$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/526c06c8-686b-349b-85ed-ff6838d817f2.roa File: 526c06c8-686b-349b-85ed-ff6838d817f2.roa (raw, json) Hash identifier: y5vIGvsWGE6wMIkwRzuRnx17gPfoGpOsmTUJXkhJBJU= Subject key identifier: 69:67:88:49:DF:15:FA:E1:DE:25:56:33:7F:0F:BF:8D:33:2F:FE:89 Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F43285849D594E74ED7C61CB73BBDCB00 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/526c06c8-686b-349b-85ed-ff6838d817f2.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 12129 IP address blocks: 204.232.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:e7:4e:d7:c6:1c:b7:3b:bd:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=a17421b8-db7d-434b-bd96-000c61b5c42d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c0:0a:ff:97:39:ff:48:9a:34:e2:1a:97:6a: 9a:55:84:2e:e0:8d:31:53:6c:cc:72:84:be:9f:f2: 2e:8a:c9:13:87:c8:a3:5f:a3:d7:2c:b6:7d:40:2e: fe:cd:fc:0f:15:d8:d9:68:e5:0a:73:00:a5:99:97: 31:5d:e1:fe:ac:d0:35:45:5c:19:70:2a:75:4b:29: 75:14:11:13:d3:c7:f2:20:11:bd:44:61:35:6f:35: 4a:5d:a7:e9:5c:f2:72:3b:32:52:e7:e2:3c:1d:8b: 8f:a9:fd:69:68:7a:f7:51:f0:4e:fe:a1:0a:e5:bf: 99:4f:95:2b:6a:f3:bf:a5:1c:fa:fb:bb:af:b7:f9: 93:a7:24:d8:bc:ea:82:ae:7e:25:fb:bd:e0:1a:75: 60:d1:a3:7b:bc:59:37:e0:15:f8:77:14:7d:b8:5a: cb:97:80:90:57:83:90:84:c0:4e:02:c8:ef:35:7f: 43:2d:03:97:1c:4d:7e:d3:6b:c4:13:ef:f8:ac:1c: 22:4d:c1:ff:4d:2c:b4:8e:d8:b8:9a:d0:85:0f:6f: 96:79:1d:f8:3d:5f:17:da:74:84:c1:a4:e2:be:16: a5:89:91:2c:4b:c3:b6:d9:9f:53:a6:09:e0:f7:1e: 0c:c0:bc:64:29:0d:1e:cd:09:12:0b:7c:d8:35:f3: 29:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:67:88:49:DF:15:FA:E1:DE:25:56:33:7F:0F:BF:8D:33:2F:FE:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/526c06c8-686b-349b-85ed-ff6838d817f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 204.232.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:be:aa:17:37:72:87:77:7b:77:bb:a1:e8:47:e6:23:e4:fd: 8a:59:0a:28:25:7c:cf:0c:69:9e:dc:6e:f7:44:44:b6:47:ba: b9:7a:71:fc:ff:31:c5:b9:b5:c0:c1:71:14:96:12:72:3a:45: c5:0c:3a:98:8d:72:97:5c:f4:59:61:ec:dc:dc:d4:36:6b:21: 54:70:5c:97:ca:3a:7d:68:1e:96:89:35:d6:d4:c2:fd:31:ab: 36:56:8a:b3:a9:e5:d0:7d:91:0d:ad:96:d7:9b:a3:90:54:c7: 73:d9:80:c0:28:1e:52:81:84:38:e1:22:9b:b2:05:e0:3a:32: d9:c1:88:08:79:e0:6e:08:86:74:a5:32:c7:0e:90:86:cb:2b: f7:0c:a1:48:52:3d:19:cc:7c:89:51:04:44:53:97:f6:8f:aa: 77:a8:ae:b1:87:ab:28:3d:4f:7b:2f:e4:26:1b:c8:21:85:f3: a4:76:63:16:41:31:34:ca:79:07:4f:a8:b0:8b:4c:a9:c0:de: bc:a6:f4:ec:37:60:93:a9:4f:cb:e3:bc:58:c2:d0:d1:31:d8: fa:ad:70:79:f9:4f:53:44:32:a1:e7:86:0e:71:64:94:f0:3a: da:03:fa:b3:6e:74:92:93:e5:cf:7c:21:3e:b8:78:58:39:5c: 30:dc:4f:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlOdO18Yctzu9ywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk YTE3NDIxYjgtZGI3ZC00MzRiLWJkOTYtMDAwYzYxYjVjNDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8AK/5c5/0iaNOIal2qaVYQu4I0xU2zMcoS+ n/IuiskTh8ijX6PXLLZ9QC7+zfwPFdjZaOUKcwClmZcxXeH+rNA1RVwZcCp1Syl1 FBET08fyIBG9RGE1bzVKXafpXPJyOzJS5+I8HYuPqf1paHr3UfBO/qEK5b+ZT5Ur avO/pRz6+7uvt/mTpyTYvOqCrn4l+73gGnVg0aN7vFk34BX4dxR9uFrLl4CQV4OQ hMBOAsjvNX9DLQOXHE1+02vEE+/4rBwiTcH/TSy0jti4mtCFD2+WeR34PV8X2nSE waTivhaliZEsS8O22Z9Tpgng9x4MwLxkKQ0ezQkSC3zYNfMpQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlniEnfFfrh3iVWM38Pv40zL/6JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvNTI2YzA2YzgtNjg2Yi0z NDliLTg1ZWQtZmY2ODM4ZDgxN2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzOhQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADe+qhc3cod3e3e7oehH5iPk/YpZCiglfM8MaZ7cbvdERLZHurl6cfz/ McW5tcDBcRSWEnI6RcUMOpiNcpdc9Flh7Nzc1DZrIVRwXJfKOn1oHpaJNdbUwv0x qzZWirOp5dB9kQ2tltebo5BUx3PZgMAoHlKBhDjhIpuyBeA6MtnBiAh54G4IhnSl MscOkIbLK/cMoUhSPRnMfIlRBERTl/aPqneorrGHqyg9T3sv5CYbyCGF86R2YxZB MTTKeQdPqLCLTKnA3rym9Ow3YJOpT8vjvFjC0NEx2PqtcHn5T1NEMqHnhg5xZJTw OtoD+rNudJKT5c98IT64eFg5XDDcTwg= -----END CERTIFICATE-----Generated at Sun Jun 1 16:54:09 2025 by rpki-client