$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/f13ae96c-3c94-3736-bd9e-6092b0bf4d21.roa File: f13ae96c-3c94-3736-bd9e-6092b0bf4d21.roa (raw, json) Hash identifier: qkeGmERYxKqc8r63y8QfCYERCPxgUV1vg42WYhMNN7c= Subject key identifier: 50:40:9E:32:96:FD:76:CD:82:7E:07:86:FF:B6:41:93:90:F7:54:17 Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F43285848AF2B8216D7BB4F7B00114080 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/f13ae96c-3c94-3736-bd9e-6092b0bf4d21.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 396185 IP address blocks: 207.171.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:82:16:d7:bb:4f:7b:00:11:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=c7129562-aa6a-4cc7-ace7-11c317efb367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:17:f2:a7:47:3d:ab:67:e6:cd:05:03:2e:92: ca:51:c3:2c:8d:95:bb:d5:dd:55:60:ec:21:82:31: a0:33:e2:58:e1:67:10:91:80:37:5d:28:45:d9:05: a7:1d:a0:a2:61:93:79:5e:7e:02:df:8e:4f:a8:2a: 3c:ac:75:fd:0f:84:bc:c8:d2:09:9a:96:06:da:e2: 0d:e6:9c:59:a6:d4:0f:dc:ea:ba:8e:14:b9:cd:e4: b8:18:9c:d5:f1:70:49:12:98:8d:36:57:c2:10:ba: c2:16:02:d4:b1:03:2e:06:61:c6:ee:ff:c4:49:13: b7:c4:60:3e:fb:1f:1d:97:67:61:62:d9:21:1b:6b: 55:f2:1d:34:c5:3c:de:b6:39:b5:c5:e0:19:46:e8: 98:d0:f1:52:8c:f6:c0:46:e3:1e:fd:a5:ac:c9:75: 00:d5:78:ff:a8:e9:fb:f6:35:0c:71:59:41:15:3c: a4:16:8d:72:bf:57:28:e6:f5:9d:a7:2d:dd:62:49: 00:aa:a4:55:48:00:c5:e1:c2:3c:6e:4c:50:35:36: fc:11:91:a5:d1:15:61:a0:67:77:44:68:76:e7:18: 4f:12:8b:62:91:8a:36:bb:79:83:3d:15:ad:ab:b2: e0:23:c2:83:24:c0:59:94:22:42:ed:1f:0a:f0:a5: 6f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:40:9E:32:96:FD:76:CD:82:7E:07:86:FF:B6:41:93:90:F7:54:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/f13ae96c-3c94-3736-bd9e-6092b0bf4d21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 207.171.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:72:46:b5:d4:c3:90:03:d8:56:cf:56:72:d7:94:5a:95:bb: 04:33:02:61:a6:9c:5c:46:17:b4:a2:71:58:47:83:b5:88:0d: f1:f0:25:a7:7a:cf:e7:6a:b1:06:43:45:6b:44:2e:63:f2:fc: 4b:b1:cf:10:10:25:49:75:45:3c:d3:de:3f:a2:81:d6:b5:ab: e5:74:5a:4a:74:8e:86:db:76:50:c2:8a:b8:eb:55:53:ab:dd: 3f:22:88:3a:e6:f9:f3:5d:5f:e4:73:58:62:ed:34:c4:6a:2c: 4a:e1:50:23:e1:bf:00:e0:8d:87:36:2e:c6:4f:f7:49:12:c0: 5f:9d:bb:9a:d8:cf:6a:78:e9:ac:19:ea:41:41:57:56:7c:80: ba:bf:cb:86:70:e6:4a:bd:8f:fd:7c:16:4a:21:e5:a6:a6:54: 6c:76:ae:31:3c:07:7d:a0:c0:ce:1e:22:d6:3a:f7:83:e7:d5: 10:40:d8:75:9a:d1:07:ea:b9:bf:c5:c1:63:f1:88:c6:44:3c: dc:e0:59:7d:34:35:15:7f:52:0c:2f:de:02:a9:d9:18:67:d9: e9:1b:d4:b6:da:a4:85:dc:7a:33:b1:a7:fc:cb:50:40:75:67: 4e:f3:a0:29:3f:bd:2b:ef:c5:85:15:33:04:57:7c:52:8a:07: 78:b3:b4:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK4IW17tPewARQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk YzcxMjk1NjItYWE2YS00Y2M3LWFjZTctMTFjMzE3ZWZiMzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhfyp0c9q2fmzQUDLpLKUcMsjZW71d1VYOwh gjGgM+JY4WcQkYA3XShF2QWnHaCiYZN5Xn4C345PqCo8rHX9D4S8yNIJmpYG2uIN 5pxZptQP3Oq6jhS5zeS4GJzV8XBJEpiNNlfCELrCFgLUsQMuBmHG7v/ESRO3xGA+ +x8dl2dhYtkhG2tV8h00xTzetjm1xeAZRuiY0PFSjPbARuMe/aWsyXUA1Xj/qOn7 9jUMcVlBFTykFo1yv1co5vWdpy3dYkkAqqRVSADF4cI8bkxQNTb8EZGl0RVhoGd3 RGh25xhPEotikYo2u3mDPRWtq7LgI8KDJMBZlCJC7R8K8KVvewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBAnjKW/XbNgn4Hhv+2QZOQ91QXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvZjEzYWU5NmMtM2M5NC0z NzM2LWJkOWUtNjA5MmIwYmY0ZDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz6vGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK1yRrXUw5AD2FbPVnLXlFqVuwQzAmGmnFxGF7SicVhHg7WIDfHwJad6 z+dqsQZDRWtELmPy/EuxzxAQJUl1RTzT3j+igda1q+V0Wkp0jobbdlDCirjrVVOr 3T8iiDrm+fNdX+RzWGLtNMRqLErhUCPhvwDgjYc2LsZP90kSwF+du5rYz2p46awZ 6kFBV1Z8gLq/y4Zw5kq9j/18Fkoh5aamVGx2rjE8B32gwM4eItY694Pn1RBA2HWa 0Qfqub/FwWPxiMZEPNzgWX00NRV/Ugwv3gKp2Rhn2ekb1LbapIXcejOxp/zLUEB1 Z07zoCk/vSvvxYUVMwRXfFKKB3iztCQ= -----END CERTIFICATE-----Generated at Wed Apr 9 09:19:27 2025 by rpki-client