$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/da522889-ebe1-3e20-88a7-7cccf27b5b03.roa File: da522889-ebe1-3e20-88a7-7cccf27b5b03.roa (raw, json) Hash identifier: tJ79hrv0hwRrljcqqbZR9pNNp+QKoBn6BuX4xwIcVBA= Subject key identifier: B1:2C:BF:26:7C:C8:85:D2:C4:53:58:A5:CE:87:AC:32:FF:6C:A5:64 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584975445939EA4FB6121BE03800 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/da522889-ebe1-3e20-88a7-7cccf27b5b03.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 16417 IP address blocks: 207.54.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:59:39:ea:4f:b6:12:1b:e0:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=45a9e16a-ca23-4717-930e-20fd9cb3b34b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:56:8f:d7:4e:cc:bb:bd:a1:5c:5f:d0:a4:3c: 47:74:9e:5f:91:59:af:5f:72:eb:a2:1c:06:1e:87: cd:71:34:70:fc:61:6b:52:1f:a9:3c:ce:d6:26:84: 5f:84:e6:49:51:64:05:95:a6:4a:a7:8d:11:02:d8: 0a:fb:85:04:e8:79:65:23:db:b4:b0:a8:64:20:0e: d7:a7:b5:27:40:37:05:b3:6a:45:e5:0e:19:44:fb: b5:36:d8:db:d0:e3:c5:ef:60:40:c3:57:7f:1b:db: d7:c9:c6:71:15:e3:eb:0d:58:a0:6f:c7:8a:f0:eb: e0:26:0d:2a:e1:9d:41:c4:cc:5a:b7:e1:da:86:71: 13:8b:7b:22:3b:c6:24:9c:a4:5d:18:bc:6f:90:ac: f6:9d:4b:81:cf:5f:15:9a:c5:db:60:cc:12:9a:a6: 64:ad:c7:a8:46:86:41:18:d1:1e:43:e3:af:de:12: 3d:b1:62:83:45:5f:8e:91:ff:df:6d:85:14:5e:6a: 2d:b9:dc:7d:a1:5c:0f:fd:12:18:cc:27:a6:f0:80: 96:7d:56:fc:81:1a:0a:b4:ab:14:aa:3c:69:eb:e8: f2:bb:a8:20:99:cb:a8:16:28:69:e5:28:5d:e2:b7: 8b:ef:d3:6e:59:f2:36:b3:e2:3e:1d:61:45:eb:66: c9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:2C:BF:26:7C:C8:85:D2:C4:53:58:A5:CE:87:AC:32:FF:6C:A5:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/da522889-ebe1-3e20-88a7-7cccf27b5b03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 207.54.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:77:da:0e:f3:97:b9:f3:b2:d5:d1:68:60:12:d4:e6:e9:6e: d4:16:21:b0:79:9d:bd:61:42:87:59:cf:cb:88:a6:3a:50:a5: ed:68:f3:5a:c0:a6:dd:51:5b:c0:4a:c6:f3:d8:73:ba:78:3d: eb:e6:20:4c:b9:e0:01:ce:dc:68:27:4c:a1:b4:bf:1f:16:f1: 2a:ec:4b:db:3e:55:b7:15:1f:cc:dc:70:28:e5:f5:a1:8c:16: 4b:f9:97:13:00:18:17:b6:2c:b3:81:3e:02:fa:cd:d8:7c:e2: 67:f3:95:0c:db:2f:99:12:1d:e0:5c:9f:80:02:c4:d4:c8:e1: 42:9f:20:ef:de:d0:a9:12:c0:51:1c:2c:8c:29:b2:d9:bd:61: 31:37:48:58:94:70:64:fc:a4:2a:69:03:ca:db:c9:28:cb:73: b4:dd:d8:d8:51:b3:8c:73:d8:3c:40:48:71:66:f0:2b:9a:8a: e9:19:42:62:fe:d6:11:f2:c1:b1:1a:b3:2d:89:33:05:6b:cd: 24:31:b3:3b:4d:12:a9:df:e7:8f:90:38:1c:7c:2f:87:7d:3a: 92:98:40:4e:4b:dc:8c:54:b2:4c:cb:0f:6b:df:bd:1b:c6:4b: 9b:8b:4e:9c:db:db:54:f2:af:d1:eb:46:60:e4:7d:87:50:83: cb:d0:ca:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl1RFk56k+2EhvgOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk NDVhOWUxNmEtY2EyMy00NzE3LTkzMGUtMjBmZDljYjNiMzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVaP107Mu72hXF/QpDxHdJ5fkVmvX3LrohwG HofNcTRw/GFrUh+pPM7WJoRfhOZJUWQFlaZKp40RAtgK+4UE6HllI9u0sKhkIA7X p7UnQDcFs2pF5Q4ZRPu1Ntjb0OPF72BAw1d/G9vXycZxFePrDVigb8eK8OvgJg0q 4Z1BxMxat+HahnETi3siO8YknKRdGLxvkKz2nUuBz18VmsXbYMwSmqZkrceoRoZB GNEeQ+Ov3hI9sWKDRV+Okf/fbYUUXmotudx9oVwP/RIYzCem8ICWfVb8gRoKtKsU qjxp6+jyu6ggmcuoFihp5Shd4reL79NuWfI2s+I+HWFF62bJIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEsvyZ8yIXSxFNYpc6HrDL/bKVkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvZGE1MjI4ODktZWJlMS0z ZTIwLTg4YTctN2NjY2YyN2I1YjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzZVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJ32g7zl7nzstXRaGAS1ObpbtQWIbB5nb1hQodZz8uIpjpQpe1o81rA pt1RW8BKxvPYc7p4PevmIEy54AHO3GgnTKG0vx8W8SrsS9s+VbcVH8zccCjl9aGM Fkv5lxMAGBe2LLOBPgL6zdh84mfzlQzbL5kSHeBcn4ACxNTI4UKfIO/e0KkSwFEc LIwpstm9YTE3SFiUcGT8pCppA8rbySjLc7Td2NhRs4xz2DxASHFm8CuaiukZQmL+ 1hHywbEasy2JMwVrzSQxsztNEqnf54+QOBx8L4d9OpKYQE5L3IxUskzLD2vfvRvG S5uLTpzb21Tyr9HrRmDkfYdQg8vQym0= -----END CERTIFICATE-----Generated at Sat Apr 12 01:50:07 2025 by rpki-client