$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d96fb939-7402-300a-b9f7-868b6099a009.roa File: d96fb939-7402-300a-b9f7-868b6099a009.roa (raw, json) Hash identifier: 2JKSngObsAnryfrehBCcFuJUrGjSuZkhh2Yp4EHGyjc= Subject key identifier: 57:19:1F:6C:F8:A4:40:2D:1D:13:31:33:C1:B0:56:77:33:50:1D:67 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498CFF180440477AC30802A480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d96fb939-7402-300a-b9f7-868b6099a009.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 32787 IP address blocks: 209.200.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:18:04:40:47:7a:c3:08:02:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=26433113-1d9f-47cf-9178-28bb104351b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:08:a4:ff:32:07:18:74:15:6e:e3:43:ce:a9: ed:bb:9d:a1:8e:bb:3d:fd:b5:7e:d5:99:9e:e6:b2: 19:c1:61:20:54:75:7e:e2:f7:c1:82:2d:eb:42:31: 91:25:fa:f6:e1:d5:7d:dd:bd:db:90:4b:66:e6:42: 24:e3:f5:46:e7:8e:c6:b3:29:ae:5a:fd:7c:1e:d1: 61:f5:d9:c5:d6:b5:9f:2e:80:8e:63:c1:e0:97:3e: bb:da:85:ad:33:cf:de:3c:b0:95:fb:bf:43:c2:a8: 8a:7b:26:3f:21:6b:15:41:c0:26:69:de:33:0b:8e: 54:da:73:26:5a:1f:28:61:01:2f:fe:81:22:6a:22: 26:59:57:e5:6d:8f:29:41:e2:5f:0d:a2:0f:da:40: ed:67:4f:ea:64:a4:8b:96:8f:51:f3:e0:2f:cd:71: 4a:56:f4:ba:d6:f3:37:06:90:10:19:69:17:48:39: 97:49:98:54:1d:c8:41:bb:60:81:c4:74:37:1e:d1: f3:f4:be:7d:3e:72:7a:bd:8f:ba:c7:af:8d:99:4c: 96:9e:0f:fa:2e:b1:f0:c4:2f:96:a3:40:a5:01:ba: fd:09:d2:e8:74:20:35:59:b4:bf:1f:7d:4b:e2:16: b9:48:68:ef:0e:e3:2c:b9:7e:09:a6:fc:95:b9:a8: c8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:19:1F:6C:F8:A4:40:2D:1D:13:31:33:C1:B0:56:77:33:50:1D:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d96fb939-7402-300a-b9f7-868b6099a009.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:17:cb:0d:60:ab:37:75:a4:93:c7:14:36:b2:4c:1a:5f:e2: dd:30:07:c5:9a:ae:d1:3a:71:bb:c8:ba:e2:d1:63:d4:dc:4e: c0:35:35:55:6c:84:6a:40:f5:8e:8c:d5:18:64:be:bd:0c:7f: 9e:58:0b:b0:28:c3:56:44:f2:a7:95:ab:86:6b:9b:59:41:84: 89:73:a1:fc:41:eb:10:94:3b:3d:8e:be:fa:ec:d0:78:01:19: 13:e2:26:98:73:ea:8c:b1:e9:7e:ca:1e:5d:00:c2:e7:3d:ce: dc:4a:18:5b:b1:ee:b0:b9:93:c3:73:27:09:cb:e6:6e:fc:a3: 03:f6:c0:97:61:ea:22:85:ba:61:e1:a7:d5:d3:3c:ed:3c:7e: cb:96:03:d6:3c:93:b5:03:6e:7e:e1:11:e8:63:36:db:04:11: c2:b7:01:f0:a4:ec:df:aa:0d:ac:0d:24:da:85:05:d4:da:91: 3c:f8:75:ed:e9:c2:02:2b:09:e2:c1:06:63:50:ab:ce:53:ca: 9f:e6:2a:41:a4:2b:39:dc:0c:84:de:91:5c:fc:65:52:a1:07: e0:7f:a0:85:16:ba:7e:93:f1:d0:f1:55:10:7c:5c:6f:4d:10: 7c:d9:21:31:50:35:9f:03:57:4f:d8:10:6c:27:be:f8:8a:23: da:8b:4f:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/xgEQEd6wwgCpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk MjY0MzMxMTMtMWQ5Zi00N2NmLTkxNzgtMjhiYjEwNDM1MWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAik/zIHGHQVbuNDzqntu52hjrs9/bV+1Zme 5rIZwWEgVHV+4vfBgi3rQjGRJfr24dV93b3bkEtm5kIk4/VG547GsymuWv18HtFh 9dnF1rWfLoCOY8Hglz672oWtM8/ePLCV+79DwqiKeyY/IWsVQcAmad4zC45U2nMm Wh8oYQEv/oEiaiImWVflbY8pQeJfDaIP2kDtZ0/qZKSLlo9R8+AvzXFKVvS61vM3 BpAQGWkXSDmXSZhUHchBu2CBxHQ3HtHz9L59PnJ6vY+6x6+NmUyWng/6LrHwxC+W o0ClAbr9CdLodCA1WbS/H31L4ha5SGjvDuMsuX4JpvyVuajIswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcZH2z4pEAtHRMxM8GwVnczUB1nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDk2ZmI5MzktNzQwMi0z MDBhLWI5ZjctODY4YjYwOTlhMDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0ciQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4Xyw1gqzd1pJPHFDayTBpf4t0wB8WartE6cbvIuuLRY9TcTsA1NVVs hGpA9Y6M1Rhkvr0Mf55YC7Aow1ZE8qeVq4Zrm1lBhIlzofxB6xCUOz2Ovvrs0HgB GRPiJphz6oyx6X7KHl0Awuc9ztxKGFux7rC5k8NzJwnL5m78owP2wJdh6iKFumHh p9XTPO08fsuWA9Y8k7UDbn7hEehjNtsEEcK3AfCk7N+qDawNJNqFBdTakTz4de3p wgIrCeLBBmNQq85Typ/mKkGkKzncDITekVz8ZVKhB+B/oIUWun6T8dDxVRB8XG9N EHzZITFQNZ8DV0/YEGwnvviKI9qLT6M= -----END CERTIFICATE-----Generated at Sat Apr 26 15:16:19 2025 by rpki-client