$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/102a1b54-7a91-37ec-9559-3213bbe645e4.roa File: 102a1b54-7a91-37ec-9559-3213bbe645e4.roa (raw, json) Hash identifier: k1pI44ufoOSzv8GU8Gmin7hNJvSzTAPND3lvkodGQPM= Subject key identifier: 7C:DA:1F:74:D8:B5:6E:57:B7:96:39:08:26:DA:26:69:6A:7A:F1:42 Certificate issuer: /CN=2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65 Certificate serial: 010D0C9F432858492CB2134D8E5226196B5B0DC0 Authority key identifier: FE:FC:FB:A5:07:E3:E4:59:51:89:82:45:0E:83:84:F3:DA:D5:28:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/102a1b54-7a91-37ec-9559-3213bbe645e4.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 10439 IP address blocks: 209.126.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b2:13:4d:8e:52:26:19:6b:5b:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=ed4a0161-5780-4a37-939d-9b34f6b6763a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:41:08:66:82:88:2f:aa:30:be:13:1a:2a:a9: 67:f1:7c:80:a6:87:3e:9b:f0:2b:36:0c:cb:1f:1f: 5b:85:7b:a1:bd:27:9c:ad:a9:8f:8d:82:da:e5:e3: 32:46:8c:75:25:c8:9a:1c:37:37:2e:61:7e:3c:37: 32:4b:92:5d:e9:0b:18:85:0c:3d:f2:ce:24:f6:57: d9:5d:f1:83:3d:6b:0f:b8:10:b5:e8:d2:97:82:b8: 6c:87:5b:46:35:16:26:d3:49:75:03:fc:dc:6e:68: f5:f0:9b:84:05:2d:e5:64:af:9f:4b:21:b9:d0:71: 03:6d:b4:e8:17:23:98:f1:b4:c0:6a:65:75:c1:cf: 2a:f5:e2:8a:f0:90:55:6c:7f:9a:a9:3a:cd:36:39: 24:e0:72:52:aa:0b:00:5e:ea:48:ab:78:9d:9c:8b: e5:95:7b:5f:2d:4b:51:e3:98:af:4e:d6:9b:f9:51: a1:d9:2c:36:33:26:ea:fa:1c:9c:bc:1f:36:38:92: e0:75:82:8b:e4:52:28:e6:70:ff:ea:da:63:7b:b3: 29:27:bb:62:fc:51:39:c7:87:ea:fe:23:34:33:35: aa:b2:5a:59:66:f8:3c:d0:c4:06:f2:86:80:e7:15: 77:16:9d:1d:f9:9d:d2:98:6a:a4:4c:41:09:d7:f5: 80:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:DA:1F:74:D8:B5:6E:57:B7:96:39:08:26:DA:26:69:6A:7A:F1:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/102a1b54-7a91-37ec-9559-3213bbe645e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.crl X509v3 Authority Key Identifier: keyid:FE:FC:FB:A5:07:E3:E4:59:51:89:82:45:0E:83:84:F3:DA:D5:28:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer sbgp-ipAddrBlock: critical IPv4: 209.126.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:0d:12:ad:6e:d1:97:e4:d5:19:64:e6:a4:af:92:02:ce:73: dc:c5:30:ef:d7:6d:6c:5e:4d:6d:9a:f9:70:d4:40:ce:69:60: 17:9f:58:b5:a6:44:33:29:6a:af:6b:55:95:56:2d:2c:b9:06: 87:0c:57:74:4b:d3:5a:ee:32:07:05:7e:69:54:89:4d:e2:df: 25:3b:04:4c:fd:96:b0:1f:fa:4d:a3:be:eb:60:ad:8c:fd:5c: 5f:02:79:2b:8f:58:28:28:7a:bd:a2:5f:a8:16:30:ec:e1:3c: ce:98:43:d1:5a:0b:26:73:5a:d8:cc:d8:09:a1:cc:1c:4e:cf: 29:f4:2d:4f:06:2d:a1:e9:36:b7:c9:8f:68:fd:05:dc:cf:cd: 21:3d:57:95:3d:c0:27:3d:d8:0d:0a:2b:ba:d6:ce:07:b6:da: c9:8e:63:db:c4:12:1b:ef:60:f7:e0:e0:15:3b:66:6b:8c:8f: 40:d9:14:29:18:64:3a:af:51:38:dd:4f:bf:6d:65:d0:4d:76: 20:25:9f:b2:50:b6:0a:36:1e:97:f4:0f:da:fd:a3:f5:d5:c9: a2:82:c4:fa:4b:b5:4f:2b:9a:f8:d8:26:64:18:4e:ea:6a:f2: f7:1d:2d:5b:ab:4f:ed:90:5f:6b:b6:97:31:23:1b:8a:eb:c1: 91:8b:af:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksshNNjlImGWtbDcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmYyZWQ4N2UtMjdmOS00MTRjLWE3YWYtMmI1YjVmZmEz ZjY1MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZWQ0YTAxNjEtNTc4MC00YTM3LTkzOWQtOWIzNGY2YjY3NjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0EIZoKIL6owvhMaKqln8XyApoc+m/ArNgzL Hx9bhXuhvSecramPjYLa5eMyRox1JciaHDc3LmF+PDcyS5Jd6QsYhQw98s4k9lfZ XfGDPWsPuBC16NKXgrhsh1tGNRYm00l1A/zcbmj18JuEBS3lZK+fSyG50HEDbbTo FyOY8bTAamV1wc8q9eKK8JBVbH+aqTrNNjkk4HJSqgsAXupIq3idnIvllXtfLUtR 45ivTtab+VGh2Sw2Mybq+hycvB82OJLgdYKL5FIo5nD/6tpje7MpJ7ti/FE5x4fq /iM0MzWqslpZZvg80MQG8oaA5xV3Fp0d+Z3SmGqkTEEJ1/WA3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzaH3TYtW5Xt5Y5CCbaJmlqevFCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZjJl ZDg3ZS0yN2Y5LTQxNGMtYTdhZi0yYjViNWZmYTNmNjUvMTAyYTFiNTQtN2E5MS0z N2VjLTk1NTktMzIxM2JiZTY0NWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmYyZWQ4N2UtMjdmOS00MTRjLWE3 YWYtMmI1YjVmZmEzZjY1LzJmMmVkODdlLTI3ZjktNDE0Yy1hN2FmLTJiNWI1ZmZh M2Y2NS5jcmwwHwYDVR0jBBgwFoAU/vz7pQfj5FlRiYJFDoOE89rVKHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yZjJlZDg3ZS0yN2Y5LTQxNGMtYTdhZi0yYjVi NWZmYTNmNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0X6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALsNEq1u0Zfk1Rlk5qSvkgLOc9zFMO/XbWxeTW2a+XDUQM5pYBefWLWm RDMpaq9rVZVWLSy5BocMV3RL01ruMgcFfmlUiU3i3yU7BEz9lrAf+k2jvutgrYz9 XF8CeSuPWCgoer2iX6gWMOzhPM6YQ9FaCyZzWtjM2AmhzBxOzyn0LU8GLaHpNrfJ j2j9BdzPzSE9V5U9wCc92A0KK7rWzge22smOY9vEEhvvYPfg4BU7ZmuMj0DZFCkY ZDqvUTjdT79tZdBNdiAln7JQtgo2Hpf0D9r9o/XVyaKCxPpLtU8rmvjYJmQYTupq 8vcdLVurT+2QX2u2lzEjG4rrwZGLr6g= -----END CERTIFICATE-----Generated at Tue Apr 29 07:53:25 2025 by rpki-client