$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/b21276b3-6a6f-3e77-95c4-cd812a6b1ab6.roa File: b21276b3-6a6f-3e77-95c4-cd812a6b1ab6.roa (raw, json) Hash identifier: ZaSRSJYCNd5yS4f2HOGO2vzbF9ZrZwRo8iZZrxrL5YM= Subject key identifier: 51:73:25:68:35:B0:44:FC:80:B8:A5:9B:EB:04:C7:18:56:76:78:18 Certificate issuer: /CN=291133eb-e436-4803-adab-f37835fc18e3 Certificate serial: 010D0C9F4328584913AC1934FACF90E2C293AB00 Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/b21276b3-6a6f-3e77-95c4-cd812a6b1ab6.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 32034 IP address blocks: 207.241.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:19:34:fa:cf:90:e2:c2:93:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=0695f525-271f-45d8-8a7f-f27bcdb36a9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a2:64:43:3d:be:38:29:08:7f:d6:ba:d9:77: 2e:28:6b:a2:bc:52:71:43:bc:55:24:a6:77:6d:91: 40:09:4c:6e:8b:38:ad:ac:cc:66:75:2c:2c:4f:f9: ae:75:13:30:04:96:a6:2f:4c:b1:2b:eb:55:db:35: 49:8a:7f:bf:ac:46:b1:01:ae:9b:5e:c1:f0:aa:9e: fe:40:44:79:75:27:c6:3b:9d:d1:6d:05:1b:ec:37: cd:cb:73:80:55:eb:0e:11:e3:8d:1f:8c:97:ef:3f: ad:e7:89:7f:a4:c4:2c:6b:c8:91:c9:82:7c:a8:27: 5d:b6:13:32:6f:46:b9:bd:9d:88:69:bf:cd:19:01: de:74:84:a0:23:0f:db:aa:5b:d5:b0:ee:28:7d:c8: f6:5c:c5:8c:4b:a5:16:4b:59:03:f3:cb:e8:3a:37: 70:15:7d:d1:c1:c7:f4:cb:cc:10:1a:c0:26:44:fe: ff:a9:01:60:69:37:e5:39:d3:65:bb:b7:67:87:e0: b5:1f:01:ac:ce:56:be:4e:2e:7a:3c:1b:ef:59:48: d6:e4:d3:b7:17:e9:86:97:93:a2:39:37:bb:8f:e6: c1:2a:9e:e2:5e:cb:5a:c0:71:3e:d0:9f:35:c5:59: 52:02:e0:f1:37:a4:85:08:99:88:1f:4b:f1:12:76: 32:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:73:25:68:35:B0:44:FC:80:B8:A5:9B:EB:04:C7:18:56:76:78:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/b21276b3-6a6f-3e77-95c4-cd812a6b1ab6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl X509v3 Authority Key Identifier: keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer sbgp-ipAddrBlock: critical IPv4: 207.241.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:54:2c:2d:0a:26:08:eb:f7:44:a2:08:6d:7e:e5:5a:37:79: cd:80:b8:af:a7:8f:1c:af:39:35:ae:6e:09:04:5e:93:9a:2d: 55:79:d3:48:e9:52:ec:b6:08:56:a9:79:fc:1d:24:38:27:d8: f6:22:b6:dd:da:dd:15:42:5b:f8:21:29:e9:69:51:1f:02:68: 37:4e:64:34:5e:00:99:30:dc:a9:b5:2a:c8:42:46:bd:6d:ec: df:d7:23:d4:5d:38:b2:c3:2f:56:02:6f:7d:1d:52:46:a6:ba: 62:f4:c9:a9:c5:47:f6:77:b1:19:f4:c5:5f:fd:73:2b:ee:f8: 28:1c:3c:a9:af:21:69:1c:a7:59:29:f7:a6:02:49:b7:de:57: bd:c2:e3:b2:7c:f7:88:66:6e:70:20:33:aa:2d:65:b9:8d:fd: c4:d1:46:a5:d5:b2:be:64:75:89:b8:fa:78:27:96:2f:4b:44: 92:d2:3f:c6:ca:ca:45:e0:47:25:41:b6:dd:33:b0:f7:5a:80: a2:35:8e:54:ca:13:ac:5b:71:89:0b:3d:9f:1d:65:1f:57:1d: e9:b0:f6:e2:98:86:45:6e:e6:70:95:db:d1:41:78:3b:5e:2f: 5f:e6:53:b9:a0:f2:ac:28:52:b2:10:7e:0b:f2:f3:da:ef:5f: 2b:de:18:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrBk0+s+Q4sKTqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjkxMTMzZWItZTQzNi00ODAzLWFkYWItZjM3ODM1ZmMx OGUzMB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk MDY5NWY1MjUtMjcxZi00NWQ4LThhN2YtZjI3YmNkYjM2YTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaJkQz2+OCkIf9a62XcuKGuivFJxQ7xVJKZ3 bZFACUxuizitrMxmdSwsT/mudRMwBJamL0yxK+tV2zVJin+/rEaxAa6bXsHwqp7+ QER5dSfGO53RbQUb7DfNy3OAVesOEeONH4yX7z+t54l/pMQsa8iRyYJ8qCddthMy b0a5vZ2Iab/NGQHedISgIw/bqlvVsO4ofcj2XMWMS6UWS1kD88voOjdwFX3Rwcf0 y8wQGsAmRP7/qQFgaTflOdNlu7dnh+C1HwGszla+Ti56PBvvWUjW5NO3F+mGl5Oi OTe7j+bBKp7iXstawHE+0J81xVlSAuDxN6SFCJmIH0vxEnYyqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFzJWg1sET8gLilm+sExxhWdngYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOTEx MzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4MzVmYzE4ZTMvYjIxMjc2YjMtNmE2Zi0z ZTc3LTk1YzQtY2Q4MTJhNmIxYWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjkxMTMzZWItZTQzNi00ODAzLWFk YWItZjM3ODM1ZmMxOGUzLzI5MTEzM2ViLWU0MzYtNDgwMy1hZGFiLWYzNzgzNWZj MThlMy5jcmwwHwYDVR0jBBgwFoAUGFJJOvzvM+PyZJzzxguiUFoMHWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOTExMzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4 MzVmYzE4ZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/G5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNULC0KJgjr90SiCG1+5Vo3ec2AuK+njxyvOTWubgkEXpOaLVV500jp Uuy2CFapefwdJDgn2PYitt3a3RVCW/ghKelpUR8CaDdOZDReAJkw3Km1KshCRr1t 7N/XI9RdOLLDL1YCb30dUkamumL0yanFR/Z3sRn0xV/9cyvu+CgcPKmvIWkcp1kp 96YCSbfeV73C47J894hmbnAgM6otZbmN/cTRRqXVsr5kdYm4+ngnli9LRJLSP8bK ykXgRyVBtt0zsPdagKI1jlTKE6xbcYkLPZ8dZR9XHemw9uKYhkVu5nCV29FBeDte L1/mU7mg8qwoUrIQfgvy89rvXyveGOY= -----END CERTIFICATE-----Generated at Fri Mar 14 09:30:14 2025 by rpki-client