$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/8e2546b3-d439-399a-bf4a-a9108c6408f5.roa File: 8e2546b3-d439-399a-bf4a-a9108c6408f5.roa (raw, json) Hash identifier: A6Ep8DWpa0QimcA9AdXBW4qRmfEizCUlccXIig4KhKA= Subject key identifier: E1:85:B5:5B:BC:29:05:CF:4C:6E:51:D2:66:5B:42:5B:57:41:D5:9F Certificate issuer: /CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Certificate serial: 010D0C9F4328584930DE7C18C87C28A28F8E6D00 Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/8e2546b3-d439-399a-bf4a-a9108c6408f5.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 25755 IP address blocks: 207.172.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:7c:18:c8:7c:28:a2:8f:8e:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=07349e2b-1f4d-44b8-b625-a97b19ea4bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:40:a0:79:44:67:a4:53:21:26:12:d8:47:ec: 94:5a:5c:10:43:96:17:8d:8f:bf:16:bf:08:86:03: 50:7c:7e:b6:73:25:0f:cb:62:3d:62:11:d9:75:43: 2e:7a:34:97:40:71:30:fb:93:be:eb:89:2f:cc:79: 87:d9:ec:c2:83:61:81:45:10:82:df:a4:59:22:75: ac:9b:d0:0e:43:ab:5c:3d:81:9f:28:dd:68:29:20: b4:93:d9:81:df:69:7b:25:05:02:cb:24:33:c4:a6: fb:b9:e0:92:9e:61:6b:0a:d6:42:33:68:ec:74:d8: ef:97:1f:cb:93:b8:3e:c8:5e:19:d8:d7:b2:bd:8e: d7:19:e6:10:90:d4:ea:64:47:3e:1c:16:9d:27:ca: 09:ea:35:b2:d2:34:75:a7:3b:d5:9a:b3:89:18:72: 3b:6d:5c:d6:8e:1b:96:18:01:fc:49:57:39:c8:d1: a2:21:15:c8:af:7d:43:50:56:72:6a:93:42:3e:ee: b5:29:82:b8:b0:fe:eb:a4:87:3c:03:d7:d9:32:50: 6d:e0:c8:f4:b0:24:95:c9:85:0f:c0:10:05:47:12: 63:fd:fe:3e:36:fe:f3:43:91:f4:09:6a:54:c7:55: 60:b6:e8:8d:d8:e3:36:b7:82:ed:98:ce:93:3c:b0: 1e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:85:B5:5B:BC:29:05:CF:4C:6E:51:D2:66:5B:42:5B:57:41:D5:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/8e2546b3-d439-399a-bf4a-a9108c6408f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl X509v3 Authority Key Identifier: keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer sbgp-ipAddrBlock: critical IPv4: 207.172.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:26:89:32:f4:5b:73:a3:79:05:a1:7a:de:08:91:39:f8:52: e4:0c:2e:aa:1c:7a:ec:24:33:ea:e5:7b:00:8e:c5:f2:ab:4a: 2b:65:34:93:cc:f6:9a:ae:16:d2:48:4e:6c:d0:0c:fc:e6:a5: 5f:98:13:f5:69:f1:f7:83:96:a2:26:6f:43:b3:e8:9e:dc:35: b2:6c:6d:99:05:26:5c:f6:46:83:6a:19:ab:23:14:83:c5:d0: dd:32:5e:5e:b5:5c:fb:69:65:10:8e:f3:12:ef:83:f4:99:0b: be:d2:5d:0b:89:0b:b8:d8:88:d5:e5:0a:52:c8:28:39:84:fd: 15:35:49:6b:72:a4:a1:7b:46:af:92:bd:70:bb:d4:11:8a:32: 09:1c:21:37:c7:9c:7d:b0:06:5e:7a:30:e9:10:9d:2d:0c:1e: 84:55:2c:8d:3a:21:79:6c:bf:af:fa:08:f6:cc:3f:27:71:77: 41:4e:e1:1d:60:af:34:99:2b:50:c0:51:10:a7:a9:bb:d7:df: ca:4a:4f:be:c8:12:0f:39:8b:8e:e4:12:17:61:86:c5:fe:1b: 28:4d:08:08:ae:00:a4:f5:1d:10:21:cc:01:fc:63:46:1d:55: ae:b7:63:88:1a:b5:dc:41:f8:da:ce:67:24:e6:fe:0b:e8:58: 24:f1:d9:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3nwYyHwooo+ObQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2 ODczMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk MDczNDllMmItMWY0ZC00NGI4LWI2MjUtYTk3YjE5ZWE0YmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUCgeURnpFMhJhLYR+yUWlwQQ5YXjY+/Fr8I hgNQfH62cyUPy2I9YhHZdUMuejSXQHEw+5O+64kvzHmH2ezCg2GBRRCC36RZInWs m9AOQ6tcPYGfKN1oKSC0k9mB32l7JQUCyyQzxKb7ueCSnmFrCtZCM2jsdNjvlx/L k7g+yF4Z2NeyvY7XGeYQkNTqZEc+HBadJ8oJ6jWy0jR1pzvVmrOJGHI7bVzWjhuW GAH8SVc5yNGiIRXIr31DUFZyapNCPu61KYK4sP7rpIc8A9fZMlBt4Mj0sCSVyYUP wBAFRxJj/f4+Nv7zQ5H0CWpUx1VgtuiN2OM2t4LtmM6TPLAeXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGFtVu8KQXPTG5R0mZbQltXQdWfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0 NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvOGUyNTQ2YjMtZDQzOS0z OTlhLWJmNGEtYTkxMDhjNjQwOGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw MTRkZDY4NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6yZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgmiTL0W3OjeQWhet4IkTn4UuQMLqoceuwkM+rlewCOxfKrSitlNJPM 9pquFtJITmzQDPzmpV+YE/Vp8feDlqImb0Oz6J7cNbJsbZkFJlz2RoNqGasjFIPF 0N0yXl61XPtpZRCO8xLvg/SZC77SXQuJC7jYiNXlClLIKDmE/RU1SWtypKF7Rq+S vXC71BGKMgkcITfHnH2wBl56MOkQnS0MHoRVLI06IXlsv6/6CPbMPydxd0FO4R1g rzSZK1DAURCnqbvX38pKT77IEg85i47kEhdhhsX+GyhNCAiuAKT1HRAhzAH8Y0Yd Va63Y4gatdxB+NrOZyTm/gvoWCTx2dg= -----END CERTIFICATE-----Generated at Thu Apr 10 09:51:46 2025 by rpki-client