$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/58d3ac33-0e55-33d0-824b-807ad470e8d1.roa File: 58d3ac33-0e55-33d0-824b-807ad470e8d1.roa (raw, json) Hash identifier: +NDXblXXIF72Y8O4pYfGWTr2cvozaFMW3tiD5vzS+oI= Subject key identifier: 45:22:AA:52:C0:29:C0:E9:01:FF:FF:3E:95:8C:BC:9C:1C:E0:3A:B7 Certificate issuer: /CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Certificate serial: 010D0C9F4328584930DE7C07726CFAD178455780 Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/58d3ac33-0e55-33d0-824b-807ad470e8d1.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 22015 IP address blocks: 207.237.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:7c:07:72:6c:fa:d1:78:45:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=d6293a92-92ba-4e26-8517-e1bcc399da44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:dc:15:9f:66:62:36:49:6b:ea:84:08:6c:fd: a7:9e:30:30:6b:09:d7:60:f8:38:2d:39:e4:2a:d5: f0:d5:d0:31:e6:fa:cd:a0:f4:ce:d4:9f:11:c6:32: 5e:eb:80:ba:fa:5b:c3:72:77:88:b1:4f:14:97:a3: 06:9e:71:dc:07:30:06:10:dc:bc:0e:f2:7f:13:ac: 20:33:56:c7:61:91:89:bc:80:ca:bd:4d:09:65:aa: 5f:28:e6:68:75:f7:b6:a5:79:f8:22:7a:3c:bc:de: 09:02:b7:a8:61:8f:10:ae:61:0e:a8:74:78:a4:55: ad:d8:d3:db:be:27:e4:61:95:c4:fd:1d:c4:78:1a: 43:0a:22:e4:3a:1a:9e:15:89:b0:1b:3c:90:dc:ce: 32:97:da:2b:d0:8c:e6:ec:f6:a4:cb:fd:b8:85:b7: 6f:4b:01:ab:42:5c:e3:ca:13:49:bf:cc:1f:78:63: 40:b6:69:58:55:b1:a1:fd:6b:f9:38:f9:b7:59:3e: 74:7d:09:74:7e:c4:61:82:66:c1:ab:a5:1a:0d:c9: ff:5f:30:20:d9:fc:e8:c5:b6:e8:df:a2:82:ce:2f: 5a:59:37:9f:27:64:0b:c4:15:de:80:f4:0c:e6:e0: 5b:b3:57:da:d8:80:ff:44:34:5a:bc:59:c2:7a:bf: 9b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:22:AA:52:C0:29:C0:E9:01:FF:FF:3E:95:8C:BC:9C:1C:E0:3A:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/58d3ac33-0e55-33d0-824b-807ad470e8d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl X509v3 Authority Key Identifier: keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer sbgp-ipAddrBlock: critical IPv4: 207.237.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:09:6c:31:ef:0e:a7:20:6e:6d:fe:fa:0e:a4:a9:e6:a2:00: 1f:1c:7f:d1:18:e3:ca:09:88:11:fb:f9:27:72:8a:6f:52:4f: e2:98:7e:a7:58:cc:59:8b:87:aa:b2:48:35:c3:49:e4:7e:1e: fb:55:26:31:95:55:d1:fc:ad:ae:1b:3f:0d:2c:f7:0a:6f:65: ed:cb:c2:f5:e0:0c:7c:97:bf:0a:b4:26:1b:61:24:4f:70:60: 67:eb:d8:91:76:81:26:cd:8a:23:68:a6:16:64:a8:01:38:2e: 19:f8:cd:7e:37:9f:84:06:57:d4:c5:7c:e3:b2:40:0a:cf:97: c0:9b:c1:87:ef:24:4d:7c:ab:99:13:8d:df:2d:6e:35:b9:c1: 65:c0:0d:89:2d:d4:1d:23:56:be:63:97:59:f7:c8:7c:4a:f2: f0:61:3c:1d:26:fb:11:70:78:76:49:34:65:33:79:05:28:0c: e5:48:d7:30:8f:ed:61:3c:7c:dc:24:e4:a5:02:25:9f:c5:88: ae:87:25:5d:6b:9e:36:2e:9e:ca:be:9e:25:8d:67:b0:32:a7: b1:5f:36:05:70:66:af:b2:64:9d:15:3d:9c:8f:57:8d:92:ba: c8:12:0c:2c:31:4b:f7:dd:0b:75:71:08:de:27:49:14:3c:b1: cc:ae:55:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3nwHcmz60XhFV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2 ODczMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk ZDYyOTNhOTItOTJiYS00ZTI2LTg1MTctZTFiY2MzOTlkYTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktwVn2ZiNklr6oQIbP2nnjAwawnXYPg4LTnk KtXw1dAx5vrNoPTO1J8RxjJe64C6+lvDcneIsU8Ul6MGnnHcBzAGENy8DvJ/E6wg M1bHYZGJvIDKvU0JZapfKOZodfe2pXn4Ino8vN4JAreoYY8QrmEOqHR4pFWt2NPb vifkYZXE/R3EeBpDCiLkOhqeFYmwGzyQ3M4yl9or0Izm7Paky/24hbdvSwGrQlzj yhNJv8wfeGNAtmlYVbGh/Wv5OPm3WT50fQl0fsRhgmbBq6UaDcn/XzAg2fzoxbbo 36KCzi9aWTefJ2QLxBXegPQM5uBbs1fa2ID/RDRavFnCer+bKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUiqlLAKcDpAf//PpWMvJwc4Dq3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0 NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvNThkM2FjMzMtMGU1NS0z M2QwLTgyNGItODA3YWQ0NzBlOGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw MTRkZDY4NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz+2qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL4JbDHvDqcgbm3++g6kqeaiAB8cf9EY48oJiBH7+Sdyim9ST+KYfqdY zFmLh6qySDXDSeR+HvtVJjGVVdH8ra4bPw0s9wpvZe3LwvXgDHyXvwq0JhthJE9w YGfr2JF2gSbNiiNophZkqAE4Lhn4zX43n4QGV9TFfOOyQArPl8CbwYfvJE18q5kT jd8tbjW5wWXADYkt1B0jVr5jl1n3yHxK8vBhPB0m+xFweHZJNGUzeQUoDOVI1zCP 7WE8fNwk5KUCJZ/FiK6HJV1rnjYunsq+niWNZ7Ayp7FfNgVwZq+yZJ0VPZyPV42S usgSDCwxS/fdC3VxCN4nSRQ8scyuVUQ= -----END CERTIFICATE-----Generated at Sat Apr 12 15:04:47 2025 by rpki-client