$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/1efdd1ea-667a-3f76-8ebc-687df88a77a6.roa File: 1efdd1ea-667a-3f76-8ebc-687df88a77a6.roa (raw, json) Hash identifier: g+xrQ3QVPS+qAsn7IoZ7MRlScvipVDlz3to33+eknDs= Subject key identifier: 52:CA:A4:25:96:71:1A:4E:41:D5:ED:52:EF:89:C2:CA:5B:D4:CF:98 Certificate issuer: /CN=5ccc6d6f-2606-494d-a559-67c452762d98 Certificate serial: 010D0C9F432858492E13C26EBB7F14B00DF42E00 Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/1efdd1ea-667a-3f76-8ebc-687df88a77a6.roa Signing time: Fri 14 Mar 2025 01:00:39 +0000 ROA not before: Fri 14 Mar 2025 01:00:39 +0000 ROA not after: Thu 12 Jun 2025 01:00:39 +0000 asID: 376 IP address blocks: 207.162.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2e:13:c2:6e:bb:7f:14:b0:0d:f4:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98 Validity Not Before: Mar 14 01:00:39 2025 GMT Not After : Jun 12 01:00:39 2025 GMT Subject: CN=b43be6ce-0bfa-4d4e-be8e-a607ab017f3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e9:41:0f:1b:0c:78:b4:e1:e0:58:dc:59:e7: 38:e2:65:62:40:09:f5:47:5c:90:da:be:37:42:9d: 58:bb:a9:e5:0a:37:9d:57:e4:cc:4a:3c:b0:e8:8d: f1:3d:54:31:94:b1:7f:ba:19:df:13:2c:0e:4d:bf: c8:c3:21:78:c1:0b:da:3a:69:39:b5:80:92:4b:ea: 3c:bb:44:29:f8:54:55:05:8a:23:92:93:db:9e:48: 09:de:c5:72:1b:81:1e:9e:7c:a1:f5:69:e4:80:a6: 31:38:cf:77:40:9a:2d:6d:8e:23:1d:04:2e:43:19: 9f:b4:5f:ab:ce:e1:0a:85:ba:b6:34:6f:a9:e5:ac: b2:9b:ea:d6:f6:a5:f3:ac:46:21:81:9c:87:b4:d1: 84:33:01:bb:fb:53:a7:82:fb:c9:c1:b8:b0:d0:51: 3e:44:ba:e3:bb:a5:37:c0:52:cf:cf:ec:a9:0e:b4: 6a:b3:d0:fa:5f:17:eb:ee:96:d4:bf:d8:1d:59:44: 7e:13:93:12:d6:1d:13:b2:15:8f:f7:78:67:8f:11: 4c:60:f0:08:f1:00:ff:69:46:c2:9d:ac:06:d5:d8: 2d:55:b2:cf:24:bb:26:64:af:db:30:3a:30:c5:8b: a4:90:6f:ca:57:8d:b8:62:11:01:b2:d7:9c:2e:84: 01:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:CA:A4:25:96:71:1A:4E:41:D5:ED:52:EF:89:C2:CA:5B:D4:CF:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/1efdd1ea-667a-3f76-8ebc-687df88a77a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl X509v3 Authority Key Identifier: keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer sbgp-ipAddrBlock: critical IPv4: 207.162.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:00:9b:dc:a6:99:24:90:14:7d:95:52:68:f4:0d:bc:60:37: c3:8a:54:c7:6a:11:bf:55:1b:04:dd:d6:17:a3:f8:4d:db:fe: 49:75:69:7e:3d:b1:18:eb:00:c9:ed:d0:19:81:26:c2:06:c7: 99:f7:ea:b5:95:7a:45:99:5a:6b:40:f9:d5:7f:70:6c:57:5f: 7c:d0:1a:f8:98:98:8b:d1:c9:ee:9f:ef:e1:b5:93:cc:7c:b7: 8b:12:1b:6c:42:ca:7d:05:f2:6d:02:10:66:25:f5:37:0f:45: b2:17:d0:b7:b5:1c:fe:9b:0b:ff:9f:14:7d:ba:40:51:7e:04: 6e:07:ff:f8:cc:61:8f:bf:61:21:ca:1d:b1:ce:09:12:7f:87: 8c:f2:16:92:b8:ab:8c:de:48:36:53:ff:b7:ba:76:46:53:f7: df:35:59:07:66:5c:fd:86:e1:ea:19:8b:65:26:d9:0b:b0:dc: 9d:ea:60:8e:b4:63:61:da:38:e0:ef:c9:11:4b:8b:c2:80:a9: 22:2f:46:c9:a3:f7:99:63:24:2c:32:2b:52:5c:d1:cb:d8:de: 4f:c3:9a:cb:c1:c6:f5:28:c9:85:52:77:14:2a:39:6d:17:09: 44:a6:69:a1:06:8d:d1:1b:65:60:0e:2f:1a:71:72:7d:48:be: 73:47:0f:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkuE8Juu38UsA30LgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy ZDk4MB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk YjQzYmU2Y2UtMGJmYS00ZDRlLWJlOGUtYTYwN2FiMDE3ZjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+lBDxsMeLTh4FjcWec44mViQAn1R1yQ2r43 Qp1Yu6nlCjedV+TMSjyw6I3xPVQxlLF/uhnfEywOTb/IwyF4wQvaOmk5tYCSS+o8 u0Qp+FRVBYojkpPbnkgJ3sVyG4Eennyh9WnkgKYxOM93QJotbY4jHQQuQxmftF+r zuEKhbq2NG+p5ayym+rW9qXzrEYhgZyHtNGEMwG7+1OngvvJwbiw0FE+RLrju6U3 wFLPz+ypDrRqs9D6Xxfr7pbUv9gdWUR+E5MS1h0TshWP93hnjxFMYPAI8QD/aUbC nawG1dgtVbLPJLsmZK/bMDowxYukkG/KV424YhEBstecLoQBdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLKpCWWcRpOQdXtUu+Jwspb1M+YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvMWVmZGQxZWEtNjY3YS0z Zjc2LThlYmMtNjg3ZGY4OGE3N2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1 NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2 MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0 NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6IUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkAm9ymmSSQFH2VUmj0DbxgN8OKVMdqEb9VGwTd1hej+E3b/kl1aX49 sRjrAMnt0BmBJsIGx5n36rWVekWZWmtA+dV/cGxXX3zQGviYmIvRye6f7+G1k8x8 t4sSG2xCyn0F8m0CEGYl9TcPRbIX0Le1HP6bC/+fFH26QFF+BG4H//jMYY+/YSHK HbHOCRJ/h4zyFpK4q4zeSDZT/7e6dkZT9981WQdmXP2G4eoZi2Um2Quw3J3qYI60 Y2HaOODvyRFLi8KAqSIvRsmj95ljJCwyK1Jc0cvY3k/DmsvBxvUoyYVSdxQqOW0X CUSmaaEGjdEbZWAOLxpxcn1IvnNHD2o= -----END CERTIFICATE-----Generated at Sun Apr 6 10:32:54 2025 by rpki-client