$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/58d3ac33-0e55-33d0-824b-807ad470e8d1.roa File: 58d3ac33-0e55-33d0-824b-807ad470e8d1.roa (raw, json) Hash identifier: RCOVCL81fajmBDBqb5CEKlvdtqy65p2B99IOrp0oR2c= Subject key identifier: C5:0E:40:86:93:CE:CA:F0:6A:17:D9:FD:69:67:78:8F:B4:E7:3A:1B Certificate issuer: /CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Certificate serial: 010D0C9F4328584A103551D52F4BEB00E9886300 Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/58d3ac33-0e55-33d0-824b-807ad470e8d1.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 22015 IP address blocks: 207.237.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:51:d5:2f:4b:eb:00:e9:88:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=611add29-74f4-4140-ba9c-c3d78af8d63d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4a:9b:81:28:5a:d7:20:4a:da:ff:9d:63:38: 50:11:2b:f8:c9:5a:90:e3:64:88:2c:00:b9:b1:6f: b8:1d:b7:07:b0:36:22:1b:62:1a:f8:8e:ef:56:69: 9e:de:cc:cb:f3:ae:a8:fd:58:cb:a3:5e:eb:c9:9b: b3:36:10:6d:47:e8:2d:9f:19:f3:d9:13:10:23:bd: ec:94:c0:12:99:8b:54:0f:a7:35:b8:fe:ba:a2:55: 08:5c:a4:ea:73:0f:be:40:e1:20:61:4f:e9:ba:e6: a8:3b:f0:df:70:db:d8:c6:2c:3d:01:66:80:33:da: d5:36:8b:e7:bc:93:33:75:0a:d8:38:ce:97:6f:0a: ab:c5:11:50:a7:47:56:dd:22:c2:aa:d0:0c:0c:9a: 43:20:6b:7d:46:a0:f6:c8:b6:9d:22:b2:70:6e:18: a8:a3:17:90:3e:71:57:d1:f0:00:26:ae:0f:ae:a7: 3d:04:d0:3a:83:b8:13:aa:fb:18:09:cf:bb:70:67: b5:1f:05:5c:fc:5e:a7:62:62:d3:dd:25:1b:da:87: 04:63:f7:b0:23:4c:ee:ad:b4:a6:cd:13:06:12:45: fa:cb:37:50:50:f6:de:29:6e:ec:2a:ce:2a:4a:ba: cf:df:b6:67:4c:55:e5:b0:f5:01:98:86:2e:e8:27: 47:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:0E:40:86:93:CE:CA:F0:6A:17:D9:FD:69:67:78:8F:B4:E7:3A:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/58d3ac33-0e55-33d0-824b-807ad470e8d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl X509v3 Authority Key Identifier: keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer sbgp-ipAddrBlock: critical IPv4: 207.237.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:e5:44:06:cb:57:6d:f6:d9:09:5d:76:0f:15:7c:c1:6b:5e: 48:09:19:6c:ad:99:93:29:4e:aa:66:94:49:f7:28:b7:a4:fe: 95:eb:09:42:c1:4c:e4:64:c6:c1:1b:60:18:13:14:04:69:ad: 94:90:83:91:be:f2:03:58:88:cd:2a:8f:ee:a9:79:a4:36:b7: 1f:5d:78:3f:c4:84:1d:e8:d7:2d:33:13:d6:46:1c:46:23:e9: 90:6c:31:f2:0c:c7:59:83:16:8f:c5:f7:d4:dd:79:5b:4d:2e: 09:a5:93:8a:c6:d9:d4:6c:31:43:ba:dc:80:f0:51:29:91:27: ff:48:c4:b4:ca:fe:1a:8d:f1:49:6d:88:6c:1f:67:0c:16:c2: de:b0:d3:7f:3d:e3:2c:15:37:57:d6:58:63:12:28:24:b1:a6: 46:2a:05:ad:8c:5b:72:54:93:12:ff:0a:9b:17:f9:ea:87:5a: 45:d6:85:5d:dc:48:b3:cf:80:c9:42:ed:86:10:09:01:28:a1: b9:37:5f:eb:c2:2b:b4:f4:56:c3:43:6d:0c:16:91:aa:b3:79: 59:c6:5e:9d:94:dc:42:6d:ef:ed:36:9a:0e:08:cd:f6:37:e3: b6:63:4c:47:38:1e:58:ec:30:82:4d:9f:51:84:31:17:2e:a0: db:62:f3:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNVHVL0vrAOmIYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2 ODczMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk NjExYWRkMjktNzRmNC00MTQwLWJhOWMtYzNkNzhhZjhkNjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEqbgSha1yBK2v+dYzhQESv4yVqQ42SILAC5 sW+4HbcHsDYiG2Ia+I7vVmme3szL866o/VjLo17ryZuzNhBtR+gtnxnz2RMQI73s lMASmYtUD6c1uP66olUIXKTqcw++QOEgYU/puuaoO/DfcNvYxiw9AWaAM9rVNovn vJMzdQrYOM6XbwqrxRFQp0dW3SLCqtAMDJpDIGt9RqD2yLadIrJwbhiooxeQPnFX 0fAAJq4Prqc9BNA6g7gTqvsYCc+7cGe1HwVc/F6nYmLT3SUb2ocEY/ewI0zurbSm zRMGEkX6yzdQUPbeKW7sKs4qSrrP37ZnTFXlsPUBmIYu6CdHGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUOQIaTzsrwahfZ/WlneI+05zobMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0 NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvNThkM2FjMzMtMGU1NS0z M2QwLTgyNGItODA3YWQ0NzBlOGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw MTRkZDY4NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz+2qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjlRAbLV2322Qlddg8VfMFrXkgJGWytmZMpTqpmlEn3KLek/pXrCULB TORkxsEbYBgTFARprZSQg5G+8gNYiM0qj+6peaQ2tx9deD/EhB3o1y0zE9ZGHEYj 6ZBsMfIMx1mDFo/F99TdeVtNLgmlk4rG2dRsMUO63IDwUSmRJ/9IxLTK/hqN8Ult iGwfZwwWwt6w03894ywVN1fWWGMSKCSxpkYqBa2MW3JUkxL/CpsX+eqHWkXWhV3c SLPPgMlC7YYQCQEoobk3X+vCK7T0VsNDbQwWkaqzeVnGXp2U3EJt7+02mg4IzfY3 47ZjTEc4HljsMIJNn1GEMRcuoNti80o= -----END CERTIFICATE-----Generated at Sat Jun 7 23:07:07 2025 by rpki-client