$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/ff08f32a-f185-3549-bd1d-46d56c37ebb1.roa File: ff08f32a-f185-3549-bd1d-46d56c37ebb1.roa (raw, json) Hash identifier: PYNxr1jhXBbC7K7D2HJR0T+aBSKKHKOGNFGTA+7qjBM= Subject key identifier: D9:27:E8:40:40:B9:20:42:D6:1F:E4:2A:96:D5:21:0B:32:1D:AD:B3 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F43285848B7F376C8F797C30B278AB8C0 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/ff08f32a-f185-3549-bd1d-46d56c37ebb1.roa Signing time: Thu 30 Jan 2025 17:30:22 +0000 ROA not before: Thu 30 Jan 2025 17:30:22 +0000 ROA not after: Wed 30 Apr 2025 16:30:22 +0000 asID: 54004 IP address blocks: 207.210.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:f3:76:c8:f7:97:c3:0b:27:8a:b8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Jan 30 17:30:22 2025 GMT Not After : Apr 30 16:30:22 2025 GMT Subject: CN=bf4ef017-85fa-4a29-95e5-dd41b17eb994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d9:64:75:e2:0e:e8:46:4b:eb:3f:04:9a:3e: 9e:38:28:79:d8:3c:be:86:91:28:f0:76:a8:40:b2: f1:e8:02:90:64:94:5b:19:f8:9c:95:f7:d3:70:47: 2e:1d:0b:32:70:0f:c0:ec:d0:e7:96:2f:e5:8c:e1: fb:9d:d2:f4:5f:67:9c:67:42:3c:72:37:f4:d4:ed: 25:7f:ca:ca:d5:e1:3f:4a:a4:c7:69:e2:d6:e6:ac: 60:b2:1f:c2:40:e1:ec:f8:92:f2:dc:2d:39:30:7c: b0:cc:de:68:8c:50:da:67:f0:0c:f3:f8:0c:42:8a: c9:1a:2f:2b:7d:dd:11:45:a8:10:17:3a:1d:c9:7c: 27:eb:a9:9e:83:67:50:be:50:f2:e5:29:3d:60:f0: 82:97:fa:7c:0e:ae:5a:bf:54:a2:cb:e9:1a:32:df: d8:3c:ac:5d:f3:08:0e:db:18:51:11:95:8b:8b:53: 8a:3c:d1:61:c8:72:32:56:25:44:9d:5b:b9:4c:2e: d0:2c:ce:ef:17:a9:07:4c:fc:01:20:29:ff:44:77: ba:59:53:18:24:85:2c:23:dc:5f:86:29:e4:17:be: d1:38:fe:52:0c:da:4b:86:4c:d7:b4:f0:fd:8a:9f: 0c:ec:f4:78:e4:ea:b2:37:08:d6:47:77:7f:7e:80: b7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:27:E8:40:40:B9:20:42:D6:1F:E4:2A:96:D5:21:0B:32:1D:AD:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/ff08f32a-f185-3549-bd1d-46d56c37ebb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 207.210.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:aa:8c:b7:84:58:70:b0:5b:80:88:75:b5:57:21:29:97:a0: f1:43:1a:98:61:77:26:c2:68:10:28:a2:a2:45:f0:4d:f3:6f: 5d:bd:b2:54:7f:4b:3d:b6:5c:24:0e:f0:e8:30:50:8a:f2:16: f4:23:c3:71:94:f7:72:c5:0c:68:f5:b0:f3:72:3f:e2:23:c8: 54:bc:bf:8d:48:54:d3:51:71:64:8e:fc:7d:8e:8c:41:07:81: 1b:9c:1a:0d:49:02:f0:5c:39:a1:04:b8:1e:1c:91:0e:49:0d: 96:64:1c:db:c2:94:f6:20:e6:96:ff:1a:2b:37:1a:bb:7a:15: 16:7d:4e:00:dc:b8:8a:1d:0e:ef:d7:ff:5f:7a:ba:eb:85:12: 83:6e:4f:71:0c:47:4b:fc:fb:fd:17:1a:f9:67:66:f2:36:3d: 72:69:89:7e:a1:9a:2f:18:a9:bb:8a:30:3a:2b:88:af:9d:3d: eb:07:65:d6:1e:d6:71:dd:fd:82:d6:c1:9e:a9:d4:22:73:d6: ee:e6:f2:b7:bb:78:84:8a:d7:36:26:28:88:d1:a1:41:be:51: 7d:4a:a8:52:0a:cb:19:6d:ae:97:ee:40:9f:52:27:9d:55:e9: 1e:90:d1:52:8d:bc:0b:d7:cc:0d:77:dd:fc:5b:64:e6:d1:54: 57:5d:09:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi383bI95fDCyeKuMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDEzMDE3MzAyMloXDTI1MDQzMDE2MzAyMlowLzEtMCsGA1UEAxMk YmY0ZWYwMTctODVmYS00YTI5LTk1ZTUtZGQ0MWIxN2ViOTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9lkdeIO6EZL6z8Emj6eOCh52Dy+hpEo8Hao QLLx6AKQZJRbGficlffTcEcuHQsycA/A7NDnli/ljOH7ndL0X2ecZ0I8cjf01O0l f8rK1eE/SqTHaeLW5qxgsh/CQOHs+JLy3C05MHywzN5ojFDaZ/AM8/gMQorJGi8r fd0RRagQFzodyXwn66meg2dQvlDy5Sk9YPCCl/p8Dq5av1Siy+kaMt/YPKxd8wgO 2xhREZWLi1OKPNFhyHIyViVEnVu5TC7QLM7vF6kHTPwBICn/RHe6WVMYJIUsI9xf hinkF77ROP5SDNpLhkzXtPD9ip8M7PR45OqyNwjWR3d/foC30QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkn6EBAuSBC1h/kKpbVIQsyHa2zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvZmYwOGYzMmEtZjE4NS0z NTQ5LWJkMWQtNDZkNTZjMzdlYmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz9JUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2qjLeEWHCwW4CIdbVXISmXoPFDGphhdybCaBAooqJF8E3zb129slR/ Sz22XCQO8OgwUIryFvQjw3GU93LFDGj1sPNyP+IjyFS8v41IVNNRcWSO/H2OjEEH gRucGg1JAvBcOaEEuB4ckQ5JDZZkHNvClPYg5pb/Gis3Grt6FRZ9TgDcuIodDu/X /196uuuFEoNuT3EMR0v8+/0XGvlnZvI2PXJpiX6hmi8YqbuKMDoriK+dPesHZdYe 1nHd/YLWwZ6p1CJz1u7m8re7eISK1zYmKIjRoUG+UX1KqFIKyxltrpfuQJ9SJ51V 6R6Q0VKNvAvXzA133fxbZObRVFddCSU= -----END CERTIFICATE-----Generated at Sun Apr 6 17:44:18 2025 by rpki-client