$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2c214c7-4772-35d8-9bfa-f9c7aa41dbe5.roa File: d2c214c7-4772-35d8-9bfa-f9c7aa41dbe5.roa (raw, json) Hash identifier: 6CzMVZI+vu7OtFdWdxRakbf7/JaPokvb07hn22r+SIE= Subject key identifier: 1F:39:A2:42:5C:6D:22:99:11:04:64:A8:D8:70:F2:30:81:F5:84:A1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498641BC5FAD81830FE480D400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2c214c7-4772-35d8-9bfa-f9c7aa41dbe5.roa Signing time: Mon 14 Apr 2025 15:04:36 +0000 ROA not before: Mon 14 Apr 2025 15:04:36 +0000 ROA not after: Sun 13 Jul 2025 15:04:36 +0000 asID: 32787 IP address blocks: 209.200.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:86:41:bc:5f:ad:81:83:0f:e4:80:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 14 15:04:36 2025 GMT Not After : Jul 13 15:04:36 2025 GMT Subject: CN=ae02bfd5-f373-4f98-a4e4-7042bce03925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d4:8c:07:b1:c3:13:85:bb:74:3c:49:fb:dd: 1a:b2:35:67:2d:2e:98:a3:42:63:22:29:80:fa:1c: 9c:f8:6d:83:43:b4:65:2b:6e:24:d5:4d:c3:90:20: 7b:3c:6b:c1:86:08:ea:29:51:80:99:78:4b:3e:05: 7c:25:a9:7e:c8:57:df:7d:a7:51:fe:09:fc:99:81: 68:5a:6b:3b:ad:e6:f5:82:dd:fc:3b:05:ca:d8:98: 05:75:f7:e5:d1:fd:76:18:51:36:21:c4:d7:cd:78: 2a:ea:1a:f7:da:43:46:76:04:0d:b0:7d:48:9a:24: bc:9f:db:f2:ac:86:50:d2:0d:b5:7a:4e:d2:74:c7: 62:2d:a0:27:0b:a6:0c:d1:0a:de:94:81:45:8f:0f: 43:5f:d8:4d:2e:80:6a:43:2b:ad:f2:84:3d:c4:57: 1c:49:eb:97:24:15:58:57:87:d6:ce:6a:6b:c4:05: 96:a1:3e:50:87:37:45:59:fc:6a:41:1a:ed:0e:67: 24:0f:e7:53:27:fe:f3:be:4a:b8:d9:98:67:69:12: a9:9f:43:d6:12:95:84:6f:16:55:39:9d:6c:69:12: 33:26:81:7b:9d:a4:c7:99:75:6a:01:a1:bc:3c:65: d2:27:33:10:39:80:21:97:b2:4c:71:e8:cc:c0:5c: 1a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:39:A2:42:5C:6D:22:99:11:04:64:A8:D8:70:F2:30:81:F5:84:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2c214c7-4772-35d8-9bfa-f9c7aa41dbe5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:73:f4:fd:51:72:f5:7e:7b:ab:d6:ba:f1:c3:be:ba:1e:2e: 0d:e0:51:67:34:cc:51:a9:95:e0:10:0e:0c:1e:b6:d1:c0:7b: 6c:26:9d:9d:48:db:36:1e:de:64:fb:aa:7d:dd:4b:67:50:b8: c2:c3:93:1e:bf:c5:d0:02:b5:b8:05:4a:25:40:98:73:11:ce: 44:bb:dc:df:9b:e0:6d:b0:b1:cf:ee:6f:fa:e3:55:e2:88:d0: 10:11:28:5b:e2:4f:d8:6d:d8:26:a3:a7:30:af:b5:6b:a8:31: 04:76:c6:ba:8a:3e:e0:10:8b:1c:4c:c3:18:ef:7d:b5:f0:78: 1c:8f:17:59:90:99:5e:6f:f6:1b:99:12:24:b6:48:4f:2e:59: 31:93:f9:1e:16:49:32:e0:fa:96:d8:00:57:6b:65:99:88:22: 60:79:79:1a:be:be:44:71:18:59:4d:23:51:d7:76:8b:cc:a7: 02:23:ff:52:f1:86:bb:ee:07:24:60:bf:04:c3:b7:47:7a:a6: 39:63:9a:8e:02:1f:65:24:be:0b:e9:2d:82:25:33:fc:23:56: 71:98:ad:7f:5f:6b:c3:39:1f:ee:d3:36:d7:e7:05:8c:b9:ae: 0c:ea:82:d5:bc:ea:c3:b5:91:93:21:87:dc:78:67:8d:22:60: df:5c:7c:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmGQbxfrYGDD+SA1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNDE1MDQzNloXDTI1MDcxMzE1MDQzNlowLzEtMCsGA1UEAxMk YWUwMmJmZDUtZjM3My00Zjk4LWE0ZTQtNzA0MmJjZTAzOTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitSMB7HDE4W7dDxJ+90asjVnLS6Yo0JjIimA +hyc+G2DQ7RlK24k1U3DkCB7PGvBhgjqKVGAmXhLPgV8Jal+yFfffadR/gn8mYFo Wms7reb1gt38OwXK2JgFdffl0f12GFE2IcTXzXgq6hr32kNGdgQNsH1ImiS8n9vy rIZQ0g21ek7SdMdiLaAnC6YM0QrelIFFjw9DX9hNLoBqQyut8oQ9xFccSeuXJBVY V4fWzmprxAWWoT5QhzdFWfxqQRrtDmckD+dTJ/7zvkq42ZhnaRKpn0PWEpWEbxZV OZ1saRIzJoF7naTHmXVqAaG8PGXSJzMQOYAhl7JMcejMwFwacQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB85okJcbSKZEQRkqNhw8jCB9YShMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDJjMjE0YzctNDc3Mi0z NWQ4LTliZmEtZjljN2FhNDFkYmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ciFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVz9P1RcvV+e6vWuvHDvroeLg3gUWc0zFGpleAQDgwettHAe2wmnZ1I 2zYe3mT7qn3dS2dQuMLDkx6/xdACtbgFSiVAmHMRzkS73N+b4G2wsc/ub/rjVeKI 0BARKFviT9ht2CajpzCvtWuoMQR2xrqKPuAQixxMwxjvfbXweByPF1mQmV5v9huZ EiS2SE8uWTGT+R4WSTLg+pbYAFdrZZmIImB5eRq+vkRxGFlNI1HXdovMpwIj/1Lx hrvuByRgvwTDt0d6pjljmo4CH2UkvgvpLYIlM/wjVnGYrX9fa8M5H+7TNtfnBYy5 rgzqgtW86sO1kZMhh9x4Z40iYN9cfFg= -----END CERTIFICATE-----Generated at Sat Apr 26 15:15:35 2025 by rpki-client