$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/826c9b32-80a3-3d5e-b64c-775640089e22.roa File: 826c9b32-80a3-3d5e-b64c-775640089e22.roa (raw, json) Hash identifier: MFU6dmyLf2MBzw2bTBUU+JBT33HAP787e6S2s+2boV0= Subject key identifier: C7:EA:55:B2:C6:5E:4C:0C:15:A4:78:08:E5:B5:65:A4:6E:12:52:32 Certificate issuer: /CN=1a784112-3bbf-41c8-9c32-bdb85ae76b1b Certificate serial: 010D0C9F43285849218405103F68BBD204FEA880 Authority key identifier: 2C:5D:84:99:81:5D:2D:C3:28:A2:8C:EC:05:14:9F:29:E4:B6:17:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/826c9b32-80a3-3d5e-b64c-775640089e22.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 21976 IP address blocks: 207.200.170.0/24 maxlen: 24 207.200.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:05:10:3f:68:bb:d2:04:fe:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a784112-3bbf-41c8-9c32-bdb85ae76b1b Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=042ada45-1aef-4faa-8eed-7cd3b948f4e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:91:0e:1f:64:c5:85:b0:7c:7e:5b:c7:1d:e2: a0:13:23:ed:23:c3:4d:7b:95:6f:21:b9:28:98:18: a6:b1:e2:38:23:34:5a:2c:c8:00:b1:ea:21:be:d5: a7:11:03:f2:6d:c9:3a:8a:72:e7:24:56:f9:a0:b4: 6b:53:4b:20:1f:45:3b:5c:a9:3d:b4:e0:df:8d:28: 71:76:67:cb:e7:8d:12:aa:35:3e:f2:a3:bb:72:81: ef:2e:ad:84:b9:c5:29:ba:5c:9b:63:a9:9b:42:75: 94:fb:a2:eb:80:4e:22:41:78:ae:87:f7:e6:e2:43: 99:2c:0f:3a:aa:e0:4a:05:ce:6c:24:8d:59:fc:cb: f8:14:08:e7:ed:06:36:2f:6a:c9:55:57:2d:ab:ca: 6c:d0:f9:1e:dd:fa:38:ff:15:b4:29:07:e2:29:55: b5:da:e2:e1:06:3d:34:b0:39:c3:5b:b8:0e:6f:31: 74:d1:25:f2:1f:a4:ac:f3:67:f3:3d:2d:a2:ed:18: 36:d7:bb:75:12:21:13:d5:27:20:38:76:bc:c5:b9: 35:c0:53:fd:74:18:61:ad:50:a5:06:7e:a2:f0:93: 20:50:16:e1:53:8f:ba:c4:a6:d5:d9:42:24:f9:c1: 4d:bf:c6:cb:04:95:f8:aa:9f:9b:7f:ff:ef:56:77: a7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:EA:55:B2:C6:5E:4C:0C:15:A4:78:08:E5:B5:65:A4:6E:12:52:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/826c9b32-80a3-3d5e-b64c-775640089e22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.crl X509v3 Authority Key Identifier: keyid:2C:5D:84:99:81:5D:2D:C3:28:A2:8C:EC:05:14:9F:29:E4:B6:17:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.cer sbgp-ipAddrBlock: critical IPv4: 207.200.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:a5:58:06:09:4d:1e:e0:b2:46:87:ca:ec:f9:c8:34:6e:0d: a2:bd:e2:76:1a:22:42:c0:36:80:dd:2e:1c:52:9e:1a:6d:b6: 3b:02:15:23:37:2e:48:68:3b:ed:15:a7:eb:0a:c8:31:64:f4: 59:ba:89:69:70:12:84:9b:01:09:05:32:6d:f4:d7:e8:0f:76: d0:b7:a5:b6:24:db:08:7e:69:cc:b8:85:51:44:c7:6d:8c:1d: a8:ef:fa:dd:ac:e8:ad:7e:53:bb:c2:da:d4:3a:94:55:d6:d6: 6c:c0:23:60:d9:b4:ed:ee:03:e5:75:66:ee:81:21:89:89:17: 74:df:07:89:cd:df:10:5a:b9:22:9e:91:44:6a:04:52:34:09: 69:b7:1c:14:37:57:98:fe:66:66:15:87:6d:93:13:0d:a6:9e: a4:9e:18:9e:77:ba:2b:ce:1e:2e:c6:b4:be:ec:c1:a0:fb:fc: 4a:c3:48:8b:90:b4:81:77:f0:ea:3e:b0:47:8b:3b:12:f4:95: 84:0f:0a:c8:27:84:42:b3:8b:eb:6e:9a:17:20:da:e4:c3:5a: d2:2f:0c:12:63:1c:8c:ae:6a:0e:1d:30:82:91:da:af:48:4b: c7:3f:a2:0d:36:cc:e7:6a:4c:6b:67:80:d0:13:5b:b0:ac:cd: 24:87:a0:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhAUQP2i70gT+qIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE3ODQxMTItM2JiZi00MWM4LTljMzItYmRiODVhZTc2 YjFiMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk MDQyYWRhNDUtMWFlZi00ZmFhLThlZWQtN2NkM2I5NDhmNGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpEOH2TFhbB8flvHHeKgEyPtI8NNe5VvIbko mBimseI4IzRaLMgAseohvtWnEQPybck6inLnJFb5oLRrU0sgH0U7XKk9tODfjShx dmfL540SqjU+8qO7coHvLq2EucUpulybY6mbQnWU+6LrgE4iQXiuh/fm4kOZLA86 quBKBc5sJI1Z/Mv4FAjn7QY2L2rJVVctq8ps0Pke3fo4/xW0KQfiKVW12uLhBj00 sDnDW7gObzF00SXyH6Ss82fzPS2i7Rg217t1EiET1ScgOHa8xbk1wFP9dBhhrVCl Bn6i8JMgUBbhU4+6xKbV2UIk+cFNv8bLBJX4qp+bf//vVnenywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfqVbLGXkwMFaR4COW1ZaRuElIyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xYTc4 NDExMi0zYmJmLTQxYzgtOWMzMi1iZGI4NWFlNzZiMWIvODI2YzliMzItODBhMy0z ZDVlLWI2NGMtNzc1NjQwMDg5ZTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWE3ODQxMTItM2JiZi00MWM4LTlj MzItYmRiODVhZTc2YjFiLzFhNzg0MTEyLTNiYmYtNDFjOC05YzMyLWJkYjg1YWU3 NmIxYi5jcmwwHwYDVR0jBBgwFoAULF2EmYFdLcMooozsBRSfKeS2FzowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xYTc4NDExMi0zYmJmLTQxYzgtOWMzMi1iZGI4 NWFlNzZiMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz8iqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHClWAYJTR7gskaHyuz5yDRuDaK94nYaIkLANoDdLhxSnhpttjsCFSM3 LkhoO+0Vp+sKyDFk9Fm6iWlwEoSbAQkFMm301+gPdtC3pbYk2wh+acy4hVFEx22M Hajv+t2s6K1+U7vC2tQ6lFXW1mzAI2DZtO3uA+V1Zu6BIYmJF3TfB4nN3xBauSKe kURqBFI0CWm3HBQ3V5j+ZmYVh22TEw2mnqSeGJ53uivOHi7GtL7swaD7/ErDSIuQ tIF38Oo+sEeLOxL0lYQPCsgnhEKzi+tumhcg2uTDWtIvDBJjHIyuag4dMIKR2q9I S8c/og02zOdqTGtngNATW7CszSSHoLw= -----END CERTIFICATE-----Generated at Sun Apr 6 04:44:32 2025 by rpki-client