5:bc:8e:7f:20:00:0f: 98:35:d7:84:b2:42:54:5b:81:65:8e:56:58:82:8f: 75:70:9d:c7:24:69:b3:90:40:06:97:85:4f:f6:32: db:e0:8c:b8:54:93:7c:89:a7:5e:bb:a5:ea:aa:a7: a0:ff:4c:63:7f:de:0e:be:07:f7:63:13:86:9a:42: b8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:AE:4B:EF:4A:29:FD:F7:86:7F:37:07:E8:4B:1B:51:CA:9A:B6:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/d54a48a9-f6c9-34f1-bd58-42915ccd49d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/1f60c0cf-9537-4a86-bd67-a1dfd2892507.crl X509v3 Authority Key Identifier: keyid:9D:B7:19:FA:97:3D:4F:D2:FA:41:B6:80:92:4E:D7:18:33:4C:4E:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507.cer sbgp-ipAddrBlock: critical IPv4: 209.196.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:9a:bf:19:ad:ce:0c:cb:20:7b:f3:40:ee:18:95:dc:51:c3: 11:a0:0e:26:de:df:df:fe:be:fc:e3:64:63:7d:f8:51:62:50: 33:9b:62:0a:9a:ae:5b:db:28:30:a0:59:59:81:09:cf:e7:f6: 9e:f8:f7:48:bd:9b:76:40:12:d2:7a:a5:a6:5e:aa:3b:6f:31: 4a:d0:da:5e:60:a9:ce:47:0e:8c:40:a7:ee:53:0d:57:3b:f4: 6f:26:f4:ef:33:e5:e5:fc:e2:d0:23:36:3f:ad:97:d2:d9:c6: 70:39:62:97:c7:68:29:5b:15:46:b2:7f:22:ff:2e:34:5a:53: bd:3c:75:2c:a5:e5:68:a9:96:05:e7:f8:58:10:c9:37:2e:40: 28:03:1f:35:77:9a:8e:d1:65:08:4b:39:6c:f5:ba:15:ae:a1: 71:b3:d7:79:e5:ba:a8:93:dd:42:a5:19:05:ea:7d:26:06:30: e6:4a:88:0e:96:d4:0c:0b:ac:78:c8:53:a7:38:a5:f8:22:6f: 3d:f8:62:3b:37:7b:91:81:13:d0:55:82:6d:7d:07:3d:9a:57: 82:1a:f2:8b:6d:1c:9d:e4:4f:db:f8:a0:be:33:d8:8c:ef:19: 3d:cf:8e:da:d5:c7:70:b2:53:8b:db:16:6b:14:fb:8f:47:b4: 53:b1:45:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMLJRKOEgT6PSl7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY2MGMwY2YtOTUzNy00YTg2LWJkNjctYTFkZmQyODky NTA3MB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk Y2FiMTk4ODctYWU4Mi00Y2JmLTk2ODktZDVhYjU2OGJkMDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdo1rCVprev4rwrjZ8DYIBT2L5/USeDq0J00 w4d3QzrVGlwUjMirCZmVvg816bJ1n8wUEYcPEc5X26PvzXCOavasUFIHxzTt4ngV EEytosGvUbCtsX7uqYDwqM0bPnjHpkU6QGDXzxqllyuzWsHt7afuVwfXn5qFJVMb oTXMWDPvy7GdJ2UpFy6oMHFH5MVPVm1ANp5hOiOKEW4S6dTBlxUANQ4edHBewh/h Z515JB2ok+AJXWtYizzuN7W8jn8gAA+YNdeEskJUW4FljlZYgo91cJ3HJGmzkEAG l4VP9jLb4Iy4VJN8iadeu6Xqqqeg/0xjf94Ovgf3YxOGmkK4LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKquS+9KKf33hn83B+hLG1HKmrY3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xZjYw YzBjZi05NTM3LTRhODYtYmQ2Ny1hMWRmZDI4OTI1MDcvZDU0YTQ4YTktZjZjOS0z NGYxLWJkNTgtNDI5MTVjY2Q0OWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWY2MGMwY2YtOTUzNy00YTg2LWJk NjctYTFkZmQyODkyNTA3LzFmNjBjMGNmLTk1MzctNGE4Ni1iZDY3LWExZGZkMjg5 MjUwNy5jcmwwHwYDVR0jBBgwFoAUnbcZ+pc9T9L6QbaAkk7XGDNMTpUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xZjYwYzBjZi05NTM3LTRhODYtYmQ2Ny1hMWRm ZDI4OTI1MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0cSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL6avxmtzgzLIHvzQO4YldxRwxGgDibe39/+vvzjZGN9+FFiUDObYgqa rlvbKDCgWVmBCc/n9p7490i9m3ZAEtJ6paZeqjtvMUrQ2l5gqc5HDoxAp+5TDVc7 9G8m9O8z5eX84tAjNj+tl9LZxnA5YpfHaClbFUayfyL/LjRaU708dSyl5WiplgXn +FgQyTcuQCgDHzV3mo7RZQhLOWz1uhWuoXGz13nluqiT3UKlGQXqfSYGMOZKiA6W 1AwLrHjIU6c4pfgibz34Yjs3e5GBE9BVgm19Bz2aV4Ia8ottHJ3kT9v4oL4z2Izv GT3PjtrVx3CyU4vbFmsU+49HtFOxRdU= -----END CERTIFICATE-----Generated at Sat Apr 12 15:10:43 2025 by rpki-client