$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9005fe65-5a20-3167-96fc-8740dbf0b1a8.roa File: 9005fe65-5a20-3167-96fc-8740dbf0b1a8.roa (raw, json) Hash identifier: jQj4RAzG/kSP/YUaLPbc4WIhKWXWhUW//i5jdwO2akw= Subject key identifier: E8:D6:93:90:79:A6:B7:9F:B5:AA:AC:3D:B7:C6:7C:F2:93:5E:36:34 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848A9961F63D63CAFAAFB7399A0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9005fe65-5a20-3167-96fc-8740dbf0b1a8.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 393659 IP address blocks: 207.229.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:1f:63:d6:3c:af:aa:fb:73:99:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=1b6a9835-7f4f-4cd0-8021-f5f3458beacc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e7:e7:a3:7a:5a:af:d9:22:e8:ff:1a:95:78: 82:30:7f:1f:b9:c4:d7:42:fa:e2:2d:40:5d:84:d2: 54:a2:0f:c1:73:19:e4:6b:9b:28:31:71:62:0f:6f: 53:52:74:0d:bb:48:9d:0f:f4:8f:50:69:f3:05:30: a1:d5:b1:ff:73:6a:29:71:f9:be:bd:24:60:46:03: 41:8d:3f:aa:ea:5c:b5:c0:0b:18:78:d9:4f:99:9a: 17:da:89:e5:8b:1e:bd:8f:6d:93:45:95:d4:80:cb: e7:b3:32:d1:f2:d4:02:2e:d3:6a:e0:1b:9d:bf:eb: c1:6b:48:89:d4:da:3b:4f:a5:90:c1:1e:1a:79:e6: d5:18:a0:14:e4:79:5a:9d:6e:10:a0:ea:f0:40:8b: f2:23:52:8a:8b:3d:ef:91:c8:02:3c:a5:79:2f:f6: a8:42:f7:f6:03:06:7b:bb:c0:1d:c5:c3:4e:f3:51: 2f:dd:65:e8:ca:d4:c6:31:56:22:6d:c1:fb:4c:e6: be:39:b2:91:93:38:0a:4d:ce:3f:0f:5d:0b:23:15: 30:aa:b4:7b:43:62:4a:c8:70:1b:2f:ba:b6:89:ff: f4:93:45:fe:6e:bf:f6:c1:64:16:47:dc:1b:f0:80: 8e:7d:8f:a1:1f:7d:09:71:7d:c4:00:28:06:7c:c5: 26:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D6:93:90:79:A6:B7:9F:B5:AA:AC:3D:B7:C6:7C:F2:93:5E:36:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9005fe65-5a20-3167-96fc-8740dbf0b1a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.229.55.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:91:17:24:65:7d:65:9c:e6:a7:38:e6:17:59:4f:05:4d:ef: a4:fb:20:37:64:93:65:08:d4:c8:45:ba:1f:25:52:8d:ec:8b: fb:cf:fe:c1:c0:63:d1:4b:ce:d6:63:ee:1a:36:bb:df:d5:49: 1a:0d:ae:65:31:0e:04:e9:ed:f7:2f:c5:9f:29:af:23:46:e0: 62:18:1c:e5:60:8f:11:29:c5:70:60:4c:82:ad:a3:3b:7c:c5: 32:9e:f5:55:b8:0b:5f:e2:7a:d5:04:5f:ff:bc:09:c6:af:52: ae:83:92:2e:83:ea:ac:89:3b:2e:65:8f:3f:5e:0b:92:1b:7b: f0:94:6c:7a:4e:ad:37:d6:0f:84:6c:8a:da:58:be:93:bf:0f: 48:ca:23:1c:65:1c:b9:b3:f2:31:48:5b:d9:19:69:c8:04:1f: e8:de:f0:93:67:0a:f5:3d:f5:23:10:29:26:94:ad:7d:2e:a1: 64:9a:79:7f:d4:4c:30:7b:e2:a6:04:f8:f0:2e:01:01:6b:a5: c6:f3:ad:ea:54:bb:2e:cf:5d:36:5c:b4:e4:f1:45:72:0c:93: cf:1e:3d:b2:91:3e:8e:28:06:d9:b7:f6:e8:6b:e0:f3:76:66: ab:3b:b8:e2:91:30:0e:49:5a:68:48:59:29:78:19:91:25:dc: 3e:cf:8a:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplh9j1jyvqvtzmaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MWI2YTk4MzUtN2Y0Zi00Y2QwLTgwMjEtZjVmMzQ1OGJlYWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Ofno3par9ki6P8alXiCMH8fucTXQvriLUBd hNJUog/Bcxnka5soMXFiD29TUnQNu0idD/SPUGnzBTCh1bH/c2opcfm+vSRgRgNB jT+q6ly1wAsYeNlPmZoX2onlix69j22TRZXUgMvnszLR8tQCLtNq4Budv+vBa0iJ 1No7T6WQwR4aeebVGKAU5HlanW4QoOrwQIvyI1KKiz3vkcgCPKV5L/aoQvf2AwZ7 u8AdxcNO81Ev3WXoytTGMVYibcH7TOa+ObKRkzgKTc4/D10LIxUwqrR7Q2JKyHAb L7q2if/0k0X+br/2wWQWR9wb8ICOfY+hH30JcX3EACgGfMUmzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjWk5B5preftaqsPbfGfPKTXjY0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOTAwNWZlNjUtNWEyMC0z MTY3LTk2ZmMtODc0MGRiZjBiMWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz+U3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiRFyRlfWWc5qc45hdZTwVN76T7IDdkk2UI1MhFuh8lUo3si/vP/sHA Y9FLztZj7ho2u9/VSRoNrmUxDgTp7fcvxZ8pryNG4GIYHOVgjxEpxXBgTIKtozt8 xTKe9VW4C1/ietUEX/+8CcavUq6Dki6D6qyJOy5ljz9eC5Ibe/CUbHpOrTfWD4Rs itpYvpO/D0jKIxxlHLmz8jFIW9kZacgEH+je8JNnCvU99SMQKSaUrX0uoWSaeX/U TDB74qYE+PAuAQFrpcbzrepUuy7PXTZctOTxRXIMk88ePbKRPo4oBtm39uhr4PN2 Zqs7uOKRMA5JWmhIWSl4GZEl3D7PiuU= -----END CERTIFICATE-----Generated at Wed Feb 19 20:34:53 2025 by rpki-client