$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/d500aa8a-81de-3562-a18c-0919d8d4d769.roa File: d500aa8a-81de-3562-a18c-0919d8d4d769.roa (raw, json) Hash identifier: Gs5yEpn4myFqflAFyLqFufC0jJIyN6Rm7RjythZvPhw= Subject key identifier: 44:0C:E2:B8:D3:0A:03:E3:C5:68:2C:31:48:74:CA:59:4C:D2:C5:3E Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F43285848A1786027169329FF2AB7D9A0 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/d500aa8a-81de-3562-a18c-0919d8d4d769.roa Signing time: Wed 22 Jan 2025 16:14:34 +0000 ROA not before: Wed 22 Jan 2025 16:14:34 +0000 ROA not after: Tue 22 Apr 2025 15:14:34 +0000 asID: 30336 IP address blocks: 207.253.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:78:60:27:16:93:29:ff:2a:b7:d9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Jan 22 16:14:34 2025 GMT Not After : Apr 22 15:14:34 2025 GMT Subject: CN=a52525be-49cd-41e5-a805-26bb6ce2d1e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:59:1d:32:f8:39:44:11:b7:fb:23:7f:13:1b: 41:38:78:9f:15:84:f5:f4:1e:16:ac:d1:6a:a0:69: ce:47:f1:a7:db:96:e1:aa:34:0d:a9:89:af:10:c7: 57:47:78:e3:34:65:71:c7:3c:bf:0a:a0:a1:59:ee: d6:51:e2:c7:07:de:e7:f3:3f:77:56:bc:ff:29:6a: 16:62:37:1c:4b:94:da:ca:5f:e7:6e:95:df:68:0f: 73:65:c6:f1:6c:5b:48:37:cd:1a:71:7f:d8:f2:15: 3e:24:9f:39:9e:7a:a8:0b:06:e7:26:c4:0f:a2:96: 10:a0:ca:bb:92:bd:cb:0b:31:dc:f1:19:ad:cf:5e: 22:49:8f:1d:f6:d5:62:1c:4e:c0:ec:56:5a:78:69: 70:e2:cb:cc:43:af:78:71:77:72:84:db:a7:1d:6d: b4:6f:c5:e7:c2:78:b1:62:2f:48:43:e1:8c:53:2a: f8:68:c2:e7:8d:2e:09:a9:58:d2:21:33:cc:cf:9a: c0:53:41:8a:10:44:3c:23:94:36:f9:a9:7b:c8:84: 64:91:21:ec:0e:17:27:40:7f:26:23:e2:cb:a2:71: a0:ad:7c:e4:18:95:0e:5e:3f:7e:6d:6d:52:1d:33: 96:ea:c3:5d:0c:71:fc:3c:cd:94:d5:12:64:72:98: 8b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:0C:E2:B8:D3:0A:03:E3:C5:68:2C:31:48:74:CA:59:4C:D2:C5:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/d500aa8a-81de-3562-a18c-0919d8d4d769.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 207.253.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:27:bf:a7:29:dd:51:63:4c:bd:7d:b9:0a:f2:ec:d0:69:67: 54:17:12:bb:66:a4:d8:53:a3:85:32:ea:f9:d0:9d:40:78:f7: 8d:27:6b:16:0e:40:b0:eb:87:e0:b6:ac:63:34:d3:fe:e2:51: 11:bf:cb:2f:57:e0:20:8f:81:03:35:00:8c:bd:3e:d1:58:a7: 26:5f:41:8f:1f:eb:ab:8e:ed:e4:f3:a9:5f:c7:47:dd:e5:06: 8a:18:82:1f:fd:3e:a8:1c:5d:90:2b:a7:26:7f:04:a4:59:f0: 13:23:04:0f:64:28:ca:16:09:e9:74:70:d4:cf:2c:20:9c:12: 0a:08:12:46:ae:4d:b6:37:ed:fb:a8:bf:1c:6c:69:fa:6f:cb: d8:7d:f6:c7:fd:4b:86:e9:e2:45:97:d5:fc:2f:68:d4:a0:d8: 00:9a:61:88:82:8f:5d:61:65:51:f3:ac:9f:9c:47:d4:3d:c2: aa:2b:20:06:27:f7:8a:f8:bd:d4:87:ce:bc:9f:f0:84:2c:7f: df:a9:18:df:36:49:b2:6d:30:b1:df:8d:ed:c5:1d:d9:84:cf: 81:1d:1d:2a:05:1c:8d:4b:a2:86:96:f0:20:2e:3f:c4:1e:4a: 0c:ed:4b:6a:91:c7:cd:8f:5a:2a:76:61:38:f5:50:ce:c1:6f: 21:fe:f9:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiheGAnFpMp/yq32aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDEyMjE2MTQzNFoXDTI1MDQyMjE1MTQzNFowLzEtMCsGA1UEAxMk YTUyNTI1YmUtNDljZC00MWU1LWE4MDUtMjZiYjZjZTJkMWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFkdMvg5RBG3+yN/ExtBOHifFYT19B4WrNFq oGnOR/Gn25bhqjQNqYmvEMdXR3jjNGVxxzy/CqChWe7WUeLHB97n8z93Vrz/KWoW YjccS5Tayl/nbpXfaA9zZcbxbFtIN80acX/Y8hU+JJ85nnqoCwbnJsQPopYQoMq7 kr3LCzHc8Rmtz14iSY8d9tViHE7A7FZaeGlw4svMQ694cXdyhNunHW20b8Xnwnix Yi9IQ+GMUyr4aMLnjS4JqVjSITPMz5rAU0GKEEQ8I5Q2+al7yIRkkSHsDhcnQH8m I+LLonGgrXzkGJUOXj9+bW1SHTOW6sNdDHH8PM2U1RJkcpiLewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQM4rjTCgPjxWgsMUh0yllM0sU+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvZDUwMGFhOGEtODFkZS0z NTYyLWExOGMtMDkxOWQ4ZDRkNzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/2xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADonv6cp3VFjTL19uQry7NBpZ1QXErtmpNhTo4Uy6vnQnUB4940naxYO QLDrh+C2rGM00/7iURG/yy9X4CCPgQM1AIy9PtFYpyZfQY8f66uO7eTzqV/HR93l BooYgh/9PqgcXZArpyZ/BKRZ8BMjBA9kKMoWCel0cNTPLCCcEgoIEkauTbY37fuo vxxsafpvy9h99sf9S4bp4kWX1fwvaNSg2ACaYYiCj11hZVHzrJ+cR9Q9wqorIAYn 94r4vdSHzryf8IQsf9+pGN82SbJtMLHfje3FHdmEz4EdHSoFHI1LooaW8CAuP8Qe SgztS2qRx82PWip2YTj1UM7BbyH++VM= -----END CERTIFICATE-----Generated at Fri Apr 11 22:58:47 2025 by rpki-client