$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/dda2e103-179f-3b96-ad9c-3fdcdfd96908.roa File: dda2e103-179f-3b96-ad9c-3fdcdfd96908.roa (raw, json) Hash identifier: K5bBGYeg8r78YO3vyeiPXKuDjnPrLYIrSlmnz1DlaK8= Subject key identifier: 1B:63:FE:9A:4B:16:8B:E4:A0:58:37:63:B9:D4:59:C9:49:7B:2D:01 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584957F3F7E18B9DB7C96D525C00 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/dda2e103-179f-3b96-ad9c-3fdcdfd96908.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 11042 IP address blocks: 207.204.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f3:f7:e1:8b:9d:b7:c9:6d:52:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=87b2363c-f097-4999-85f4-0ac9939ce738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7f:6f:7d:69:eb:d8:8b:8c:14:2e:f4:26:ce: 2f:9f:2e:2c:e3:55:cd:b9:da:ce:6d:0a:d9:e4:c1: 30:45:20:a5:bd:38:9c:dc:3e:71:86:ba:46:b5:fb: 82:a9:eb:8a:0e:85:a6:0c:81:b4:d7:ab:18:a4:a9: 1d:8e:4d:fb:a3:98:b4:c2:01:6c:54:5c:8e:66:84: 4d:92:6a:60:bf:7c:cf:b6:ed:b7:2e:f8:96:03:bc: 8c:11:af:cb:bd:c1:e1:54:c2:04:f5:f7:35:1a:e7: 70:9b:3c:4e:19:1d:39:80:3f:dd:d6:ab:f0:d5:95: fb:04:80:08:fa:6a:4f:9f:18:19:d4:9f:4a:24:d6: e7:f4:99:f7:22:40:fa:93:ba:29:ac:28:95:65:fa: bf:c3:61:04:96:82:48:94:2b:eb:d3:a2:ac:72:30: 24:46:12:9c:a8:c4:f8:92:e0:5f:64:d8:0b:de:07: 75:f4:d1:99:bc:17:94:7d:d5:e6:ce:57:86:4c:de: 4b:68:e9:a7:39:41:2d:2d:2f:93:6f:a1:94:32:06: 50:0b:c9:6b:22:6d:05:44:00:9f:8c:48:2d:ca:d6: be:b2:fd:94:25:49:95:06:fe:c6:43:be:33:8d:b7: 9f:aa:a6:b4:27:26:8e:99:48:8c:a2:bd:ee:05:b8: 0b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:63:FE:9A:4B:16:8B:E4:A0:58:37:63:B9:D4:59:C9:49:7B:2D:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/dda2e103-179f-3b96-ad9c-3fdcdfd96908.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 207.204.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:30:f0:d0:9b:06:04:f8:51:f6:87:8d:df:9c:f5:5c:24:d3: 27:5a:78:e8:24:e9:a9:43:2d:0e:f4:ab:f1:9a:6a:12:ce:5e: cc:ae:01:5e:c3:0f:6e:3d:61:57:db:bd:c5:a1:ba:03:70:58: be:c3:33:d7:f9:63:00:16:4d:f1:81:1b:46:f0:12:5c:4f:d9: f5:34:00:7b:50:c1:93:0c:f7:5c:6a:e7:83:1b:7d:e2:43:8e: 7a:6f:4b:9d:1d:a0:f4:2c:15:7c:7a:d3:6f:be:ef:9c:63:57: dd:6b:8d:53:bd:96:4b:20:44:56:aa:f4:e5:9a:84:3a:56:6d: b3:b5:85:85:e4:84:77:d1:bd:06:ab:75:dd:5e:02:a1:82:3c: 7a:0a:cf:bb:86:a8:20:cf:ec:0a:4b:28:e5:12:7f:67:bb:fb: 50:13:5d:86:ed:77:b2:cd:22:db:cb:14:91:05:8d:dd:a7:6a: ac:1f:fa:b0:68:54:6d:c9:a7:a5:37:8b:9e:9e:02:8e:cd:69: d3:c8:6c:a1:ad:13:c7:a2:9c:68:e1:df:e7:19:10:71:0f:4f: f5:8a:de:f5:df:7d:ce:b4:a0:e2:79:57:63:70:87:ac:ab:6e: 32:a5:d0:60:e4:0f:9a:27:58:a2:1e:2d:b8:39:e9:d1:35:60: 44:40:2c:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX8/fhi523yW1SXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk ODdiMjM2M2MtZjA5Ny00OTk5LTg1ZjQtMGFjOTkzOWNlNzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX9vfWnr2IuMFC70Js4vny4s41XNudrObQrZ 5MEwRSClvTic3D5xhrpGtfuCqeuKDoWmDIG016sYpKkdjk37o5i0wgFsVFyOZoRN kmpgv3zPtu23LviWA7yMEa/LvcHhVMIE9fc1GudwmzxOGR05gD/d1qvw1ZX7BIAI +mpPnxgZ1J9KJNbn9Jn3IkD6k7oprCiVZfq/w2EEloJIlCvr06KscjAkRhKcqMT4 kuBfZNgL3gd19NGZvBeUfdXmzleGTN5LaOmnOUEtLS+Tb6GUMgZQC8lrIm0FRACf jEgtyta+sv2UJUmVBv7GQ74zjbefqqa0JyaOmUiMor3uBbgLsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtj/ppLFovkoFg3Y7nUWclJey0BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZGRhMmUxMDMtMTc5Zi0z Yjk2LWFkOWMtM2ZkY2RmZDk2OTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz8z4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEw8NCbBgT4UfaHjd+c9Vwk0ydaeOgk6alDLQ70q/GaahLOXsyuAV7D D249YVfbvcWhugNwWL7DM9f5YwAWTfGBG0bwElxP2fU0AHtQwZMM91xq54MbfeJD jnpvS50doPQsFXx602++75xjV91rjVO9lksgRFaq9OWahDpWbbO1hYXkhHfRvQar dd1eAqGCPHoKz7uGqCDP7ApLKOUSf2e7+1ATXYbtd7LNItvLFJEFjd2naqwf+rBo VG3Jp6U3i56eAo7NadPIbKGtE8einGjh3+cZEHEPT/WK3vXffc60oOJ5V2Nwh6yr bjKl0GDkD5onWKIeLbg56dE1YERALBQ= -----END CERTIFICATE-----Generated at Sun Apr 6 15:57:58 2025 by rpki-client