$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/8f42879d-347c-3e33-a39e-8269903e7ef1.roa File: 8f42879d-347c-3e33-a39e-8269903e7ef1.roa (raw, json) Hash identifier: 244du/KAUlLLY2IE0P3CYDjK8uJp5rP1wnRXzy680+o= Subject key identifier: DF:A4:14:5E:DE:32:7C:02:96:F7:89:BA:7A:AF:FF:28:E5:77:CD:76 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F43285848A173149DC3459750C37DEF80 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/8f42879d-347c-3e33-a39e-8269903e7ef1.roa Signing time: Wed 22 Jan 2025 16:03:54 +0000 ROA not before: Wed 22 Jan 2025 16:03:54 +0000 ROA not after: Tue 22 Apr 2025 15:03:54 +0000 asID: 12132 IP address blocks: 207.253.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:73:14:9d:c3:45:97:50:c3:7d:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Jan 22 16:03:54 2025 GMT Not After : Apr 22 15:03:54 2025 GMT Subject: CN=2083b5ff-21e0-4545-b7e7-98096e8dca40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:86:dc:43:5f:c9:cc:be:c7:da:ec:14:72:6e: 65:69:11:e2:96:a4:81:80:10:7b:14:e6:63:06:fc: 52:24:03:d0:30:92:d7:fb:b4:ca:91:7e:f9:bd:de: d8:f4:6a:2f:43:50:3b:f5:7c:69:b1:4a:48:03:4c: 94:5a:1a:b8:6b:05:a7:95:d8:57:32:4f:a7:46:3a: 6d:23:1f:1f:1c:a5:fb:6f:61:fd:b3:2c:7f:03:13: 82:c1:9d:91:3f:50:46:fa:74:0f:55:33:8d:90:6c: 99:94:81:1e:66:ef:a3:32:8a:d2:cf:26:52:41:37: bd:6c:ff:f2:19:da:a3:ae:2f:9a:ff:48:21:b8:64: f8:00:c9:d9:32:65:e0:ae:70:b3:99:ff:52:ed:d0: 86:07:e8:94:9d:1c:18:ac:85:aa:73:ee:3b:92:e8: 19:04:5d:2c:0e:01:da:19:f7:d3:01:ba:6e:a4:09: 35:b6:8c:fb:ea:d8:2f:4f:96:d7:6c:2e:fb:a4:a9: e3:ec:a2:70:3c:eb:5f:79:b8:72:bc:80:77:0e:54: 84:d3:ae:e1:4e:1c:48:03:13:c8:e9:29:ee:b1:86: 5d:52:f6:4d:19:8b:18:33:5a:3f:d0:55:f2:3a:38: a6:fc:09:eb:d9:75:59:d7:53:4f:bb:cf:61:88:46: 77:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A4:14:5E:DE:32:7C:02:96:F7:89:BA:7A:AF:FF:28:E5:77:CD:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/8f42879d-347c-3e33-a39e-8269903e7ef1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 207.253.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:65:ea:f9:40:df:d2:82:05:00:26:92:8d:3c:40:13:aa:b2: 1c:c8:9e:32:7d:ce:cb:5d:48:9f:ad:0e:1d:53:af:87:ba:23: 07:e9:d4:92:31:7f:6c:10:54:81:1f:40:e2:56:28:3a:df:a2: 4f:46:04:0d:12:63:d8:02:8d:b7:d8:0d:7a:95:a5:12:f6:24: 85:12:1b:99:ea:be:98:7c:13:9f:ce:0b:c0:1d:fb:4f:12:f2: e9:d1:7b:de:bb:38:da:37:ec:12:82:f6:43:19:86:ef:8a:d3: 85:25:46:d3:91:f3:68:04:06:fc:93:65:24:59:0c:5d:79:de: bf:e8:7f:81:a3:1e:bb:89:e7:a5:67:73:d6:d1:c8:35:d5:79: 9f:da:34:f3:9d:1d:a9:c9:2a:82:79:1c:f2:8c:8f:6d:b7:75: bc:13:56:10:34:f1:6d:95:e3:44:66:b5:c1:87:ff:23:39:0b: e2:0a:e1:1f:e1:68:ea:50:0e:3e:98:af:05:9b:76:6e:7d:d2: 08:0c:35:c3:e2:3b:a9:76:f3:1e:8a:9e:2d:bc:cc:76:be:10: 14:df:3f:50:39:c8:65:1d:dd:f5:75:86:49:48:af:dd:d8:d6: c4:4d:a7:13:53:10:67:38:7f:e3:60:70:4d:81:c5:0b:f3:50: 50:1f:87:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihcxSdw0WXUMN974AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDEyMjE2MDM1NFoXDTI1MDQyMjE1MDM1NFowLzEtMCsGA1UEAxMk MjA4M2I1ZmYtMjFlMC00NTQ1LWI3ZTctOTgwOTZlOGRjYTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIbcQ1/JzL7H2uwUcm5laRHilqSBgBB7FOZj BvxSJAPQMJLX+7TKkX75vd7Y9GovQ1A79XxpsUpIA0yUWhq4awWnldhXMk+nRjpt Ix8fHKX7b2H9syx/AxOCwZ2RP1BG+nQPVTONkGyZlIEeZu+jMorSzyZSQTe9bP/y Gdqjri+a/0ghuGT4AMnZMmXgrnCzmf9S7dCGB+iUnRwYrIWqc+47kugZBF0sDgHa GffTAbpupAk1toz76tgvT5bXbC77pKnj7KJwPOtfebhyvIB3DlSE067hThxIAxPI 6SnusYZdUvZNGYsYM1o/0FXyOjim/Anr2XVZ11NPu89hiEZ3uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+kFF7eMnwClveJunqv/yjld812MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvOGY0Mjg3OWQtMzQ3Yy0z ZTMzLWEzOWUtODI2OTkwM2U3ZWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/2DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJl6vlA39KCBQAmko08QBOqshzInjJ9zstdSJ+tDh1Tr4e6Iwfp1JIx f2wQVIEfQOJWKDrfok9GBA0SY9gCjbfYDXqVpRL2JIUSG5nqvph8E5/OC8Ad+08S 8unRe967ONo37BKC9kMZhu+K04UlRtOR82gEBvyTZSRZDF153r/of4GjHruJ56Vn c9bRyDXVeZ/aNPOdHanJKoJ5HPKMj223dbwTVhA08W2V40RmtcGH/yM5C+IK4R/h aOpQDj6YrwWbdm590ggMNcPiO6l28x6Kni28zHa+EBTfP1A5yGUd3fV1hklIr93Y 1sRNpxNTEGc4f+NgcE2BxQvzUFAfhz0= -----END CERTIFICATE-----Generated at Fri Apr 11 22:30:59 2025 by rpki-client