$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1a7758bd-319b-30e7-aaee-1b8878c6d78c.roa File: 1a7758bd-319b-30e7-aaee-1b8878c6d78c.roa (raw, json) Hash identifier: zKj1K7+eW6qyQRDGRIyPZCOsSuXVg8UdETUZXiUmpUA= Subject key identifier: A8:B6:F8:78:D6:76:17:EF:66:E7:C7:D5:EA:78:6A:D5:28:11:82:44 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F43285849350E8CA18EAC5A572FAA1140 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1a7758bd-319b-30e7-aaee-1b8878c6d78c.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 1239 IP address blocks: 209.20.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:8c:a1:8e:ac:5a:57:2f:aa:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=f9657ca2-23b8-4bde-89b8-96a53aaff593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:49:59:27:56:b6:dc:c0:12:25:80:ad:11:5f: d1:e0:a9:3c:a1:3d:78:11:79:16:d2:99:3f:a7:70: 7f:74:93:63:2f:06:e1:ee:d9:d0:cb:05:cc:0a:ca: df:dc:44:ee:bf:e3:5a:f3:02:1c:c7:16:6c:ac:be: d9:b4:6f:93:70:38:b9:44:6a:3a:7a:d2:06:d0:e9: 82:22:77:ac:5f:b6:0d:41:9f:16:8a:d1:13:eb:69: 26:a0:92:5e:f4:51:61:70:89:1b:c8:39:a0:a3:f5: d3:67:7e:9c:0f:24:0d:e1:27:f0:6a:a7:e1:55:49: 2c:1e:3b:5a:0e:dd:90:c7:17:40:1c:c4:8c:63:a7: f8:c4:33:f3:24:aa:7c:43:b7:5f:49:62:7f:e8:9e: 94:c8:c7:48:cc:6a:2b:62:2f:b1:29:67:e9:0d:ab: 70:6d:87:ca:76:2b:d2:49:d0:97:74:0f:8a:28:7f: 2f:a2:a5:4d:a2:f7:ef:f9:d3:e2:5a:b7:e4:b5:76: 7a:90:be:56:46:60:1e:51:da:08:2c:f9:7d:56:da: 39:c0:b0:01:5b:82:c1:d6:87:ec:c3:dd:d0:e5:3b: 47:66:74:cf:c4:28:7f:06:57:17:26:0c:10:5c:a9: d2:c0:e4:42:85:1a:44:1e:c1:62:f6:52:cd:1f:01: 59:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B6:F8:78:D6:76:17:EF:66:E7:C7:D5:EA:78:6A:D5:28:11:82:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1a7758bd-319b-30e7-aaee-1b8878c6d78c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 209.20.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:cb:47:8f:25:70:e0:80:90:67:38:07:68:fd:88:3b:8b:29: 89:fb:a7:87:38:38:2e:96:cb:4e:2f:60:04:ba:1c:4b:8f:4c: 68:65:3e:55:01:de:f2:78:df:75:4e:43:f3:1f:2e:38:5e:44: b5:8e:95:e5:e7:7c:87:c5:27:ee:b6:7c:bf:9a:63:bb:2b:4b: 32:67:c1:05:e0:5f:af:ba:4b:3d:2f:63:17:f8:06:7f:1c:56: 90:fb:6d:e0:e4:d5:b5:72:b2:e7:d9:d3:e3:dd:f5:f9:f4:d0: a1:15:42:48:46:31:27:7c:e3:10:1e:2a:19:9a:74:0d:7b:ef: 01:4f:8d:8b:d3:a6:8f:52:c5:ed:a4:52:03:1f:ce:17:6b:6d: 98:13:1d:88:cd:10:a8:30:48:55:fe:bb:11:56:d1:94:2c:a6: 47:1e:e5:88:75:7c:d6:c4:79:5b:c8:84:19:27:3f:75:5a:1f: 7b:b1:84:8f:34:e0:81:6f:69:41:f2:b0:80:bb:23:8c:1d:db: 43:bf:74:af:75:78:62:e9:38:8e:4d:4c:ff:68:8e:0a:67:b0: 75:5c:b9:85:d9:f6:c1:3b:f6:5b:42:95:42:cd:4a:7f:4c:51: 47:ad:e4:36:3e:f5:1f:d5:59:8b:bc:5c:21:66:4c:a2:7e:b0: 7d:ca:8d:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DoyhjqxaVy+qEUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk Zjk2NTdjYTItMjNiOC00YmRlLTg5YjgtOTZhNTNhYWZmNTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArElZJ1a23MASJYCtEV/R4Kk8oT14EXkW0pk/ p3B/dJNjLwbh7tnQywXMCsrf3ETuv+Na8wIcxxZsrL7ZtG+TcDi5RGo6etIG0OmC InesX7YNQZ8WitET62kmoJJe9FFhcIkbyDmgo/XTZ36cDyQN4SfwaqfhVUksHjta Dt2QxxdAHMSMY6f4xDPzJKp8Q7dfSWJ/6J6UyMdIzGorYi+xKWfpDatwbYfKdivS SdCXdA+KKH8voqVNovfv+dPiWrfktXZ6kL5WRmAeUdoILPl9Vto5wLABW4LB1ofs w93Q5TtHZnTPxCh/BlcXJgwQXKnSwORChRpEHsFi9lLNHwFZEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKi2+HjWdhfvZufH1ep4atUoEYJEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvMWE3NzU4YmQtMzE5Yi0z MGU3LWFhZWUtMWI4ODc4YzZkNzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0RTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfLR48lcOCAkGc4B2j9iDuLKYn7p4c4OC6Wy04vYAS6HEuPTGhlPlUB 3vJ433VOQ/MfLjheRLWOleXnfIfFJ+62fL+aY7srSzJnwQXgX6+6Sz0vYxf4Bn8c VpD7beDk1bVysufZ0+Pd9fn00KEVQkhGMSd84xAeKhmadA177wFPjYvTpo9Sxe2k UgMfzhdrbZgTHYjNEKgwSFX+uxFW0ZQspkce5Yh1fNbEeVvIhBknP3VaH3uxhI80 4IFvaUHysIC7I4wd20O/dK91eGLpOI5NTP9ojgpnsHVcuYXZ9sE79ltClULNSn9M UUet5DY+9R/VWYu8XCFmTKJ+sH3KjSo= -----END CERTIFICATE-----Generated at Sat Apr 26 21:22:31 2025 by rpki-client