$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/6a320ff9-23e7-3961-a6c3-47dc2688625f.roa File: 6a320ff9-23e7-3961-a6c3-47dc2688625f.roa (raw, json) Hash identifier: ytBGZ3Q7Xf+MqGJOhbiHqmmrADLPy4rCR1Qgw57Bl8I= Subject key identifier: CB:FE:C8:52:A6:F8:FE:E5:C5:E8:6C:8C:98:91:BB:DD:2B:65:AB:87 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B6422C024A9D5427FBCE4E0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/6a320ff9-23e7-3961-a6c3-47dc2688625f.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 11404 IP address blocks: 209.34.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:22:c0:24:a9:d5:42:7f:bc:e4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=13a7359a-737e-4561-ae38-eded172012fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:44:f6:97:eb:c6:8b:e5:2c:97:ee:6b:7c:87: bb:0f:59:54:ae:a9:2f:3c:d5:8c:32:8e:20:bd:8e: 95:39:56:bc:d3:18:81:4b:b0:64:ae:6a:44:dd:a2: 25:f9:88:0a:fc:e5:d2:d7:e4:6a:60:e9:8f:1e:ea: 81:dd:aa:5a:ad:19:7c:fe:77:13:f8:f8:84:8f:02: 7a:d2:df:7f:4d:18:16:11:16:d1:8e:0d:f6:42:d6: f7:68:15:9d:8e:df:7c:6f:88:78:73:b6:3f:a8:84: 31:a5:2d:43:e2:12:89:96:4e:6f:d7:0c:1b:24:53: 66:4f:85:d2:81:02:a2:04:51:2f:00:0f:fa:c1:f6: 8d:8d:3a:9d:9c:07:76:6c:57:63:f9:56:93:f2:41: d5:7e:1c:b8:9c:8b:13:51:5a:47:8c:12:ee:2d:54: 58:2d:fb:ce:e4:0f:f4:35:8f:37:a0:a5:4d:01:d4: ab:08:b6:fc:dc:c8:35:a8:d2:77:3e:6e:d1:bb:38: 91:0a:11:f1:3b:9e:2d:70:92:96:32:be:02:bf:31: f0:31:04:09:07:d0:1a:3e:69:13:4b:7c:ed:89:47: 7d:a8:cf:ad:6e:df:86:48:44:5a:be:0c:54:e2:76: 73:a1:f2:75:49:37:c3:82:05:75:9c:17:a4:e7:10: 63:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:FE:C8:52:A6:F8:FE:E5:C5:E8:6C:8C:98:91:BB:DD:2B:65:AB:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/6a320ff9-23e7-3961-a6c3-47dc2688625f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 209.34.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:93:d6:e1:19:a6:64:2e:2d:3c:dd:1c:0f:af:43:ec:06:32: 53:c3:d8:4e:fd:2c:c8:d2:dd:76:42:b0:ee:97:54:b6:f7:12: 62:61:bb:2f:4f:31:7c:90:e2:35:c2:02:b1:b9:33:cf:dd:3c: 74:5a:50:47:e6:35:55:50:7f:99:4c:8b:d6:1f:88:a0:40:30: 18:bf:68:a7:9d:6c:69:ba:18:80:fa:66:f9:8d:5f:29:c7:6a: e9:0d:bf:80:b4:7a:ed:72:c1:ca:57:5a:4a:00:3e:61:a3:28: 91:0d:6c:cb:d2:c3:78:82:9b:91:00:eb:4c:80:77:64:fa:64: bf:8b:8c:6a:a4:bb:46:18:74:65:ac:6c:d9:2c:39:63:fb:7f: e9:f2:63:67:6a:41:5d:87:ca:5c:f6:0f:c3:70:30:f7:25:73: d7:a7:1f:2c:b1:5c:5c:92:6b:05:ff:e7:14:7a:82:51:c7:73: df:b3:86:6c:2b:48:2b:31:21:84:8e:18:ae:95:ed:1c:e2:5b: 9b:db:99:08:81:58:d0:e1:1e:f0:a8:1b:91:29:7c:e2:fa:54: 59:c0:90:66:27:b8:dd:24:21:fb:ac:5f:ab:6c:86:fa:b5:29: a6:ed:6c:7e:92:2f:11:98:7a:72:9f:fe:7a:d0:ff:99:99:c7: 7e:a2:77:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZCLAJKnVQn+85OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk MTNhNzM1OWEtNzM3ZS00NTYxLWFlMzgtZWRlZDE3MjAxMmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUT2l+vGi+Usl+5rfIe7D1lUrqkvPNWMMo4g vY6VOVa80xiBS7BkrmpE3aIl+YgK/OXS1+RqYOmPHuqB3aparRl8/ncT+PiEjwJ6 0t9/TRgWERbRjg32Qtb3aBWdjt98b4h4c7Y/qIQxpS1D4hKJlk5v1wwbJFNmT4XS gQKiBFEvAA/6wfaNjTqdnAd2bFdj+VaT8kHVfhy4nIsTUVpHjBLuLVRYLfvO5A/0 NY83oKVNAdSrCLb83Mg1qNJ3Pm7RuziRChHxO54tcJKWMr4CvzHwMQQJB9AaPmkT S3ztiUd9qM+tbt+GSERavgxU4nZzofJ1STfDggV1nBek5xBjDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMv+yFKm+P7lxehsjJiRu90rZauHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNmEzMjBmZjktMjNlNy0z OTYxLWE2YzMtNDdkYzI2ODg2MjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0SKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2T1uEZpmQuLTzdHA+vQ+wGMlPD2E79LMjS3XZCsO6XVLb3EmJhuy9P MXyQ4jXCArG5M8/dPHRaUEfmNVVQf5lMi9YfiKBAMBi/aKedbGm6GID6ZvmNXynH aukNv4C0eu1ywcpXWkoAPmGjKJENbMvSw3iCm5EA60yAd2T6ZL+LjGqku0YYdGWs bNksOWP7f+nyY2dqQV2Hylz2D8NwMPclc9enHyyxXFySawX/5xR6glHHc9+zhmwr SCsxIYSOGK6V7RziW5vbmQiBWNDhHvCoG5EpfOL6VFnAkGYnuN0kIfusX6tshvq1 KabtbH6SLxGYenKf/nrQ/5mZx36id4Y= -----END CERTIFICATE-----Generated at Thu Apr 17 07:09:49 2025 by rpki-client