$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a075cf56-91c2-31b8-b898-a292ab30c8eb.roa File: a075cf56-91c2-31b8-b898-a292ab30c8eb.roa (raw, json) Hash identifier: ePDrNXfoj7ZHV54KNEddRPe7uC0hujQp6JolHd7Z1QI= Subject key identifier: 4C:92:DC:15:E0:4A:29:81:E5:6F:67:49:8C:31:DC:18:BA:50:73:2F Certificate issuer: /CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Certificate serial: 010D0C9F432858495ABEE76E76EE2BA37A49AF80 Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a075cf56-91c2-31b8-b898-a292ab30c8eb.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 28944 IP address blocks: 207.38.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:e7:6e:76:ee:2b:a3:7a:49:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=b7cbb07f-a91e-49aa-8cb3-62639749f3b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:60:0d:a2:ca:15:e0:0d:36:4c:58:1d:53:61: 07:6e:48:53:3c:ad:0b:e8:58:4d:60:5f:65:af:90: 6f:c1:a9:54:ab:e8:e4:ec:ae:d2:dc:5b:54:3a:eb: b1:cc:f4:c8:ad:7b:fe:d2:3b:d7:d7:e8:9d:21:c7: 75:18:8f:b8:c0:cb:55:ef:ff:ef:03:ca:25:d7:05: 2e:e0:9e:20:57:25:fb:1b:c7:62:90:68:f1:ae:d3: 8d:fc:19:f5:e0:51:71:8d:c5:a1:4b:c6:28:73:10: bc:95:2b:7d:e4:ad:82:aa:1b:8f:05:22:52:e4:26: fc:25:b0:c8:c6:3e:5e:6d:13:c8:2d:3a:88:d8:71: ab:d5:ad:54:7c:c1:b3:84:f9:21:a2:96:1d:1c:08: 62:b5:40:6d:cc:90:56:dd:f3:fe:6a:e1:ca:20:d9: 4d:44:ca:79:c8:92:13:ac:e4:b3:09:8b:2f:a2:f9: 34:6e:a6:fc:76:dd:f2:f0:31:12:c3:46:02:20:90: 16:dd:16:92:12:92:0a:0d:f1:90:68:41:f3:40:d8: a3:ae:3b:14:b4:fb:cb:ec:db:a4:01:34:ef:f9:03: 36:2c:6b:6f:00:24:e7:03:31:b3:32:cf:a7:e5:d2: fd:68:64:d3:c2:a2:c8:68:20:ce:f3:0c:97:36:0f: 01:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:92:DC:15:E0:4A:29:81:E5:6F:67:49:8C:31:DC:18:BA:50:73:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a075cf56-91c2-31b8-b898-a292ab30c8eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl X509v3 Authority Key Identifier: keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer sbgp-ipAddrBlock: critical IPv4: 207.38.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:55:ab:ce:97:51:44:ff:d9:0c:e0:50:f7:3d:3c:a7:d4:81: c2:29:69:51:0c:e6:87:d6:63:ab:cf:56:7f:bb:d3:c4:47:c2: c0:f0:3f:3c:a2:97:ef:b2:ad:45:be:02:4c:44:4d:85:5d:c8: c3:b3:a5:bd:d7:0b:cf:3d:fc:9c:3f:da:95:45:22:fa:db:cc: ef:25:bb:d1:42:34:be:4d:7f:93:cc:4c:48:66:ce:37:1c:a4: 29:db:12:26:de:01:60:fa:36:6b:81:a7:7b:80:c8:ca:cd:7c: 88:fa:5f:db:fb:12:ca:8f:fa:3e:8a:65:02:78:c1:1a:14:4e: b7:09:a9:37:bc:4e:62:79:81:a0:1f:8f:f9:d1:9a:2d:37:9a: 33:82:bc:15:6d:cc:54:56:35:61:dd:d1:f5:b5:f8:7b:52:63: f0:c1:f4:3a:93:f9:cb:cb:6f:0a:cf:ff:68:07:1a:68:0e:04: 4f:d4:6a:36:e4:2c:be:4c:d6:88:27:98:fd:2b:fb:c5:ec:7a: 95:68:ae:68:74:36:99:71:41:7a:ba:79:b9:c9:b4:49:a5:37: e6:bb:86:ed:0a:31:a9:65:09:1b:fb:60:c2:3a:e5:10:bb:f5: fe:b5:9e:26:71:de:67:ee:b0:6e:c1:57:e2:5b:43:b8:ec:8b: 1d:2a:3f:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavududu4ro3pJr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2 ODczMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk YjdjYmIwN2YtYTkxZS00OWFhLThjYjMtNjI2Mzk3NDlmM2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmANosoV4A02TFgdU2EHbkhTPK0L6FhNYF9l r5BvwalUq+jk7K7S3FtUOuuxzPTIrXv+0jvX1+idIcd1GI+4wMtV7//vA8ol1wUu 4J4gVyX7G8dikGjxrtON/Bn14FFxjcWhS8YocxC8lSt95K2CqhuPBSJS5Cb8JbDI xj5ebRPILTqI2HGr1a1UfMGzhPkhopYdHAhitUBtzJBW3fP+auHKINlNRMp5yJIT rOSzCYsvovk0bqb8dt3y8DESw0YCIJAW3RaSEpIKDfGQaEHzQNijrjsUtPvL7Nuk ATTv+QM2LGtvACTnAzGzMs+n5dL9aGTTwqLIaCDO8wyXNg8B2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyS3BXgSimB5W9nSYwx3Bi6UHMvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0 NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvYTA3NWNmNTYtOTFjMi0z MWI4LWI4OTgtYTI5MmFiMzBjOGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw MTRkZDY4NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzybUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFVq86XUUT/2QzgUPc9PKfUgcIpaVEM5ofWY6vPVn+708RHwsDwPzyi l++yrUW+AkxETYVdyMOzpb3XC889/Jw/2pVFIvrbzO8lu9FCNL5Nf5PMTEhmzjcc pCnbEibeAWD6NmuBp3uAyMrNfIj6X9v7EsqP+j6KZQJ4wRoUTrcJqTe8TmJ5gaAf j/nRmi03mjOCvBVtzFRWNWHd0fW1+HtSY/DB9DqT+cvLbwrP/2gHGmgOBE/Uajbk LL5M1ognmP0r+8XsepVormh0NplxQXq6ebnJtEmlN+a7hu0KMallCRv7YMI65RC7 9f61niZx3mfusG7BV+JbQ7jsix0qP84= -----END CERTIFICATE-----Generated at Sat Apr 12 12:47:35 2025 by rpki-client