$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/48d069ba-5ef8-3f64-a653-d806fe8fd001.roa File: 48d069ba-5ef8-3f64-a653-d806fe8fd001.roa (raw, json) Hash identifier: C1frr9H02MRVHtBxuX4cXcqODvfGOG2SDmeI5BJAWjw= Subject key identifier: 97:91:54:1C:0A:A1:85:91:50:B0:C3:88:89:87:53:E1:B4:FE:2F:40 Certificate issuer: /CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2 Certificate serial: 010D0C9F43285848EC96965EFC566B267E2770C0 Authority key identifier: DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/48d069ba-5ef8-3f64-a653-d806fe8fd001.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 32329 IP address blocks: 207.53.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:96:5e:fc:56:6b:26:7e:27:70:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=e5366633-4fe8-4be8-b0ea-7c820481a69c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9d:dd:b3:19:a3:43:7d:48:0b:d5:29:f3:42: 7f:05:6c:f2:9a:81:8f:5c:05:db:d2:b3:8d:2f:50: eb:b0:dd:c4:22:4f:6f:c5:7a:69:0b:b9:79:85:d6: de:51:b1:e5:53:d6:84:44:82:0c:d2:bd:b6:d5:3b: 0f:f2:e5:fb:2c:e6:40:9d:59:d2:1b:a8:59:cd:88: f3:4d:60:55:bf:e6:db:b8:d2:b7:c3:45:8a:ce:62: a6:8d:ee:7c:53:48:bc:52:3a:65:f8:b8:8a:39:3a: 87:ce:f8:3f:6f:45:f3:24:1a:65:7e:bc:48:21:d8: ea:c4:20:38:71:19:59:f6:f2:67:3f:62:d4:09:37: 5a:11:fb:dc:80:b6:f2:ec:f1:47:11:96:7c:09:92: ed:6b:f8:84:26:f7:4e:df:5c:7d:64:58:4b:23:5a: 00:71:cc:a8:66:39:3b:e6:24:88:3a:89:ec:cd:21: 5d:d7:d8:d6:f8:df:03:ee:fe:78:31:3b:a3:8d:15: 33:17:87:9a:06:8c:db:8e:bf:01:62:6c:37:d9:82: 2d:91:ca:29:a3:6e:ed:5e:70:8a:fe:26:96:62:e1: 80:73:90:f8:18:03:74:66:bb:67:5d:08:40:ec:98: f8:99:4d:c3:63:fa:af:cf:98:68:32:0f:86:31:fd: ed:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:91:54:1C:0A:A1:85:91:50:B0:C3:88:89:87:53:E1:B4:FE:2F:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/48d069ba-5ef8-3f64-a653-d806fe8fd001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl X509v3 Authority Key Identifier: keyid:DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer sbgp-ipAddrBlock: critical IPv4: 207.53.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:33:58:99:d4:1f:85:01:82:63:30:b3:94:a4:2c:24:65:d5: 2c:6c:06:4c:8e:56:95:4e:ef:32:09:d2:be:3d:dc:ab:5d:85: 77:ab:44:d0:c0:d6:a9:46:7f:f2:a9:d1:21:38:0d:2c:9f:42: 06:4d:c8:43:43:3e:5a:7a:19:97:ac:02:15:4f:07:f5:53:37: 81:48:1e:dc:93:72:5b:df:37:4c:a8:a9:aa:ba:72:96:8a:50: dc:1a:0b:55:78:44:05:c8:8b:64:77:c6:b0:44:fa:d9:3d:ca: 80:9d:90:2b:35:89:c8:4f:c9:2d:0f:78:b9:cf:fd:ec:4a:5c: aa:04:89:d1:d4:bd:ba:51:df:8a:27:0f:a1:59:fb:d6:f7:85: 0d:d8:05:ae:87:b5:37:3a:76:3c:3b:f9:11:18:5c:ec:2c:ab: 25:ae:55:20:e4:7e:fc:0b:f6:68:13:75:ae:32:26:04:0c:b4: 6e:6d:d9:43:95:ba:64:8a:69:3e:54:aa:a5:bc:fa:7e:d8:55: 1c:64:ec:17:95:73:c2:e8:27:78:f7:cb:e2:33:3b:c2:34:4d: 39:f6:12:67:bc:c7:0e:6d:75:38:46:9d:a2:bc:23:94:db:98: 22:6b:00:e8:78:67:c9:a4:bd:0a:e6:78:12:b6:e0:65:b3:df: db:0c:80:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslpZe/FZrJn4ncMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY2ODMwYTQtMGU2Zi00OWExLTk4MjMtYWYyYWU5MmFj N2YyMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk ZTUzNjY2MzMtNGZlOC00YmU4LWIwZWEtN2M4MjA0ODFhNjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh53dsxmjQ31IC9Up80J/BWzymoGPXAXb0rON L1DrsN3EIk9vxXppC7l5hdbeUbHlU9aERIIM0r221TsP8uX7LOZAnVnSG6hZzYjz TWBVv+bbuNK3w0WKzmKmje58U0i8Ujpl+LiKOTqHzvg/b0XzJBplfrxIIdjqxCA4 cRlZ9vJnP2LUCTdaEfvcgLby7PFHEZZ8CZLta/iEJvdO31x9ZFhLI1oAccyoZjk7 5iSIOonszSFd19jW+N8D7v54MTujjRUzF4eaBozbjr8BYmw32YItkcopo27tXnCK /iaWYuGAc5D4GAN0ZrtnXQhA7Jj4mU3DY/qvz5hoMg+GMf3tpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJeRVBwKoYWRULDDiImHU+G0/i9AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NjY4 MzBhNC0wZTZmLTQ5YTEtOTgyMy1hZjJhZTkyYWM3ZjIvNDhkMDY5YmEtNWVmOC0z ZjY0LWE2NTMtZDgwNmZlOGZkMDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTY2ODMwYTQtMGU2Zi00OWExLTk4 MjMtYWYyYWU5MmFjN2YyLzk2NjgzMGE0LTBlNmYtNDlhMS05ODIzLWFmMmFlOTJh YzdmMi5jcmwwHwYDVR0jBBgwFoAU3F9NtqqhGEEdYousdKiAYb8FFEMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85NjY4MzBhNC0wZTZmLTQ5YTEtOTgyMy1hZjJh ZTkyYWM3ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzzX8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAzWJnUH4UBgmMws5SkLCRl1SxsBkyOVpVO7zIJ0r493KtdhXerRNDA 1qlGf/Kp0SE4DSyfQgZNyENDPlp6GZesAhVPB/VTN4FIHtyTclvfN0yoqaq6cpaK UNwaC1V4RAXIi2R3xrBE+tk9yoCdkCs1ichPyS0PeLnP/exKXKoEidHUvbpR34on D6FZ+9b3hQ3YBa6HtTc6djw7+REYXOwsqyWuVSDkfvwL9mgTda4yJgQMtG5t2UOV umSKaT5UqqW8+n7YVRxk7BeVc8LoJ3j3y+IzO8I0TTn2Eme8xw5tdThGnaK8I5Tb mCJrAOh4Z8mkvQrmeBK24GWz39sMgJ0= -----END CERTIFICATE-----Generated at Sat Apr 12 14:49:40 2025 by rpki-client