$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/f984a998-f709-386e-9a12-6db49c1c894c.roa File: f984a998-f709-386e-9a12-6db49c1c894c.roa (raw, json) Hash identifier: mGDOK6TsADQ98j24zpsnh8M3pyBBdqH1/wYFt0tnbWY= Subject key identifier: 5D:9D:2C:3F:C3:8E:C2:E3:4D:70:86:8D:68:EC:1A:12:86:6F:26:E8 Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F4328584917DC251864DCFFE97E713C40 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/f984a998-f709-386e-9a12-6db49c1c894c.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 394398 IP address blocks: 209.124.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Mar 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:25:18:64:dc:ff:e9:7e:71:3c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=a585bde2-3368-4992-a4c3-9ad06b465dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4a:12:59:c8:d4:96:07:20:de:ad:27:9f:48: 1a:e1:3f:ff:de:e0:b8:71:85:dd:8d:59:57:09:71: 73:2b:87:fb:1c:8a:2f:dc:cb:f6:c2:5a:30:c0:86: 5c:32:6d:3b:bb:0f:93:dd:48:ed:e9:46:c8:39:8a: 6f:f1:60:73:4a:5e:7c:67:9f:00:65:a4:8f:74:a1: be:ec:7e:20:03:46:e2:5a:72:74:f1:b3:ed:43:95: 11:78:20:db:e1:5b:b2:fd:65:09:77:d4:23:b2:86: c4:4d:7c:2c:a1:f1:f7:65:d0:e5:f3:85:0e:31:65: d4:62:21:9c:77:7f:6b:62:3e:70:98:92:97:bf:dc: 00:58:35:2b:32:3c:63:b6:e1:3b:ae:44:25:d3:2b: 5c:28:74:85:ec:93:84:d5:9a:9a:6b:de:c1:58:e3: 9b:83:71:c7:17:78:92:1f:ae:5f:12:9c:f1:b0:2b: 29:6b:13:08:26:73:0e:71:30:97:2b:55:19:0e:b6: 18:38:a3:2c:88:d6:3f:a9:a7:76:95:da:ec:05:c7: 7b:72:cf:0b:43:d4:a6:e7:c0:14:38:84:6a:aa:9d: e5:71:c8:70:dc:d7:82:65:f3:1a:25:a2:a6:56:57: 9e:22:90:0c:fd:10:cd:38:3a:bd:fe:59:c1:fb:07: 1f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:9D:2C:3F:C3:8E:C2:E3:4D:70:86:8D:68:EC:1A:12:86:6F:26:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/f984a998-f709-386e-9a12-6db49c1c894c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 209.124.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:74:ad:b6:e3:c8:3a:a8:f0:5d:db:3f:de:6f:44:6f:2b:92: 09:f4:8c:fa:f2:85:fa:af:18:5d:a5:33:1e:98:4c:5b:12:32: 9d:9d:05:5b:59:85:a5:ee:e8:f6:21:c6:8d:f1:8c:1d:b9:d3: 0c:cb:8d:47:f8:a6:31:b6:8e:fb:75:9b:d7:e5:5c:e6:5a:69: 7e:64:6d:eb:62:13:97:9f:73:de:ff:37:97:48:c3:11:31:48: ac:88:cc:a5:28:9a:67:c8:01:ed:a0:83:ad:75:2b:a0:ca:66: 64:b2:91:0e:6d:97:2f:e6:9e:8b:21:85:e7:e3:68:fa:fb:c1: 95:c2:dc:7a:4f:f9:9d:ad:8f:b9:ef:1a:f8:85:8b:f9:4e:73: 5e:54:f4:07:64:99:78:46:9a:70:08:40:23:fd:e1:a5:40:5d: 83:ba:26:4d:94:45:1d:a5:0f:9c:1f:2e:e3:ee:eb:9c:12:e0: e8:22:91:a5:69:15:94:31:17:2c:f7:24:e9:dc:2e:03:b8:68: bb:7f:ba:42:8d:d1:0d:cb:18:78:08:59:94:94:01:bb:50:68: 6d:e3:9c:cc:e1:5d:b6:c1:af:46:68:8d:ae:90:f8:ec:57:fa: e2:77:38:40:c5:04:9d:43:a5:8d:ef:d9:d0:86:7d:58:f1:9c: 02:b9:f3:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3CUYZNz/6X5xPEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk YTU4NWJkZTItMzM2OC00OTkyLWE0YzMtOWFkMDZiNDY1ZGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkoSWcjUlgcg3q0nn0ga4T//3uC4cYXdjVlX CXFzK4f7HIov3Mv2wlowwIZcMm07uw+T3Ujt6UbIOYpv8WBzSl58Z58AZaSPdKG+ 7H4gA0biWnJ08bPtQ5UReCDb4Vuy/WUJd9QjsobETXwsofH3ZdDl84UOMWXUYiGc d39rYj5wmJKXv9wAWDUrMjxjtuE7rkQl0ytcKHSF7JOE1Zqaa97BWOObg3HHF3iS H65fEpzxsCspaxMIJnMOcTCXK1UZDrYYOKMsiNY/qad2ldrsBcd7cs8LQ9Sm58AU OIRqqp3lcchw3NeCZfMaJaKmVleeIpAM/RDNODq9/lnB+wcfaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF2dLD/DjsLjTXCGjWjsGhKGbyboMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvZjk4NGE5OTgtZjcwOS0z ODZlLTlhMTItNmRiNDljMWM4OTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XwnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGB0rbbjyDqo8F3bP95vRG8rkgn0jPryhfqvGF2lMx6YTFsSMp2dBVtZ haXu6PYhxo3xjB250wzLjUf4pjG2jvt1m9flXOZaaX5kbetiE5efc97/N5dIwxEx SKyIzKUommfIAe2gg611K6DKZmSykQ5tly/mnoshhefjaPr7wZXC3HpP+Z2tj7nv GviFi/lOc15U9AdkmXhGmnAIQCP94aVAXYO6Jk2URR2lD5wfLuPu65wS4OgikaVp FZQxFyz3JOncLgO4aLt/ukKN0Q3LGHgIWZSUAbtQaG3jnMzhXbbBr0Zoja6Q+OxX +uJ3OEDFBJ1DpY3v2dCGfVjxnAK583c= -----END CERTIFICATE-----Generated at Mon Mar 24 19:17:51 2025 by rpki-client