$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/991a2557-3597-3230-a233-82f945d484fd.roa File: 991a2557-3597-3230-a233-82f945d484fd.roa (raw, json) Hash identifier: Piz+f8Ok+JPYPSCjAl5ZWwxRnqcYJ4kZAFPdH+Opbaw= Subject key identifier: 17:82:C8:2E:B8:90:1F:90:E8:4D:14:6F:76:4C:6D:85:F7:C3:B1:BB Certificate issuer: /CN=291133eb-e436-4803-adab-f37835fc18e3 Certificate serial: 010D0C9F43285849244E82336D701A110F6612C0 Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/991a2557-3597-3230-a233-82f945d484fd.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 11300 IP address blocks: 207.241.168.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:82:33:6d:70:1a:11:0f:66:12:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=890a46d1-2869-47a1-b857-734e715362a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:61:08:40:67:63:01:ad:61:f4:ce:62:92:a4: cc:bb:09:81:26:79:11:06:0b:08:ff:82:93:77:0b: ec:a4:53:4e:60:47:66:64:c3:a9:02:85:9f:62:a7: 0d:22:62:52:58:e3:c9:10:90:7a:4e:48:bb:1d:6a: 32:65:1f:36:a8:a4:e8:a4:89:89:30:d0:ca:c7:0e: 20:cb:18:bf:71:c7:50:c1:44:a1:e0:2b:79:e6:fa: f7:92:ba:30:07:78:c8:fd:9e:42:70:66:28:53:45: 8d:d9:58:65:5e:7e:ca:bf:ec:6d:25:43:f1:b4:81: 26:3d:93:22:fd:21:9a:59:b6:2f:ef:a9:18:95:dd: 0c:b5:39:8f:8f:25:31:07:5a:88:49:48:9c:54:40: 29:d9:85:67:a0:d0:92:93:01:a8:bd:7d:09:9e:f2: 6d:74:36:90:bd:bf:3d:4f:fa:8e:05:17:4c:3b:df: 0c:39:82:c5:2c:8e:10:e3:53:ab:ce:7b:cf:8f:47: 17:ff:ba:f1:d5:58:14:7b:1f:86:ac:40:7e:f6:3d: a5:01:87:56:a5:8e:08:98:87:b3:15:0f:40:c3:fd: fb:66:0b:6f:79:88:31:36:6d:03:58:29:7d:50:d1: a7:cf:e8:9f:2c:e1:56:69:1b:7b:38:9b:f4:b4:9f: 74:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:82:C8:2E:B8:90:1F:90:E8:4D:14:6F:76:4C:6D:85:F7:C3:B1:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/991a2557-3597-3230-a233-82f945d484fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl X509v3 Authority Key Identifier: keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer sbgp-ipAddrBlock: critical IPv4: 207.241.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:38:dd:a9:9b:25:1f:09:93:5e:ce:f1:32:b5:d1:87:ad:53: 15:d5:93:7a:5e:5b:73:c2:3e:a9:2e:b9:e6:f3:96:bc:56:27: a7:73:c5:46:93:f7:af:52:f4:c3:cd:80:b4:aa:62:f1:94:c1: f3:7b:ab:18:f8:02:44:45:85:6b:2f:b8:d8:9a:fb:62:b5:0c: 23:71:97:bf:11:61:e5:21:de:9b:31:6f:42:83:63:a9:0c:e2: 84:da:3a:6c:02:46:90:4a:4c:ca:fd:22:fd:0a:c0:19:7d:ad: f8:9e:65:72:4a:2e:98:cf:b4:98:6b:5e:7f:63:ac:f9:16:92: 37:ba:8e:bf:31:d7:56:01:ad:84:36:22:75:a5:d3:eb:bf:e4: 7d:09:60:a2:50:90:71:45:9a:5e:99:3c:dd:9a:c5:80:a4:ba: 5c:f3:51:0d:3f:8e:8d:31:f9:c0:8c:06:10:43:2b:a6:f0:f8: 2f:95:94:86:28:84:13:04:d5:3f:94:90:54:80:2b:d7:f2:04: 47:a5:3b:03:5f:fd:da:7c:fa:9e:bd:2c:5f:14:0c:48:04:59: 74:5b:e9:6d:ea:50:2d:0c:08:cf:0a:34:50:2b:c2:7a:fa:91: fa:f5:47:b5:ee:d0:3f:60:ad:d3:c1:09:d4:27:a7:49:94:66: c9:f8:e8:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkToIzbXAaEQ9mEsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjkxMTMzZWItZTQzNi00ODAzLWFkYWItZjM3ODM1ZmMx OGUzMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk ODkwYTQ2ZDEtMjg2OS00N2ExLWI4NTctNzM0ZTcxNTM2MmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmEIQGdjAa1h9M5ikqTMuwmBJnkRBgsI/4KT dwvspFNOYEdmZMOpAoWfYqcNImJSWOPJEJB6Tki7HWoyZR82qKTopImJMNDKxw4g yxi/ccdQwUSh4Ct55vr3krowB3jI/Z5CcGYoU0WN2VhlXn7Kv+xtJUPxtIEmPZMi /SGaWbYv76kYld0MtTmPjyUxB1qISUicVEAp2YVnoNCSkwGovX0JnvJtdDaQvb89 T/qOBRdMO98MOYLFLI4Q41OrznvPj0cX/7rx1VgUex+GrEB+9j2lAYdWpY4ImIez FQ9Aw/37ZgtveYgxNm0DWCl9UNGnz+ifLOFWaRt7OJv0tJ90BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeCyC64kB+Q6E0Ub3ZMbYX3w7G7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOTEx MzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4MzVmYzE4ZTMvOTkxYTI1NTctMzU5Ny0z MjMwLWEyMzMtODJmOTQ1ZDQ4NGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjkxMTMzZWItZTQzNi00ODAzLWFk YWItZjM3ODM1ZmMxOGUzLzI5MTEzM2ViLWU0MzYtNDgwMy1hZGFiLWYzNzgzNWZj MThlMy5jcmwwHwYDVR0jBBgwFoAUGFJJOvzvM+PyZJzzxguiUFoMHWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOTExMzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4 MzVmYzE4ZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/GoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABw43ambJR8Jk17O8TK10YetUxXVk3peW3PCPqkuuebzlrxWJ6dzxUaT 969S9MPNgLSqYvGUwfN7qxj4AkRFhWsvuNia+2K1DCNxl78RYeUh3psxb0KDY6kM 4oTaOmwCRpBKTMr9Iv0KwBl9rfieZXJKLpjPtJhrXn9jrPkWkje6jr8x11YBrYQ2 InWl0+u/5H0JYKJQkHFFml6ZPN2axYCkulzzUQ0/jo0x+cCMBhBDK6bw+C+VlIYo hBME1T+UkFSAK9fyBEelOwNf/dp8+p69LF8UDEgEWXRb6W3qUC0MCM8KNFArwnr6 kfr1R7Xu0D9grdPBCdQnp0mUZsn46EA= -----END CERTIFICATE-----Generated at Sat Apr 12 15:35:08 2025 by rpki-client