$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/c9278a07-6723-35ed-b9c3-1d86bda75b28.roa File: c9278a07-6723-35ed-b9c3-1d86bda75b28.roa (raw, json) Hash identifier: Z+/eo+3K9ly36FhqVTCszZ7b7gwDUF83VBLkjGFJEUc= Subject key identifier: 60:18:64:5E:01:A4:AF:BA:38:68:84:6F:D8:B9:DC:00:D4:6F:8F:0D Certificate issuer: /CN=291133eb-e436-4803-adab-f37835fc18e3 Certificate serial: 010D0C9F432858491ED6DA0A341FA01995127800 Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/c9278a07-6723-35ed-b9c3-1d86bda75b28.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 11127 IP address blocks: 207.241.179.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:da:0a:34:1f:a0:19:95:12:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=4e2a8dc5-db23-4775-a474-4065b86d69f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f9:ee:bc:4f:ea:7d:43:d9:72:47:79:17:12: 70:6d:2e:b8:6e:33:37:dc:0e:55:05:21:1d:8d:cc: 87:5d:bc:e7:bf:c7:69:c6:72:ca:dc:b8:e8:6d:c0: 5a:c1:9d:cf:35:73:27:3c:d8:f7:ab:61:38:ed:82: 7c:f1:67:ae:d3:bc:6e:4e:14:19:f5:95:bf:b5:45: 9a:51:1c:8f:82:4f:e6:28:1b:fd:7a:af:e5:b3:04: 64:59:20:47:f0:fe:a6:70:a3:51:6f:8b:12:98:95: 94:4a:2e:32:12:9b:84:40:b5:3a:17:33:8c:53:36: ef:bc:0d:b0:4e:19:33:0c:84:05:5c:ce:e8:4a:e6: 18:e4:16:3e:75:85:f5:30:71:d3:7e:94:58:f3:02: 96:da:d4:99:bb:be:15:c1:53:98:65:aa:8d:3e:9c: 27:f2:50:75:df:27:b2:82:5f:56:54:e3:01:1c:8b: 97:a3:98:9b:48:1f:84:b2:dc:7e:e8:73:d0:65:ae: 92:9b:db:a5:75:48:24:49:70:89:df:78:a6:e2:d4: 40:0d:d9:2f:2e:6a:cd:9d:25:8e:f0:0f:63:92:74: 0f:8b:29:5c:17:76:12:16:c8:9a:b1:58:85:7e:dd: 28:bf:27:0a:ce:19:06:e0:cc:f4:d6:14:05:18:59: 1d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:18:64:5E:01:A4:AF:BA:38:68:84:6F:D8:B9:DC:00:D4:6F:8F:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/c9278a07-6723-35ed-b9c3-1d86bda75b28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl X509v3 Authority Key Identifier: keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer sbgp-ipAddrBlock: critical IPv4: 207.241.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:b5:8f:ad:b0:3b:e5:2c:a6:03:04:87:1c:4f:a6:dd:c0:18: b0:d9:e3:1d:bc:87:34:c3:ed:7b:39:8e:d3:ce:be:ef:0b:78: 10:4c:5f:41:8c:2f:32:90:d6:2c:da:18:81:50:1b:fb:b5:d2: dc:91:0e:cd:32:6d:14:16:d3:b2:af:87:59:c6:69:b3:da:cd: d5:a0:4d:ca:53:cf:ad:39:2f:99:d8:81:cd:1a:8d:51:c4:2b: 72:49:7f:94:de:88:06:b5:02:1e:53:29:e3:80:04:9e:41:16: 38:91:35:e3:2e:a5:fc:ff:a2:a2:11:75:1e:8c:4c:b2:b8:6a: 16:d3:26:6f:2a:f1:19:0e:80:86:3c:a2:16:a9:83:b1:4b:72: 01:40:99:72:40:9a:aa:fb:fd:fe:9d:b4:53:03:ab:32:fe:0e: cf:85:ca:f3:cd:7d:e7:b4:01:47:4d:28:9d:0c:20:4b:b3:64: 9c:b0:81:bc:43:41:a3:99:79:62:f7:11:fc:7d:db:1e:be:18: ab:9d:66:12:16:9d:85:73:f4:e1:8f:7d:f1:dc:98:aa:d1:89: f7:c5:9a:ac:88:54:fc:93:52:42:95:5e:80:36:50:61:b9:28: c5:e4:93:1a:b6:a5:d2:76:cc:d0:2c:9e:7b:d0:3e:97:2b:18: fa:99:1a:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1toKNB+gGZUSeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjkxMTMzZWItZTQzNi00ODAzLWFkYWItZjM3ODM1ZmMx OGUzMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk NGUyYThkYzUtZGIyMy00Nzc1LWE0NzQtNDA2NWI4NmQ2OWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfnuvE/qfUPZckd5FxJwbS64bjM33A5VBSEd jcyHXbznv8dpxnLK3LjobcBawZ3PNXMnPNj3q2E47YJ88Weu07xuThQZ9ZW/tUWa URyPgk/mKBv9eq/lswRkWSBH8P6mcKNRb4sSmJWUSi4yEpuEQLU6FzOMUzbvvA2w ThkzDIQFXM7oSuYY5BY+dYX1MHHTfpRY8wKW2tSZu74VwVOYZaqNPpwn8lB13yey gl9WVOMBHIuXo5ibSB+Estx+6HPQZa6Sm9uldUgkSXCJ33im4tRADdkvLmrNnSWO 8A9jknQPiylcF3YSFsiasViFft0ovycKzhkG4Mz01hQFGFkdDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAYZF4BpK+6OGiEb9i53ADUb48NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOTEx MzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4MzVmYzE4ZTMvYzkyNzhhMDctNjcyMy0z NWVkLWI5YzMtMWQ4NmJkYTc1YjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjkxMTMzZWItZTQzNi00ODAzLWFk YWItZjM3ODM1ZmMxOGUzLzI5MTEzM2ViLWU0MzYtNDgwMy1hZGFiLWYzNzgzNWZj MThlMy5jcmwwHwYDVR0jBBgwFoAUGFJJOvzvM+PyZJzzxguiUFoMHWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOTExMzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4 MzVmYzE4ZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/GzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEq1j62wO+UspgMEhxxPpt3AGLDZ4x28hzTD7Xs5jtPOvu8LeBBMX0GM LzKQ1izaGIFQG/u10tyRDs0ybRQW07Kvh1nGabPazdWgTcpTz605L5nYgc0ajVHE K3JJf5TeiAa1Ah5TKeOABJ5BFjiRNeMupfz/oqIRdR6MTLK4ahbTJm8q8RkOgIY8 ohapg7FLcgFAmXJAmqr7/f6dtFMDqzL+Ds+FyvPNfee0AUdNKJ0MIEuzZJywgbxD QaOZeWL3Efx92x6+GKudZhIWnYVz9OGPffHcmKrRiffFmqyIVPyTUkKVXoA2UGG5 KMXkkxq2pdJ2zNAsnnvQPpcrGPqZGig= -----END CERTIFICATE-----Generated at Sat Apr 12 15:18:49 2025 by rpki-client