$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/78f1ad8c-30d4-3987-a88c-0b2e3312b96d.roa File: 78f1ad8c-30d4-3987-a88c-0b2e3312b96d.roa (raw, json) Hash identifier: d1lp0Gu50C3UcwaFOa0jYBI9p4nKxju4kB1iz4LnmI8= Subject key identifier: 19:E6:29:86:31:65:9E:BF:48:F5:83:92:B5:FD:DE:67:79:9D:ED:9E Certificate issuer: /CN=22a89d78-807f-48bb-8913-4e15f4878bfb Certificate serial: 010D0C9F432858492CAE7DEBFD917520117DA040 Authority key identifier: 41:26:61:4E:B6:7D:B9:81:05:C1:90:B7:DD:5F:F9:0D:32:E4:20:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/78f1ad8c-30d4-3987-a88c-0b2e3312b96d.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 13786 IP address blocks: 207.135.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/22a89d78-807f-48bb-8913-4e15f4878bfb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/22a89d78-807f-48bb-8913-4e15f4878bfb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:7d:eb:fd:91:75:20:11:7d:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a89d78-807f-48bb-8913-4e15f4878bfb Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=23ae422e-8c58-4b41-9fc6-550a6804e602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f2:2d:89:e1:cd:d0:76:8f:98:ad:ce:c6:5a: 1e:46:ff:bf:9e:48:f2:c6:d6:e0:b5:0b:09:ef:9d: e4:dd:22:28:ab:11:70:d6:37:37:d7:bb:67:45:c9: 9f:02:ea:de:23:b7:bb:86:73:d4:da:bd:d5:16:c6: aa:12:ac:0f:14:f8:15:bd:e9:1d:a8:f3:cc:f6:a7: 0d:66:ab:4c:d8:83:e8:39:7f:c4:ea:be:67:04:d5: 23:7c:cd:7e:45:d0:ee:29:7a:4a:ca:5a:b3:fe:fd: 41:98:43:00:f8:8c:51:04:65:22:ed:3d:ae:c7:81: dc:c4:00:51:ab:4b:8b:53:24:20:4c:a8:e5:ac:02: 8a:c4:89:8d:66:3f:de:2a:6d:eb:29:39:c4:c2:47: 75:b9:c2:78:76:0d:16:18:99:e8:9a:ef:7e:68:92: 36:e8:c9:d5:f4:62:28:e9:b3:b5:9c:16:42:4a:5d: 54:db:27:cd:82:d1:1d:7e:82:78:25:ec:8b:42:fb: af:a4:80:e6:3b:89:6d:ba:a8:8a:d1:fb:00:70:cd: 15:4a:0c:e8:fd:9f:b0:dd:5b:60:87:92:44:c4:6e: e8:ec:92:ed:dd:ba:69:76:4e:db:c4:42:7c:1e:95: 20:25:1b:ca:d3:5f:d9:d7:a5:90:b1:8b:72:dc:47: 5b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E6:29:86:31:65:9E:BF:48:F5:83:92:B5:FD:DE:67:79:9D:ED:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/78f1ad8c-30d4-3987-a88c-0b2e3312b96d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/22a89d78-807f-48bb-8913-4e15f4878bfb.crl X509v3 Authority Key Identifier: keyid:41:26:61:4E:B6:7D:B9:81:05:C1:90:B7:DD:5F:F9:0D:32:E4:20:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb.cer sbgp-ipAddrBlock: critical IPv4: 207.135.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:3d:2d:1c:3f:40:35:bd:0f:b6:83:02:59:8e:39:90:24:29: 66:d9:7a:64:12:4d:45:9f:3a:81:19:9f:27:1f:08:14:11:c2: fe:d8:d5:38:1b:c5:a3:42:43:81:e7:6f:5a:a1:51:0f:6f:a0: a8:47:83:28:9b:0d:79:e2:8c:9d:63:de:9c:76:ae:4c:52:52: 15:b2:fa:b0:cb:98:88:9c:65:d9:18:91:88:46:aa:0e:1a:f2: 14:d9:43:d2:34:dd:a9:aa:61:40:48:a4:5b:60:75:63:91:9f: b5:dd:a1:05:39:37:ff:47:86:b3:7b:3c:47:30:83:20:64:92: ac:4c:81:34:0c:54:7c:d3:ed:bb:97:6c:2f:eb:9d:45:e5:d8: b9:c8:f1:29:bd:4b:87:54:87:0d:fb:07:00:ef:dc:af:db:db: ad:a6:87:d3:2b:c3:81:bb:43:de:f2:51:18:1a:7d:56:80:9c: 6a:1e:21:09:76:9f:db:f0:d4:c3:11:9c:67:a5:f4:e2:b7:6f: 00:7e:a9:fe:a4:48:8c:50:d2:9c:5e:fb:06:37:7a:8e:2c:f9: 02:bf:d9:92:03:8d:e2:b9:9e:fc:4f:4c:68:55:10:b5:bb:7d: 43:6c:9d:c9:58:e0:28:b2:ca:6d:62:2a:77:1d:db:63:86:d3: e1:f4:f7:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrn3r/ZF1IBF9oEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJhODlkNzgtODA3Zi00OGJiLTg5MTMtNGUxNWY0ODc4 YmZiMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MjNhZTQyMmUtOGM1OC00YjQxLTlmYzYtNTUwYTY4MDRlNjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPItieHN0HaPmK3OxloeRv+/nkjyxtbgtQsJ 753k3SIoqxFw1jc317tnRcmfAureI7e7hnPU2r3VFsaqEqwPFPgVvekdqPPM9qcN ZqtM2IPoOX/E6r5nBNUjfM1+RdDuKXpKylqz/v1BmEMA+IxRBGUi7T2ux4HcxABR q0uLUyQgTKjlrAKKxImNZj/eKm3rKTnEwkd1ucJ4dg0WGJnomu9+aJI26MnV9GIo 6bO1nBZCSl1U2yfNgtEdfoJ4JeyLQvuvpIDmO4ltuqiK0fsAcM0VSgzo/Z+w3Vtg h5JExG7o7JLt3bppdk7bxEJ8HpUgJRvK01/Z16WQsYty3EdbewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBnmKYYxZZ6/SPWDkrX93md5ne2eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMmE4 OWQ3OC04MDdmLTQ4YmItODkxMy00ZTE1ZjQ4NzhiZmIvNzhmMWFkOGMtMzBkNC0z OTg3LWE4OGMtMGIyZTMzMTJiOTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjJhODlkNzgtODA3Zi00OGJiLTg5 MTMtNGUxNWY0ODc4YmZiLzIyYTg5ZDc4LTgwN2YtNDhiYi04OTEzLTRlMTVmNDg3 OGJmYi5jcmwwHwYDVR0jBBgwFoAUQSZhTrZ9uYEFwZC33V/5DTLkICMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMmE4OWQ3OC04MDdmLTQ4YmItODkxMy00ZTE1 ZjQ4NzhiZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz4fQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEs9LRw/QDW9D7aDAlmOOZAkKWbZemQSTUWfOoEZnycfCBQRwv7Y1Tgb xaNCQ4Hnb1qhUQ9voKhHgyibDXnijJ1j3px2rkxSUhWy+rDLmIicZdkYkYhGqg4a 8hTZQ9I03amqYUBIpFtgdWORn7XdoQU5N/9HhrN7PEcwgyBkkqxMgTQMVHzT7buX bC/rnUXl2LnI8Sm9S4dUhw37BwDv3K/b262mh9Mrw4G7Q97yURgafVaAnGoeIQl2 n9vw1MMRnGel9OK3bwB+qf6kSIxQ0pxe+wY3eo4s+QK/2ZIDjeK5nvxPTGhVELW7 fUNsnclY4Ciyym1iKncd22OG0+H09w8= -----END CERTIFICATE-----Generated at Sat Apr 5 19:03:33 2025 by rpki-client