$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/d8595940-42d4-366b-9402-9f84a8a5c1b9.roa File: d8595940-42d4-366b-9402-9f84a8a5c1b9.roa (raw, json) Hash identifier: lg+tgjnj2192VmCgotm69r4GZHlulacvk7aJhURN4FI= Subject key identifier: 87:77:BC:45:8E:A6:B2:EA:15:7E:3A:A8:1E:80:0D:44:D5:05:72:A4 Certificate issuer: /CN=291133eb-e436-4803-adab-f37835fc18e3 Certificate serial: 010D0C9F4328584A189544319EE7D60A12E9F888 Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/d8595940-42d4-366b-9402-9f84a8a5c1b9.roa Signing time: Fri 06 Jun 2025 01:00:50 +0000 ROA not before: Fri 06 Jun 2025 01:00:50 +0000 ROA not after: Thu 04 Sep 2025 01:00:50 +0000 asID: 11300 IP address blocks: 207.241.174.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:18:95:44:31:9e:e7:d6:0a:12:e9:f8:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3 Validity Not Before: Jun 6 01:00:50 2025 GMT Not After : Sep 4 01:00:50 2025 GMT Subject: CN=8f4b02a6-b0ad-4db3-bd0b-7213337e35f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d3:07:8d:3d:9c:1e:b8:4f:8e:14:3e:d5:b5: f0:d7:4a:ff:9d:f5:52:6c:17:09:b6:47:d3:90:fe: 76:fe:08:5e:23:a5:a0:03:08:38:6e:31:1a:16:cd: 95:a8:53:b3:3e:1c:d2:9b:12:2b:7d:46:ec:f0:30: 47:66:cb:46:20:ba:57:3f:05:76:7a:95:f4:02:14: af:7f:c6:11:31:a3:12:f4:e6:bd:58:90:76:b7:6d: 2f:af:40:c2:3e:24:f7:cf:07:43:d5:24:2c:8c:51: b6:8c:12:7f:47:60:7a:3b:11:df:85:99:33:5f:2c: b4:a5:a8:98:b4:91:97:51:02:80:f4:ec:af:0c:fc: 0d:39:2d:0d:e4:07:42:c7:c8:fd:4f:ff:2e:ab:d8: 25:f3:20:49:01:51:b1:08:85:b5:c7:ba:e4:37:85: 82:21:ea:49:44:7f:56:6c:22:d1:35:d6:12:dc:2c: 41:03:01:db:6f:84:a3:4f:ea:36:b7:94:51:0d:a8: c2:dc:c0:8f:09:43:b5:2a:14:d9:75:7b:8f:25:da: 5e:d0:bf:30:4c:62:cd:3b:f5:a6:dc:bb:16:3a:74: 21:32:82:1f:c3:40:23:d0:79:10:0a:78:1b:5f:1f: 75:a6:80:4d:9b:91:e5:5a:50:0b:b5:23:ae:93:df: 93:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:77:BC:45:8E:A6:B2:EA:15:7E:3A:A8:1E:80:0D:44:D5:05:72:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/d8595940-42d4-366b-9402-9f84a8a5c1b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl X509v3 Authority Key Identifier: keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer sbgp-ipAddrBlock: critical IPv4: 207.241.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:73:60:3e:d4:b6:73:51:51:99:66:76:44:ce:39:b2:13:c7: 3b:e2:f3:62:a4:92:b1:69:92:d0:8d:8a:4a:4e:1b:10:77:82: 69:40:b1:d0:9d:6e:63:cf:e7:d4:f1:42:5e:f2:e2:05:85:f3: 41:cb:f2:d7:75:53:13:62:19:25:3a:44:fe:ca:f0:3c:8b:61: 43:bf:e7:9b:3e:73:56:44:13:f7:fd:97:48:01:f9:78:fa:4c: f7:59:9d:05:b6:bb:f1:3d:fb:6a:93:c8:ab:4e:7f:cf:74:7d: 53:13:65:a7:65:58:d5:ac:79:75:42:44:2f:da:50:81:1d:9e: f0:39:3d:65:4b:cd:39:9e:e3:f9:b4:d4:cc:3a:96:1b:5a:59: db:39:8b:45:ce:29:25:e8:53:fe:88:06:8a:3e:13:78:14:38: 43:62:f5:60:26:10:1d:bd:97:c4:a0:c4:b3:97:41:b2:5c:f3: 39:9b:5e:e0:ee:81:80:6d:70:ef:1f:7b:54:82:1b:fc:05:9d: 21:d1:44:d9:8b:e2:c2:d8:cf:85:e8:3a:51:c5:5c:6a:31:75: 00:2b:cf:b6:09:22:57:13:68:c6:cf:c8:a6:c5:3e:c3:1b:8c: 65:7f:3b:76:ae:b1:d8:dc:b7:a3:6d:4d:1c:eb:75:98:55:b3: cc:85:73:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoYlUQxnufWChLp+IgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjkxMTMzZWItZTQzNi00ODAzLWFkYWItZjM3ODM1ZmMx OGUzMB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk OGY0YjAyYTYtYjBhZC00ZGIzLWJkMGItNzIxMzMzN2UzNWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttMHjT2cHrhPjhQ+1bXw10r/nfVSbBcJtkfT kP52/gheI6WgAwg4bjEaFs2VqFOzPhzSmxIrfUbs8DBHZstGILpXPwV2epX0AhSv f8YRMaMS9Oa9WJB2t20vr0DCPiT3zwdD1SQsjFG2jBJ/R2B6OxHfhZkzXyy0paiY tJGXUQKA9OyvDPwNOS0N5AdCx8j9T/8uq9gl8yBJAVGxCIW1x7rkN4WCIepJRH9W bCLRNdYS3CxBAwHbb4SjT+o2t5RRDajC3MCPCUO1KhTZdXuPJdpe0L8wTGLNO/Wm 3LsWOnQhMoIfw0Aj0HkQCngbXx91poBNm5HlWlALtSOuk9+TeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFId3vEWOprLqFX46qB6ADUTVBXKkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOTEx MzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4MzVmYzE4ZTMvZDg1OTU5NDAtNDJkNC0z NjZiLTk0MDItOWY4NGE4YTVjMWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjkxMTMzZWItZTQzNi00ODAzLWFk YWItZjM3ODM1ZmMxOGUzLzI5MTEzM2ViLWU0MzYtNDgwMy1hZGFiLWYzNzgzNWZj MThlMy5jcmwwHwYDVR0jBBgwFoAUGFJJOvzvM+PyZJzzxguiUFoMHWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOTExMzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4 MzVmYzE4ZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/GuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVzYD7UtnNRUZlmdkTOObITxzvi82KkkrFpktCNikpOGxB3gmlAsdCd bmPP59TxQl7y4gWF80HL8td1UxNiGSU6RP7K8DyLYUO/55s+c1ZEE/f9l0gB+Xj6 TPdZnQW2u/E9+2qTyKtOf890fVMTZadlWNWseXVCRC/aUIEdnvA5PWVLzTme4/m0 1Mw6lhtaWds5i0XOKSXoU/6IBoo+E3gUOENi9WAmEB29l8SgxLOXQbJc8zmbXuDu gYBtcO8fe1SCG/wFnSHRRNmL4sLYz4XoOlHFXGoxdQArz7YJIlcTaMbPyKbFPsMb jGV/O3ausdjct6NtTRzrdZhVs8yFc3s= -----END CERTIFICATE-----Generated at Sun Jun 8 12:36:11 2025 by rpki-client