$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/973b87f5-9931-320b-9f50-5352dd3a2bb7.roa File: 973b87f5-9931-320b-9f50-5352dd3a2bb7.roa (raw, json) Hash identifier: QThbiMmO0XQSqBewBkseSn3diTsrZ+CSSFZjyeEdt9k= Subject key identifier: 22:21:C3:1A:7A:AD:F8:91:0C:0A:E4:E8:B5:3C:74:A5:04:DE:0C:B9 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B6431562C90569D5A89C780 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/973b87f5-9931-320b-9f50-5352dd3a2bb7.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 54858 IP address blocks: 209.34.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:31:56:2c:90:56:9d:5a:89:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=fca7e522-1de4-42e3-813e-40d7cda1b143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ae:62:6c:72:8d:23:7b:15:0a:e0:d8:d3:ee: a5:d9:29:20:56:ac:cf:90:fa:9a:a3:cb:b3:49:b9: ea:e4:62:f1:72:b7:52:49:7f:08:db:1f:4f:6a:ae: 5c:af:07:f7:d9:30:f9:73:bc:d9:50:e9:d2:b0:fc: 63:10:49:84:4e:78:cb:37:33:25:8f:cc:62:ab:a1: c5:2e:26:4d:86:43:e8:6a:71:24:c5:64:83:54:53: 91:3a:ea:cb:79:50:8a:9e:74:48:2d:54:d1:3c:1b: 1e:d3:48:93:db:52:81:db:5c:54:b9:f4:c1:07:42: 09:fd:58:75:a7:ec:b1:1f:82:ef:8c:b6:4f:8a:c3: 03:12:8e:65:ca:8d:33:eb:e2:c9:b9:6c:59:bd:e0: 4e:56:19:2b:8b:82:2d:02:80:17:f3:6b:b5:c6:d1: 31:2e:cf:01:5a:d6:55:7a:d2:8d:0b:5a:c6:33:d3: ea:21:f8:45:6f:a9:30:ab:d3:04:3e:04:e6:b0:5a: 0f:2d:d4:74:76:ec:d7:62:55:0c:a0:92:6c:de:df: 53:4a:9f:5f:23:93:6a:12:b4:44:cc:b1:87:e0:fe: 2e:a1:e7:4f:e8:54:60:7f:6f:db:70:ed:1e:74:4c: dc:cc:9e:d0:c9:dc:71:9a:97:1c:22:4b:6a:28:40: 1a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:21:C3:1A:7A:AD:F8:91:0C:0A:E4:E8:B5:3C:74:A5:04:DE:0C:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/973b87f5-9931-320b-9f50-5352dd3a2bb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 209.34.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:df:3f:9e:36:ff:53:87:bc:e3:36:5b:95:ff:33:fd:c1:2b: ea:96:38:f5:7e:e1:d1:4e:3e:bb:18:f7:aa:c3:b4:46:98:c5: eb:48:67:7a:59:02:47:6c:36:b5:2f:65:d1:74:31:ad:28:0c: 2a:2b:70:2c:0d:bd:74:c6:02:5d:69:0d:44:68:93:24:bd:3d: 11:6b:61:26:3d:30:d0:13:27:af:7b:16:78:0f:12:4c:35:e5: 94:8b:bb:43:68:89:b8:b8:94:ab:31:1f:1b:08:2c:a0:9b:07: 84:1d:d2:b4:c0:33:1d:0b:11:d8:d8:ef:15:ed:85:10:91:e8: 8d:16:26:ca:17:6e:c6:f4:51:e7:a2:55:a8:51:c2:6e:b7:b1: 69:f6:e5:7b:47:35:98:d2:ea:3c:49:1b:e2:19:c3:be:e5:1b: 10:88:fa:ed:25:b6:8d:3b:2e:cf:15:48:5f:47:59:ed:40:d7: 76:48:e6:2c:5d:d6:7c:fc:60:8b:24:b2:9b:c2:19:71:3c:73: 32:bc:e6:65:31:e9:c4:66:00:a8:9c:7b:7d:85:6e:d6:9d:3e: 38:99:cd:40:65:98:a9:91:f9:5b:31:17:59:86:ab:c0:3e:da: 9d:2d:5d:21:9d:31:92:b1:a8:c9:a2:fd:85:45:dd:7a:a0:54: ac:8f:d8:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZDFWLJBWnVqJx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk ZmNhN2U1MjItMWRlNC00MmUzLTgxM2UtNDBkN2NkYTFiMTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtq5ibHKNI3sVCuDY0+6l2SkgVqzPkPqao8uz Sbnq5GLxcrdSSX8I2x9Paq5crwf32TD5c7zZUOnSsPxjEEmETnjLNzMlj8xiq6HF LiZNhkPoanEkxWSDVFOROurLeVCKnnRILVTRPBse00iT21KB21xUufTBB0IJ/Vh1 p+yxH4LvjLZPisMDEo5lyo0z6+LJuWxZveBOVhkri4ItAoAX82u1xtExLs8BWtZV etKNC1rGM9PqIfhFb6kwq9MEPgTmsFoPLdR0duzXYlUMoJJs3t9TSp9fI5NqErRE zLGH4P4uoedP6FRgf2/bcO0edEzczJ7QydxxmpccIktqKEAaawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIhwxp6rfiRDArk6LU8dKUE3gy5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvOTczYjg3ZjUtOTkzMS0z MjBiLTlmNTAtNTM1MmRkM2EyYmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0SKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvfP542/1OHvOM2W5X/M/3BK+qWOPV+4dFOPrsY96rDtEaYxetIZ3pZ AkdsNrUvZdF0Ma0oDCorcCwNvXTGAl1pDURokyS9PRFrYSY9MNATJ697FngPEkw1 5ZSLu0Noibi4lKsxHxsILKCbB4Qd0rTAMx0LEdjY7xXthRCR6I0WJsoXbsb0Ueei VahRwm63sWn25XtHNZjS6jxJG+IZw77lGxCI+u0lto07Ls8VSF9HWe1A13ZI5ixd 1nz8YIskspvCGXE8czK85mUx6cRmAKice32FbtadPjiZzUBlmKmR+VsxF1mGq8A+ 2p0tXSGdMZKxqMmi/YVF3XqgVKyP2Mk= -----END CERTIFICATE-----Generated at Sun Apr 13 02:45:42 2025 by rpki-client