$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/784a9fd2-0e64-37b9-8c83-c9dde5b10cdc.roa File: 784a9fd2-0e64-37b9-8c83-c9dde5b10cdc.roa (raw, json) Hash identifier: utQJTPJJ72Gyd+5cZzNkt1BeRCT7kXTQELlePg6AZIs= Subject key identifier: 1B:88:F0:FA:44:E7:35:3B:41:44:C3:90:FB:63:9C:8F:A2:E2:D9:46 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F43285848A176ED019AE922E53F174F00 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/784a9fd2-0e64-37b9-8c83-c9dde5b10cdc.roa Signing time: Wed 22 Jan 2025 16:11:39 +0000 ROA not before: Wed 22 Jan 2025 16:11:39 +0000 ROA not after: Tue 22 Apr 2025 15:11:39 +0000 asID: 22652 IP address blocks: 207.253.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:76:ed:01:9a:e9:22:e5:3f:17:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Jan 22 16:11:39 2025 GMT Not After : Apr 22 15:11:39 2025 GMT Subject: CN=f95c7039-30f9-4158-99b8-d3cb93e11fb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a2:f2:ca:d1:65:d9:8a:13:5c:92:ea:16:04: 79:4c:99:6d:9f:1c:f3:e4:8a:0e:a5:d1:d8:8c:ee: a4:ec:5d:2e:55:f2:c7:db:af:81:96:d1:4c:58:c7: 50:d9:59:3b:a7:c7:e3:c2:cb:0a:b4:19:57:6c:83: 9a:c9:c3:ed:51:ff:7e:a7:10:7e:de:9e:97:85:73: 63:e4:5b:b1:39:b1:09:bb:b8:7f:e4:f1:bf:75:ac: 85:ab:13:0f:da:9c:30:5c:46:38:73:aa:f6:93:97: 05:86:00:03:91:28:cb:74:3c:83:0d:8f:bd:3f:0a: 06:13:2a:f3:36:9a:34:2c:7d:a6:b6:71:41:1b:22: e0:34:1a:82:5e:21:bd:00:10:b6:e8:49:ce:5b:16: 78:16:76:65:f4:0d:ff:f7:29:a7:e2:13:bb:5a:64: 3e:c5:9c:72:20:c2:8c:76:47:48:07:ce:76:4e:2d: 37:ab:7b:67:7c:d7:b6:b3:d4:13:9a:af:f9:8e:35: cf:00:a8:24:22:8d:31:26:66:60:ed:d5:01:8e:29: 8e:c8:27:c1:c7:66:a9:09:45:7e:cc:07:cd:d4:6e: 52:66:54:5e:79:f9:c3:c7:cf:6f:9d:66:4b:64:e4: 7d:0a:08:bf:20:16:f9:aa:a6:67:24:fc:68:83:5c: f5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:88:F0:FA:44:E7:35:3B:41:44:C3:90:FB:63:9C:8F:A2:E2:D9:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/784a9fd2-0e64-37b9-8c83-c9dde5b10cdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 207.253.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:30:eb:e0:9f:d3:90:c2:f8:43:4f:67:61:26:dc:85:4b:66: 19:42:f6:40:a4:89:0b:e9:a2:3b:7b:a6:ab:7b:c2:b7:d6:aa: ef:b6:16:1d:f6:d1:ae:aa:0a:bd:c8:71:d6:2d:d2:2e:c5:d5: c3:1b:58:8e:ce:fd:68:84:ea:40:e1:94:2f:cc:dd:77:9d:a6: a4:77:91:56:9b:21:09:85:ed:78:3f:c7:60:ab:9d:3b:16:72: 87:90:af:3a:e7:cf:f6:02:7a:4a:59:0b:d2:f6:a9:00:17:79: 7a:8b:5f:29:be:86:f4:9c:b4:28:b4:f8:79:43:db:1b:0f:68: 69:10:2e:ed:dc:ea:0e:9b:a7:57:c3:6a:77:33:80:33:fc:51: 87:48:ed:ed:12:03:63:1c:38:43:25:d3:9c:84:73:95:d0:ed: 56:1a:2b:3b:c0:27:d8:c0:97:36:b5:fb:6e:22:3f:59:36:cb: 5d:cf:58:b0:18:bf:06:2f:36:58:7b:af:69:fc:7b:bd:b8:d8: 41:d2:04:61:82:c5:39:dd:cc:14:9e:b8:87:38:67:1f:b7:95: a7:1d:74:da:ae:73:e2:b1:1f:01:31:d7:d0:3d:5f:22:8b:e4: fa:68:67:62:4f:ff:41:83:76:8a:85:07:4f:66:9c:cd:cc:88: 36:4b:77:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihdu0Bmuki5T8XTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDEyMjE2MTEzOVoXDTI1MDQyMjE1MTEzOVowLzEtMCsGA1UEAxMk Zjk1YzcwMzktMzBmOS00MTU4LTk5YjgtZDNjYjkzZTExZmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKLyytFl2YoTXJLqFgR5TJltnxzz5IoOpdHY jO6k7F0uVfLH26+BltFMWMdQ2Vk7p8fjwssKtBlXbIOaycPtUf9+pxB+3p6XhXNj 5FuxObEJu7h/5PG/dayFqxMP2pwwXEY4c6r2k5cFhgADkSjLdDyDDY+9PwoGEyrz Npo0LH2mtnFBGyLgNBqCXiG9ABC26EnOWxZ4FnZl9A3/9ymn4hO7WmQ+xZxyIMKM dkdIB852Ti03q3tnfNe2s9QTmq/5jjXPAKgkIo0xJmZg7dUBjimOyCfBx2apCUV+ zAfN1G5SZlReefnDx89vnWZLZOR9Cgi/IBb5qqZnJPxog1z1mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuI8PpE5zU7QUTDkPtjnI+i4tlGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvNzg0YTlmZDItMGU2NC0z N2I5LThjODMtYzlkZGU1YjEwY2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/3KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8w6+Cf05DC+ENPZ2Em3IVLZhlC9kCkiQvpojt7pqt7wrfWqu+2Fh32 0a6qCr3IcdYt0i7F1cMbWI7O/WiE6kDhlC/M3XedpqR3kVabIQmF7Xg/x2CrnTsW coeQrzrnz/YCekpZC9L2qQAXeXqLXym+hvSctCi0+HlD2xsPaGkQLu3c6g6bp1fD anczgDP8UYdI7e0SA2McOEMl05yEc5XQ7VYaKzvAJ9jAlza1+24iP1k2y13PWLAY vwYvNlh7r2n8e7242EHSBGGCxTndzBSeuIc4Zx+3lacddNquc+KxHwEx19A9XyKL 5PpoZ2JP/0GDdoqFB09mnM3MiDZLd2k= -----END CERTIFICATE-----Generated at Fri Apr 11 23:50:14 2025 by rpki-client