$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d7988856-9a82-35e4-8647-e7dca63b7c9b.roa File: d7988856-9a82-35e4-8647-e7dca63b7c9b.roa (raw, json) Hash identifier: GrS8NjAhITuZ/wwLfipjWO+fSlfRH2wLiE6jAu0X4XQ= Subject key identifier: 84:1F:4A:42:C0:A1:D4:BD:41:57:5A:E5:D8:2D:F9:DE:0A:25:86:3D Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F43285849754459513991458CE1CD6700 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d7988856-9a82-35e4-8647-e7dca63b7c9b.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 16417 IP address blocks: 207.54.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:59:51:39:91:45:8c:e1:cd:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=7e4fa0f6-c789-45ea-a6d8-532e521c07da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:27:83:ce:0d:bf:27:31:32:bf:e7:13:cf:0b: 0c:78:ca:29:38:a9:b7:c3:0d:62:88:79:81:39:93: bd:b1:80:b4:2d:35:b7:db:b2:76:46:83:56:9b:4a: 59:e8:69:61:0d:fb:d5:56:81:8f:9b:ef:e5:a1:e6: ba:78:98:48:01:68:09:eb:49:ed:ff:df:7e:f5:93: 5a:5d:1d:47:03:52:8a:73:4a:06:3b:49:0e:7f:d4: 27:8b:c5:5e:4f:7f:7f:f7:61:b4:d5:e8:26:11:c7: b7:b8:af:d2:b0:7f:01:de:60:01:0d:4a:f0:52:d8: e3:d4:61:10:54:5f:d0:0d:c0:65:da:46:bb:3c:dc: b5:13:fa:5f:8a:be:e8:3c:c4:43:7e:e5:70:5a:6d: 43:ad:4f:d4:e7:02:42:d4:08:64:35:56:81:ee:c5: 04:62:f7:4d:19:49:14:ea:dd:5f:05:13:71:46:30: 95:29:4e:2b:c6:ee:67:52:b5:77:10:e0:16:cb:6a: c4:d5:76:e4:33:93:93:cf:ba:13:11:40:2b:21:0f: 42:9a:a8:2b:33:2e:a4:6e:6f:35:4d:68:31:07:4e: bd:7d:4e:32:02:0d:ab:f8:8d:82:28:23:ec:35:f1: 20:01:43:36:59:02:1a:77:15:09:e3:7d:68:e1:43: c5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:1F:4A:42:C0:A1:D4:BD:41:57:5A:E5:D8:2D:F9:DE:0A:25:86:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d7988856-9a82-35e4-8647-e7dca63b7c9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 207.54.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:14:22:cf:55:71:a2:3d:d5:1f:eb:60:ef:a0:7f:1f:8f:4f: d3:03:43:3f:04:0b:cd:8d:6a:7e:ea:ba:e7:c0:a4:e5:ee:f4: 48:b6:c1:55:e6:db:bf:c6:79:ad:c4:39:c3:1c:c3:9b:e2:b6: 1a:28:46:90:d4:d6:39:fc:90:3f:0a:c6:bd:ad:76:a0:3d:e5: 93:07:c8:fa:8b:92:af:59:7c:0f:25:3d:52:4a:ff:ec:93:97: 5d:5b:c1:23:4e:17:b1:6a:b1:17:14:15:67:f7:f0:24:05:aa: bc:4a:30:35:a3:e4:04:ed:23:da:69:c6:53:8c:8c:d9:49:16: e1:75:31:1a:3f:da:c9:a7:bf:13:2b:b4:08:b4:4d:17:45:e5: 1c:bd:80:2a:96:b6:01:aa:79:4e:30:bd:ca:f0:03:5e:ea:7c: 08:49:ed:fd:c9:63:a6:d1:50:28:9d:57:4b:1a:65:dd:61:a4: 75:44:a8:89:a6:00:b4:8f:80:fd:fc:36:df:65:a6:1c:a2:71: 80:db:4f:8f:4b:4b:05:50:a3:f5:91:42:c8:7a:23:ea:8d:59: 56:9d:fe:ee:36:09:15:de:ce:03:e0:1c:b6:ae:75:b3:42:5b: 19:05:33:48:f4:c8:5a:06:f0:43:ac:98:84:0c:a4:7b:38:f4: c1:d9:d1:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl1RFlROZFFjOHNZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk N2U0ZmEwZjYtYzc4OS00NWVhLWE2ZDgtNTMyZTUyMWMwN2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCeDzg2/JzEyv+cTzwsMeMopOKm3ww1iiHmB OZO9sYC0LTW327J2RoNWm0pZ6GlhDfvVVoGPm+/loea6eJhIAWgJ60nt/99+9ZNa XR1HA1KKc0oGO0kOf9Qni8VeT39/92G01egmEce3uK/SsH8B3mABDUrwUtjj1GEQ VF/QDcBl2ka7PNy1E/pfir7oPMRDfuVwWm1DrU/U5wJC1AhkNVaB7sUEYvdNGUkU 6t1fBRNxRjCVKU4rxu5nUrV3EOAWy2rE1XbkM5OTz7oTEUArIQ9CmqgrMy6kbm81 TWgxB069fU4yAg2r+I2CKCPsNfEgAUM2WQIadxUJ431o4UPFfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQfSkLAodS9QVda5dgt+d4KJYY9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvZDc5ODg4NTYtOWE4Mi0z NWU0LTg2NDctZTdkY2E2M2I3YzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzZWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUUIs9VcaI91R/rYO+gfx+PT9MDQz8EC82Nan7quufApOXu9Ei2wVXm 27/Gea3EOcMcw5vithooRpDU1jn8kD8Kxr2tdqA95ZMHyPqLkq9ZfA8lPVJK/+yT l11bwSNOF7FqsRcUFWf38CQFqrxKMDWj5ATtI9ppxlOMjNlJFuF1MRo/2smnvxMr tAi0TRdF5Ry9gCqWtgGqeU4wvcrwA17qfAhJ7f3JY6bRUCidV0saZd1hpHVEqImm ALSPgP38Nt9lphyicYDbT49LSwVQo/WRQsh6I+qNWVad/u42CRXezgPgHLaudbNC WxkFM0j0yFoG8EOsmIQMpHs49MHZ0SA= -----END CERTIFICATE-----Generated at Fri Apr 11 23:41:49 2025 by rpki-client