$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/7c4313aa-d6c0-3d7a-b06c-c74e7368f2ff.roa File: 7c4313aa-d6c0-3d7a-b06c-c74e7368f2ff.roa (raw, json) Hash identifier: gezPQSTPRcQoKE1ldYVsEIrFEgRQTZX06a5WHgZ+qTc= Subject key identifier: 5E:9D:4C:C1:CF:03:72:24:DB:C7:CB:06:69:29:D1:AF:B6:77:76:AC Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F4328584AD7D1099B9A936AF9249C73C0 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/7c4313aa-d6c0-3d7a-b06c-c74e7368f2ff.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 20471 IP address blocks: 209.124.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:09:9b:9a:93:6a:f9:24:9c:73:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=d6559b07-bdb3-4351-8e39-7ce093f09914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:51:f4:b2:4e:15:e5:66:45:3b:76:d1:fe:08: 33:58:eb:02:b5:43:4d:fc:50:4b:30:b1:42:3b:43: 7a:23:ef:15:ed:34:14:f7:d6:de:d2:9d:7f:a0:34: dd:d5:36:65:9b:4c:45:84:ef:58:50:04:ad:bd:10: 45:61:44:f2:d2:11:e3:7e:56:b7:d2:ce:07:a8:b5: 49:1c:ec:86:c2:ff:2d:fc:ea:ee:c3:10:14:7c:af: b9:21:9f:6a:12:92:e9:38:6d:5f:9a:80:0f:50:0a: 83:67:f5:a3:96:58:f9:cb:1f:58:11:5f:81:92:2b: e7:81:ce:f1:d1:14:de:89:5c:c1:fa:ae:fc:48:b2: 5f:c2:c2:8f:ba:f9:fb:67:67:e6:ca:0d:ad:11:b5: b7:20:1d:6d:7c:e2:31:1c:c9:d8:c8:c4:03:43:ed: f9:b7:90:6c:ab:95:ae:75:78:10:93:4b:62:e7:ff: 67:0c:9f:32:3d:f5:4f:c2:4a:5f:68:d7:10:a1:72: 3c:03:9e:7e:f3:a6:31:42:39:65:a0:6a:c3:34:4c: 0a:8f:d4:09:22:b6:13:78:9d:8d:61:80:e7:69:24: cf:4e:2b:21:ed:b8:cb:c8:06:eb:14:f9:b5:ba:66: f4:88:7c:b8:b7:98:f6:71:01:2a:13:3c:26:f6:05: a1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:9D:4C:C1:CF:03:72:24:DB:C7:CB:06:69:29:D1:AF:B6:77:76:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/7c4313aa-d6c0-3d7a-b06c-c74e7368f2ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 209.124.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:ed:25:c3:4b:0c:ac:3e:ab:fe:4d:d2:ab:c9:92:de:7c:f7: 92:d4:92:6f:98:12:a2:8b:4e:e7:32:7e:42:a8:c9:44:af:cf: 71:ff:4b:2a:9f:f9:c4:fe:5e:e5:11:60:0b:53:cb:57:df:e6: 2f:c2:3b:d6:60:38:d0:1b:68:e0:9f:40:d0:6f:f9:fb:27:b3: 2d:67:b6:ce:2a:50:d9:c6:e4:c1:4f:5c:8a:9a:b3:a9:b4:e3: 57:44:57:c0:61:30:34:0f:6c:21:e7:24:99:ad:d5:ca:b0:64: 62:19:92:92:66:cf:07:76:d3:43:57:ea:32:11:b3:cb:04:b4: 5f:51:5b:1a:f5:ad:96:35:55:68:09:5c:b4:e7:76:8b:a8:48: 95:c4:97:42:8d:c3:db:2a:be:1f:85:41:cd:28:f7:62:4b:f1: c8:5b:7d:8a:c5:4c:e6:da:66:9e:8a:ad:23:3c:99:5d:ee:ae: 25:78:13:54:71:f4:28:0d:8f:9e:e4:d8:6a:78:e4:a4:a5:a1: 3f:c1:a0:7e:cc:82:b7:9b:b8:28:07:03:75:ef:54:3d:86:a1: 2b:ca:c5:2a:25:c0:75:7a:63:85:7f:b7:c1:f4:45:b9:05:ef: d1:f0:b0:16:0b:0d:92:82:ad:be:c6:60:69:87:e8:cd:2b:b8: 45:01:e0:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0QmbmpNq+SScc8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk ZDY1NTliMDctYmRiMy00MzUxLThlMzktN2NlMDkzZjA5OTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlH0sk4V5WZFO3bR/ggzWOsCtUNN/FBLMLFC O0N6I+8V7TQU99be0p1/oDTd1TZlm0xFhO9YUAStvRBFYUTy0hHjfla30s4HqLVJ HOyGwv8t/OruwxAUfK+5IZ9qEpLpOG1fmoAPUAqDZ/Wjllj5yx9YEV+Bkivngc7x 0RTeiVzB+q78SLJfwsKPuvn7Z2fmyg2tEbW3IB1tfOIxHMnYyMQDQ+35t5Bsq5Wu dXgQk0ti5/9nDJ8yPfVPwkpfaNcQoXI8A55+86YxQjlloGrDNEwKj9QJIrYTeJ2N YYDnaSTPTish7bjLyAbrFPm1umb0iHy4t5j2cQEqEzwm9gWhVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6dTMHPA3Ik28fLBmkp0a+2d3asMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvN2M0MzEzYWEtZDZjMC0z ZDdhLWIwNmMtYzc0ZTczNjhmMmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XwqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAztJcNLDKw+q/5N0qvJkt5895LUkm+YEqKLTucyfkKoyUSvz3H/Syqf +cT+XuURYAtTy1ff5i/CO9ZgONAbaOCfQNBv+fsnsy1nts4qUNnG5MFPXIqas6m0 41dEV8BhMDQPbCHnJJmt1cqwZGIZkpJmzwd200NX6jIRs8sEtF9RWxr1rZY1VWgJ XLTndouoSJXEl0KNw9sqvh+FQc0o92JL8chbfYrFTObaZp6KrSM8mV3uriV4E1Rx 9CgNj57k2Gp45KSloT/BoH7MgrebuCgHA3XvVD2GoSvKxSolwHV6Y4V/t8H0RbkF 79HwsBYLDZKCrb7GYGmH6M0ruEUB4HY= -----END CERTIFICATE-----Generated at Thu Aug 21 12:38:52 2025 by rpki-client