$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6/affc3e70-595a-3177-bd29-0b81043aade7.roa File: affc3e70-595a-3177-bd29-0b81043aade7.roa (raw, json) Hash identifier: F6iXE4gCxoE8Xtj9WPfqooXMzFiUpes37wkfWjQqyRk= Subject key identifier: 0B:F6:53:51:B5:9D:F4:B8:71:28:AC:98:8C:D0:11:D3:A7:8C:29:82 Certificate issuer: /CN=7f851d8e-ddbd-48cd-bf14-dd7804551bf6 Certificate serial: 010D0C9F43285848C2B64B61E5AF2BE57702CF40 Authority key identifier: 0B:20:8B:9D:7E:4F:7F:06:06:2E:E1:E6:6F:E0:28:3F:B9:BA:6A:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6/affc3e70-595a-3177-bd29-0b81043aade7.roa Signing time: Mon 03 Feb 2025 14:00:52 +0000 ROA not before: Mon 03 Feb 2025 14:00:52 +0000 ROA not after: Sun 04 May 2025 13:00:52 +0000 asID: 400659 IP address blocks: 207.174.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6/7f851d8e-ddbd-48cd-bf14-dd7804551bf6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6/7f851d8e-ddbd-48cd-bf14-dd7804551bf6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:b6:4b:61:e5:af:2b:e5:77:02:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f851d8e-ddbd-48cd-bf14-dd7804551bf6 Validity Not Before: Feb 3 14:00:52 2025 GMT Not After : May 4 13:00:52 2025 GMT Subject: CN=b29a2767-ba1d-48cf-8db1-82180f919ba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:68:41:38:bd:04:ad:bd:60:ec:74:ff:5f:ae: 52:80:2b:15:dc:f0:7d:e6:cf:98:a2:87:97:73:07: 5e:f4:79:72:da:b7:dc:b7:a5:2e:1f:2d:a1:a3:02: 9d:38:17:27:7a:44:ae:71:44:d7:6e:b8:8b:80:79: 55:ef:9b:37:16:9e:eb:ff:ae:63:40:9a:a5:ed:40: b0:6a:fb:fc:db:55:7d:0a:cc:cb:91:3e:cd:f8:4a: a4:e2:d1:3d:5f:c6:3d:54:ea:2f:e0:48:2b:a7:fb: 2b:81:23:8b:13:1c:c2:1d:03:18:b0:15:89:bc:a3: 31:da:92:da:61:e9:41:c8:03:83:11:5c:40:49:18: e2:96:5a:d1:c6:d4:77:80:f6:aa:06:e0:84:6a:39: a4:16:d6:5b:d4:bf:1a:51:c6:13:56:28:fe:01:3c: 81:34:77:b2:1a:b1:80:05:64:26:71:7c:28:72:48: 15:db:d8:c8:fd:29:a8:52:ef:97:c8:70:5a:30:fb: de:38:dc:eb:ab:29:d4:97:a1:0a:5c:21:93:e7:ca: 74:94:ec:b9:87:d2:db:d6:0e:8b:75:04:20:bb:cc: 47:5f:40:e2:de:fa:33:c2:89:5a:f9:4b:85:31:60: 68:f9:78:6d:3d:c8:d0:c7:ea:bb:61:87:92:73:0e: e1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F6:53:51:B5:9D:F4:B8:71:28:AC:98:8C:D0:11:D3:A7:8C:29:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6/affc3e70-595a-3177-bd29-0b81043aade7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6/7f851d8e-ddbd-48cd-bf14-dd7804551bf6.crl X509v3 Authority Key Identifier: keyid:0B:20:8B:9D:7E:4F:7F:06:06:2E:E1:E6:6F:E0:28:3F:B9:BA:6A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6.cer sbgp-ipAddrBlock: critical IPv4: 207.174.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:dc:6d:23:95:49:c6:5c:c5:7a:88:08:03:01:a2:12:1d:e6: 8d:7e:f6:18:a2:6a:64:b9:ed:b2:6a:fb:09:71:fa:a2:c7:cc: 49:e1:f0:11:bd:ee:58:3d:ff:24:fe:0a:64:90:65:0f:bf:13: ea:bc:d4:e7:2e:22:d1:30:34:be:45:f3:64:a5:8a:2c:f7:ab: 4b:b2:cf:c2:a4:85:b4:6e:d7:36:ae:ed:e6:c5:77:ad:e6:27: 95:c3:db:cd:06:7a:30:9e:7a:92:55:bb:d6:8c:06:0e:c3:43: d3:0f:7c:40:6c:85:8c:45:44:89:43:5d:cc:0f:20:64:87:df: c3:11:b8:82:a2:39:1f:a3:0c:9a:33:90:82:3a:5c:46:46:b6: d7:1c:20:6d:81:c7:c5:7c:bf:b6:4b:fa:d6:7a:b8:fe:71:b8: 42:a3:21:6f:99:99:24:d3:33:5f:13:bb:e9:92:55:fc:2f:fb: 55:65:d4:aa:1e:4f:e8:b5:ac:1e:84:03:42:2a:7a:04:77:72: 76:bf:f8:17:c6:66:9e:2c:9d:0b:02:d7:ed:da:0a:f6:d3:d1: ac:14:6c:f5:b4:25:07:0c:08:b8:b5:f5:5c:80:23:91:15:20: 78:fa:ef:97:cd:dc:31:dd:cf:47:e4:1e:8e:43:ea:db:2d:12: 75:73:ab:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCtkth5a8r5XcCz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y4NTFkOGUtZGRiZC00OGNkLWJmMTQtZGQ3ODA0NTUx YmY2MB4XDTI1MDIwMzE0MDA1MloXDTI1MDUwNDEzMDA1MlowLzEtMCsGA1UEAxMk YjI5YTI3NjctYmExZC00OGNmLThkYjEtODIxODBmOTE5YmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WhBOL0Erb1g7HT/X65SgCsV3PB95s+YooeX cwde9Hly2rfct6UuHy2howKdOBcnekSucUTXbriLgHlV75s3Fp7r/65jQJql7UCw avv821V9CszLkT7N+Eqk4tE9X8Y9VOov4Egrp/srgSOLExzCHQMYsBWJvKMx2pLa YelByAODEVxASRjillrRxtR3gPaqBuCEajmkFtZb1L8aUcYTVij+ATyBNHeyGrGA BWQmcXwockgV29jI/SmoUu+XyHBaMPveONzrqynUl6EKXCGT58p0lOy5h9Lb1g6L dQQgu8xHX0Di3vozwola+UuFMWBo+XhtPcjQx+q7YYeScw7h+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAv2U1G1nfS4cSismIzQEdOnjCmCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83Zjg1 MWQ4ZS1kZGJkLTQ4Y2QtYmYxNC1kZDc4MDQ1NTFiZjYvYWZmYzNlNzAtNTk1YS0z MTc3LWJkMjktMGI4MTA0M2FhZGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvN2Y4NTFkOGUtZGRiZC00OGNkLWJm MTQtZGQ3ODA0NTUxYmY2LzdmODUxZDhlLWRkYmQtNDhjZC1iZjE0LWRkNzgwNDU1 MWJmNi5jcmwwHwYDVR0jBBgwFoAUCyCLnX5PfwYGLuHmb+AoP7m6as4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83Zjg1MWQ4ZS1kZGJkLTQ4Y2QtYmYxNC1kZDc4 MDQ1NTFiZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz65fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXcbSOVScZcxXqICAMBohId5o1+9hiiamS57bJq+wlx+qLHzEnh8BG9 7lg9/yT+CmSQZQ+/E+q81OcuItEwNL5F82Sliiz3q0uyz8KkhbRu1zau7ebFd63m J5XD280GejCeepJVu9aMBg7DQ9MPfEBshYxFRIlDXcwPIGSH38MRuIKiOR+jDJoz kII6XEZGttccIG2Bx8V8v7ZL+tZ6uP5xuEKjIW+ZmSTTM18Tu+mSVfwv+1Vl1Koe T+i1rB6EA0IqegR3cna/+BfGZp4snQsC1+3aCvbT0awUbPW0JQcMCLi19VyAI5EV IHj675fN3DHdz0fkHo5D6tstEnVzq2Y= -----END CERTIFICATE-----Generated at Sat Apr 5 12:42:07 2025 by rpki-client