$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/32a3a400-0c38-3e7e-8728-30557eb6f6aa.roa File: 32a3a400-0c38-3e7e-8728-30557eb6f6aa.roa (raw, json) Hash identifier: RooVJ4z8jo3VnW1yZTUY26r1W6t8QymPaaOtBU4rko0= Subject key identifier: 37:72:90:0F:48:6F:AE:D0:C3:1E:59:7C:97:DC:91:19:42:F2:A9:97 Certificate issuer: /CN=5fab6378-e15d-4471-b01f-be15fc5bfa04 Certificate serial: 010D0C9F432858494CC9463C448710449B8EDB40 Authority key identifier: 61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/32a3a400-0c38-3e7e-8728-30557eb6f6aa.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 7018 IP address blocks: 207.170.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:46:3c:44:87:10:44:9b:8e:db:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fab6378-e15d-4471-b01f-be15fc5bfa04 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=9055db2b-d102-4da8-b76b-753e258a7f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e7:71:81:e8:32:6c:3e:9f:d4:6c:80:40:66: 71:a4:d5:8b:bc:ac:09:e0:c1:ca:c8:f9:4f:b8:91: eb:84:f9:4f:c6:52:95:71:5d:fe:b3:4f:ff:ed:40: b2:99:85:ca:16:a8:4f:68:27:f6:df:2c:c9:51:db: ef:8a:00:e2:02:71:94:33:57:2a:e6:8c:f3:7f:1c: 96:d6:79:d7:8d:f8:2a:e6:88:ad:7b:72:79:a8:98: 10:bb:60:e1:0e:e6:42:2c:20:39:69:61:ee:94:f8: 96:f5:26:ed:13:06:05:44:ea:b4:ed:1e:b3:71:83: 28:78:06:10:9b:22:72:2d:07:3e:27:92:c6:e9:36: 69:eb:9c:06:f3:bf:b7:f3:51:c5:17:65:39:1e:25: 78:0d:21:c7:e5:a1:1c:fb:e5:06:4b:8b:b8:28:a6: 9c:c6:f3:66:0c:a9:f8:eb:91:b4:c4:4f:14:bc:86: 1c:08:26:33:b6:6d:23:4c:d7:de:b3:31:09:60:a2: dc:ad:4e:3a:a3:a7:a5:2e:69:68:49:54:32:66:48: 1e:59:85:06:32:11:2d:fd:4a:7f:43:f0:b2:53:5d: 7d:d0:c7:b8:f0:60:81:29:95:04:30:9d:e4:07:49: 4e:2d:54:f4:26:ba:2c:07:89:da:80:37:e1:dc:9b: ea:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:72:90:0F:48:6F:AE:D0:C3:1E:59:7C:97:DC:91:19:42:F2:A9:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/32a3a400-0c38-3e7e-8728-30557eb6f6aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl X509v3 Authority Key Identifier: keyid:61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer sbgp-ipAddrBlock: critical IPv4: 207.170.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:fe:8b:f4:70:31:e7:45:76:c5:26:23:61:61:45:7e:89:a2: e9:ae:98:e6:f9:58:88:7c:26:c4:1e:61:4e:5c:eb:77:28:04: e2:20:69:8c:64:bd:f2:98:e8:03:52:8d:d8:c7:35:2d:0b:dc: fc:8a:25:19:89:16:a4:16:25:7e:ef:fc:26:25:74:f1:bc:00: 4a:d3:e0:f5:78:1b:ae:19:05:67:36:c9:4c:f5:e7:ef:d6:20: ff:6f:18:a1:72:6c:7b:b6:65:e4:e3:8a:b0:aa:2c:38:c9:bd: 62:b4:a0:33:73:41:f1:5f:c8:b5:5a:6f:73:e2:fe:51:d9:e2: 69:f3:d8:82:31:64:1f:94:fb:51:46:e1:ff:16:5c:d4:57:c2: 1f:34:a1:89:82:0b:a8:01:b2:d9:65:8f:08:16:ba:54:b9:97: 86:86:bd:f2:31:24:9a:38:e2:cf:dc:01:09:d3:e1:f9:84:52: 02:bc:01:39:18:5f:9a:3d:b5:b1:50:38:ee:e6:8e:98:79:03: 96:f5:de:39:e9:b9:e9:35:db:f1:cf:79:e4:a4:8c:22:87:cc: 9e:65:9c:43:86:e4:7d:51:9c:ba:61:c2:f8:2e:ae:67:08:8f: 26:81:d0:de:ff:33:61:9a:b1:f9:00:ca:0e:7c:15:01:c4:95: e4:f3:bd:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUY8RIcQRJuO20AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWZhYjYzNzgtZTE1ZC00NDcxLWIwMWYtYmUxNWZjNWJm YTA0MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk OTA1NWRiMmItZDEwMi00ZGE4LWI3NmItNzUzZTI1OGE3ZjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmedxgegybD6f1GyAQGZxpNWLvKwJ4MHKyPlP uJHrhPlPxlKVcV3+s0//7UCymYXKFqhPaCf23yzJUdvvigDiAnGUM1cq5ozzfxyW 1nnXjfgq5oite3J5qJgQu2DhDuZCLCA5aWHulPiW9SbtEwYFROq07R6zcYMoeAYQ myJyLQc+J5LG6TZp65wG87+381HFF2U5HiV4DSHH5aEc++UGS4u4KKacxvNmDKn4 65G0xE8UvIYcCCYztm0jTNfeszEJYKLcrU46o6elLmloSVQyZkgeWYUGMhEt/Up/ Q/CyU1190Me48GCBKZUEMJ3kB0lOLVT0JrosB4nagDfh3Jvq+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdykA9Ib67Qwx5ZfJfckRlC8qmXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81ZmFi NjM3OC1lMTVkLTQ0NzEtYjAxZi1iZTE1ZmM1YmZhMDQvMzJhM2E0MDAtMGMzOC0z ZTdlLTg3MjgtMzA1NTdlYjZmNmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWZhYjYzNzgtZTE1ZC00NDcxLWIw MWYtYmUxNWZjNWJmYTA0LzVmYWI2Mzc4LWUxNWQtNDQ3MS1iMDFmLWJlMTVmYzVi ZmEwNC5jcmwwHwYDVR0jBBgwFoAUYUBDv+JQs0dk/NFzD2KYA1AyGNIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81ZmFiNjM3OC1lMTVkLTQ0NzEtYjAxZi1iZTE1 ZmM1YmZhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6qtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK/+i/RwMedFdsUmI2FhRX6JoumumOb5WIh8JsQeYU5c63coBOIgaYxk vfKY6ANSjdjHNS0L3PyKJRmJFqQWJX7v/CYldPG8AErT4PV4G64ZBWc2yUz15+/W IP9vGKFybHu2ZeTjirCqLDjJvWK0oDNzQfFfyLVab3Pi/lHZ4mnz2IIxZB+U+1FG 4f8WXNRXwh80oYmCC6gBstlljwgWulS5l4aGvfIxJJo44s/cAQnT4fmEUgK8ATkY X5o9tbFQOO7mjph5A5b13jnpuek12/HPeeSkjCKHzJ5lnEOG5H1RnLphwvgurmcI jyaB0N7/M2GasfkAyg58FQHEleTzvds= -----END CERTIFICATE-----Generated at Fri Apr 4 21:40:46 2025 by rpki-client