$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/2c883102-0a5b-37cd-a9ed-16c74a21870f.roa File: 2c883102-0a5b-37cd-a9ed-16c74a21870f.roa (raw, json) Hash identifier: 9Vrx9XTCQTli6fUPVTG4+zdq9IhWozuCJPz0dGZgJFg= Subject key identifier: E0:46:64:B1:E6:83:3D:0D:F1:CD:AD:F6:AC:33:00:AB:53:91:5B:9E Certificate issuer: /CN=109078e4-3ad5-4242-9f3e-058161c97a9f Certificate serial: 010D0C9F43285849244E683EE6A86BC27E4E6100 Authority key identifier: D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/2c883102-0a5b-37cd-a9ed-16c74a21870f.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 2572 IP address blocks: 207.160.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:68:3e:e6:a8:6b:c2:7e:4e:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=109078e4-3ad5-4242-9f3e-058161c97a9f Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=01c5e23a-ddc5-4262-a96b-bb6caf17b7e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4c:31:38:95:c0:7c:6d:5b:43:27:5e:f0:8a: ca:37:19:49:08:23:60:c2:34:5b:c9:4d:34:ad:c7: 2b:f1:8e:5a:80:58:1b:02:e3:a4:34:03:40:ca:37: bf:65:95:79:15:8f:f7:90:c0:37:cb:b2:da:16:f7: c6:c6:e1:88:83:f5:4d:b2:4c:38:47:05:59:9c:a9: b7:fb:a6:8d:04:e6:cd:02:ed:cf:0e:95:65:59:f8: 5d:03:08:b7:00:d6:a7:c8:fe:35:c2:f1:c5:fa:62: b7:f6:57:df:33:d4:f7:ed:c2:a2:fe:ae:aa:9a:94: c5:48:9c:73:66:35:1f:ec:bb:35:1e:97:7e:6f:5b: 01:bc:11:8e:d0:09:55:4d:02:af:74:5b:08:05:26: 5c:32:e5:9d:89:20:04:a6:2c:73:d5:f2:5a:19:cb: 11:d2:12:0e:f0:09:9c:ba:c1:1e:05:d3:48:a5:97: ee:c3:4f:6c:4e:67:bd:e2:55:3b:ef:45:0d:b5:2e: bf:4b:f6:96:54:37:f2:12:cf:cc:0c:2e:f4:a4:14: 37:37:ab:10:71:01:96:5b:9e:e5:5a:d0:57:0c:83: ef:44:2d:5c:f2:da:77:29:3f:d2:78:09:6a:d9:49: c1:28:14:b3:38:d4:2b:fd:54:93:dc:96:83:9c:ce: 6e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:46:64:B1:E6:83:3D:0D:F1:CD:AD:F6:AC:33:00:AB:53:91:5B:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/2c883102-0a5b-37cd-a9ed-16c74a21870f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl X509v3 Authority Key Identifier: keyid:D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer sbgp-ipAddrBlock: critical IPv4: 207.160.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:f8:24:16:ae:66:b2:8a:fa:f2:bd:ba:83:b9:1b:a7:08:c0: 6a:98:33:89:15:e6:d8:f5:3b:b4:a5:e0:a1:1d:ab:5d:33:a4: 03:bc:33:2c:8c:25:83:5b:b4:1c:69:a9:92:7f:b9:05:5f:b5: 42:b0:fd:7c:a4:d3:71:74:89:c4:36:6f:97:13:14:2b:aa:2f: 91:82:91:74:29:00:17:09:22:d3:f8:9a:ff:57:bf:8f:9d:3e: 27:be:ee:55:e4:5b:71:bf:1e:fd:be:3c:f8:cb:5a:df:95:b1: 70:97:90:da:b4:b8:6e:12:00:d3:d6:02:4b:09:42:46:d3:8d: 4c:fd:c7:38:a5:e3:6a:de:b2:6b:47:11:e7:87:95:c2:5b:16: 2b:64:96:49:b2:27:58:fe:bb:ea:43:ff:5d:57:26:9e:88:18: c1:15:fc:95:02:53:1d:8e:66:ed:41:f5:f0:cf:1e:67:b8:13: a7:fc:06:ec:8e:9c:17:f9:20:cb:d0:3e:9b:bb:cf:e3:f4:87: 48:4b:52:9e:b9:0c:95:17:ee:47:63:80:c8:db:e4:23:92:bf: 97:b0:83:7d:92:1b:c8:70:2e:8a:40:d7:29:ba:bb:e7:44:a5: 0a:20:c9:2c:27:a4:d6:81:11:82:0f:f3:97:eb:ab:4c:32:11: e1:99:17:30 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkkTmg+5qhrwn5OYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTA5MDc4ZTQtM2FkNS00MjQyLTlmM2UtMDU4MTYxYzk3 YTlmMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk MDFjNWUyM2EtZGRjNS00MjYyLWE5NmItYmI2Y2FmMTdiN2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUwxOJXAfG1bQyde8IrKNxlJCCNgwjRbyU00 rccr8Y5agFgbAuOkNANAyje/ZZV5FY/3kMA3y7LaFvfGxuGIg/VNskw4RwVZnKm3 +6aNBObNAu3PDpVlWfhdAwi3ANanyP41wvHF+mK39lffM9T37cKi/q6qmpTFSJxz ZjUf7Ls1Hpd+b1sBvBGO0AlVTQKvdFsIBSZcMuWdiSAEpixz1fJaGcsR0hIO8Amc usEeBdNIpZfuw09sTme94lU770UNtS6/S/aWVDfyEs/MDC70pBQ3N6sQcQGWW57l WtBXDIPvRC1c8tp3KT/SeAlq2UnBKBSzONQr/VST3JaDnM5u0QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFOBGZLHmgz0N8c2t9qwzAKtTkVueMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMDkw NzhlNC0zYWQ1LTQyNDItOWYzZS0wNTgxNjFjOTdhOWYvMmM4ODMxMDItMGE1Yi0z N2NkLWE5ZWQtMTZjNzRhMjE4NzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTA5MDc4ZTQtM2FkNS00MjQyLTlm M2UtMDU4MTYxYzk3YTlmLzEwOTA3OGU0LTNhZDUtNDI0Mi05ZjNlLTA1ODE2MWM5 N2E5Zi5jcmwwHwYDVR0jBBgwFoAU1x7+GbjHHxN4q9PR4KiPNXpWxhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xMDkwNzhlNC0zYWQ1LTQyNDItOWYzZS0wNTgx NjFjOTdhOWYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAz6AwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAI/gkFq5msor68r26g7kbpwjAapgziRXm2PU7tKXgoR2rXTOkA7wzLIwl g1u0HGmpkn+5BV+1QrD9fKTTcXSJxDZvlxMUK6ovkYKRdCkAFwki0/ia/1e/j50+ J77uVeRbcb8e/b48+Mta35WxcJeQ2rS4bhIA09YCSwlCRtONTP3HOKXjat6ya0cR 54eVwlsWK2SWSbInWP676kP/XVcmnogYwRX8lQJTHY5m7UH18M8eZ7gTp/wG7I6c F/kgy9A+m7vP4/SHSEtSnrkMlRfuR2OAyNvkI5K/l7CDfZIbyHAuikDXKbq750Sl CiDJLCek1oERgg/zl+urTDIR4ZkXMA== -----END CERTIFICATE-----Generated at Sat Apr 12 01:51:45 2025 by rpki-client