$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/ccd79392-4dc6-36c0-9485-3b663c7ab673.roa File: ccd79392-4dc6-36c0-9485-3b663c7ab673.roa (raw, json) Hash identifier: 5Ds8Dy5XUPAzKzt3Q15yVCgbSvqh7OcBIStaimQ+xTU= Subject key identifier: 8F:1F:95:F9:C9:39:15:72:E8:4D:F6:FB:57:EF:85:9D:1B:9E:64:35 Certificate issuer: /CN=291133eb-e436-4803-adab-f37835fc18e3 Certificate serial: 010D0C9F4328584A18953F7D9E156FAE0CFB2420 Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/ccd79392-4dc6-36c0-9485-3b663c7ab673.roa Signing time: Fri 06 Jun 2025 01:00:50 +0000 ROA not before: Fri 06 Jun 2025 01:00:50 +0000 ROA not after: Thu 04 Sep 2025 01:00:50 +0000 asID: 11300 IP address blocks: 207.241.179.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:18:95:3f:7d:9e:15:6f:ae:0c:fb:24:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3 Validity Not Before: Jun 6 01:00:50 2025 GMT Not After : Sep 4 01:00:50 2025 GMT Subject: CN=14ca22ee-c4db-4f7b-9bd6-fe74832bf28d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b1:92:94:64:36:23:70:19:8c:de:e0:36:bf: cc:ed:3b:d5:6d:5c:69:03:21:25:ea:ea:67:bf:c1: e1:81:89:89:61:b3:17:c6:0f:9f:53:3d:a3:ab:01: b9:88:ef:2c:fa:92:d7:9b:ca:62:3e:a4:2a:69:98: 53:16:7f:db:85:47:16:03:6b:9d:b9:43:86:b2:4d: ab:a8:54:42:8f:2d:98:63:bf:eb:a1:56:7c:29:2d: c0:63:33:65:57:b8:d9:a8:21:3e:fc:da:f5:7a:5d: 51:51:52:c5:59:1d:63:11:64:0f:0c:3d:4c:bf:3c: e8:ad:31:7a:c0:36:d4:48:86:09:6e:e9:61:8e:c1: d1:b0:94:00:2e:5f:28:75:8d:27:13:0f:d5:9f:37: 4d:21:51:ae:5e:d4:bc:fa:c9:de:eb:a9:50:02:2b: f1:08:86:56:e1:a3:b4:aa:45:74:34:9c:35:ff:48: 5e:71:c7:9b:e5:37:83:80:12:34:db:b6:2f:59:d1: 06:04:f2:8d:c0:76:b5:b8:26:1c:c0:9f:23:6d:44: 13:f9:50:c5:25:93:3c:c3:ff:b0:14:8b:a6:13:99: c8:19:76:62:a0:6f:33:99:a7:37:4e:74:4e:46:1e: d3:e0:4f:7b:ea:c9:ea:c7:79:7e:6b:8b:5c:24:a8: 1b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:1F:95:F9:C9:39:15:72:E8:4D:F6:FB:57:EF:85:9D:1B:9E:64:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/ccd79392-4dc6-36c0-9485-3b663c7ab673.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl X509v3 Authority Key Identifier: keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer sbgp-ipAddrBlock: critical IPv4: 207.241.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:c1:cf:f8:1b:02:93:45:08:1a:57:1c:59:d7:f9:93:f2:fc: ad:65:07:0d:db:2f:ce:21:ed:54:f7:90:8e:4f:04:95:de:6c: 8a:cc:81:93:d3:49:a3:d5:98:f9:4f:3d:11:71:a2:16:5a:25: 21:1a:18:9c:8b:70:f1:49:78:2f:f3:2f:5b:30:92:2d:03:0c: 73:eb:61:fe:b9:2d:fd:e3:3f:e0:25:e0:d7:df:0e:2b:0e:52: bc:96:6b:c8:09:0b:36:82:af:73:8b:1e:7b:2d:d7:4a:8d:93: 3e:fa:a6:d3:82:c0:b4:b6:09:9a:78:21:7c:8a:b5:ca:3f:b6: 6f:86:da:a4:e9:f5:6d:20:34:de:de:71:0a:05:33:76:cf:d1: a6:3e:52:89:49:21:0b:b0:a1:48:57:c3:88:32:cd:d1:7a:1e: 06:06:07:f4:71:10:f2:fa:c6:91:50:b0:e0:2e:ca:c6:28:09: c7:85:f4:84:e4:18:39:4a:98:23:a4:b1:af:04:a3:0e:c4:8b: b6:c4:09:63:91:c7:3c:f9:7d:3c:e1:d6:b5:9e:06:34:d2:c8: 7d:de:69:c2:ad:9b:17:e0:79:90:e4:b6:1e:a7:f0:c8:16:9c: bd:44:f0:0e:d5:d8:f6:22:41:ff:6b:15:b8:fa:9d:e7:bf:df: 50:d3:b3:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoYlT99nhVvrgz7JCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjkxMTMzZWItZTQzNi00ODAzLWFkYWItZjM3ODM1ZmMx OGUzMB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk MTRjYTIyZWUtYzRkYi00ZjdiLTliZDYtZmU3NDgzMmJmMjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7GSlGQ2I3AZjN7gNr/M7TvVbVxpAyEl6upn v8HhgYmJYbMXxg+fUz2jqwG5iO8s+pLXm8piPqQqaZhTFn/bhUcWA2uduUOGsk2r qFRCjy2YY7/roVZ8KS3AYzNlV7jZqCE+/Nr1el1RUVLFWR1jEWQPDD1MvzzorTF6 wDbUSIYJbulhjsHRsJQALl8odY0nEw/VnzdNIVGuXtS8+sne66lQAivxCIZW4aO0 qkV0NJw1/0hecceb5TeDgBI027YvWdEGBPKNwHa1uCYcwJ8jbUQT+VDFJZM8w/+w FIumE5nIGXZioG8zmac3TnRORh7T4E976snqx3l+a4tcJKgbBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8flfnJORVy6E32+1fvhZ0bnmQ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOTEx MzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4MzVmYzE4ZTMvY2NkNzkzOTItNGRjNi0z NmMwLTk0ODUtM2I2NjNjN2FiNjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjkxMTMzZWItZTQzNi00ODAzLWFk YWItZjM3ODM1ZmMxOGUzLzI5MTEzM2ViLWU0MzYtNDgwMy1hZGFiLWYzNzgzNWZj MThlMy5jcmwwHwYDVR0jBBgwFoAUGFJJOvzvM+PyZJzzxguiUFoMHWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOTExMzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4 MzVmYzE4ZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/GzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLBz/gbApNFCBpXHFnX+ZPy/K1lBw3bL84h7VT3kI5PBJXebIrMgZPT SaPVmPlPPRFxohZaJSEaGJyLcPFJeC/zL1swki0DDHPrYf65Lf3jP+Al4NffDisO UryWa8gJCzaCr3OLHnst10qNkz76ptOCwLS2CZp4IXyKtco/tm+G2qTp9W0gNN7e cQoFM3bP0aY+UolJIQuwoUhXw4gyzdF6HgYGB/RxEPL6xpFQsOAuysYoCceF9ITk GDlKmCOksa8Eow7Ei7bECWORxzz5fTzh1rWeBjTSyH3eacKtmxfgeZDkth6n8MgW nL1E8A7V2PYiQf9rFbj6nee/31DTs/Q= -----END CERTIFICATE-----Generated at Sun Jun 8 12:38:05 2025 by rpki-client