$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c/db6221b0-2a35-37dc-b02d-7429cd3d3e00.roa File: db6221b0-2a35-37dc-b02d-7429cd3d3e00.roa (raw, json) Hash identifier: rIYYbSQrDFKce7NhkgPgZ5AxVl5Qz/MbshdWoNVHfFQ= Subject key identifier: 3E:C3:A2:C2:04:36:62:B3:5B:E8:3B:16:7E:45:8F:EF:83:05:4A:20 Certificate issuer: /CN=8f0b1fb6-c822-4463-9321-b88b9a81302c Certificate serial: 010D0C9F432858494B64146885278F80E406B780 Authority key identifier: 01:F6:42:9E:0B:5B:80:A4:DC:E4:64:15:83:C6:8C:41:69:C7:33:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c/db6221b0-2a35-37dc-b02d-7429cd3d3e00.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 400204 IP address blocks: 207.167.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c/8f0b1fb6-c822-4463-9321-b88b9a81302c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c/8f0b1fb6-c822-4463-9321-b88b9a81302c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:14:68:85:27:8f:80:e4:06:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0b1fb6-c822-4463-9321-b88b9a81302c Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=a50a18de-361b-4f82-8286-f5f9b04751b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:da:49:0e:d0:b1:90:2b:69:f9:39:99:85:30: 35:7e:f6:5f:b1:70:73:fa:ed:4c:65:d8:f5:d6:ed: 88:6e:6a:15:56:45:ea:48:37:ed:49:c5:c2:6f:00: 57:c4:e3:86:72:b8:13:84:77:26:46:79:a5:4c:1d: 6a:32:b5:72:1c:55:3c:f9:07:f7:84:30:ef:00:31: 8d:66:5f:ad:a4:04:a5:e9:2c:33:53:88:96:1b:38: 0f:2b:10:9a:f8:ec:80:82:34:5c:74:fd:98:cb:aa: e8:7a:f3:fb:e2:1d:e9:b1:2d:1d:d5:09:5e:af:b9: 69:a8:62:cd:e2:51:0b:db:7a:51:9c:b1:55:d5:cd: 5a:f9:9e:5e:01:fe:09:c1:b0:1c:b9:e7:4e:91:44: f3:84:e7:68:6b:c1:50:43:08:cf:45:a6:90:c2:9a: bb:53:51:78:63:6e:dc:75:54:1b:99:89:4b:f3:de: 83:03:c2:1b:37:4f:ba:34:d5:bd:2f:94:1c:52:c3: 77:9b:8c:0e:0d:70:f0:94:9a:9f:3b:65:04:1e:66: 6f:90:9b:ec:0c:4c:fa:d8:41:ac:22:29:4e:7d:2b: 4d:8a:9c:46:73:02:64:3d:ee:ac:d5:a6:35:cf:ee: f0:4b:c6:aa:f4:e0:e7:68:aa:dd:93:4c:fb:5d:36: 1a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C3:A2:C2:04:36:62:B3:5B:E8:3B:16:7E:45:8F:EF:83:05:4A:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c/db6221b0-2a35-37dc-b02d-7429cd3d3e00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c/8f0b1fb6-c822-4463-9321-b88b9a81302c.crl X509v3 Authority Key Identifier: keyid:01:F6:42:9E:0B:5B:80:A4:DC:E4:64:15:83:C6:8C:41:69:C7:33:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c.cer sbgp-ipAddrBlock: critical IPv4: 207.167.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:a4:e8:d5:20:0a:f0:fa:b0:4c:1c:52:8d:3f:d0:79:5a:37: f9:6d:19:88:52:2f:67:61:c0:79:4c:5c:59:16:7b:a6:88:4f: a6:55:d6:f2:23:ad:d3:f0:dc:08:70:f2:ad:a7:c5:b5:af:9e: fe:1c:3d:65:59:f5:91:5c:4c:ad:ec:fb:bc:b2:06:c7:44:15: fc:0c:a2:18:be:5c:3c:f7:0a:60:f9:2c:af:40:54:e7:79:99: 31:5a:31:39:ef:63:d9:1d:69:a0:b5:57:80:43:94:57:df:f6: 8d:de:3f:97:bc:e8:60:79:7e:5f:ce:01:67:6d:35:10:49:03: 83:b4:a3:24:c2:e2:c7:7c:11:ac:1c:06:f1:2c:b4:23:b1:5f: 75:36:b3:c8:e5:3d:31:69:a0:bd:e8:fc:8a:c7:f2:a4:b3:c3: a2:14:de:10:13:04:e4:d6:c0:f8:ae:dd:a0:60:6b:1e:c8:49: d1:2c:f7:db:eb:d8:e3:f3:84:51:70:97:e7:9e:df:90:7f:c3: 88:1c:ff:f3:0a:5b:74:06:06:51:a3:91:fd:6c:87:af:ab:d0: 50:44:28:0a:02:1b:da:5d:fc:ea:e5:80:f0:a1:f1:76:24:a4: 23:c3:ec:ae:1e:cb:67:41:62:45:a1:ef:90:d9:37:f4:49:10: 37:ae:4c:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZBRohSePgOQGt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYjFmYjYtYzgyMi00NDYzLTkzMjEtYjg4YjlhODEz MDJjMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk YTUwYTE4ZGUtMzYxYi00ZjgyLTgyODYtZjVmOWIwNDc1MWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtpJDtCxkCtp+TmZhTA1fvZfsXBz+u1MZdj1 1u2IbmoVVkXqSDftScXCbwBXxOOGcrgThHcmRnmlTB1qMrVyHFU8+Qf3hDDvADGN Zl+tpASl6SwzU4iWGzgPKxCa+OyAgjRcdP2Yy6roevP74h3psS0d1Qler7lpqGLN 4lEL23pRnLFV1c1a+Z5eAf4JwbAcuedOkUTzhOdoa8FQQwjPRaaQwpq7U1F4Y27c dVQbmYlL896DA8IbN0+6NNW9L5QcUsN3m4wODXDwlJqfO2UEHmZvkJvsDEz62EGs IilOfStNipxGcwJkPe6s1aY1z+7wS8aq9ODnaKrdk0z7XTYaGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7DosIENmKzW+g7Fn5Fj++DBUogMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZjBi MWZiNi1jODIyLTQ0NjMtOTMyMS1iODhiOWE4MTMwMmMvZGI2MjIxYjAtMmEzNS0z N2RjLWIwMmQtNzQyOWNkM2QzZTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGYwYjFmYjYtYzgyMi00NDYzLTkz MjEtYjg4YjlhODEzMDJjLzhmMGIxZmI2LWM4MjItNDQ2My05MzIxLWI4OGI5YTgx MzAyYy5jcmwwHwYDVR0jBBgwFoAUAfZCngtbgKTc5GQVg8aMQWnHMw8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZjBiMWZiNi1jODIyLTQ0NjMtOTMyMS1iODhi OWE4MTMwMmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6d7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmk6NUgCvD6sEwcUo0/0HlaN/ltGYhSL2dhwHlMXFkWe6aIT6ZV1vIj rdPw3Ahw8q2nxbWvnv4cPWVZ9ZFcTK3s+7yyBsdEFfwMohi+XDz3CmD5LK9AVOd5 mTFaMTnvY9kdaaC1V4BDlFff9o3eP5e86GB5fl/OAWdtNRBJA4O0oyTC4sd8Eawc BvEstCOxX3U2s8jlPTFpoL3o/IrH8qSzw6IU3hATBOTWwPiu3aBgax7ISdEs99vr 2OPzhFFwl+ee35B/w4gc//MKW3QGBlGjkf1sh6+r0FBEKAoCG9pd/OrlgPCh8XYk pCPD7K4ey2dBYkWh75DZN/RJEDeuTD0= -----END CERTIFICATE-----Generated at Fri Apr 4 19:29:47 2025 by rpki-client