$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/44aa1385-2f50-3e06-b212-ed4a174c679b.roa File: 44aa1385-2f50-3e06-b212-ed4a174c679b.roa (raw, json) Hash identifier: rKLs3HQ1DpfDDR6ry1mrkYzWKZL6/GQ5aOi4G88+juc= Subject key identifier: D1:8A:4E:E3:98:A8:A3:FE:F7:C1:EA:9E:6A:B6:17:D1:B4:08:73:DC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498641BD07BA45036F25198E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/44aa1385-2f50-3e06-b212-ed4a174c679b.roa Signing time: Mon 14 Apr 2025 15:04:36 +0000 ROA not before: Mon 14 Apr 2025 15:04:36 +0000 ROA not after: Sun 13 Jul 2025 15:04:36 +0000 asID: 32787 IP address blocks: 209.200.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:86:41:bd:07:ba:45:03:6f:25:19:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 14 15:04:36 2025 GMT Not After : Jul 13 15:04:36 2025 GMT Subject: CN=25773e5d-06bb-47f9-86f5-38b913e4e9fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:56:9a:91:95:a7:a8:c4:81:42:65:2e:0d:71: 9a:57:40:95:1c:e8:69:b5:7a:74:83:56:cc:b2:ed: d7:41:d6:33:af:7d:0c:39:7c:a4:f9:d1:91:7c:c4: 22:c2:5f:35:49:78:63:89:ee:e7:63:c4:8c:a0:1c: b0:64:94:06:99:e0:5b:99:11:a3:8e:f6:e6:05:3b: ec:94:b9:1f:0e:3f:01:8d:6c:61:25:70:43:e7:fe: 45:85:bc:66:27:72:46:89:27:ed:49:20:5a:2e:ee: 76:39:6a:16:71:4f:e4:0e:fd:37:b2:e4:5c:e0:f5: 70:f8:59:57:a1:1a:18:f0:d2:1f:01:9e:3a:00:3b: 2f:18:7d:93:a2:11:f6:b3:b3:39:4a:b0:cd:87:4e: c2:ab:31:04:ed:a0:22:60:b8:12:e1:2a:d4:7e:9a: ad:9c:0d:5c:dc:a3:1b:04:a5:50:74:fb:d8:e4:33: a6:79:f9:e3:dd:d2:06:92:70:49:b3:f9:04:e0:d8: f9:23:c6:f6:cd:85:e2:82:78:2d:5a:f9:4f:1c:6e: e5:91:86:f4:f8:33:7c:fb:b9:a6:6a:89:38:38:93: 39:61:1b:e9:8c:2d:68:4b:8c:28:39:78:4a:e9:a0: d2:64:06:1f:4b:03:58:06:73:7a:44:a0:af:d3:6c: a2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:8A:4E:E3:98:A8:A3:FE:F7:C1:EA:9E:6A:B6:17:D1:B4:08:73:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/44aa1385-2f50-3e06-b212-ed4a174c679b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:a9:ba:5d:4a:d6:fb:5c:d5:89:56:02:07:a6:50:a3:fa:5a: bb:b7:98:f5:ea:8c:a5:93:1c:19:7e:ec:fc:39:f9:35:9c:ac: 91:2f:4d:93:a3:c8:28:31:ea:a6:8d:cd:fa:21:48:a7:03:be: 76:bb:77:be:e9:f9:55:55:23:7a:c6:83:84:e2:34:ee:2e:ce: f7:57:cc:ca:d1:55:26:14:31:ec:a7:d0:79:79:d2:e2:b5:8b: c2:46:88:34:5a:fa:0a:7c:c5:2d:6b:c7:07:09:ad:fa:7c:6f: fd:14:52:e4:23:a3:da:2b:3e:2b:49:f8:ed:b1:05:22:c1:fd: 2a:84:d1:41:ac:13:cd:10:4c:e5:9f:00:ac:77:8c:76:15:da: d4:05:26:bd:7c:e9:cd:83:55:ce:51:45:40:66:7f:1e:37:97: 92:fa:60:c1:dd:3d:53:f4:ca:d8:01:d6:e2:94:97:09:cc:85: fe:d5:b8:cf:81:0d:3a:5d:c5:0e:b6:84:6f:c5:d6:10:47:25: f8:a5:47:5d:0b:d1:a7:97:7d:81:61:3f:39:37:72:42:d6:db: 0c:55:1d:4d:a2:81:9f:0f:4d:55:51:2a:06:6d:56:4f:18:35: 6c:fd:b4:0b:01:e9:7f:a1:3c:21:ad:72:a6:09:6d:8c:d7:56: 97:e4:59:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmGQb0HukUDbyUZjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNDE1MDQzNloXDTI1MDcxMzE1MDQzNlowLzEtMCsGA1UEAxMk MjU3NzNlNWQtMDZiYi00N2Y5LTg2ZjUtMzhiOTEzZTRlOWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFaakZWnqMSBQmUuDXGaV0CVHOhptXp0g1bM su3XQdYzr30MOXyk+dGRfMQiwl81SXhjie7nY8SMoBywZJQGmeBbmRGjjvbmBTvs lLkfDj8BjWxhJXBD5/5FhbxmJ3JGiSftSSBaLu52OWoWcU/kDv03suRc4PVw+FlX oRoY8NIfAZ46ADsvGH2TohH2s7M5SrDNh07CqzEE7aAiYLgS4SrUfpqtnA1c3KMb BKVQdPvY5DOmefnj3dIGknBJs/kE4Nj5I8b2zYXigngtWvlPHG7lkYb0+DN8+7mm aok4OJM5YRvpjC1oS4woOXhK6aDSZAYfSwNYBnN6RKCv02yijwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGKTuOYqKP+98Hqnmq2F9G0CHPcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDRhYTEzODUtMmY1MC0z ZTA2LWIyMTItZWQ0YTE3NGM2NzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ciGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2pul1K1vtc1YlWAgemUKP6Wru3mPXqjKWTHBl+7Pw5+TWcrJEvTZOj yCgx6qaNzfohSKcDvna7d77p+VVVI3rGg4TiNO4uzvdXzMrRVSYUMeyn0Hl50uK1 i8JGiDRa+gp8xS1rxwcJrfp8b/0UUuQjo9orPitJ+O2xBSLB/SqE0UGsE80QTOWf AKx3jHYV2tQFJr186c2DVc5RRUBmfx43l5L6YMHdPVP0ytgB1uKUlwnMhf7VuM+B DTpdxQ62hG/F1hBHJfilR10L0aeXfYFhPzk3ckLW2wxVHU2igZ8PTVVRKgZtVk8Y NWz9tAsB6X+hPCGtcqYJbYzXVpfkWaM= -----END CERTIFICATE-----Generated at Sat Apr 26 15:16:19 2025 by rpki-client