$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/d8595940-42d4-366b-9402-9f84a8a5c1b9.roa File: d8595940-42d4-366b-9402-9f84a8a5c1b9.roa (raw, json) Hash identifier: ZLoDH/3CuFXLpTA/S+kJiYaXFz8iALJjSuF1A8ATDEk= Subject key identifier: 99:57:B3:23:59:96:8C:AF:D5:DC:B4:AC:61:D1:53:3A:7D:5E:04:6E Certificate issuer: /CN=291133eb-e436-4803-adab-f37835fc18e3 Certificate serial: 010D0C9F43285849393E72BDE490B189444F8BDC Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/d8595940-42d4-366b-9402-9f84a8a5c1b9.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 11300 IP address blocks: 207.241.174.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:72:bd:e4:90:b1:89:44:4f:8b:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=345ae51a-944c-4259-8d13-8101f601ba38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2f:94:07:ec:0c:f3:33:e0:8f:f3:15:7f:bf: 22:1d:c7:b1:dc:d1:4e:c4:fc:f6:7b:dc:91:a2:0d: 90:8b:14:e3:96:e8:ad:d8:40:15:d0:f0:8a:55:25: 92:c3:0a:e1:c8:14:f4:7b:c5:60:9a:6c:92:4e:19: 8f:9e:e0:f8:c2:e0:a2:09:1b:3b:fe:2a:46:de:f7: 0f:8b:84:4a:76:ed:41:9b:61:a2:47:46:3f:5a:77: 13:ba:39:f5:b9:30:c1:5b:d4:5a:1f:a2:71:cd:a4: 2d:a2:7d:0a:e7:a0:18:3a:e0:c8:ce:86:3c:4c:19: 39:f0:1f:f8:21:13:62:e3:98:e2:fe:e5:0f:23:81: 7f:f2:69:73:1c:4b:93:b0:d2:1f:36:ad:dd:32:d4: ce:1e:15:94:19:3b:2d:8f:87:93:38:32:c1:2c:cb: 61:b5:92:79:77:65:4f:3a:73:ef:98:c8:81:f0:31: 3b:26:2f:18:00:15:74:c5:a8:bf:ba:f3:fa:65:cb: 6d:25:61:18:cb:8f:1b:a1:b4:fe:7a:eb:7e:df:46: 84:40:38:58:87:65:1e:46:09:78:66:0d:2d:7f:64: e0:38:e8:56:76:b7:de:32:aa:c6:e7:21:95:a6:54: 65:8e:a6:8f:59:8c:1b:90:b9:ad:6e:8f:22:99:6c: 8b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:57:B3:23:59:96:8C:AF:D5:DC:B4:AC:61:D1:53:3A:7D:5E:04:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/d8595940-42d4-366b-9402-9f84a8a5c1b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl X509v3 Authority Key Identifier: keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer sbgp-ipAddrBlock: critical IPv4: 207.241.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:4c:d1:aa:6f:c1:b8:e8:ff:55:fd:9a:b5:30:a1:14:0a:09: 86:e7:db:dc:71:62:08:5e:21:e7:5c:18:8d:da:b9:01:12:84: ce:33:d0:69:0f:c6:9b:83:a2:8c:09:e7:d2:21:17:e9:40:0b: d2:5b:7b:12:d7:e6:c2:86:c7:47:fe:6e:3a:24:eb:4c:41:a0: 92:60:b9:93:c7:30:9d:43:d9:d1:5d:cf:8f:2c:99:75:3b:b0: 11:66:41:ce:40:50:55:77:a7:a5:4f:72:a3:4b:89:40:4d:15: 17:dd:6d:62:af:08:2e:f7:8f:a7:66:30:60:f0:b0:9a:0f:86: 6d:42:39:ab:b6:0d:16:d8:25:58:60:1c:a3:6d:fb:8e:b2:d2: c4:f9:9e:5a:27:a5:0b:9d:44:a2:f9:42:7b:0e:36:10:1d:ce: 8f:25:aa:d7:d1:7b:1b:f8:58:77:52:0c:d5:f8:54:43:07:2f: d0:f8:35:5a:96:93:e4:d9:98:1b:60:0f:68:66:16:e3:b8:20: de:76:6b:e0:87:52:93:17:79:5e:ce:92:5c:ab:d5:f1:41:05: b5:0d:1f:ce:a2:49:af:3e:ec:e0:f3:aa:eb:ba:3a:e8:c8:00: 97:e3:c8:aa:c7:39:98:1c:b4:64:2d:4d:5e:55:4d:41:d0:5d: 5f:c4:d5:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5PnK95JCxiURPi9wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjkxMTMzZWItZTQzNi00ODAzLWFkYWItZjM3ODM1ZmMx OGUzMB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk MzQ1YWU1MWEtOTQ0Yy00MjU5LThkMTMtODEwMWY2MDFiYTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S+UB+wM8zPgj/MVf78iHcex3NFOxPz2e9yR og2QixTjluit2EAV0PCKVSWSwwrhyBT0e8VgmmySThmPnuD4wuCiCRs7/ipG3vcP i4RKdu1Bm2GiR0Y/WncTujn1uTDBW9RaH6JxzaQton0K56AYOuDIzoY8TBk58B/4 IRNi45ji/uUPI4F/8mlzHEuTsNIfNq3dMtTOHhWUGTstj4eTODLBLMthtZJ5d2VP OnPvmMiB8DE7Ji8YABV0xai/uvP6ZcttJWEYy48bobT+eut+30aEQDhYh2UeRgl4 Zg0tf2TgOOhWdrfeMqrG5yGVplRljqaPWYwbkLmtbo8imWyLRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlXsyNZloyv1dy0rGHRUzp9XgRuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOTEx MzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4MzVmYzE4ZTMvZDg1OTU5NDAtNDJkNC0z NjZiLTk0MDItOWY4NGE4YTVjMWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjkxMTMzZWItZTQzNi00ODAzLWFk YWItZjM3ODM1ZmMxOGUzLzI5MTEzM2ViLWU0MzYtNDgwMy1hZGFiLWYzNzgzNWZj MThlMy5jcmwwHwYDVR0jBBgwFoAUGFJJOvzvM+PyZJzzxguiUFoMHWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOTExMzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4 MzVmYzE4ZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/GuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1M0apvwbjo/1X9mrUwoRQKCYbn29xxYgheIedcGI3auQEShM4z0GkP xpuDoowJ59IhF+lAC9JbexLX5sKGx0f+bjok60xBoJJguZPHMJ1D2dFdz48smXU7 sBFmQc5AUFV3p6VPcqNLiUBNFRfdbWKvCC73j6dmMGDwsJoPhm1COau2DRbYJVhg HKNt+46y0sT5nlonpQudRKL5QnsONhAdzo8lqtfRexv4WHdSDNX4VEMHL9D4NVqW k+TZmBtgD2hmFuO4IN52a+CHUpMXeV7Oklyr1fFBBbUNH86iSa8+7ODzquu6OujI AJfjyKrHOZgctGQtTV5VTUHQXV/E1XA= -----END CERTIFICATE-----Generated at Sun Apr 13 03:00:18 2025 by rpki-client