$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/639c1735-1cd0-355a-a116-4129dc8f68b1.roa File: 639c1735-1cd0-355a-a116-4129dc8f68b1.roa (raw, json) Hash identifier: qtVT2HUcvvCb/ip1cijAiXZMH2do5i4TV6mc6WrK13M= Subject key identifier: BE:EE:B4:AF:8B:8F:E3:76:0A:48:BD:C3:94:97:08:7E:F2:34:EF:15 Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F4328584917DC2A5AFCE95F0F2CB76A80 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/639c1735-1cd0-355a-a116-4129dc8f68b1.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 20471 IP address blocks: 209.124.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:2a:5a:fc:e9:5f:0f:2c:b7:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=35f74201-7288-4e7b-ae91-de1504ca781b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ee:72:ab:2a:01:05:b7:02:45:e4:96:cb:53: 27:2e:ff:aa:62:eb:f6:8e:63:6a:38:7a:bf:11:69: 00:df:65:c1:bd:37:d8:c4:76:98:c4:74:17:8f:36: ee:f4:e8:fd:73:47:48:d6:5d:d4:24:b4:3c:49:cf: 3b:39:7a:ac:03:70:e1:0e:14:47:84:24:49:21:46: 29:72:c3:1a:8d:f1:a6:c9:36:ac:7a:06:e9:94:1f: b0:34:a8:c9:dd:67:bb:6d:16:7f:99:4f:e2:74:73: 61:7f:43:0c:98:75:37:94:13:9b:b5:1d:8c:39:d9: a6:72:f3:26:22:16:00:47:d4:db:3d:69:f7:64:46: 8f:00:dd:fe:75:d2:56:f3:ad:e8:4c:68:50:67:64: 63:0e:80:17:c6:d5:79:46:9f:e1:01:d9:04:4b:ad: d0:38:2f:e1:0b:5c:d7:9f:0d:3e:a4:26:0e:e2:6b: b1:f1:64:f2:96:63:20:04:df:cb:6a:21:a8:dc:9b: 6f:47:fd:62:a9:62:5c:2f:a4:e4:e7:92:5c:c1:02: 18:95:89:50:a5:62:1a:41:af:df:8f:2e:18:f7:8e: 3a:71:f7:35:bb:39:a0:f3:d8:bd:1a:f6:05:ab:ba: 92:d8:ac:ca:81:9c:1d:d6:a1:76:8e:c0:f7:ce:38: ae:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:EE:B4:AF:8B:8F:E3:76:0A:48:BD:C3:94:97:08:7E:F2:34:EF:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/639c1735-1cd0-355a-a116-4129dc8f68b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 209.124.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:89:5f:51:68:02:94:79:5e:a6:ae:7e:2d:a4:42:16:51:5f: 48:29:2e:f0:1f:5d:fd:74:42:63:e4:5e:53:7d:9f:a4:b0:39: 1e:e5:5d:c0:b5:cd:0e:83:96:bd:05:3a:56:ca:6d:c2:17:f8: 19:44:e7:eb:4d:1a:5e:93:dc:f5:77:44:5e:ca:7d:51:67:f3: d0:b2:de:93:4e:ab:65:ae:ea:4f:8f:bd:10:2b:a2:8a:0f:fb: ad:44:e5:a8:fe:d4:e3:1c:a0:f1:e7:fc:0f:90:88:2f:a6:bc: 63:80:5d:08:15:55:26:41:06:c9:39:bf:ef:d5:4a:d5:9d:b1: 54:b4:da:25:6f:92:5a:b9:69:28:34:67:47:b3:0f:78:f1:53: 03:4b:3b:2e:f2:dd:d3:6b:8e:4f:97:69:36:64:fb:ae:42:24: aa:f1:e6:30:a8:fc:23:83:08:73:51:dd:66:2f:c5:1a:26:31: 3d:78:a1:4b:0e:ce:18:d0:05:29:d7:54:51:7e:fd:32:e6:91: 4b:fb:2d:c8:99:af:9d:86:e5:f9:95:d9:46:e8:15:3f:3e:c2: c5:65:f6:3a:66:3f:4f:43:58:f7:56:b4:b0:4e:69:47:a2:30: 6e:87:45:fa:de:03:be:5f:0c:00:0f:c2:c1:14:c4:e2:ba:c4: f0:36:34:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3Cpa/OlfDyy3aoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk MzVmNzQyMDEtNzI4OC00ZTdiLWFlOTEtZGUxNTA0Y2E3ODFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4u5yqyoBBbcCReSWy1MnLv+qYuv2jmNqOHq/ EWkA32XBvTfYxHaYxHQXjzbu9Oj9c0dI1l3UJLQ8Sc87OXqsA3DhDhRHhCRJIUYp csMajfGmyTasegbplB+wNKjJ3We7bRZ/mU/idHNhf0MMmHU3lBObtR2MOdmmcvMm IhYAR9TbPWn3ZEaPAN3+ddJW863oTGhQZ2RjDoAXxtV5Rp/hAdkES63QOC/hC1zX nw0+pCYO4mux8WTylmMgBN/LaiGo3JtvR/1iqWJcL6Tk55JcwQIYlYlQpWIaQa/f jy4Y9446cfc1uzmg89i9GvYFq7qS2KzKgZwd1qF2jsD3zjiuSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7utK+Lj+N2Cki9w5SXCH7yNO8VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvNjM5YzE3MzUtMWNkMC0z NTVhLWExMTYtNDEyOWRjOGY2OGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XwmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK+JX1FoApR5Xqaufi2kQhZRX0gpLvAfXf10QmPkXlN9n6SwOR7lXcC1 zQ6Dlr0FOlbKbcIX+BlE5+tNGl6T3PV3RF7KfVFn89Cy3pNOq2Wu6k+PvRAroooP +61E5aj+1OMcoPHn/A+QiC+mvGOAXQgVVSZBBsk5v+/VStWdsVS02iVvklq5aSg0 Z0ezD3jxUwNLOy7y3dNrjk+XaTZk+65CJKrx5jCo/CODCHNR3WYvxRomMT14oUsO zhjQBSnXVFF+/TLmkUv7LciZr52G5fmV2UboFT8+wsVl9jpmP09DWPdWtLBOaUei MG6HRfreA75fDAAPwsEUxOK6xPA2NGE= -----END CERTIFICATE-----Generated at Fri Mar 14 11:01:09 2025 by rpki-client