$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/6a6f3cff-6ac0-311f-91ee-4bee3b0137a3.roa File: 6a6f3cff-6ac0-311f-91ee-4bee3b0137a3.roa (raw, json) Hash identifier: Z3cs5OkcOasVQ2/YtUPpp92pditGbRBRPPbK6IYM6sw= Subject key identifier: 7E:B8:3F:82:94:10:6D:20:8E:06:1C:ED:88:2E:93:B3:09:52:8F:53 Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F43285849D594E173E6A749788EDD1CC0 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/6a6f3cff-6ac0-311f-91ee-4bee3b0137a3.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 12129 IP address blocks: 209.131.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:e1:73:e6:a7:49:78:8e:dd:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=21663da9-e779-439a-8b3e-4f76de448611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:26:19:41:cc:ad:7e:52:e2:85:c2:90:18:f0: 99:ec:6c:4a:4b:46:67:3c:ac:65:28:9e:1b:29:9c: 30:5e:13:74:be:93:80:c9:f5:a5:bf:be:45:a5:12: 69:7c:a3:67:a5:0d:bc:d4:d3:d5:19:31:fb:be:fa: d8:40:67:53:39:ab:8b:6d:cc:54:df:24:12:64:af: 2b:5c:3d:e2:ff:1d:92:ef:80:82:2a:07:ec:f0:d7: ef:ff:a9:5e:62:5a:8b:4b:27:97:67:f6:f2:55:c4: be:6a:00:f3:39:fe:69:3e:ef:dc:ea:7f:28:b8:31: 5f:18:ab:5e:c2:8d:c8:da:8b:55:a1:ce:c2:05:5a: 7a:8f:90:f8:c7:37:4a:13:a8:6e:93:58:6c:95:53: 09:f9:ee:f0:1b:f7:33:3d:40:8b:34:49:09:fa:25: b0:17:28:f2:39:82:93:63:62:a9:a6:36:d7:99:78: 4b:0b:1c:2c:05:d8:90:5d:d8:2d:7d:b2:2e:53:1b: 81:4c:50:2b:5d:54:47:17:bc:04:dc:4f:3d:2d:2b: c3:fa:6e:b1:40:cf:9e:13:6a:b6:81:ae:cf:31:fc: fb:d1:e8:04:28:6f:a6:b2:2d:0d:ef:17:0e:2d:40: 55:8b:82:69:43:42:ec:ea:d1:73:2e:6d:16:40:8c: 71:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B8:3F:82:94:10:6D:20:8E:06:1C:ED:88:2E:93:B3:09:52:8F:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/6a6f3cff-6ac0-311f-91ee-4bee3b0137a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 209.131.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:1e:d2:91:67:b1:b7:f0:22:56:f5:8e:7e:f7:1f:8f:ba:2b: 50:72:4d:cb:03:fa:2b:8d:a7:00:5f:cc:85:84:f3:74:83:99: 11:98:3f:db:f2:7a:5a:8f:29:c3:6f:aa:bf:9b:75:f5:4e:20: d6:3d:88:e1:78:a8:87:42:ff:6f:62:00:53:6a:11:e5:c3:c2: c5:30:67:4d:0b:96:57:80:e5:0f:a2:8b:c9:f9:b3:53:07:f4: 55:e5:5f:01:36:cd:31:59:43:24:ed:63:d1:44:ea:5a:d2:74: cc:42:45:e5:76:1a:12:83:f1:e8:f8:f2:34:bd:4c:cd:6a:7f: 66:cb:c5:b8:00:79:b7:ce:39:57:e1:3b:21:de:40:b2:e4:f8: e5:41:3d:ed:d7:b1:1c:ec:8d:22:92:cc:99:dc:c8:88:6a:10: d7:2f:7a:e6:10:cc:1c:ce:25:32:a4:3d:13:42:9d:8e:df:4b: 29:b8:ee:40:30:74:e7:97:31:fc:e0:8c:b8:4e:2e:c0:82:b3: b3:fa:b9:26:d5:96:b2:47:cc:f1:71:c4:80:5e:f4:8f:38:8d: bd:98:9b:26:07:1d:88:0e:dc:7a:7e:fa:11:25:8f:e3:59:b5: 5b:56:34:92:67:6f:fb:e9:b8:e5:9b:f1:33:1a:0d:f2:f5:ee: 01:e2:71:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlOFz5qdJeI7dHMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk MjE2NjNkYTktZTc3OS00MzlhLThiM2UtNGY3NmRlNDQ4NjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSYZQcytflLihcKQGPCZ7GxKS0ZnPKxlKJ4b KZwwXhN0vpOAyfWlv75FpRJpfKNnpQ281NPVGTH7vvrYQGdTOauLbcxU3yQSZK8r XD3i/x2S74CCKgfs8Nfv/6leYlqLSyeXZ/byVcS+agDzOf5pPu/c6n8ouDFfGKte wo3I2otVoc7CBVp6j5D4xzdKE6huk1hslVMJ+e7wG/czPUCLNEkJ+iWwFyjyOYKT Y2KppjbXmXhLCxwsBdiQXdgtfbIuUxuBTFArXVRHF7wE3E89LSvD+m6xQM+eE2q2 ga7PMfz70egEKG+msi0N7xcOLUBVi4JpQ0Ls6tFzLm0WQIxx8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH64P4KUEG0gjgYc7Yguk7MJUo9TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvNmE2ZjNjZmYtNmFjMC0z MTFmLTkxZWUtNGJlZTNiMDEzN2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0YMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0e0pFnsbfwIlb1jn73H4+6K1ByTcsD+iuNpwBfzIWE83SDmRGYP9vy elqPKcNvqr+bdfVOINY9iOF4qIdC/29iAFNqEeXDwsUwZ00LlleA5Q+ii8n5s1MH 9FXlXwE2zTFZQyTtY9FE6lrSdMxCReV2GhKD8ej48jS9TM1qf2bLxbgAebfOOVfh OyHeQLLk+OVBPe3XsRzsjSKSzJncyIhqENcveuYQzBzOJTKkPRNCnY7fSym47kAw dOeXMfzgjLhOLsCCs7P6uSbVlrJHzPFxxIBe9I84jb2YmyYHHYgO3Hp++hElj+NZ tVtWNJJnb/vpuOWb8TMaDfL17gHicSk= -----END CERTIFICATE-----Generated at Sun Jun 1 16:54:08 2025 by rpki-client