$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c/38a9b888-91f6-373b-8ebd-4e5d1283e80f.roa File: 38a9b888-91f6-373b-8ebd-4e5d1283e80f.roa (raw, json) Hash identifier: lVYMloQg0wB+RUVhHsyXn5rRfrWzJou+Xdc17PKbWyg= Subject key identifier: 1C:8B:BD:39:E0:90:40:6C:29:61:5F:72:E2:DC:40:18:63:58:CF:37 Certificate issuer: /CN=7cac21fa-fb8a-4352-9772-6995e344f72c Certificate serial: 010D0C9F43285848E16BEA9B2511ED52E9E28A00 Authority key identifier: 4E:53:DA:A7:BE:CE:C4:F0:65:FF:69:82:59:35:CF:9B:00:4C:A2:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c/38a9b888-91f6-373b-8ebd-4e5d1283e80f.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 20055 IP address blocks: 205.196.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c/7cac21fa-fb8a-4352-9772-6995e344f72c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c/7cac21fa-fb8a-4352-9772-6995e344f72c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:ea:9b:25:11:ed:52:e9:e2:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cac21fa-fb8a-4352-9772-6995e344f72c Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=ec23836c-2f12-4f3c-b22e-a6aa825e6cb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0a:1b:72:f3:d0:72:d0:98:70:65:c2:bb:07: bf:b1:49:f2:0f:2c:6d:45:8f:55:31:c4:7a:c2:8e: 09:c4:41:4f:7d:e8:a4:7b:72:b3:06:76:4c:df:bc: 1e:ce:24:83:92:4f:8e:08:71:69:fa:e8:48:5c:c9: 2b:12:c9:84:16:35:27:fb:55:17:4f:6c:c6:68:50: 78:fa:84:85:ed:42:16:44:02:36:4c:a8:8e:5e:4f: 11:2e:83:31:81:a2:17:02:e7:93:03:3e:25:c0:10: 72:3b:27:7b:f5:fe:b4:18:ce:49:18:3f:a2:31:b8: e2:5c:24:9f:15:3b:70:e2:aa:bb:92:70:8d:c7:45: de:46:5e:16:39:81:09:8c:01:9e:52:05:8f:76:19: 3d:c7:70:04:8e:27:f9:f3:8c:02:04:e7:e0:76:b2: ce:96:a2:ba:66:2f:6c:af:ad:2a:8a:01:45:86:54: 48:60:7a:4b:7a:5e:f8:22:70:56:a3:72:4e:26:54: 96:10:cd:86:8f:98:85:d1:37:88:32:e9:b8:44:44: 19:4c:e9:46:ae:67:49:74:0b:38:19:05:36:55:18: e4:7d:3c:25:36:34:bc:06:a7:7b:df:9c:61:73:1f: 8f:a3:64:6d:71:84:e7:65:2c:8b:68:51:28:c8:c6: 67:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:8B:BD:39:E0:90:40:6C:29:61:5F:72:E2:DC:40:18:63:58:CF:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c/38a9b888-91f6-373b-8ebd-4e5d1283e80f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c/7cac21fa-fb8a-4352-9772-6995e344f72c.crl X509v3 Authority Key Identifier: keyid:4E:53:DA:A7:BE:CE:C4:F0:65:FF:69:82:59:35:CF:9B:00:4C:A2:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c.cer sbgp-ipAddrBlock: critical IPv4: 205.196.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:d5:15:60:91:f5:a3:d9:bc:f3:1b:24:a8:d2:cc:ab:8d:2a: 07:bc:36:aa:03:b4:68:a1:c6:9f:5b:d2:96:1f:da:06:55:02: 0c:a3:80:87:36:38:c9:92:60:eb:b5:15:79:af:16:7b:19:7f: da:d7:f2:57:bc:aa:e5:59:f1:ab:c7:5e:e7:a1:15:c1:09:63: 3a:84:12:c0:d4:22:a4:6e:a1:a1:7c:27:af:62:35:1c:26:6c: f1:29:d1:8f:e1:73:b6:8e:a4:a5:00:45:ad:06:b7:c4:5e:e9: 6f:2d:a1:a6:ae:fb:8e:2b:b8:bd:7a:e8:9a:7e:8a:7d:a5:b1: 27:14:44:3f:ce:d0:96:c4:c6:cc:39:16:51:0b:27:68:96:8d: 75:08:28:b7:d4:42:87:08:29:97:77:96:ab:2a:c4:01:1a:34: be:44:f6:e1:22:42:23:a1:90:aa:98:b3:18:ae:5c:ec:5d:c7: 99:d4:c6:43:4b:b4:40:3f:9e:25:a7:41:e0:b9:0d:e4:6f:2b: 81:8d:19:b6:da:bd:c2:fb:52:02:80:e2:14:70:a9:8b:08:d3: 69:ae:89:3e:00:95:7a:fc:cd:0c:b7:31:eb:32:33:46:74:4f: 31:c5:93:76:34:c5:ee:70:e0:40:8a:5d:f6:26:d8:a7:55:ba: 14:b6:62:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha+qbJRHtUuniigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2NhYzIxZmEtZmI4YS00MzUyLTk3NzItNjk5NWUzNDRm NzJjMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk ZWMyMzgzNmMtMmYxMi00ZjNjLWIyMmUtYTZhYTgyNWU2Y2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQobcvPQctCYcGXCuwe/sUnyDyxtRY9VMcR6 wo4JxEFPfeike3KzBnZM37weziSDkk+OCHFp+uhIXMkrEsmEFjUn+1UXT2zGaFB4 +oSF7UIWRAI2TKiOXk8RLoMxgaIXAueTAz4lwBByOyd79f60GM5JGD+iMbjiXCSf FTtw4qq7knCNx0XeRl4WOYEJjAGeUgWPdhk9x3AEjif584wCBOfgdrLOlqK6Zi9s r60qigFFhlRIYHpLel74InBWo3JOJlSWEM2Gj5iF0TeIMum4REQZTOlGrmdJdAs4 GQU2VRjkfTwlNjS8Bqd735xhcx+Po2RtcYTnZSyLaFEoyMZnMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByLvTngkEBsKWFfcuLcQBhjWM83MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83Y2Fj MjFmYS1mYjhhLTQzNTItOTc3Mi02OTk1ZTM0NGY3MmMvMzhhOWI4ODgtOTFmNi0z NzNiLThlYmQtNGU1ZDEyODNlODBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvN2NhYzIxZmEtZmI4YS00MzUyLTk3 NzItNjk5NWUzNDRmNzJjLzdjYWMyMWZhLWZiOGEtNDM1Mi05NzcyLTY5OTVlMzQ0 ZjcyYy5jcmwwHwYDVR0jBBgwFoAUTlPap77OxPBl/2mCWTXPmwBMouQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS83Y2FjMjFmYS1mYjhhLTQzNTItOTc3Mi02OTk1 ZTM0NGY3MmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzcQHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3VFWCR9aPZvPMbJKjSzKuNKge8NqoDtGihxp9b0pYf2gZVAgyjgIc2 OMmSYOu1FXmvFnsZf9rX8le8quVZ8avHXuehFcEJYzqEEsDUIqRuoaF8J69iNRwm bPEp0Y/hc7aOpKUARa0Gt8Re6W8toaau+44ruL166Jp+in2lsScURD/O0JbExsw5 FlELJ2iWjXUIKLfUQocIKZd3lqsqxAEaNL5E9uEiQiOhkKqYsxiuXOxdx5nUxkNL tEA/niWnQeC5DeRvK4GNGbbavcL7UgKA4hRwqYsI02muiT4AlXr8zQy3MesyM0Z0 TzHFk3Y0xe5w4ECKXfYm2KdVuhS2YpY= -----END CERTIFICATE-----Generated at Sat Apr 12 13:01:50 2025 by rpki-client