$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/7c4313aa-d6c0-3d7a-b06c-c74e7368f2ff.roa File: 7c4313aa-d6c0-3d7a-b06c-c74e7368f2ff.roa (raw, json) Hash identifier: XXAYvj3S4KXX6VJORQVm16M/YD33+wt6dacE5zcvve4= Subject key identifier: D3:56:1C:6B:12:9F:EA:9B:05:65:2E:00:3B:EE:52:98:94:6F:E0:73 Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F4328584917DC2525F52EB3D4DAB5C900 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/7c4313aa-d6c0-3d7a-b06c-c74e7368f2ff.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 20471 IP address blocks: 209.124.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:25:25:f5:2e:b3:d4:da:b5:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=b33f1537-734d-4341-9f38-f7a76be92832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:69:92:6a:fc:8f:24:84:1d:d5:b4:55:45:a0: af:dd:60:1b:28:07:f0:87:4b:2f:32:c0:3b:57:ca: e5:c5:4a:fe:c2:7e:59:5d:2e:9e:d1:25:1d:07:4a: 12:95:3e:86:3a:20:56:61:fd:c1:c1:6b:2d:02:09: 41:97:83:a2:ce:6c:a0:33:47:cc:39:ea:1c:e0:ff: 1d:a4:a9:6c:ba:20:61:64:77:66:ae:9b:9e:ec:bd: ed:9c:26:af:d3:72:84:e0:03:af:13:79:3f:df:43: 66:9b:cf:79:2e:72:93:a7:e0:b1:1e:44:65:4f:9a: f4:94:f6:b2:76:48:46:27:54:7e:bd:2c:02:44:a5: 7a:f6:ac:92:fe:82:d4:ed:08:99:04:5a:35:dc:03: e1:ee:f3:3d:b9:e8:9f:cf:9e:49:18:f9:55:dc:8a: 2a:f8:27:f3:99:88:e4:57:de:06:a2:37:95:75:a3: 98:0c:e7:5c:b1:bf:91:a3:db:83:4e:d6:d5:10:4b: ce:ac:73:96:bf:59:d3:52:65:27:8f:b1:10:a4:14: 58:10:b4:0f:1a:80:c7:1b:7b:95:32:28:39:5f:58: 52:5d:f3:b8:42:b6:f7:31:62:f8:e4:8d:42:fe:fe: 7f:9b:bc:39:69:68:eb:95:83:5d:30:fa:ba:57:ad: 4a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:56:1C:6B:12:9F:EA:9B:05:65:2E:00:3B:EE:52:98:94:6F:E0:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/7c4313aa-d6c0-3d7a-b06c-c74e7368f2ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 209.124.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:cc:b6:26:74:45:36:bf:f4:22:9b:df:d6:9c:d8:aa:e2:1b: 9e:06:aa:ea:88:20:0b:6f:ff:de:52:86:ba:e4:ed:fe:59:ae: 67:9f:9f:e2:a1:5c:f3:c9:97:5c:0b:33:e7:ac:b1:ec:a2:f3: 6f:c5:d1:5d:3b:67:c5:6d:fd:96:de:d6:15:29:46:0c:94:9a: b0:66:ff:a0:a2:90:87:bf:fc:9c:67:c6:86:3f:17:8b:f0:1c: 14:9b:42:e9:09:9f:45:20:73:a9:12:d1:92:2c:a0:27:eb:a7: 09:9d:81:f9:bf:1b:bd:1b:6b:46:9f:36:1c:80:5f:7c:4e:b0: da:46:12:cc:4c:28:61:3b:2d:eb:ad:eb:66:fe:03:be:61:9b: 14:2b:22:3b:5a:d6:e0:2d:6d:bc:50:95:7a:ae:dd:eb:98:f5: ab:98:92:da:a1:f3:49:54:56:61:fa:8f:c0:1a:27:e8:62:6f: 32:d9:ba:ac:14:93:9c:80:6b:d7:13:38:7f:3d:47:85:c0:ba: 27:41:be:84:00:09:f2:c8:7f:71:81:14:ad:49:8b:79:4f:f1: e0:ce:34:c6:93:6e:51:4a:f5:3a:cc:78:db:87:5e:54:12:97: a5:21:1a:e6:95:36:d9:0a:4c:b0:59:c4:72:73:b4:6a:85:63: c7:a0:40:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3CUl9S6z1Nq1yQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk YjMzZjE1MzctNzM0ZC00MzQxLTlmMzgtZjdhNzZiZTkyODMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WmSavyPJIQd1bRVRaCv3WAbKAfwh0svMsA7 V8rlxUr+wn5ZXS6e0SUdB0oSlT6GOiBWYf3BwWstAglBl4OizmygM0fMOeoc4P8d pKlsuiBhZHdmrpue7L3tnCav03KE4AOvE3k/30Nmm895LnKTp+CxHkRlT5r0lPay dkhGJ1R+vSwCRKV69qyS/oLU7QiZBFo13APh7vM9ueifz55JGPlV3Ioq+CfzmYjk V94GojeVdaOYDOdcsb+Ro9uDTtbVEEvOrHOWv1nTUmUnj7EQpBRYELQPGoDHG3uV Mig5X1hSXfO4Qrb3MWL45I1C/v5/m7w5aWjrlYNdMPq6V61KfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNWHGsSn+qbBWUuADvuUpiUb+BzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvN2M0MzEzYWEtZDZjMC0z ZDdhLWIwNmMtYzc0ZTczNjhmMmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XwqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjMtiZ0RTa/9CKb39ac2KriG54GquqIIAtv/95Shrrk7f5Zrmefn+Kh XPPJl1wLM+esseyi82/F0V07Z8Vt/Zbe1hUpRgyUmrBm/6CikIe//JxnxoY/F4vw HBSbQukJn0Ugc6kS0ZIsoCfrpwmdgfm/G70ba0afNhyAX3xOsNpGEsxMKGE7Leut 62b+A75hmxQrIjta1uAtbbxQlXqu3euY9auYktqh80lUVmH6j8AaJ+hibzLZuqwU k5yAa9cTOH89R4XAuidBvoQACfLIf3GBFK1Ji3lP8eDONMaTblFK9TrMeNuHXlQS l6UhGuaVNtkKTLBZxHJztGqFY8egQFA= -----END CERTIFICATE-----Generated at Fri Mar 14 10:30:16 2025 by rpki-client