$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/b67e258b-12d7-30b6-ba30-2b61891a6642.roa File: b67e258b-12d7-30b6-ba30-2b61891a6642.roa (raw, json) Hash identifier: JqFuAWsvagDMrZsUR8JwpJO9f/i+8K7PBOW0b7XLcMA= Subject key identifier: 92:EE:C1:1F:F0:C4:2F:AD:E1:E0:26:0E:78:89:5D:C5:45:AA:C8:DA Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Certificate serial: 010D0C9F432858491246A9138562AF6D1E006300 Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/b67e258b-12d7-30b6-ba30-2b61891a6642.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 394111 IP address blocks: 207.174.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:a9:13:85:62:af:6d:1e:00:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=ec6b2438-73b9-4de2-aec9-3d4cc11a12b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ed:21:43:cc:1c:bc:76:44:93:d2:21:ca:ba: 9c:c3:7d:09:b9:03:16:d0:29:46:fb:d1:6f:44:6e: e3:61:d0:f1:34:b4:50:c4:98:c7:e6:d2:71:89:b8: 0b:81:38:a5:84:b1:95:c1:34:03:8d:0d:25:06:1d: d1:26:16:8c:0e:53:5b:83:2f:6d:b1:60:ac:13:b0: cc:13:4f:76:32:2b:30:4a:0e:12:a5:ec:d4:37:d4: 4f:14:03:0c:76:9e:df:18:65:f8:c5:cb:fc:32:9b: b7:f2:90:df:05:ac:33:a1:69:6c:93:8b:23:2e:6f: 91:6f:47:85:a7:5f:6c:be:8c:92:61:14:af:a7:7d: 2c:b4:8a:23:30:ef:c1:74:a8:ab:db:dc:12:76:e5: 8b:d0:8f:87:ce:1e:2b:fb:5e:a0:d1:88:2d:83:22: 1d:07:30:74:60:28:c2:2f:c9:03:81:cd:f2:b5:4a: f3:91:44:43:c8:7a:0e:68:b0:45:78:b3:c3:eb:3c: ed:c1:07:64:48:47:b8:cf:f7:8b:eb:61:cb:d7:cf: 46:5a:5e:60:4b:f9:fc:42:50:c7:cf:05:63:c8:d4: e8:95:c3:1f:6e:d1:4f:08:39:22:e7:46:78:d4:89: 69:c2:ef:b1:be:9a:ff:ab:65:13:29:fc:3d:1e:60: ae:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:EE:C1:1F:F0:C4:2F:AD:E1:E0:26:0E:78:89:5D:C5:45:AA:C8:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/b67e258b-12d7-30b6-ba30-2b61891a6642.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl X509v3 Authority Key Identifier: keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer sbgp-ipAddrBlock: critical IPv4: 207.174.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:5f:a5:31:95:bc:87:eb:0c:1b:f8:b2:61:3e:6f:ad:82:15: 8d:44:5d:34:b3:05:ef:4a:ff:a2:bb:28:e4:43:9c:51:8e:1c: c1:b8:16:20:a0:64:f8:cb:02:6b:31:6f:c7:4a:25:64:f7:e1: d1:69:e7:de:c5:7e:7b:c5:68:41:d9:c5:a3:e4:03:67:4d:1a: d4:91:85:7f:df:30:ac:5d:b6:14:cc:ce:01:65:1e:a6:50:82: c8:75:6a:7f:a0:1c:c9:c8:b5:25:27:e3:8a:7f:f3:f1:ba:74: 0f:84:56:ae:8c:7c:ef:3e:05:47:ab:87:41:5f:6d:78:b0:3d: 9d:dd:be:80:44:2e:3c:f1:65:8c:0d:79:fe:db:96:4c:cb:22: 80:21:6b:09:bf:ce:29:ce:7d:50:2d:8f:31:88:07:df:ca:46: 7b:b7:1d:f3:df:bb:5e:0a:fa:ea:23:fa:7f:77:31:8d:2d:1b: df:da:ba:aa:9d:87:10:ea:19:ab:1c:c9:e4:ca:61:fe:b9:bc: 79:86:0d:85:a7:37:37:5a:f6:36:de:64:7f:41:81:cb:9b:00: 6c:15:5e:c3:b9:6d:5e:8e:64:b9:64:0e:18:ee:5b:cb:df:40: f5:47:c5:89:e7:83:78:78:39:a3:fd:6e:0c:5b:f3:4b:41:47: ca:55:5e:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRqkThWKvbR4AYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0ZWY3ZTktMTU0My00YThkLWFlZTktZjQyM2RiOWU5 YWI3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ZWM2YjI0MzgtNzNiOS00ZGUyLWFlYzktM2Q0Y2MxMWExMmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+0hQ8wcvHZEk9Ihyrqcw30JuQMW0ClG+9Fv RG7jYdDxNLRQxJjH5tJxibgLgTilhLGVwTQDjQ0lBh3RJhaMDlNbgy9tsWCsE7DM E092MiswSg4SpezUN9RPFAMMdp7fGGX4xcv8Mpu38pDfBawzoWlsk4sjLm+Rb0eF p19svoySYRSvp30stIojMO/BdKir29wSduWL0I+Hzh4r+16g0YgtgyIdBzB0YCjC L8kDgc3ytUrzkURDyHoOaLBFeLPD6zztwQdkSEe4z/eL62HL189GWl5gS/n8QlDH zwVjyNTolcMfbtFPCDki50Z41Ilpwu+xvpr/q2UTKfw9HmCufQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLuwR/wxC+t4eAmDniJXcVFqsjaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTRl ZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIzZGI5ZTlhYjcvYjY3ZTI1OGItMTJkNy0z MGI2LWJhMzAtMmI2MTg5MWE2NjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE0ZWY3ZTktMTU0My00YThkLWFl ZTktZjQyM2RiOWU5YWI3LzkxNGVmN2U5LTE1NDMtNGE4ZC1hZWU5LWY0MjNkYjll OWFiNy5jcmwwHwYDVR0jBBgwFoAUyLofgjtwVdo/+bZIjGoSsLULcQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTRlZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIz ZGI5ZTlhYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz66QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpfpTGVvIfrDBv4smE+b62CFY1EXTSzBe9K/6K7KORDnFGOHMG4FiCg ZPjLAmsxb8dKJWT34dFp597FfnvFaEHZxaPkA2dNGtSRhX/fMKxdthTMzgFlHqZQ gsh1an+gHMnItSUn44p/8/G6dA+EVq6MfO8+BUerh0FfbXiwPZ3dvoBELjzxZYwN ef7blkzLIoAhawm/zinOfVAtjzGIB9/KRnu3HfPfu14K+uoj+n93MY0tG9/auqqd hxDqGascyeTKYf65vHmGDYWnNzda9jbeZH9BgcubAGwVXsO5bV6OZLlkDhjuW8vf QPVHxYnng3h4OaP9bgxb80tBR8pVXqE= -----END CERTIFICATE-----Generated at Sat Apr 12 14:13:21 2025 by rpki-client