$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/c432c5a4-ed04-3547-9d82-8353164b23d8.roa File: c432c5a4-ed04-3547-9d82-8353164b23d8.roa (raw, json) Hash identifier: 9CM2KalNUx4TZTYfTZIwDNzunRvDDYyM3bjv12mC+EQ= Subject key identifier: 09:65:73:E2:BA:3E:27:FA:DA:9F:3E:98:77:8E:4C:E2:39:3A:76:9F Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F43285848ADC6140AD0DB1BE2A965F400 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/c432c5a4-ed04-3547-9d82-8353164b23d8.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 16409 IP address blocks: 207.114.24.0/24 maxlen: 24 207.114.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:14:0a:d0:db:1b:e2:a9:65:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=19c6c2da-ef21-4b99-a5fd-5bc49f1140cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:df:d7:dc:9b:49:2d:7a:f8:2e:55:fa:78:23: 2d:a0:05:83:b5:b6:18:75:24:e0:79:3f:87:e7:2b: 6f:e3:f5:3f:36:59:fa:80:fb:11:30:62:52:f3:7a: 63:58:3d:60:f9:9a:14:8e:94:72:ee:32:e7:2a:49: 9a:22:36:e6:0b:63:d0:c0:b1:f8:b5:69:91:52:ff: 2a:d1:fa:ca:1d:e8:54:ff:9d:72:7d:f6:95:8a:8f: 18:24:27:3f:a9:51:b3:12:e6:11:77:cd:0f:ad:dd: f6:bd:d9:de:ed:82:d9:19:a2:5d:38:8d:c6:a2:e0: 93:03:fa:50:fc:67:75:8d:24:28:de:70:9f:fe:3d: 77:c3:98:b0:b5:39:73:88:5a:b8:43:62:84:5b:35: 15:3b:eb:d3:d8:7a:b1:ab:76:e8:25:6c:80:5f:f3: 46:42:48:a6:96:89:0a:b4:aa:bf:e1:fe:d0:a5:13: 89:81:f8:67:47:38:6d:e4:43:46:81:ac:df:bb:fa: e8:a6:fb:b4:4a:07:34:ee:26:fe:d3:5f:ef:ca:3b: c0:52:f5:f3:9b:af:d7:ca:a5:69:3e:da:6a:5f:94: f2:aa:ab:96:40:2e:9c:54:e3:f4:b3:54:e5:98:6e: 0e:e1:5f:01:e0:91:cd:24:70:b1:a7:aa:f4:fc:57: 1b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:65:73:E2:BA:3E:27:FA:DA:9F:3E:98:77:8E:4C:E2:39:3A:76:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/c432c5a4-ed04-3547-9d82-8353164b23d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 207.114.24.0/24 207.114.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:0d:13:bb:4b:60:87:55:92:2e:7c:ac:b4:f5:c8:72:78:9e: b8:d2:8e:88:06:08:33:c7:69:20:e9:cb:c2:fe:35:61:d0:66: a8:dc:23:b1:90:c7:2b:34:b8:e3:97:37:4d:bf:a8:c4:88:b8: f3:67:15:77:b0:c5:0b:8b:bc:32:55:e2:52:ef:97:80:92:63: cb:47:69:c3:76:ea:62:6f:ab:50:6a:7c:33:5d:1d:8b:17:6e: 43:38:2d:da:a4:f2:b3:38:da:89:b6:5e:bc:98:a3:9a:f8:59: af:70:39:18:a3:09:bc:7c:3a:b0:fd:56:dd:ba:27:b7:c0:82: f8:e8:92:06:5f:70:b2:c9:a2:1d:b1:38:d9:13:5a:39:4f:8a: 3e:72:f1:b5:91:2c:b8:f6:eb:2e:5d:e9:76:6e:ad:64:de:75: bc:c2:b5:77:a0:2a:1a:7e:7b:3a:4b:e6:72:92:b9:d0:83:b4: f6:52:67:a0:4d:d4:76:c8:b7:74:1a:fa:a0:98:bc:70:88:f4: 13:22:de:95:35:48:9e:0a:9b:97:d8:a9:79:0a:da:e5:7f:b6: 38:03:f4:76:ee:04:dc:51:79:cd:ca:4f:1d:38:f7:26:b1:75: f2:0f:2f:f9:2f:43:f0:ce:60:04:60:5a:eb:c1:e9:bb:10:16: 16:26:e0:1e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEitxhQK0Nsb4qll9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk MTljNmMyZGEtZWYyMS00Yjk5LWE1ZmQtNWJjNDlmMTE0MGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd/X3JtJLXr4LlX6eCMtoAWDtbYYdSTgeT+H 5ytv4/U/Nln6gPsRMGJS83pjWD1g+ZoUjpRy7jLnKkmaIjbmC2PQwLH4tWmRUv8q 0frKHehU/51yffaVio8YJCc/qVGzEuYRd80Prd32vdne7YLZGaJdOI3GouCTA/pQ /Gd1jSQo3nCf/j13w5iwtTlziFq4Q2KEWzUVO+vT2Hqxq3boJWyAX/NGQkimlokK tKq/4f7QpROJgfhnRzht5ENGgazfu/ropvu0Sgc07ib+01/vyjvAUvXzm6/XyqVp PtpqX5TyqquWQC6cVOP0s1TlmG4O4V8B4JHNJHCxp6r0/FcbNQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAllc+K6Pif62p8+mHeOTOI5OnafMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvYzQzMmM1YTQtZWQwNC0z NTQ3LTlkODItODM1MzE2NGIyM2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAz3IYAwQD z3IgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABsNE7tLYIdVki58rLT1yHJ4nrjSjogGCDPHaSDpy8L+NWHQ ZqjcI7GQxys0uOOXN02/qMSIuPNnFXewxQuLvDJV4lLvl4CSY8tHacN26mJvq1Bq fDNdHYsXbkM4Ldqk8rM42om2XryYo5r4Wa9wORijCbx8OrD9Vt26J7fAgvjokgZf cLLJoh2xONkTWjlPij5y8bWRLLj26y5d6XZurWTedbzCtXegKhp+ezpL5nKSudCD tPZSZ6BN1HbIt3Qa+qCYvHCI9BMi3pU1SJ4Km5fYqXkK2uV/tjgD9HbuBNxRec3K Tx049yaxdfIPL/kvQ/DOYARgWuvB6bsQFhYm4B4= -----END CERTIFICATE-----Generated at Sat Apr 12 15:33:02 2025 by rpki-client