$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/8d29d087-5c19-3a94-a477-3a61141b6a05.roa File: 8d29d087-5c19-3a94-a477-3a61141b6a05.roa (raw, json) Hash identifier: J6YkrbfghotXX5SUsGVcb1iksYw07sUYZw7xVPdBTxA= Subject key identifier: 71:2E:7B:E7:F7:87:9F:F2:E4:A8:93:31:2D:F9:74:38:D4:32:EF:BF Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584917DC27F54F80667F058EE840 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/8d29d087-5c19-3a94-a477-3a61141b6a05.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 1239 IP address blocks: 209.20.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:27:f5:4f:80:66:7f:05:8e:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=d62a8f91-8d87-4c62-a11f-72be3c001a0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fd:13:28:8f:72:95:49:3e:38:c4:96:99:35: e8:f0:96:5f:2c:23:ea:f0:06:5b:e7:8d:81:cd:8e: 5c:18:cc:3c:ec:5e:03:3f:71:70:be:fb:9f:9e:97: 76:2b:80:87:b1:2f:28:63:c0:7c:cc:e3:fb:f8:58: 7a:83:c0:b2:0c:7d:8c:33:a1:a4:17:13:a5:a3:9f: 25:cc:e0:19:51:0c:dd:2e:f1:81:d1:02:6d:e7:46: 60:11:fd:5d:1f:ea:76:b1:3a:42:15:8d:45:fc:6c: 88:6b:01:e5:53:7e:20:19:95:5b:1e:06:96:1a:ac: 0d:d7:41:2e:76:31:0a:ba:ee:39:7a:ae:74:a6:3c: b2:cd:68:96:c2:0a:10:ed:7b:43:a3:db:c9:ac:20: 8f:83:ef:f5:71:93:ba:6e:e7:64:31:04:32:9d:29: 45:c1:3d:0b:1c:3d:04:97:d8:dc:8c:3a:46:25:0f: 13:0b:c6:d0:44:1c:3b:45:95:bc:3e:df:b5:5e:02: 4e:12:47:96:a3:c8:c3:17:83:d6:d9:71:75:a8:c6: 39:02:15:b2:bd:ee:4b:e4:41:07:ad:ef:56:d5:16: 29:85:e8:c6:66:8a:e4:2e:bd:cd:7c:36:35:ba:74: 81:5d:e7:12:bc:4a:cb:f7:2b:e7:6a:3b:89:97:a5: 9e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2E:7B:E7:F7:87:9F:F2:E4:A8:93:31:2D:F9:74:38:D4:32:EF:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/8d29d087-5c19-3a94-a477-3a61141b6a05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 209.20.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dc:7a:02:4b:de:e8:8e:21:c9:c7:ef:df:be:97:8a:11:98:11: 31:5a:7d:8e:a2:bf:97:7c:99:e1:9f:28:cd:16:60:9c:0d:a0: 58:73:ee:ec:de:17:84:f9:97:76:97:ab:a2:49:e6:48:c5:ea: 5b:8f:22:aa:ce:8b:ee:93:31:5e:e3:2a:01:26:64:23:3d:77: 36:8c:6b:fa:a8:01:09:be:93:89:a1:c5:f4:fa:60:72:23:29: 8a:8c:33:ff:8b:2a:76:ab:98:db:fe:1c:e3:21:2c:e6:d1:3d: 7d:09:cc:fe:d3:1f:c8:45:f9:3f:70:2c:c4:dd:10:2a:9c:a1: e8:e6:1d:97:41:c6:6d:1c:6d:34:71:ad:50:fd:90:fd:ac:bf: f0:13:53:f0:72:37:66:94:09:f5:b7:7b:61:53:9b:4f:81:21: 68:3c:e5:20:76:09:8a:e6:ba:f8:ce:f4:ab:e7:d8:5a:db:f1: fd:50:93:fc:48:5b:5f:b6:0c:0a:0e:9b:91:b8:78:23:0d:1d: ee:c3:ad:89:be:49:ca:f9:f8:98:7b:e0:61:cb:9a:8f:4b:0f: 04:7a:72:88:84:05:6a:96:ae:b9:7b:28:97:8d:fe:f7:0b:d2: c6:ed:18:df:73:dd:65:2c:c6:2d:c9:13:b4:62:e4:da:fc:69: 31:8c:90:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3Cf1T4BmfwWO6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk ZDYyYThmOTEtOGQ4Ny00YzYyLWExMWYtNzJiZTNjMDAxYTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlv0TKI9ylUk+OMSWmTXo8JZfLCPq8AZb542B zY5cGMw87F4DP3Fwvvufnpd2K4CHsS8oY8B8zOP7+Fh6g8CyDH2MM6GkFxOlo58l zOAZUQzdLvGB0QJt50ZgEf1dH+p2sTpCFY1F/GyIawHlU34gGZVbHgaWGqwN10Eu djEKuu45eq50pjyyzWiWwgoQ7XtDo9vJrCCPg+/1cZO6budkMQQynSlFwT0LHD0E l9jcjDpGJQ8TC8bQRBw7RZW8Pt+1XgJOEkeWo8jDF4PW2XF1qMY5AhWyve5L5EEH re9W1RYphejGZorkLr3NfDY1unSBXecSvErL9yvnajuJl6WeBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEue+f3h5/y5KiTMS35dDjUMu+/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvOGQyOWQwODctNWMxOS0z YTk0LWE0NzctM2E2MTE0MWI2YTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0RTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANx6Akve6I4hycfv376XihGYETFafY6iv5d8meGfKM0WYJwNoFhz7uze F4T5l3aXq6JJ5kjF6luPIqrOi+6TMV7jKgEmZCM9dzaMa/qoAQm+k4mhxfT6YHIj KYqMM/+LKnarmNv+HOMhLObRPX0JzP7TH8hF+T9wLMTdECqcoejmHZdBxm0cbTRx rVD9kP2sv/ATU/ByN2aUCfW3e2FTm0+BIWg85SB2CYrmuvjO9Kvn2Frb8f1Qk/xI W1+2DAoOm5G4eCMNHe7DrYm+Scr5+Jh74GHLmo9LDwR6coiEBWqWrrl7KJeN/vcL 0sbtGN9z3WUsxi3JE7Ri5Nr8aTGMkPE= -----END CERTIFICATE-----Generated at Sat Apr 5 05:17:25 2025 by rpki-client