$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0670fa0c-1c69-3756-85a2-81fa79b0198b.roa File: 0670fa0c-1c69-3756-85a2-81fa79b0198b.roa (raw, json) Hash identifier: bQdCFCgmox/pLOwDTJ6fPdiAtOO4MNqmZPVYg0Exc3Y= Subject key identifier: 78:71:A7:48:A9:97:7B:81:71:80:82:56:0D:D7:5C:A1:83:BB:6E:60 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584957F3F757DDBAB94436D0F800 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0670fa0c-1c69-3756-85a2-81fa79b0198b.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 22781 IP address blocks: 207.204.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f3:f7:57:dd:ba:b9:44:36:d0:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=2b3e3580-bd44-427b-93c2-4a94af2fa09c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:1b:82:8f:44:0d:e5:5c:b5:cc:3e:27:bb:ee: 5c:4e:c5:b8:b3:03:d2:e7:ac:b8:33:5e:2b:ba:d1: f9:63:a0:3f:30:d0:bd:8f:a5:c5:98:02:21:53:9d: 67:71:75:9c:10:92:76:e6:cb:b1:16:f3:3d:8b:e8: 02:d7:14:d2:17:2d:33:80:b4:dc:51:3e:b5:df:86: 90:71:e4:c7:49:c2:1b:ff:72:63:6c:cf:ee:01:98: 2d:29:4c:ce:cb:86:a8:65:43:73:7c:7e:4f:2f:02: 11:5d:0e:37:20:d2:45:35:9e:88:f2:11:31:76:f4: 26:11:ce:c3:4c:44:78:cc:14:5e:53:39:52:3c:6e: 6a:9a:cf:a6:40:ee:9c:31:2f:00:77:bd:74:dd:01: ee:fc:cf:20:93:c9:10:f5:6b:ed:3f:78:00:68:57: c2:b9:c2:a8:66:0d:bb:b6:47:4e:64:4a:09:5c:51: 5d:30:9f:0b:29:7a:ea:67:1f:46:3e:6f:26:4f:b3: 1b:7c:14:54:72:7d:89:a4:cf:a9:51:1c:17:1a:94: bf:d0:d9:6e:7d:42:31:2d:11:af:a6:e0:79:2d:5d: ac:36:29:b9:2e:7b:fb:29:7d:bf:62:90:c5:22:21: 3a:24:2c:c7:f7:51:54:35:a4:34:e4:44:d4:c4:ef: e2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:71:A7:48:A9:97:7B:81:71:80:82:56:0D:D7:5C:A1:83:BB:6E:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0670fa0c-1c69-3756-85a2-81fa79b0198b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 207.204.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:63:a1:ab:9d:94:fc:38:7a:bf:3d:d8:fc:93:10:cb:51:00: 66:67:a1:ee:c9:31:c5:0c:8c:ad:7d:1f:9b:77:51:41:cb:c0: a4:03:f8:6a:1e:29:47:23:9b:48:2e:3e:5a:4d:47:20:d0:51: f9:60:ca:84:bf:9b:9e:3f:5d:72:69:d8:e0:e4:fd:31:5a:6c: 3a:0f:86:48:40:14:d2:81:e5:17:8b:55:80:03:ac:51:d6:85: 73:26:69:d0:3e:a8:46:04:fa:ba:9a:a3:37:c2:6c:b4:f8:2b: 47:f3:d7:0a:4d:4f:30:24:b1:9d:4a:41:ad:53:97:12:32:cb: 81:0b:30:77:22:60:25:be:ea:49:cd:c2:3b:42:1c:84:3c:64: 3a:c1:93:25:8a:17:8e:be:bc:2f:d7:08:c8:e5:a3:f3:6c:59: 8c:81:29:74:60:9e:3e:bc:11:f0:4c:76:08:8c:68:cd:7f:ba: cb:95:a2:92:e2:43:f5:47:aa:18:22:43:39:22:c8:87:af:35: 4f:ba:80:63:4c:05:e8:c6:e7:1c:d4:72:b3:32:af:8d:0b:5a: e1:13:77:44:11:d2:31:37:87:11:e6:91:78:3b:24:23:5a:45: c0:55:8e:56:b0:f6:a7:e0:14:05:8a:a6:51:43:c4:39:a4:82: 48:1d:d5:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX8/dX3bq5RDbQ+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk MmIzZTM1ODAtYmQ0NC00MjdiLTkzYzItNGE5NGFmMmZhMDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BuCj0QN5Vy1zD4nu+5cTsW4swPS56y4M14r utH5Y6A/MNC9j6XFmAIhU51ncXWcEJJ25suxFvM9i+gC1xTSFy0zgLTcUT6134aQ ceTHScIb/3JjbM/uAZgtKUzOy4aoZUNzfH5PLwIRXQ43INJFNZ6I8hExdvQmEc7D TER4zBReUzlSPG5qms+mQO6cMS8Ad7103QHu/M8gk8kQ9WvtP3gAaFfCucKoZg27 tkdOZEoJXFFdMJ8LKXrqZx9GPm8mT7MbfBRUcn2JpM+pURwXGpS/0NlufUIxLRGv puB5LV2sNim5Lnv7KX2/YpDFIiE6JCzH91FUNaQ05ETUxO/ipQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhxp0ipl3uBcYCCVg3XXKGDu25gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMDY3MGZhMGMtMWM2OS0z NzU2LTg1YTItODFmYTc5YjAxOThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz8zgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1joaudlPw4er892PyTEMtRAGZnoe7JMcUMjK19H5t3UUHLwKQD+Goe KUcjm0guPlpNRyDQUflgyoS/m54/XXJp2ODk/TFabDoPhkhAFNKB5ReLVYADrFHW hXMmadA+qEYE+rqaozfCbLT4K0fz1wpNTzAksZ1KQa1TlxIyy4ELMHciYCW+6knN wjtCHIQ8ZDrBkyWKF46+vC/XCMjlo/NsWYyBKXRgnj68EfBMdgiMaM1/usuVopLi Q/VHqhgiQzkiyIevNU+6gGNMBejG5xzUcrMyr40LWuETd0QR0jE3hxHmkXg7JCNa RcBVjlaw9qfgFAWKplFDxDmkgkgd1SA= -----END CERTIFICATE-----Generated at Fri Apr 11 22:38:04 2025 by rpki-client