$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/a427beee-f2d1-3cab-8246-b7590b2724a7.roa File: a427beee-f2d1-3cab-8246-b7590b2724a7.roa (raw, json) Hash identifier: 8T7kMECJGsi0vEV4l7a7YCq5LhmXZQJFmtcGaDrHyF4= Subject key identifier: 99:5C:20:2F:51:08:BE:2C:B2:C6:75:1B:87:46:9F:D3:4B:54:92:17 Certificate issuer: /CN=9707c2dd-2647-4164-b4b3-9e7da141d5e9 Certificate serial: 010D0C9F43285848E59BB22BAE123781A4DBAE80 Authority key identifier: 93:5B:A6:B5:09:46:11:32:D4:45:85:3A:D5:9D:18:43:04:EC:05:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/a427beee-f2d1-3cab-8246-b7590b2724a7.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 55140 IP address blocks: 207.70.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/9707c2dd-2647-4164-b4b3-9e7da141d5e9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/9707c2dd-2647-4164-b4b3-9e7da141d5e9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:b2:2b:ae:12:37:81:a4:db:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9707c2dd-2647-4164-b4b3-9e7da141d5e9 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=a0b8e1cc-1c82-4da4-9d86-e82d60f03a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b5:d7:cf:c9:9a:0c:71:61:6d:ab:76:69:7b: 12:b5:1c:1c:58:81:d8:74:0f:26:d0:6d:1c:f6:c0: 9b:0e:dc:40:86:51:e3:b0:31:69:e2:10:03:cb:a5: 4b:1b:73:7b:29:97:30:0a:e7:04:a7:58:fd:82:a2: 69:64:40:07:0b:b9:94:56:d1:af:3e:44:6b:1b:c0: f0:ba:95:e0:e8:df:9c:a2:61:10:71:23:73:74:4c: cf:52:28:8e:c2:69:e6:92:4b:b2:ba:b4:29:24:b6: 6f:f4:23:dd:98:f3:b9:99:73:4c:a6:f4:b6:b4:9a: aa:80:c1:4b:d0:34:f2:ef:d7:61:04:1a:f1:a8:db: 18:97:19:e7:75:ad:46:0c:e8:65:7d:9a:c1:44:c1: 18:7b:4d:bd:bc:e8:1f:99:7d:b6:3a:77:72:19:87: 39:f5:8b:b3:14:c2:43:aa:b8:64:14:35:6e:22:2b: 65:3f:a6:ce:d4:2c:0b:0c:e3:66:f2:0a:a9:43:20: 20:75:b9:66:3c:9a:26:80:0d:c9:e7:12:b3:b7:07: 1d:9f:68:93:23:17:9d:aa:1c:13:58:a3:1a:b4:f0: d1:b0:2c:7d:0a:bb:8a:25:65:c8:58:76:d8:4b:93: 55:80:02:10:71:d4:b7:cb:c9:9b:5c:6a:20:71:69: ff:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5C:20:2F:51:08:BE:2C:B2:C6:75:1B:87:46:9F:D3:4B:54:92:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/a427beee-f2d1-3cab-8246-b7590b2724a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/9707c2dd-2647-4164-b4b3-9e7da141d5e9.crl X509v3 Authority Key Identifier: keyid:93:5B:A6:B5:09:46:11:32:D4:45:85:3A:D5:9D:18:43:04:EC:05:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9.cer sbgp-ipAddrBlock: critical IPv4: 207.70.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:8d:ab:9d:2b:3f:0d:cd:20:43:9d:72:46:81:6b:68:34:d9: f3:44:91:b8:29:9c:bc:98:73:41:68:16:b1:47:96:42:8d:e6: df:98:12:0f:7f:f0:ee:63:08:b0:36:e9:85:3e:5f:d8:97:c5: 48:4c:17:9a:62:fb:12:98:36:c9:30:8f:14:22:cc:0f:a7:4f: 1f:e6:24:2e:03:7e:ff:19:a1:23:4b:6b:b8:5d:a2:6d:9f:b2: 65:19:a6:fd:9f:13:2b:df:44:c9:aa:19:e5:96:26:20:e3:5a: f0:52:2e:95:ff:e6:f5:ed:1d:5b:52:64:05:4d:6c:9d:2c:fb: a7:1b:17:a3:42:9a:7a:de:0b:ae:6d:55:08:62:d0:38:eb:8d: 90:f3:f1:70:5e:d9:83:85:cc:53:e7:00:8e:50:6d:64:2e:53: 6c:e9:99:8d:98:c1:8f:6d:6d:61:6c:a7:ba:bd:ea:21:c7:37: a8:bb:86:57:dc:5e:8d:41:ee:04:fa:7c:01:ee:97:2a:b0:0d: 6d:da:a5:8a:88:ec:f4:37:f3:ca:45:d0:6e:a8:1f:7a:f3:12: ad:4c:fe:6d:8e:4b:b0:cb:7f:b7:c8:9a:2a:ae:7f:6f:76:6e: 68:34:ca:43:a9:13:c2:34:6e:d5:d3:bc:8b:3c:b1:0e:b1:75: 8a:e3:82:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm7IrrhI3gaTbroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTcwN2MyZGQtMjY0Ny00MTY0LWI0YjMtOWU3ZGExNDFk NWU5MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk YTBiOGUxY2MtMWM4Mi00ZGE0LTlkODYtZTgyZDYwZjAzYTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7XXz8maDHFhbat2aXsStRwcWIHYdA8m0G0c 9sCbDtxAhlHjsDFp4hADy6VLG3N7KZcwCucEp1j9gqJpZEAHC7mUVtGvPkRrG8Dw upXg6N+comEQcSNzdEzPUiiOwmnmkkuyurQpJLZv9CPdmPO5mXNMpvS2tJqqgMFL 0DTy79dhBBrxqNsYlxnnda1GDOhlfZrBRMEYe029vOgfmX22OndyGYc59YuzFMJD qrhkFDVuIitlP6bO1CwLDONm8gqpQyAgdblmPJomgA3J5xKztwcdn2iTIxedqhwT WKMatPDRsCx9CruKJWXIWHbYS5NVgAIQcdS3y8mbXGogcWn/1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlcIC9RCL4sssZ1G4dGn9NLVJIXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85NzA3 YzJkZC0yNjQ3LTQxNjQtYjRiMy05ZTdkYTE0MWQ1ZTkvYTQyN2JlZWUtZjJkMS0z Y2FiLTgyNDYtYjc1OTBiMjcyNGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTcwN2MyZGQtMjY0Ny00MTY0LWI0 YjMtOWU3ZGExNDFkNWU5Lzk3MDdjMmRkLTI2NDctNDE2NC1iNGIzLTllN2RhMTQx ZDVlOS5jcmwwHwYDVR0jBBgwFoAUk1umtQlGETLURYU61Z0YQwTsBRkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85NzA3YzJkZC0yNjQ3LTQxNjQtYjRiMy05ZTdk YTE0MWQ1ZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz0bwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqNq50rPw3NIEOdckaBa2g02fNEkbgpnLyYc0FoFrFHlkKN5t+YEg9/ 8O5jCLA26YU+X9iXxUhMF5pi+xKYNskwjxQizA+nTx/mJC4Dfv8ZoSNLa7hdom2f smUZpv2fEyvfRMmqGeWWJiDjWvBSLpX/5vXtHVtSZAVNbJ0s+6cbF6NCmnreC65t VQhi0DjrjZDz8XBe2YOFzFPnAI5QbWQuU2zpmY2YwY9tbWFsp7q96iHHN6i7hlfc Xo1B7gT6fAHulyqwDW3apYqI7PQ388pF0G6oH3rzEq1M/m2OS7DLf7fImiquf292 bmg0ykOpE8I0btXTvIs8sQ6xdYrjgvg= -----END CERTIFICATE-----Generated at Sat Apr 12 14:10:30 2025 by rpki-client