$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/43923168-7671-34ef-8e05-2404a6ab8830.roa File: 43923168-7671-34ef-8e05-2404a6ab8830.roa (raw, json) Hash identifier: Bxdt1M+/5SuZ6f1VaNN3j4y80yIoeipiM/UQLIXkGf0= Subject key identifier: 78:46:3D:51:D6:E1:4C:4E:58:17:8B:1B:5C:60:7D:43:9A:17:70:63 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F432858491D7179789A9DD6F45A9F5A60 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/43923168-7671-34ef-8e05-2404a6ab8830.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 398068 IP address blocks: 207.41.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:79:78:9a:9d:d6:f4:5a:9f:5a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=d2966bca-0e4b-4668-b81e-7488a3ffc928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:cf:8d:13:27:83:6d:2b:0e:d9:64:09:54:db: 7f:ad:35:c7:e6:ca:7c:04:0a:95:8c:dc:bb:5c:d6: 46:a0:f6:53:be:5a:a6:af:f2:5b:b5:6b:03:46:f0: c8:d8:44:1b:40:62:10:56:55:cb:97:88:e0:6f:93: 29:b1:c3:48:80:b4:bf:2b:fd:b2:bd:38:b5:ae:8f: 73:ce:9b:f1:20:be:f7:a5:e7:f5:d1:4e:f6:60:cd: d0:8d:5f:92:aa:34:d7:dc:23:74:25:9c:eb:eb:7d: a5:35:f7:19:a5:b0:2f:35:41:40:61:5f:10:4b:9f: 9e:d0:05:f2:63:43:82:8e:07:22:80:6e:24:a0:82: 8d:22:d6:56:ea:9f:99:eb:4d:d9:70:24:62:8d:bf: c1:35:00:ab:1f:8d:ab:a8:c3:59:60:db:df:35:f8: 77:aa:b5:0e:36:29:40:d6:c8:57:3c:07:75:09:6f: 8d:bd:6e:80:08:33:90:af:9f:90:dc:51:11:d3:4f: cf:9b:99:45:af:01:f8:bd:00:58:58:72:5c:58:a4: 3c:a6:d7:b3:17:5b:20:6d:33:de:3c:55:0e:c8:ef: cc:05:85:d8:9a:db:57:df:2b:4a:20:57:5e:d5:e0: a3:fd:64:8d:71:77:fd:0a:2a:f4:c5:e7:d7:d6:64: 42:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:46:3D:51:D6:E1:4C:4E:58:17:8B:1B:5C:60:7D:43:9A:17:70:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/43923168-7671-34ef-8e05-2404a6ab8830.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 207.41.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:d1:d5:77:25:4e:b8:3f:4b:7e:73:89:4b:f7:e5:6f:44:26: 88:dc:cb:39:da:a4:be:cd:d5:5c:4d:ec:51:34:b4:f9:34:e8: 9b:06:0b:a6:75:ce:2d:95:cb:91:4e:7d:a2:28:4a:a4:a6:f1: 7a:39:ae:e3:f2:b1:b9:5f:83:12:c8:55:b4:ae:36:07:5e:25: f9:60:cf:ce:fb:86:be:8d:37:46:af:30:11:8d:08:bf:13:51: a2:68:d1:28:48:d6:db:1f:7d:2b:bf:0e:27:00:fc:37:85:6d: c2:05:07:39:1b:1d:1c:f2:fd:0d:05:bb:b6:b7:70:f3:02:81: 1b:0e:4e:d4:f5:8e:9d:79:b0:cc:cc:a0:57:ca:1a:76:6d:99: aa:8f:1f:b7:0c:02:03:64:79:77:6b:60:eb:da:0d:8b:31:6a: 53:ee:14:7a:ca:59:fc:a1:96:7d:be:bd:19:59:c7:ab:e2:77: 8a:ab:28:04:bf:63:b8:91:ec:96:2c:8e:bb:a0:5f:f7:1a:48: 70:02:20:92:e5:f2:81:bf:85:ef:58:23:40:48:80:2c:19:74: 3b:c5:e9:61:8e:2c:1a:85:c0:54:df:47:53:0c:46:01:2a:de: 3e:c8:e0:c5:09:f2:c4:a2:76:2e:25:64:ee:28:95:22:d6:e6: 76:10:02:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcXl4mp3W9FqfWmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk ZDI5NjZiY2EtMGU0Yi00NjY4LWI4MWUtNzQ4OGEzZmZjOTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhc+NEyeDbSsO2WQJVNt/rTXH5sp8BAqVjNy7 XNZGoPZTvlqmr/JbtWsDRvDI2EQbQGIQVlXLl4jgb5MpscNIgLS/K/2yvTi1ro9z zpvxIL73pef10U72YM3QjV+SqjTX3CN0JZzr632lNfcZpbAvNUFAYV8QS5+e0AXy Y0OCjgcigG4koIKNItZW6p+Z603ZcCRijb/BNQCrH42rqMNZYNvfNfh3qrUONilA 1shXPAd1CW+NvW6ACDOQr5+Q3FER00/Pm5lFrwH4vQBYWHJcWKQ8ptezF1sgbTPe PFUOyO/MBYXYmttX3ytKIFde1eCj/WSNcXf9Cir0xefX1mRCGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhGPVHW4UxOWBeLG1xgfUOaF3BjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvNDM5MjMxNjgtNzY3MS0z NGVmLThlMDUtMjQwNGE2YWI4ODMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzykBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPR1XclTrg/S35ziUv35W9EJojcyznapL7N1VxN7FE0tPk06JsGC6Z1 zi2Vy5FOfaIoSqSm8Xo5ruPysblfgxLIVbSuNgdeJflgz877hr6NN0avMBGNCL8T UaJo0ShI1tsffSu/DicA/DeFbcIFBzkbHRzy/Q0Fu7a3cPMCgRsOTtT1jp15sMzM oFfKGnZtmaqPH7cMAgNkeXdrYOvaDYsxalPuFHrKWfyhln2+vRlZx6vid4qrKAS/ Y7iR7JYsjrugX/caSHACIJLl8oG/he9YI0BIgCwZdDvF6WGOLBqFwFTfR1MMRgEq 3j7I4MUJ8sSidi4lZO4olSLW5nYQApE= -----END CERTIFICATE-----Generated at Sun Apr 6 05:54:48 2025 by rpki-client