$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/66cf2a5c-1b1a-34e2-84be-fe9cfde40987.roa File: 66cf2a5c-1b1a-34e2-84be-fe9cfde40987.roa (raw, json) Hash identifier: tQz7cts/DGTUQQyhhQRP6ymEj9NIjodYPOgv+pSQN4s= Subject key identifier: EE:0C:8F:62:6D:B2:0B:63:D0:63:39:F4:3C:20:AC:12:0C:3D:C2:AE Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F432858495ABECB6250ECBE23453AEF40 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/66cf2a5c-1b1a-34e2-84be-fe9cfde40987.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 273103 IP address blocks: 207.230.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:cb:62:50:ec:be:23:45:3a:ef:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=b9a212d2-18d2-4691-935e-e1507e57869b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b0:44:80:d7:20:a9:3b:0d:8f:13:ac:f2:b6: 1c:4a:7b:52:cb:73:8b:21:4c:ed:1e:28:27:1f:49: 8e:de:aa:87:6e:e8:74:ea:d8:33:71:60:66:9e:a2: 39:06:2f:3d:82:cd:d0:6c:21:34:76:e9:50:bc:46: a2:71:2d:a3:5a:f4:8f:e2:02:39:55:ed:c3:46:b8: 19:ca:44:64:8a:f9:57:ad:2a:ce:fe:f7:eb:26:fd: 56:17:08:7d:19:e4:9e:21:ae:89:8e:5a:55:e1:19: bd:07:16:b8:a9:89:42:ed:ce:d0:3e:86:de:38:2c: b3:e8:43:0f:59:de:4a:8d:1f:a0:a0:2b:23:8f:52: 55:af:82:ed:5b:40:03:aa:d5:b1:05:dd:c6:32:b4: 6e:fe:29:c5:99:ac:68:0e:e1:1b:f7:6c:ed:94:ad: 6e:74:9f:fb:08:39:6f:37:41:66:fe:dd:00:36:d8: 88:66:72:7d:61:5b:1e:34:a5:48:f1:aa:e9:30:ef: 11:da:92:54:f1:2e:07:ca:84:11:21:fb:60:36:c7: 1a:05:73:fe:51:f1:79:ab:11:a0:88:5f:3c:43:8f: 2e:09:f7:e4:89:77:4d:a3:f5:94:53:c6:cf:31:d8: 66:ed:96:01:1d:07:af:b7:3a:9d:7e:0b:80:77:ad: 6e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:0C:8F:62:6D:B2:0B:63:D0:63:39:F4:3C:20:AC:12:0C:3D:C2:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/66cf2a5c-1b1a-34e2-84be-fe9cfde40987.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 207.230.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:f1:9c:b2:88:dd:f8:79:28:b9:91:9a:47:66:4f:fd:84:c9: a0:c5:14:8e:62:ee:0a:fb:cb:9a:c7:fc:5b:3e:5f:8a:c4:5b: f8:d4:33:38:4c:21:f9:b4:3d:6e:f8:f3:da:93:f9:8b:d0:68: 57:dc:aa:98:e3:8f:cf:ae:67:92:c3:e0:3f:0a:b5:d6:0e:80: bf:3b:a8:71:96:d5:77:cc:1f:d5:8e:c6:cb:9a:cd:13:2c:4c: 8c:b5:de:a1:67:17:04:f9:0b:5c:d2:7c:91:38:21:0a:07:23: fc:03:ab:4c:cb:51:f6:47:93:8c:f2:2b:fd:c1:8a:c9:2d:03: f5:e1:e1:7b:ad:e1:32:c0:56:ab:56:db:af:fc:13:1c:82:b5: 97:0d:84:fc:c7:9f:be:9a:9a:1d:d3:9e:b2:0f:ff:33:fe:bf: 10:aa:f5:ab:b9:f8:c7:1a:c0:b2:8d:cf:db:d7:43:c4:f4:79: 77:46:8d:90:51:9d:f4:45:46:c2:03:0e:74:b3:5c:f0:75:bf: dd:73:e3:b7:ab:7d:bc:98:d5:65:bb:e2:da:9f:8f:7b:b6:23: 49:a1:ed:af:21:5d:29:90:61:17:5f:8e:08:bf:52:26:3b:32: 29:11:ff:4c:03:3a:46:16:b2:51:30:b1:42:41:e7:44:ed:53: f4:f5:d4:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavstiUOy+I0U670AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk YjlhMjEyZDItMThkMi00NjkxLTkzNWUtZTE1MDdlNTc4NjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirBEgNcgqTsNjxOs8rYcSntSy3OLIUztHign H0mO3qqHbuh06tgzcWBmnqI5Bi89gs3QbCE0dulQvEaicS2jWvSP4gI5Ve3DRrgZ ykRkivlXrSrO/vfrJv1WFwh9GeSeIa6JjlpV4Rm9Bxa4qYlC7c7QPobeOCyz6EMP Wd5KjR+goCsjj1JVr4LtW0ADqtWxBd3GMrRu/inFmaxoDuEb92ztlK1udJ/7CDlv N0Fm/t0ANtiIZnJ9YVseNKVI8arpMO8R2pJU8S4HyoQRIftgNscaBXP+UfF5qxGg iF88Q48uCffkiXdNo/WUU8bPMdhm7ZYBHQevtzqdfguAd61uSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4Mj2Jtsgtj0GM59DwgrBIMPcKuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNjZjZjJhNWMtMWIxYS0z NGUyLTg0YmUtZmU5Y2ZkZTQwOTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz+YIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK7xnLKI3fh5KLmRmkdmT/2EyaDFFI5i7gr7y5rH/Fs+X4rEW/jUMzhM Ifm0PW7489qT+YvQaFfcqpjjj8+uZ5LD4D8KtdYOgL87qHGW1XfMH9WOxsuazRMs TIy13qFnFwT5C1zSfJE4IQoHI/wDq0zLUfZHk4zyK/3BisktA/Xh4Xut4TLAVqtW 26/8ExyCtZcNhPzHn76amh3TnrIP/zP+vxCq9au5+McawLKNz9vXQ8T0eXdGjZBR nfRFRsIDDnSzXPB1v91z47erfbyY1WW74tqfj3u2I0mh7a8hXSmQYRdfjgi/UiY7 MikR/0wDOkYWslEwsUJB50TtU/T11BQ= -----END CERTIFICATE-----Generated at Fri Apr 4 19:00:46 2025 by rpki-client