$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/6585300d-48a8-316a-ad84-2d98521d3915.roa File: 6585300d-48a8-316a-ad84-2d98521d3915.roa (raw, json) Hash identifier: ce/9uu1u3CEqwXm4nx06PpRTNlVETBR5cNgZmCMgD3o= Subject key identifier: C6:7E:9F:7F:5A:BF:EA:1B:92:7A:40:6D:2D:33:8D:14:9F:F7:DA:AE Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F43285848F4F6986D83F241E6166FC200 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/6585300d-48a8-316a-ad84-2d98521d3915.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33531 IP address blocks: 207.176.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:98:6d:83:f2:41:e6:16:6f:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=5b1b2642-de45-4eec-bb6a-93f7212b7117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:64:a2:2e:f6:14:92:65:f5:b6:c1:2d:72:e2: c7:b2:6b:fe:f6:4d:fa:5d:e4:19:58:a9:b4:30:e0: 99:b3:36:6d:8f:04:ea:81:fb:60:f1:f2:4d:a2:b8: 5a:60:67:19:44:c7:59:65:80:35:b2:cb:c5:af:ec: ef:08:ce:71:ab:d4:54:87:42:ac:42:b4:12:39:54: b0:2e:8a:e1:db:f9:0b:e0:1a:4a:d6:e7:8e:6c:ff: 86:86:24:b4:2c:8c:5c:f7:47:1a:bb:5e:a7:e0:66: d6:14:5c:7a:9f:31:33:ab:9e:cb:c2:98:eb:ea:73: fc:81:04:8d:24:1a:1f:33:0b:ad:48:65:33:6d:97: 01:5e:dd:cb:bf:4e:fe:c6:1b:0b:e7:79:0a:20:23: 7c:35:a5:40:db:56:08:da:6d:fd:c4:20:15:65:1f: 62:64:2c:70:99:e0:76:b2:14:28:fa:98:f9:c6:92: dc:a0:f8:0a:a4:2c:1a:0e:8d:ff:81:4a:ab:fa:40: 4a:99:d7:23:76:fe:bb:9f:29:9c:6a:b8:f3:72:8b: 97:41:e1:48:05:61:2a:f2:40:d3:71:75:46:d5:02: 7d:f7:c4:83:3c:96:f1:80:b4:26:89:aa:4b:1e:48: 97:7e:86:e1:72:98:84:01:93:01:86:ef:13:8d:bf: fa:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:7E:9F:7F:5A:BF:EA:1B:92:7A:40:6D:2D:33:8D:14:9F:F7:DA:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/6585300d-48a8-316a-ad84-2d98521d3915.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 207.176.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:ba:b0:63:d3:ba:46:41:8d:54:40:f9:84:d5:41:ec:43:a6: a4:77:cb:8a:db:cf:4b:cc:09:42:78:34:6e:dc:50:7f:aa:fd: ed:0d:92:17:f6:f4:37:01:75:0d:fa:df:89:2b:3e:8f:ae:d9: 45:b9:e8:21:79:5f:95:44:01:e3:72:6d:a0:f0:ff:95:ba:90: 46:17:0f:9e:68:75:82:56:00:7b:54:e6:4a:02:07:12:a6:64: c6:77:e6:20:ae:c5:3c:f7:ce:a0:9a:d4:79:a9:2c:1d:2c:72: e6:09:f9:99:89:5d:d0:47:44:65:fa:51:ca:f3:dd:11:25:94: 62:47:f5:c8:69:4c:f3:cf:b5:52:8d:91:69:3d:3e:20:8d:7e: 3a:44:bc:fd:39:dc:d7:fe:f2:be:6d:48:e8:df:d3:2a:f0:9e: 1e:f3:a7:7d:77:1b:88:38:fe:46:a3:45:b7:66:44:0f:59:92: 31:61:b3:0d:89:1d:4a:f0:8c:12:bf:29:7c:99:18:5b:f3:d0: 53:e8:2f:43:43:c2:fa:8b:61:67:90:55:fb:18:e0:93:3b:90: 9a:5f:27:6c:85:be:c1:fd:be:6d:2a:44:ea:37:cc:65:df:2c: 32:ae:1c:29:66:0a:94:1c:5e:86:85:f8:a8:41:13:be:22:5a: 2c:9c:7c:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09phtg/JB5hZvwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NWIxYjI2NDItZGU0NS00ZWVjLWJiNmEtOTNmNzIxMmI3MTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2SiLvYUkmX1tsEtcuLHsmv+9k36XeQZWKm0 MOCZszZtjwTqgftg8fJNorhaYGcZRMdZZYA1ssvFr+zvCM5xq9RUh0KsQrQSOVSw Lorh2/kL4BpK1ueObP+GhiS0LIxc90cau16n4GbWFFx6nzEzq57Lwpjr6nP8gQSN JBofMwutSGUzbZcBXt3Lv07+xhsL53kKICN8NaVA21YI2m39xCAVZR9iZCxwmeB2 shQo+pj5xpLcoPgKpCwaDo3/gUqr+kBKmdcjdv67nymcarjzcouXQeFIBWEq8kDT cXVG1QJ998SDPJbxgLQmiapLHkiXfobhcpiEAZMBhu8Tjb/6yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZ+n39av+obknpAbS0zjRSf99quMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvNjU4NTMwMGQtNDhhOC0z MTZhLWFkODQtMmQ5ODUyMWQzOTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz7AgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADW6sGPTukZBjVRA+YTVQexDpqR3y4rbz0vMCUJ4NG7cUH+q/e0Nkhf2 9DcBdQ3634krPo+u2UW56CF5X5VEAeNybaDw/5W6kEYXD55odYJWAHtU5koCBxKm ZMZ35iCuxTz3zqCa1HmpLB0scuYJ+ZmJXdBHRGX6Ucrz3REllGJH9chpTPPPtVKN kWk9PiCNfjpEvP053Nf+8r5tSOjf0yrwnh7zp313G4g4/kajRbdmRA9ZkjFhsw2J HUrwjBK/KXyZGFvz0FPoL0NDwvqLYWeQVfsY4JM7kJpfJ2yFvsH9vm0qROo3zGXf LDKuHClmCpQcXoaF+KhBE74iWiycfEc= -----END CERTIFICATE-----Generated at Sun Apr 6 14:41:46 2025 by rpki-client