$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/a7eb1b7a-38b5-351a-9820-21a52e05575a.roa File: a7eb1b7a-38b5-351a-9820-21a52e05575a.roa (raw, json) Hash identifier: pNaDlVuKmB+xgeMdS3sVzSejvX0ZlYIuO/LB+1EonGg= Subject key identifier: 96:50:8D:91:ED:7A:05:79:FD:68:42:4A:3E:2E:65:CC:BA:7A:0D:8C Certificate issuer: /CN=c3a9f614-c620-42e4-acad-b328d6a97099 Certificate serial: 010D0C9F43285848ADC607419F7D8B4ECF5D4A80 Authority key identifier: CC:33:C4:9B:48:E5:B4:6F:57:2F:B3:5D:B4:0F:D0:5C:B1:D2:61:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/a7eb1b7a-38b5-351a-9820-21a52e05575a.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 16509 IP address blocks: 207.188.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/c3a9f614-c620-42e4-acad-b328d6a97099.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/c3a9f614-c620-42e4-acad-b328d6a97099.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:07:41:9f:7d:8b:4e:cf:5d:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3a9f614-c620-42e4-acad-b328d6a97099 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=a0eb962a-9af3-4988-b783-7e26eb6266ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:85:a1:6e:46:2b:9d:9f:cb:fa:a3:15:4f:f7: 61:8d:bc:94:6c:ff:a8:a4:e8:d5:d3:2f:0b:2f:05: 03:ca:f0:41:26:a8:5e:61:3e:40:38:06:2f:b8:66: 9a:66:67:b2:9d:8b:01:96:38:f2:90:72:89:fc:3b: d0:8d:27:ec:e9:2e:eb:48:5e:07:ef:50:87:2a:fa: aa:bb:42:17:31:a5:50:83:e7:33:65:ce:f5:2e:e5: 97:5b:50:ba:b7:76:e7:cb:ae:8f:6d:0b:65:01:60: f3:5f:e2:d7:4a:6e:3c:01:96:d3:7e:85:89:ed:52: eb:0d:07:37:ec:82:75:62:f1:55:69:53:01:dc:be: 36:1c:f8:dd:5d:34:d8:f2:e6:ea:95:21:04:e9:35: e9:d0:e1:46:70:14:73:70:09:ef:5e:b4:79:12:24: fc:36:79:cb:50:f6:09:2b:92:1e:f0:19:d7:a7:6b: 9f:f0:23:e1:5e:8f:2b:69:6b:c9:12:eb:5c:74:c6: cf:1f:06:c9:6e:b8:b4:08:3b:39:83:39:e1:66:3c: 1a:fc:56:35:f9:75:cc:58:98:1b:20:9e:08:ae:64: c0:09:e9:1b:4a:e1:f4:0f:cb:4d:87:8e:00:19:f8: 83:b9:4f:09:20:9a:d1:f6:a0:9d:04:e8:34:64:4b: 37:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:50:8D:91:ED:7A:05:79:FD:68:42:4A:3E:2E:65:CC:BA:7A:0D:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/a7eb1b7a-38b5-351a-9820-21a52e05575a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/c3a9f614-c620-42e4-acad-b328d6a97099.crl X509v3 Authority Key Identifier: keyid:CC:33:C4:9B:48:E5:B4:6F:57:2F:B3:5D:B4:0F:D0:5C:B1:D2:61:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099.cer sbgp-ipAddrBlock: critical IPv4: 207.188.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:42:d0:91:82:88:0d:ca:71:bf:0f:a0:2a:fd:4b:5b:ea:08: 27:23:e5:1c:29:80:4c:6d:f9:9f:cb:89:5b:cd:45:70:98:bc: f1:17:99:97:5f:61:98:e5:25:13:e6:c2:c8:fc:4d:95:bb:60: 59:95:5a:b2:83:5f:c8:89:b4:5d:39:01:a4:a1:94:37:d0:09: e3:48:05:99:c7:4a:00:b9:b6:16:4b:17:71:28:64:8c:06:5a: f0:65:4f:49:20:89:f7:78:5b:f6:7d:45:f1:81:66:1c:43:78: 8f:90:38:6a:f1:2f:6b:eb:dd:ea:02:6c:c9:fa:fa:92:18:3d: 6b:8c:e6:55:68:b4:65:69:74:b6:25:3c:d0:fe:e7:09:4b:a4: d7:9b:d5:d7:46:50:27:a7:18:62:e5:1a:82:75:dc:02:22:c7: 54:f7:07:ff:f6:4b:74:32:6a:03:c2:f4:a3:36:b4:8c:1a:3e: 4c:46:c6:57:11:92:a3:1f:d2:e2:f3:d8:bb:b0:f9:e5:5d:53: de:73:26:38:9a:4e:54:14:1f:ba:6d:f7:76:ea:c6:f2:aa:d5: 2b:e1:4e:7b:d1:ad:05:83:3b:a2:fe:1c:76:5d:26:8c:11:96: 81:f7:87:ab:9e:58:2b:1d:c1:b4:ea:1d:2f:b8:38:bb:71:cf: 55:66:12:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxgdBn32LTs9dSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNhOWY2MTQtYzYyMC00MmU0LWFjYWQtYjMyOGQ2YTk3 MDk5MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk YTBlYjk2MmEtOWFmMy00OTg4LWI3ODMtN2UyNmViNjI2NmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYWhbkYrnZ/L+qMVT/dhjbyUbP+opOjV0y8L LwUDyvBBJqheYT5AOAYvuGaaZmeynYsBljjykHKJ/DvQjSfs6S7rSF4H71CHKvqq u0IXMaVQg+czZc71LuWXW1C6t3bny66PbQtlAWDzX+LXSm48AZbTfoWJ7VLrDQc3 7IJ1YvFVaVMB3L42HPjdXTTY8ubqlSEE6TXp0OFGcBRzcAnvXrR5EiT8NnnLUPYJ K5Ie8BnXp2uf8CPhXo8raWvJEutcdMbPHwbJbri0CDs5gznhZjwa/FY1+XXMWJgb IJ4IrmTACekbSuH0D8tNh44AGfiDuU8JIJrR9qCdBOg0ZEs3fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZQjZHtegV5/WhCSj4uZcy6eg2MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2E5 ZjYxNC1jNjIwLTQyZTQtYWNhZC1iMzI4ZDZhOTcwOTkvYTdlYjFiN2EtMzhiNS0z NTFhLTk4MjAtMjFhNTJlMDU1NzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNhOWY2MTQtYzYyMC00MmU0LWFj YWQtYjMyOGQ2YTk3MDk5L2MzYTlmNjE0LWM2MjAtNDJlNC1hY2FkLWIzMjhkNmE5 NzA5OS5jcmwwHwYDVR0jBBgwFoAUzDPEm0jltG9XL7NdtA/QXLHSYUAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2E5ZjYxNC1jNjIwLTQyZTQtYWNhZC1iMzI4 ZDZhOTcwOTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz7wQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZC0JGCiA3Kcb8PoCr9S1vqCCcj5RwpgExt+Z/LiVvNRXCYvPEXmZdf YZjlJRPmwsj8TZW7YFmVWrKDX8iJtF05AaShlDfQCeNIBZnHSgC5thZLF3EoZIwG WvBlT0kgifd4W/Z9RfGBZhxDeI+QOGrxL2vr3eoCbMn6+pIYPWuM5lVotGVpdLYl PND+5wlLpNeb1ddGUCenGGLlGoJ13AIix1T3B//2S3QyagPC9KM2tIwaPkxGxlcR kqMf0uLz2Luw+eVdU95zJjiaTlQUH7pt93bqxvKq1SvhTnvRrQWDO6L+HHZdJowR loH3h6ueWCsdwbTqHS+4OLtxz1VmEj0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:53 2025 by rpki-client