$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/5fab7624-7ba0-38cc-939d-47dd362b1a68.roa File: 5fab7624-7ba0-38cc-939d-47dd362b1a68.roa (raw, json) Hash identifier: Y7pVekw2LX/9WxfBjL1QVdLNOBE6AgI/JE1Uf1+3dr0= Subject key identifier: DA:4A:35:62:2D:62:A0:1C:18:7E:C8:20:9E:92:17:A7:26:EA:9D:C3 Certificate issuer: /CN=8ffe7f4e-e1bd-427a-8194-4ea4396e548f Certificate serial: 010D0C9F43285849B14A0F7E41CE0F0481B8DAA0 Authority key identifier: 1A:E6:8C:00:28:DF:8B:BA:90:C5:64:5B:60:10:3F:20:2C:92:AF:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/5fab7624-7ba0-38cc-939d-47dd362b1a68.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 376 IP address blocks: 132.209.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:0f:7e:41:ce:0f:04:81:b8:da:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ffe7f4e-e1bd-427a-8194-4ea4396e548f Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=1ce70a44-0429-42c7-b205-d63596d483d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bb:b4:71:3f:14:55:70:16:06:69:11:08:82: 83:86:26:72:4d:d1:11:2e:07:16:f2:c8:3b:e1:bb: 27:6d:f4:11:88:c5:ed:74:ab:06:c4:4e:38:b4:41: 0e:fe:99:46:d7:47:ae:d6:1e:59:f4:30:ef:16:ad: a0:30:91:b5:55:f9:35:a5:b4:e2:fd:fe:5c:1c:33: 8c:1b:16:b7:99:45:7a:df:dc:0d:f2:64:f2:a3:d2: ed:79:5c:af:5a:82:28:67:79:c3:e1:4d:f4:fd:4f: a4:de:51:8e:45:a0:4d:8d:53:12:44:c0:4a:d2:76: f0:22:b5:2e:48:c3:78:9e:d1:e2:a5:6b:5a:89:84: bf:d0:d2:0e:bc:71:64:c5:3b:f4:a8:e5:52:bf:0d: b7:89:5f:e5:83:fa:53:87:d5:2f:91:c2:23:94:0f: f9:12:8d:19:ce:9a:9d:00:4a:cc:38:d0:fe:68:e4: 84:dc:63:1d:ab:55:a6:49:7d:7b:2c:93:e2:f3:e1: 46:2e:24:88:8e:d3:49:7e:13:f9:e5:7a:35:5d:71: b0:73:06:51:df:20:91:87:ad:fb:a9:b3:b3:01:d0: fb:b5:45:89:ae:d2:63:47:6d:27:9a:d5:29:94:54: 94:e2:2d:0c:a2:8f:5a:e1:08:74:93:7c:ba:dd:3f: 6a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:4A:35:62:2D:62:A0:1C:18:7E:C8:20:9E:92:17:A7:26:EA:9D:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/5fab7624-7ba0-38cc-939d-47dd362b1a68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.crl X509v3 Authority Key Identifier: keyid:1A:E6:8C:00:28:DF:8B:BA:90:C5:64:5B:60:10:3F:20:2C:92:AF:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.cer sbgp-ipAddrBlock: critical IPv4: 132.209.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:6e:3e:70:dd:73:08:6b:26:3f:9b:8f:13:b0:82:50:26:6d: f6:f7:ef:b6:7a:09:e0:8e:14:04:88:11:42:fa:49:d8:b2:14: ee:a9:5c:aa:1f:bc:ed:2a:5c:f9:41:ea:7a:1c:f5:07:c4:9b: e3:1f:31:9b:af:82:19:9f:dd:5b:9c:59:bc:8c:63:0a:23:1c: 5d:64:a0:80:a7:c5:5c:f4:8d:7d:e8:d0:40:ed:b4:40:de:f4: 1f:8a:08:23:6c:43:88:17:a0:e1:a6:bd:d8:2c:bf:20:ba:4f: 42:86:9c:7b:02:43:66:a3:6f:60:b5:e8:43:98:c7:29:b8:55: c9:77:e1:98:07:9a:f7:f7:85:43:f2:c8:ef:1a:b4:b2:1c:0c: a0:88:1f:7f:7f:a1:80:d4:b6:a0:9e:61:2e:75:45:44:d1:40: 50:81:4f:78:02:58:2d:76:4f:70:a0:dc:40:8f:01:2e:54:67: fd:fa:36:b7:2e:0e:c6:97:62:b7:f1:be:67:d2:71:94:c2:3c: 6e:f3:16:b4:77:93:1e:5c:f5:be:bb:45:f2:d6:1f:7f:72:13: bf:37:a8:5a:37:2b:88:76:14:a9:3f:88:c6:d0:0a:60:4b:1e: 99:24:4c:85:37:2e:3f:6b:40:b9:15:d5:9c:c7:97:c0:e9:50: f5:80:4d:ab -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmxSg9+Qc4PBIG42qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGZmZTdmNGUtZTFiZC00MjdhLTgxOTQtNGVhNDM5NmU1 NDhmMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MWNlNzBhNDQtMDQyOS00MmM3LWIyMDUtZDYzNTk2ZDQ4M2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLu0cT8UVXAWBmkRCIKDhiZyTdERLgcW8sg7 4bsnbfQRiMXtdKsGxE44tEEO/plG10eu1h5Z9DDvFq2gMJG1Vfk1pbTi/f5cHDOM Gxa3mUV639wN8mTyo9LteVyvWoIoZ3nD4U30/U+k3lGORaBNjVMSRMBK0nbwIrUu SMN4ntHipWtaiYS/0NIOvHFkxTv0qOVSvw23iV/lg/pTh9UvkcIjlA/5Eo0Zzpqd AErMOND+aOSE3GMdq1WmSX17LJPi8+FGLiSIjtNJfhP55Xo1XXGwcwZR3yCRh637 qbOzAdD7tUWJrtJjR20nmtUplFSU4i0Moo9a4Qh0k3y63T9qtQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNpKNWItYqAcGH7IIJ6SF6cm6p3DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ZmZl N2Y0ZS1lMWJkLTQyN2EtODE5NC00ZWE0Mzk2ZTU0OGYvNWZhYjc2MjQtN2JhMC0z OGNjLTkzOWQtNDdkZDM2MmIxYTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGZmZTdmNGUtZTFiZC00MjdhLTgx OTQtNGVhNDM5NmU1NDhmLzhmZmU3ZjRlLWUxYmQtNDI3YS04MTk0LTRlYTQzOTZl NTQ4Zi5jcmwwHwYDVR0jBBgwFoAUGuaMACjfi7qQxWRbYBA/ICySr5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ZmZlN2Y0ZS1lMWJkLTQyN2EtODE5NC00ZWE0 Mzk2ZTU0OGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhNEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAZW4+cN1zCGsmP5uPE7CCUCZt9vfvtnoJ4I4UBIgRQvpJ2LIU7qlcqh+8 7Spc+UHqehz1B8Sb4x8xm6+CGZ/dW5xZvIxjCiMcXWSggKfFXPSNfejQQO20QN70 H4oII2xDiBeg4aa92Cy/ILpPQoacewJDZqNvYLXoQ5jHKbhVyXfhmAea9/eFQ/LI 7xq0shwMoIgff3+hgNS2oJ5hLnVFRNFAUIFPeAJYLXZPcKDcQI8BLlRn/fo2ty4O xpdit/G+Z9JxlMI8bvMWtHeTHlz1vrtF8tYff3ITvzeoWjcriHYUqT+IxtAKYEse mSRMhTcuP2tAuRXVnMeXwOlQ9YBNqw== -----END CERTIFICATE-----Generated at Thu May 1 05:58:17 2025 by rpki-client