$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/84d571f2-66e1-3f12-9230-063e7c81b63a.roa File: 84d571f2-66e1-3f12-9230-063e7c81b63a.roa (raw, json) Hash identifier: 2efERXrTWp7n6IDLD30Z8+ocCVgfJgW07EQSlbQxwYQ= Subject key identifier: E2:BA:F3:70:E5:F5:B1:BA:E5:32:86:84:D7:AE:49:21:65:4F:D4:47 Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F43285849D594E1F0920F952C562DA4A0 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/84d571f2-66e1-3f12-9230-063e7c81b63a.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 12129 IP address blocks: 209.124.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:e1:f0:92:0f:95:2c:56:2d:a4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=e7234794-158d-4bfa-98d9-ba31f4694d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4c:22:81:53:77:e0:ab:44:09:bf:23:b3:86: eb:e9:7a:08:0b:04:db:06:e7:94:46:7f:0a:29:8c: e7:05:8a:d0:db:64:5a:c1:39:46:35:33:a7:d9:cc: 69:9c:05:f8:fe:67:1f:4d:60:bc:ce:01:b7:b3:39: ed:65:6a:a2:28:eb:37:44:67:30:22:ff:30:76:fc: 62:4f:61:60:b8:dc:51:b1:8b:29:8e:79:51:07:89: b5:80:b5:ec:e7:96:d9:2d:eb:3b:2e:7c:13:17:a4: 20:5c:7f:23:e8:4d:41:82:7e:3a:98:6c:aa:46:cc: d0:c3:08:96:87:7e:4f:93:84:e6:c1:66:0c:2a:9d: 53:ae:23:05:b6:50:01:28:4b:f5:1c:5f:08:7b:e7: a3:b6:cd:4d:b4:2e:d2:0b:fe:08:41:a0:dd:2e:13: 81:88:aa:03:62:08:99:6f:9b:e8:23:49:69:26:ce: e3:c8:05:03:07:8f:9e:bc:b5:f8:99:f8:82:2d:87: 0b:c3:92:6c:9a:a1:69:4e:d6:93:96:9a:fe:95:6c: 20:37:ee:2c:96:02:b6:6e:ee:c6:66:eb:32:af:34: 85:99:41:a9:70:c6:f0:b8:51:76:2f:1f:f9:47:ec: 57:a6:c0:f6:cc:f7:cd:5a:42:cd:21:23:0a:c3:16: 63:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:BA:F3:70:E5:F5:B1:BA:E5:32:86:84:D7:AE:49:21:65:4F:D4:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/84d571f2-66e1-3f12-9230-063e7c81b63a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 209.124.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:64:14:36:81:67:46:9b:68:9b:29:33:91:6d:39:4c:ad:7a: 6b:80:22:9e:cc:cb:c0:96:32:45:24:c1:e5:ac:6e:b0:ba:7e: 88:33:25:5d:99:65:dd:69:f2:88:12:88:9e:8b:2d:7d:a6:74: 53:2c:84:f1:ae:6a:31:41:28:49:4a:99:0b:c0:51:e3:b0:b9: 0b:b3:86:54:a6:38:3d:50:81:d7:f8:86:c9:d0:6a:3b:00:34: 8e:84:a4:34:a4:a1:71:79:54:36:79:2a:30:b6:f5:8d:cb:31: 5b:da:5b:08:d7:5d:4a:31:48:24:ea:87:67:0c:24:75:2f:98: f8:fd:a3:18:c1:60:78:65:05:26:f1:a7:93:cb:bb:34:27:55: 77:98:78:99:8a:78:91:6a:52:01:1c:85:46:e9:96:e6:75:14: 93:16:1e:aa:8e:f3:16:4e:64:10:41:bc:e8:5e:27:a4:fc:40: c5:7e:59:7c:78:2b:b1:c9:01:94:36:4e:52:85:ee:c6:b1:29: b8:a3:06:5d:30:5c:a8:70:e3:70:d4:cb:bf:5b:cd:e7:58:24: a3:49:0e:3b:08:5d:a6:c9:ca:8e:bf:30:7f:6c:25:7b:97:5a: 17:ad:c7:34:da:f6:10:ab:4b:df:3e:a2:48:5f:27:af:48:90: 18:66:a3:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlOHwkg+VLFYtpKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk ZTcyMzQ3OTQtMTU4ZC00YmZhLTk4ZDktYmEzMWY0Njk0ZDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkwigVN34KtECb8js4br6XoICwTbBueURn8K KYznBYrQ22RawTlGNTOn2cxpnAX4/mcfTWC8zgG3szntZWqiKOs3RGcwIv8wdvxi T2FguNxRsYspjnlRB4m1gLXs55bZLes7LnwTF6QgXH8j6E1Bgn46mGyqRszQwwiW h35Pk4TmwWYMKp1TriMFtlABKEv1HF8Ie+ejts1NtC7SC/4IQaDdLhOBiKoDYgiZ b5voI0lpJs7jyAUDB4+evLX4mfiCLYcLw5JsmqFpTtaTlpr+lWwgN+4slgK2bu7G ZusyrzSFmUGpcMbwuFF2Lx/5R+xXpsD2zPfNWkLNISMKwxZjMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOK683Dl9bG65TKGhNeuSSFlT9RHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvODRkNTcxZjItNjZlMS0z ZjEyLTkyMzAtMDYzZTdjODFiNjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0XwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlkFDaBZ0abaJspM5FtOUytemuAIp7My8CWMkUkweWsbrC6fogzJV2Z Zd1p8ogSiJ6LLX2mdFMshPGuajFBKElKmQvAUeOwuQuzhlSmOD1Qgdf4hsnQajsA NI6EpDSkoXF5VDZ5KjC29Y3LMVvaWwjXXUoxSCTqh2cMJHUvmPj9oxjBYHhlBSbx p5PLuzQnVXeYeJmKeJFqUgEchUbpluZ1FJMWHqqO8xZOZBBBvOheJ6T8QMV+WXx4 K7HJAZQ2TlKF7saxKbijBl0wXKhw43DUy79bzedYJKNJDjsIXabJyo6/MH9sJXuX WhetxzTa9hCrS98+okhfJ69IkBhmo18= -----END CERTIFICATE-----Generated at Mon Jun 16 04:35:48 2025 by rpki-client