$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/c2dbde07-5894-3741-a84b-1251a1d6732f.roa File: c2dbde07-5894-3741-a84b-1251a1d6732f.roa (raw, json) Hash identifier: cZaLoRvgmKYLATA5v3LUqzzHOBcrm5+TEepuyAsVqrs= Subject key identifier: 70:E5:E9:CF:80:8F:A5:52:C0:C0:7B:31:C4:9A:A0:FA:C8:9A:1F:86 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584898D60A2E671E7EC7D6651640 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/c2dbde07-5894-3741-a84b-1251a1d6732f.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 13536 IP address blocks: 207.136.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:0a:2e:67:1e:7e:c7:d6:65:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=b35daedf-b3c6-4d26-a1ad-125702bd9cc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fb:14:86:17:cc:76:e3:94:b3:a1:4e:94:c1: 1e:8a:bc:74:aa:e8:68:e7:13:3d:b9:cf:7b:9d:dc: 44:1b:ae:c8:74:40:85:40:3c:fe:3f:12:ee:d7:9f: d2:3c:31:d3:67:18:42:ea:81:86:89:29:6b:43:0c: 1c:76:61:65:a9:0c:d7:27:46:1d:c7:79:2e:e6:6d: a3:08:8c:93:24:06:97:dd:27:2f:bb:99:8b:d2:a4: 98:59:67:96:ac:87:54:38:16:78:ed:f3:5a:7a:4d: 2f:5f:cb:2d:11:9c:b7:4f:6f:c8:38:ba:87:87:a6: f0:12:d0:81:0e:c9:f4:85:74:e0:17:b4:20:d6:8b: d4:6f:d0:54:ce:54:ce:01:f3:28:ef:ae:45:88:7b: 5c:c8:c0:a5:0b:18:62:e3:08:e8:00:c3:d1:46:92: c9:2c:e8:48:6e:e9:1a:da:1f:1f:8e:76:4f:82:bf: e0:e1:db:68:11:4c:eb:33:5d:8d:f7:a7:53:a4:69: 4d:97:4f:8d:ed:71:4a:d4:fe:84:69:cf:fd:e4:cf: 0c:75:bc:29:50:f6:d0:ab:9a:78:77:6f:67:d2:f2: 80:28:d2:22:78:17:eb:7c:85:a9:6a:6f:2e:88:1f: 8b:84:fe:7c:9d:6b:0f:0b:28:3f:b1:22:e4:14:2d: 51:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E5:E9:CF:80:8F:A5:52:C0:C0:7B:31:C4:9A:A0:FA:C8:9A:1F:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/c2dbde07-5894-3741-a84b-1251a1d6732f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 207.136.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:9d:58:57:37:97:84:b5:09:ff:70:60:f9:fc:dc:4b:20:02: 33:c1:4a:08:ff:21:5f:a9:de:df:2a:01:93:7c:91:7e:16:0f: b5:6a:5a:03:4b:a2:45:41:d6:a0:95:8a:5f:c9:eb:8d:c2:f8: 68:5f:09:99:d9:0c:68:80:bc:80:3c:ff:10:1c:b2:dc:2e:96: 24:df:0c:8d:1d:c7:28:82:3f:79:3a:23:32:44:90:9e:b8:4c: d5:88:11:d1:8b:e2:0d:c3:f8:f3:be:52:35:ef:53:84:54:43: 7d:25:ae:58:1d:fc:a7:da:40:fb:5d:06:c4:7a:4d:64:d9:92: 92:26:71:f4:bb:2f:18:ad:4b:2d:d9:e4:df:ff:aa:65:01:23: 95:e2:ad:f1:7b:e9:28:24:56:73:08:aa:b7:81:86:1d:0f:99: 7d:6e:fc:14:9f:83:81:29:26:d0:17:14:67:e4:ce:55:c3:7b: ec:54:8e:4a:06:f7:6e:8b:e1:01:a9:b6:d2:3b:93:14:c7:f6: 70:00:c9:c7:ac:72:56:bf:c5:63:f4:90:a5:66:44:95:cc:4b: 21:36:7e:59:68:56:7d:45:6d:38:ef:54:b5:dc:43:6d:5b:5f: 57:49:c8:77:88:6d:1f:73:5c:5d:5a:a5:4a:9b:a5:64:15:fe: e3:16:13:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1gouZx5+x9ZlFkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk YjM1ZGFlZGYtYjNjNi00ZDI2LWExYWQtMTI1NzAyYmQ5Y2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPsUhhfMduOUs6FOlMEeirx0quho5xM9uc97 ndxEG67IdECFQDz+PxLu15/SPDHTZxhC6oGGiSlrQwwcdmFlqQzXJ0Ydx3ku5m2j CIyTJAaX3Scvu5mL0qSYWWeWrIdUOBZ47fNaek0vX8stEZy3T2/IOLqHh6bwEtCB Dsn0hXTgF7Qg1ovUb9BUzlTOAfMo765FiHtcyMClCxhi4wjoAMPRRpLJLOhIbuka 2h8fjnZPgr/g4dtoEUzrM12N96dTpGlNl0+N7XFK1P6Eac/95M8MdbwpUPbQq5p4 d29n0vKAKNIieBfrfIWpam8uiB+LhP58nWsPCyg/sSLkFC1REwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDl6c+Aj6VSwMB7McSaoPrImh+GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvYzJkYmRlMDctNTg5NC0z NzQxLWE4NGItMTI1MWExZDY3MzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz4j1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmdWFc3l4S1Cf9wYPn83EsgAjPBSgj/IV+p3t8qAZN8kX4WD7VqWgNL okVB1qCVil/J643C+GhfCZnZDGiAvIA8/xAcstwuliTfDI0dxyiCP3k6IzJEkJ64 TNWIEdGL4g3D+PO+UjXvU4RUQ30lrlgd/KfaQPtdBsR6TWTZkpImcfS7LxitSy3Z 5N//qmUBI5XirfF76SgkVnMIqreBhh0PmX1u/BSfg4EpJtAXFGfkzlXDe+xUjkoG 926L4QGpttI7kxTH9nAAycescla/xWP0kKVmRJXMSyE2flloVn1FbTjvVLXcQ21b X1dJyHeIbR9zXF1apUqbpWQV/uMWE28= -----END CERTIFICATE-----Generated at Tue Apr 8 18:17:06 2025 by rpki-client