$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/969522f3-14b8-326a-8fee-278f9c0de14f.roa File: 969522f3-14b8-326a-8fee-278f9c0de14f.roa (raw, json) Hash identifier: jTQCjubLH5bjy1NJy6hHN+WUkNiV7uGmWZtwVtfnqbY= Subject key identifier: D8:6B:69:AA:88:96:77:C8:8C:33:DD:11:69:FE:79:CB:FF:2D:31:1B Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F432858492D54F0B43B2783B7D3C02320 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/969522f3-14b8-326a-8fee-278f9c0de14f.roa Signing time: Thu 13 Mar 2025 18:36:21 +0000 ROA not before: Thu 13 Mar 2025 18:36:21 +0000 ROA not after: Wed 11 Jun 2025 18:36:21 +0000 asID: 54702 IP address blocks: 209.51.128.0/24 maxlen: 24 209.51.134.0/24 maxlen: 24 209.51.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2d:54:f0:b4:3b:27:83:b7:d3:c0:23:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Mar 13 18:36:21 2025 GMT Not After : Jun 11 18:36:21 2025 GMT Subject: CN=0ef7d414-7f9e-4284-bc63-0f174cacd890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bd:33:fa:d3:ce:7a:4a:61:48:36:44:42:c7: 8a:b4:9e:68:21:28:86:29:72:3c:1d:b4:91:1a:90: 6e:c2:67:9e:4d:c7:75:0d:5a:ef:7f:10:68:d2:29: 54:bf:9e:99:6c:2d:b2:a7:6c:2f:95:90:90:b8:96: 8e:1a:55:70:40:43:5f:2a:84:c0:e0:f5:ea:18:f2: 98:75:4c:73:03:f2:14:1d:9f:43:01:d5:ce:84:9f: 70:c6:71:9b:7d:a3:90:3c:d1:db:af:11:d4:33:74: 9c:1d:22:3d:48:70:46:02:34:83:07:d4:7a:22:ef: 65:4a:ab:28:f1:d2:51:03:0b:b0:04:23:80:ea:92: 57:7e:2f:7a:07:20:a4:49:bf:19:ff:f2:1b:b7:36: 32:14:ea:4a:1a:05:f4:54:9a:f4:27:d6:4e:00:06: 63:ae:eb:e0:20:c8:b7:d7:78:e6:56:ef:14:37:0f: da:ee:2d:b2:49:4b:ae:66:32:9d:0b:0f:18:07:f4: c2:7a:3d:1c:be:d6:3b:84:a1:c5:54:95:7b:bb:f8: 11:e8:37:de:d8:64:ba:14:8a:04:76:43:04:46:b8: d6:e7:87:b0:1a:4c:a5:72:ef:de:9a:16:e5:72:48: 20:6d:75:d1:23:a5:34:95:81:1f:c7:67:2c:49:07: b6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6B:69:AA:88:96:77:C8:8C:33:DD:11:69:FE:79:CB:FF:2D:31:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/969522f3-14b8-326a-8fee-278f9c0de14f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 209.51.128.0/24 209.51.134.0/24 209.51.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:ff:62:ab:c0:cc:79:74:61:3b:26:be:0f:35:4d:bb:8a:3f: e2:a0:08:ce:e7:01:df:4c:f5:63:2b:e1:a1:a2:25:98:2d:82: 32:d4:33:d7:1a:ee:d8:7e:42:0d:a1:06:a7:dd:47:77:4b:78: eb:9d:aa:6e:f6:f0:07:e3:91:58:54:33:43:99:e3:7e:9e:03: 43:71:ea:d1:e0:30:0b:24:bb:78:8d:3f:ce:05:99:ef:b0:4d: 3a:5d:96:27:ff:45:1e:97:53:8e:f2:2b:45:59:83:34:fc:d6: c6:ec:e2:91:6b:59:47:4a:b0:e7:fc:2e:ec:21:20:35:41:75: 0a:c4:73:d7:7e:4f:57:12:ff:81:11:a8:9d:85:35:3f:7b:0c: 5e:49:14:6e:2b:9d:11:13:b7:db:8f:aa:1e:00:b7:dd:83:d6: 7b:91:6b:df:e1:3b:e3:55:5d:68:bf:f4:26:22:bc:1e:81:ae: 54:ea:7c:bb:9c:a0:e9:7e:ca:96:4f:7e:d9:13:de:46:1a:31: f1:a8:70:3b:60:87:4e:e2:97:dd:bb:b6:70:21:79:ab:4b:e2: 18:aa:ab:2b:ec:84:68:9e:3a:a5:30:b8:9c:b8:9b:63:2e:dd: ac:90:77:af:70:b9:03:86:6f:e8:62:1e:0a:25:9a:74:2a:d6: 1b:1b:8f:b4 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEktVPC0OyeDt9PAIyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDMxMzE4MzYyMVoXDTI1MDYxMTE4MzYyMVowLzEtMCsGA1UEAxMk MGVmN2Q0MTQtN2Y5ZS00Mjg0LWJjNjMtMGYxNzRjYWNkODkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL0z+tPOekphSDZEQseKtJ5oISiGKXI8HbSR GpBuwmeeTcd1DVrvfxBo0ilUv56ZbC2yp2wvlZCQuJaOGlVwQENfKoTA4PXqGPKY dUxzA/IUHZ9DAdXOhJ9wxnGbfaOQPNHbrxHUM3ScHSI9SHBGAjSDB9R6Iu9lSqso 8dJRAwuwBCOA6pJXfi96ByCkSb8Z//IbtzYyFOpKGgX0VJr0J9ZOAAZjruvgIMi3 13jmVu8UNw/a7i2ySUuuZjKdCw8YB/TCej0cvtY7hKHFVJV7u/gR6Dfe2GS6FIoE dkMERrjW54ewGkylcu/emhblckggbXXRI6U0lYEfx2csSQe2oQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFNhraaqIlnfIjDPdEWn+ecv/LTEbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvOTY5NTIyZjMtMTRiOC0z MjZhLThmZWUtMjc4ZjljMGRlMTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA0TOAAwQA 0TOGAwQA0TOYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHr/YqvAzHl0YTsmvg81TbuKP+KgCM7nAd9M9WMr 4aGiJZgtgjLUM9ca7th+Qg2hBqfdR3dLeOudqm728AfjkVhUM0OZ436eA0Nx6tHg MAsku3iNP84Fme+wTTpdlif/RR6XU47yK0VZgzT81sbs4pFrWUdKsOf8LuwhIDVB dQrEc9d+T1cS/4ERqJ2FNT97DF5JFG4rnRETt9uPqh4At92D1nuRa9/hO+NVXWi/ 9CYivB6BrlTqfLucoOl+ypZPftkT3kYaMfGocDtgh07il927tnAheatL4hiqqyvs hGieOqUwuJy4m2Mu3ayQd69wuQOGb+hiHgolmnQq1hsbj7Q= -----END CERTIFICATE-----Generated at Sun Apr 6 14:44:03 2025 by rpki-client