$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2d941046-d327-388c-9f7a-ab2771f7f1a4.roa File: 2d941046-d327-388c-9f7a-ab2771f7f1a4.roa (raw, json) Hash identifier: i5BolsH814uQ89sIrMRwwZPAySCE3qtXn6rJoq4eHUA= Subject key identifier: A9:B8:60:2D:49:6D:D8:03:E4:B8:A7:0D:73:46:59:36:3C:18:3A:F9 Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F43285849D594E203031F80F1DF35FE80 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2d941046-d327-388c-9f7a-ab2771f7f1a4.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 12129 IP address blocks: 209.124.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:e2:03:03:1f:80:f1:df:35:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=6f82e7d7-c0d5-4cbe-acaa-cc324439f6de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f2:cd:80:2b:98:7e:25:3f:90:35:02:3b:b7: 68:a4:32:f5:ee:3e:7d:42:d9:34:ba:b5:92:b5:60: 1d:c2:dc:e3:bc:39:5a:7c:8f:c0:cd:7f:95:a9:31: f2:e7:ab:62:00:c3:48:36:cd:c3:83:76:0a:36:f2: ec:0b:ba:98:20:71:3a:fc:f2:2d:1c:20:28:08:30: b7:3a:3f:ba:0d:e6:4e:34:1f:6b:db:4a:da:6b:b9: 2a:a8:02:6f:9c:a5:94:1b:57:5a:0a:f0:d9:a0:81: d9:e6:7d:bf:62:5a:7e:4f:15:1b:37:db:4d:81:4c: eb:0e:ff:18:75:a6:bd:13:d3:60:dd:b0:e1:7f:4b: 65:bf:3a:a8:0a:be:ba:9c:44:02:ec:a2:28:3f:5e: f5:03:32:d1:48:d5:6b:36:56:8e:e9:b2:cb:7a:72: d0:60:07:12:90:cb:e9:e2:70:60:09:0b:da:65:c1: 05:9f:c9:18:57:ab:f0:f0:de:8c:bd:11:04:ba:6e: b0:4c:db:0d:70:1c:85:ff:f6:db:f9:11:3f:79:49: fa:fa:48:36:29:fc:79:31:f6:72:64:1d:8b:b8:f3: a5:45:28:7c:17:f1:26:e3:24:df:31:98:4c:56:00: 2b:c8:a6:9f:cb:b8:2d:e8:46:20:02:ab:fd:b6:f9: 27:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B8:60:2D:49:6D:D8:03:E4:B8:A7:0D:73:46:59:36:3C:18:3A:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2d941046-d327-388c-9f7a-ab2771f7f1a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 209.124.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:96:1d:f9:e7:80:60:9b:2c:ea:1f:18:bf:76:60:4d:2e:4f: ed:b0:7b:b7:05:d5:f1:9a:4f:ed:fb:09:ef:26:a1:98:11:7b: 0c:6c:97:62:ee:0e:41:e3:58:43:ee:15:f6:87:4e:14:ae:ec: ee:60:a2:14:3e:bb:59:a0:f4:af:89:6f:61:33:d2:12:96:bd: 04:0a:68:51:f4:ae:47:59:b8:13:2f:87:8d:ee:d5:d9:7f:0d: 15:b8:33:2d:17:5c:2f:70:a1:84:d2:fe:65:58:ab:bb:9e:11: bc:8a:28:ef:c1:ce:7c:03:4a:22:2f:bc:6b:09:14:e6:b4:88: c7:fa:b4:c2:94:6f:b1:0e:cf:de:c3:bd:ef:47:97:47:19:37: 16:af:f7:e7:f8:bd:c8:18:64:cc:a3:2e:23:1e:6b:52:5e:d0: 25:54:fd:f7:83:ec:cd:d0:ff:0d:e0:a1:2b:37:a5:00:29:22: 87:db:12:4f:93:93:53:67:3b:18:f6:d0:90:50:9a:7b:a7:5e: bb:bd:b1:81:b7:46:ef:3f:d3:b8:30:cb:66:f4:21:9a:78:70: 68:77:c7:28:c4:92:d8:fb:7d:ba:13:e9:e5:1e:01:5b:a5:ac: 61:96:66:8a:9d:14:a0:5a:e4:b1:86:8f:75:3a:4e:c2:31:6c: a1:20:ec:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlOIDAx+A8d81/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk NmY4MmU3ZDctYzBkNS00Y2JlLWFjYWEtY2MzMjQ0MzlmNmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPLNgCuYfiU/kDUCO7dopDL17j59Qtk0urWS tWAdwtzjvDlafI/AzX+VqTHy56tiAMNINs3Dg3YKNvLsC7qYIHE6/PItHCAoCDC3 Oj+6DeZONB9r20raa7kqqAJvnKWUG1daCvDZoIHZ5n2/Ylp+TxUbN9tNgUzrDv8Y daa9E9Ng3bDhf0tlvzqoCr66nEQC7KIoP171AzLRSNVrNlaO6bLLenLQYAcSkMvp 4nBgCQvaZcEFn8kYV6vw8N6MvREEum6wTNsNcByF//bb+RE/eUn6+kg2Kfx5MfZy ZB2LuPOlRSh8F/Em4yTfMZhMVgAryKafy7gt6EYgAqv9tvknBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKm4YC1JbdgD5LinDXNGWTY8GDr5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvMmQ5NDEwNDYtZDMyNy0z ODhjLTlmN2EtYWIyNzcxZjdmMWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Xw4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2WHfnngGCbLOofGL92YE0uT+2we7cF1fGaT+37Ce8moZgRewxsl2Lu DkHjWEPuFfaHThSu7O5gohQ+u1mg9K+Jb2Ez0hKWvQQKaFH0rkdZuBMvh43u1dl/ DRW4My0XXC9woYTS/mVYq7ueEbyKKO/BznwDSiIvvGsJFOa0iMf6tMKUb7EOz97D ve9Hl0cZNxav9+f4vcgYZMyjLiMea1Je0CVU/feD7M3Q/w3goSs3pQApIofbEk+T k1NnOxj20JBQmnunXru9sYG3Ru8/07gwy2b0IZp4cGh3xyjEktj7fboT6eUeAVul rGGWZoqdFKBa5LGGj3U6TsIxbKEg7NA= -----END CERTIFICATE-----Generated at Sun Jun 15 19:38:05 2025 by rpki-client