$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/529b0c86-e348-332a-90f8-67d60e24a1b7.roa File: 529b0c86-e348-332a-90f8-67d60e24a1b7.roa (raw, json) Hash identifier: TQY1u0sLgCfaLmFRr0Fal8wvBJAUMkrQrJPb/+1HBt4= Subject key identifier: D1:EF:E2:A6:99:F6:B7:E8:D0:37:98:F1:74:7A:92:D6:F0:9E:82:2F Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F43285848CC7B8890950A3FFE02D3E300 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/529b0c86-e348-332a-90f8-67d60e24a1b7.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 397543 IP address blocks: 134.87.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:88:90:95:0a:3f:fe:02:d3:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=f577e149-3837-4a30-bf63-0d166b813b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a1:e9:0b:51:30:ea:ea:a1:d4:09:cb:29:d9: 6b:0e:a6:16:b3:58:95:01:33:70:80:10:2e:47:a7: 49:06:f7:88:d9:db:26:76:23:da:27:d4:97:46:60: 65:07:30:30:a2:e5:f4:ef:be:5e:e4:3b:05:e0:22: ab:89:4f:c3:f8:6e:2a:29:09:cc:7d:69:1a:67:4a: 04:46:79:b8:44:4e:92:be:68:8d:fb:31:a8:53:d5: 22:46:91:4b:88:36:18:8d:1b:4a:a7:a0:19:7d:de: d1:65:94:e6:6e:49:c5:6f:6e:1c:55:f8:0f:5c:aa: 05:4e:65:11:3e:a4:18:ad:5a:86:0a:dd:e6:85:16: cb:57:08:50:0e:19:f7:59:bc:39:48:49:fe:6a:40: a8:8e:51:83:96:62:0a:02:a7:d0:c1:04:93:c6:46: c2:1f:a5:b4:c5:8b:65:c2:06:08:13:94:3f:78:70: 81:df:6f:3b:14:7a:e4:66:35:d7:92:8b:be:02:68: f8:0e:41:5c:20:43:29:04:3c:da:44:de:1f:b3:e2: b8:58:ac:f2:26:28:ea:00:f7:c3:43:11:b9:25:35: cc:49:bf:7c:7c:c1:d6:41:da:08:52:55:a3:a7:70: e3:62:9a:9a:80:8a:fb:ca:6c:87:ce:a0:80:df:b1: bd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:EF:E2:A6:99:F6:B7:E8:D0:37:98:F1:74:7A:92:D6:F0:9E:82:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/529b0c86-e348-332a-90f8-67d60e24a1b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 134.87.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:bd:eb:b5:73:97:6c:71:5e:19:96:81:c3:56:fb:1a:98:23: f3:86:a2:26:e8:5d:c1:0c:df:50:11:31:2d:07:bc:a4:65:86: a9:7c:b1:33:ed:86:89:f2:61:cd:5f:d0:67:6c:f9:9b:77:21: f6:9e:fc:32:6d:31:63:67:ca:39:c6:df:e4:c7:04:ac:6c:fc: 5d:78:6f:b0:f2:31:fd:7b:89:f4:f8:1b:42:80:e6:cf:33:c9: 1b:f2:c9:92:20:0f:42:3c:2b:ef:47:6b:55:df:b9:e7:09:86: fa:9e:0a:aa:e6:4e:02:50:bf:42:21:42:36:58:dc:6f:2f:19: eb:47:dd:30:14:a8:63:81:b0:8e:e0:4d:4c:dc:e5:94:37:2d: be:f2:d4:7b:00:f5:fc:b8:dd:7c:a7:e7:ab:9c:12:8e:f8:dd: 10:0c:db:34:88:b4:7d:a6:3f:94:77:d6:2b:65:56:96:48:66: d2:96:2a:cf:8c:00:b0:36:c6:77:ef:56:80:2f:86:0f:15:41: 4f:6a:d6:ec:f4:3b:9f:ff:b7:41:75:e2:a9:13:25:d2:e3:6d: 33:48:32:d2:79:36:6e:97:fc:eb:33:5a:20:b8:2c:da:0d:04: b5:1d:b3:5f:f2:dd:51:88:f6:cf:29:80:e9:9d:6c:3c:dd:a7: 8c:51:9c:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe4iQlQo//gLT4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk ZjU3N2UxNDktMzgzNy00YTMwLWJmNjMtMGQxNjZiODEzYjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaHpC1Ew6uqh1AnLKdlrDqYWs1iVATNwgBAu R6dJBveI2dsmdiPaJ9SXRmBlBzAwouX0775e5DsF4CKriU/D+G4qKQnMfWkaZ0oE Rnm4RE6SvmiN+zGoU9UiRpFLiDYYjRtKp6AZfd7RZZTmbknFb24cVfgPXKoFTmUR PqQYrVqGCt3mhRbLVwhQDhn3Wbw5SEn+akCojlGDlmIKAqfQwQSTxkbCH6W0xYtl wgYIE5Q/eHCB3287FHrkZjXXkou+Amj4DkFcIEMpBDzaRN4fs+K4WKzyJijqAPfD QxG5JTXMSb98fMHWQdoIUlWjp3DjYpqagIr7ymyHzqCA37G9hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHv4qaZ9rfo0DeY8XR6ktbwnoIvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvNTI5YjBjODYtZTM0OC0z MzJhLTkwZjgtNjdkNjBlMjRhMWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChlcYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJS967Vzl2xxXhmWgcNW+xqYI/OGoiboXcEM31ARMS0HvKRlhql8sTPt honyYc1f0Gds+Zt3Ifae/DJtMWNnyjnG3+THBKxs/F14b7DyMf17ifT4G0KA5s8z yRvyyZIgD0I8K+9Ha1XfuecJhvqeCqrmTgJQv0IhQjZY3G8vGetH3TAUqGOBsI7g TUzc5ZQ3Lb7y1HsA9fy43Xyn56ucEo743RAM2zSItH2mP5R31itlVpZIZtKWKs+M ALA2xnfvVoAvhg8VQU9q1uz0O5//t0F14qkTJdLjbTNIMtJ5Nm6X/OszWiC4LNoN BLUds1/y3VGI9s8pgOmdbDzdp4xRnDA= -----END CERTIFICATE-----Generated at Fri Apr 4 18:55:01 2025 by rpki-client