$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/724dc813-9136-3075-bcba-f77834af4133.roa File: 724dc813-9136-3075-bcba-f77834af4133.roa (raw, json) Hash identifier: N650mvvedp/nTrcW2RaCZjFJAgGTBSBghQAUwWS8Evg= Subject key identifier: C2:3D:BD:C5:0E:04:89:F0:A1:91:BF:0B:2D:8E:19:FC:CC:13:31:45 Certificate issuer: /CN=add35f11-0294-4be9-94b7-49cac2bcb001 Certificate serial: 010D0C9F432858494469321E2C395A39FA77F8C0 Authority key identifier: A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/724dc813-9136-3075-bcba-f77834af4133.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 923 IP address blocks: 207.167.121.0/24 maxlen: 24 2602:fbf5::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:32:1e:2c:39:5a:39:fa:77:f8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=add35f11-0294-4be9-94b7-49cac2bcb001 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=3bf32f50-f888-4409-9de1-c5939a785182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:46:7c:46:88:eb:15:88:cc:b2:52:d8:29:0b: 2f:73:e9:9e:bc:96:31:d4:3a:d1:e4:05:5b:bd:70: 27:68:8a:77:bb:60:c5:8a:30:91:e9:59:c8:3b:a5: f5:91:79:2d:d0:67:53:6a:95:df:d9:5e:8e:c4:f4: 8f:06:7d:fb:97:fc:0f:2e:12:47:8f:58:8d:50:66: 26:b2:f6:ae:81:f5:bd:9e:1e:78:34:b4:90:cb:bc: 6c:b8:8e:99:b3:a5:c1:ab:3b:a8:24:47:88:4e:da: 74:ca:12:86:85:43:c0:38:6d:a6:d3:57:6d:c1:45: 71:9b:bb:3d:1c:fd:a5:c9:3a:fc:0a:75:ca:06:cc: 41:f2:36:90:87:71:cf:7a:5e:91:d3:0f:45:0d:95: 63:b4:07:ff:0e:44:32:4a:e2:a6:49:26:58:5e:7c: 12:0b:6a:ed:09:b4:d7:2b:ae:0d:c5:e9:ea:d2:38: b7:c9:ec:77:f3:97:fc:97:ff:4b:25:b5:4d:99:36: 10:25:a9:9c:9a:55:9a:a4:00:bf:2d:f8:cd:d4:d3: 84:fe:5f:dd:d2:4d:a5:d6:bd:b3:e5:8d:27:d9:11: 6e:29:95:f2:05:2e:61:49:c4:ce:5b:5f:ee:de:46: d4:8d:db:37:9e:90:0a:ee:6e:d6:83:45:1a:5d:3c: 1e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:3D:BD:C5:0E:04:89:F0:A1:91:BF:0B:2D:8E:19:FC:CC:13:31:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/724dc813-9136-3075-bcba-f77834af4133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl X509v3 Authority Key Identifier: keyid:A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer sbgp-ipAddrBlock: critical IPv4: 207.167.121.0/24 IPv6: 2602:fbf5::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:8f:f7:b3:03:3e:96:16:13:bc:00:bd:67:10:2c:e1:ce:d2: 66:e4:d9:2e:3e:91:c5:3f:bd:d1:cd:e7:69:92:b2:9f:34:5d: 9e:82:e6:8a:01:f3:bf:35:c1:d2:ee:1f:47:24:27:88:af:0e: a2:03:76:80:36:de:7a:34:56:8d:dc:a3:c7:da:a0:d0:26:f4: d8:3d:71:04:b5:0a:2a:0d:4d:91:ee:3b:e6:31:29:04:47:50: 9d:3f:db:45:07:0c:38:b3:0a:0a:47:1b:28:ef:cb:dc:6c:55: 28:e9:3c:17:ac:a3:85:76:4b:20:7c:49:9f:00:7a:57:fc:b8: 6d:a1:bd:37:a6:f0:3d:9b:ca:85:43:a2:dd:11:27:ed:7f:2d: 58:77:d3:63:b5:eb:2f:53:2f:74:d1:92:33:2d:15:36:94:ba: fb:77:39:64:0b:7a:9f:3c:1c:37:0e:41:bd:ff:f7:66:8e:30: ef:43:be:54:4d:d2:63:92:70:d9:e8:28:e8:f9:ac:ca:52:83: 1b:52:84:78:54:1b:9c:eb:10:59:01:92:26:c4:05:3b:a6:a4: 5b:4a:02:29:98:86:dd:00:01:e5:02:62:51:bc:cc:a2:9e:52: 43:6a:5e:f4:c4:bc:49:95:1e:aa:66:90:23:c7:cf:cf:43:c4: 28:6f:7c:ef -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWElEaTIeLDlaOfp3+MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWRkMzVmMTEtMDI5NC00YmU5LTk0YjctNDljYWMyYmNi MDAxMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk M2JmMzJmNTAtZjg4OC00NDA5LTlkZTEtYzU5MzlhNzg1MTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkZ8RojrFYjMslLYKQsvc+mevJYx1DrR5AVb vXAnaIp3u2DFijCR6VnIO6X1kXkt0GdTapXf2V6OxPSPBn37l/wPLhJHj1iNUGYm svaugfW9nh54NLSQy7xsuI6Zs6XBqzuoJEeITtp0yhKGhUPAOG2m01dtwUVxm7s9 HP2lyTr8CnXKBsxB8jaQh3HPel6R0w9FDZVjtAf/DkQySuKmSSZYXnwSC2rtCbTX K64Nxenq0ji3yex385f8l/9LJbVNmTYQJamcmlWapAC/LfjN1NOE/l/d0k2l1r2z 5Y0n2RFuKZXyBS5hScTOW1/u3kbUjds3npAK7m7Wg0UaXTweSwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFMI9vcUOBInwoZG/Cy2OGfzMEzFFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQz NWYxMS0wMjk0LTRiZTktOTRiNy00OWNhYzJiY2IwMDEvNzI0ZGM4MTMtOTEzNi0z MDc1LWJjYmEtZjc3ODM0YWY0MTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWRkMzVmMTEtMDI5NC00YmU5LTk0 YjctNDljYWMyYmNiMDAxL2FkZDM1ZjExLTAyOTQtNGJlOS05NGI3LTQ5Y2FjMmJj YjAwMS5jcmwwHwYDVR0jBBgwFoAUpXphLLBJKDwfCZ0NXgzzjrlY+MowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQzNWYxMS0wMjk0LTRiZTktOTRiNy00OWNh YzJiY2IwMDEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAz6d5MA4E AgACMAgDBgAmAvv1ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAHj/ezAz6WFhO8AL1nECzhztJm5NkuPpHF P73RzedpkrKfNF2eguaKAfO/NcHS7h9HJCeIrw6iA3aANt56NFaN3KPH2qDQJvTY PXEEtQoqDU2R7jvmMSkER1CdP9tFBww4swoKRxso78vcbFUo6TwXrKOFdksgfEmf AHpX/Lhtob03pvA9m8qFQ6LdESftfy1Yd9NjtesvUy900ZIzLRU2lLr7dzlkC3qf PBw3DkG9//dmjjDvQ75UTdJjknDZ6Cjo+azKUoMbUoR4VBuc6xBZAZImxAU7pqRb SgIpmIbdAAHlAmJRvMyinlJDal70xLxJlR6qZpAjx8/PQ8Qob3zv -----END CERTIFICATE-----Generated at Sat Apr 12 12:44:41 2025 by rpki-client