$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f8f4c02b-d6f4-3122-9631-ab74d1a890d1.roa File: f8f4c02b-d6f4-3122-9631-ab74d1a890d1.roa (raw, json) Hash identifier: lKBPE4LuX95ZWgT40BE2PmlZHdJo0UdTziU2slJXpgE= Subject key identifier: 68:69:81:15:25:49:34:04:3C:42:9F:96:F6:8A:24:B4:DB:AF:E6:B3 Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44 Certificate serial: 010D0C9F4328584921345A3A3CB1DA49F7C16A80 Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f8f4c02b-d6f4-3122-9631-ab74d1a890d1.roa Signing time: Sun 09 Mar 2025 10:20:59 +0000 ROA not before: Sun 09 Mar 2025 10:20:59 +0000 ROA not after: Sat 07 Jun 2025 10:20:59 +0000 asID: 32747 IP address blocks: 207.179.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:34:5a:3a:3c:b1:da:49:f7:c1:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44 Validity Not Before: Mar 9 10:20:59 2025 GMT Not After : Jun 7 10:20:59 2025 GMT Subject: CN=07061e52-fe8f-400b-9242-c0ecea53147e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bc:0a:61:3d:4c:26:99:92:99:3a:ff:54:c6: 4e:22:dc:f7:b0:76:23:dd:ae:53:9b:ef:53:68:db: 65:3a:49:85:4d:21:3d:4a:a5:41:56:e9:88:ac:8a: 1b:67:87:16:79:b0:14:6b:04:52:3a:a5:c6:e4:81: 80:4c:ea:c7:94:7f:74:ac:b3:fa:a5:1b:2c:53:a4: 64:4a:c9:90:1a:bb:ff:80:ef:11:6f:48:e9:27:98: c0:31:e7:f2:8d:26:45:a9:67:91:42:0c:e3:a2:b0: d6:28:0b:0b:19:d8:78:28:8b:e7:a3:e6:13:80:cd: 46:c8:c1:26:02:13:32:b7:2e:7d:f0:b7:8a:c9:2a: 48:13:74:84:e5:1b:be:1f:41:99:45:a7:21:bf:59: 9f:43:2f:22:9f:4f:d6:0c:2a:52:3e:f1:e2:72:a3: 6e:0a:86:f3:11:ab:c6:10:c4:26:af:91:cd:0f:16: b9:00:14:96:a2:5a:76:2b:4a:83:eb:a9:cd:df:11: b7:c3:cb:b4:a7:30:c3:a8:c3:f0:d3:49:54:73:da: 4e:6e:66:31:42:20:14:63:02:a6:a3:43:fe:23:c1: ba:fd:ba:7a:b3:b1:a9:d3:0a:8b:f2:9d:80:77:ff: 6b:3a:d2:1d:94:a5:37:dd:8e:7a:df:04:b4:db:18: 58:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:69:81:15:25:49:34:04:3C:42:9F:96:F6:8A:24:B4:DB:AF:E6:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f8f4c02b-d6f4-3122-9631-ab74d1a890d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl X509v3 Authority Key Identifier: keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer sbgp-ipAddrBlock: critical IPv4: 207.179.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:78:fb:c0:c8:f2:9e:92:c5:80:5b:29:ca:ea:e2:09:92:81: 37:99:2b:38:48:5b:0e:bf:14:e8:0d:c4:d2:db:1e:4d:06:b1: 7d:ec:00:79:1d:c1:0c:0b:aa:c6:ef:41:5e:9d:74:1c:f0:6c: fc:b6:84:dd:87:a2:da:3a:52:bb:d1:b6:a0:a0:32:af:34:40: 31:6b:06:00:e5:6f:73:93:51:94:07:89:1e:68:36:0c:f4:71: 62:0c:f3:3d:bb:ae:60:5e:4f:af:9e:b8:fa:0b:e0:58:b3:3d: b9:f6:c0:84:7f:91:5b:13:6a:b9:66:a2:db:ee:9d:1a:68:81: 11:ae:7f:b7:c3:4a:be:65:9e:ac:b6:4a:fc:6e:43:fa:45:75: c7:0a:89:60:4d:a4:d6:ea:01:90:3d:97:bb:81:f5:0c:e7:eb: 3b:77:d1:14:01:df:8b:d7:1b:64:28:3c:22:7e:6f:25:52:d2: 97:ad:36:6e:09:59:8c:da:aa:04:f5:4f:63:7a:de:ed:24:79: 5c:49:7c:a4:d5:0b:a8:1f:a8:48:12:51:e6:7b:46:bd:f5:61: 24:5f:c0:23:c5:9a:7b:46:9c:c9:e0:cd:8b:d1:d9:7f:3a:bc: 76:dd:33:17:0a:96:64:ca:d5:d4:df:4f:f8:c9:31:2f:6c:d3: 55:cd:f2:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhNFo6PLHaSffBaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0 YjQ0MB4XDTI1MDMwOTEwMjA1OVoXDTI1MDYwNzEwMjA1OVowLzEtMCsGA1UEAxMk MDcwNjFlNTItZmU4Zi00MDBiLTkyNDItYzBlY2VhNTMxNDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrwKYT1MJpmSmTr/VMZOItz3sHYj3a5Tm+9T aNtlOkmFTSE9SqVBVumIrIobZ4cWebAUawRSOqXG5IGATOrHlH90rLP6pRssU6Rk SsmQGrv/gO8Rb0jpJ5jAMefyjSZFqWeRQgzjorDWKAsLGdh4KIvno+YTgM1GyMEm AhMyty598LeKySpIE3SE5Ru+H0GZRachv1mfQy8in0/WDCpSPvHicqNuCobzEavG EMQmr5HNDxa5ABSWolp2K0qD66nN3xG3w8u0pzDDqMPw00lUc9pObmYxQiAUYwKm o0P+I8G6/bp6s7Gp0wqL8p2Ad/9rOtIdlKU33Y563wS02xhYBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhpgRUlSTQEPEKflvaKJLTbr+azMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZjhmNGMwMmItZDZmNC0z MTIyLTk2MzEtYWI3NGQxYTg5MGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5 NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz7OKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAp4+8DI8p6SxYBbKcrq4gmSgTeZKzhIWw6/FOgNxNLbHk0GsX3sAHkd wQwLqsbvQV6ddBzwbPy2hN2Hoto6UrvRtqCgMq80QDFrBgDlb3OTUZQHiR5oNgz0 cWIM8z27rmBeT6+euPoL4FizPbn2wIR/kVsTarlmotvunRpogRGuf7fDSr5lnqy2 SvxuQ/pFdccKiWBNpNbqAZA9l7uB9Qzn6zt30RQB34vXG2QoPCJ+byVS0petNm4J WYzaqgT1T2N63u0keVxJfKTVC6gfqEgSUeZ7Rr31YSRfwCPFmntGnMngzYvR2X86 vHbdMxcKlmTK1dTfT/jJMS9s01XN8oE= -----END CERTIFICATE-----Generated at Mon Apr 7 16:52:26 2025 by rpki-client