$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/fc862717-a664-3367-88cf-5e0ecaaad117.roa File: fc862717-a664-3367-88cf-5e0ecaaad117.roa (raw, json) Hash identifier: L9oMZVtWs9ViFUyZ1gIGduQwCQzKputLhFJ0SjZhWH0= Subject key identifier: 1E:28:12:12:29:5F:8F:12:AE:B5:62:89:BE:A0:8B:3C:68:55:5A:F2 Certificate issuer: /CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Certificate serial: 010D0C9F43285848EF61561063F8081D6DD0AD40 Authority key identifier: F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/fc862717-a664-3367-88cf-5e0ecaaad117.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 46408 IP address blocks: 207.191.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:56:10:63:f8:08:1d:6d:d0:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=41af0fd3-2e8d-48f0-a312-da2d7f3064e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c8:2e:13:36:cc:4f:2d:34:14:8a:2e:d6:b1: 54:25:50:07:0b:92:4e:14:e8:42:1a:5d:ae:bb:54: 25:3f:6a:fe:e0:83:cb:d1:15:b7:8e:d6:0c:9e:09: ac:ba:a5:49:50:38:ac:e4:85:a1:23:68:fc:aa:86: 9e:50:17:9b:5a:01:67:37:d5:e9:3a:ca:e6:92:af: 67:25:0e:5a:e8:b9:41:fb:26:14:94:3c:21:6f:76: 9e:75:08:07:1f:32:0c:e6:98:19:cd:e4:85:93:fe: 45:d8:0b:8c:f4:12:60:73:c6:8b:f3:46:cc:15:27: 27:33:1f:83:8a:fd:17:ca:b5:07:19:e0:a2:c3:38: c4:bb:66:e9:ca:4e:0f:24:40:46:c5:86:b5:6f:38: 37:9d:aa:ca:54:dc:a7:6e:97:58:22:96:b2:2f:63: 59:5a:dd:8c:d8:fa:bf:74:85:cd:ec:5c:33:42:81: 82:ff:01:f6:bd:56:51:3f:a0:22:5f:ad:91:5e:ad: be:cc:eb:77:92:fc:31:4a:e8:d7:bd:93:00:a6:48: 9c:b5:cf:d0:1b:3d:db:57:77:3f:2d:86:8a:f2:16: 78:fd:61:22:fa:8f:90:d0:ef:ef:9c:9e:c8:e5:0d: 74:ce:f8:0d:f6:00:45:63:85:b5:a9:5d:d4:42:12: fd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:28:12:12:29:5F:8F:12:AE:B5:62:89:BE:A0:8B:3C:68:55:5A:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/fc862717-a664-3367-88cf-5e0ecaaad117.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl X509v3 Authority Key Identifier: keyid:F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer sbgp-ipAddrBlock: critical IPv4: 207.191.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:89:e4:dc:ef:29:35:be:60:e4:e0:3c:de:92:32:65:a3:ef: 4b:92:95:7a:dc:a2:19:64:eb:cd:be:d4:7d:0f:b4:e7:ae:6f: 71:33:62:53:d8:f5:d5:50:f8:f3:ce:b2:86:4b:46:17:c1:66: 07:1a:a7:31:22:f6:5e:ba:9d:79:e8:59:c4:d6:ec:bf:d7:94: 67:3a:f1:7b:3e:56:b3:ff:a1:a0:10:53:c9:54:dc:e3:97:2b: 10:81:5b:ec:0a:e9:6c:17:93:d8:c2:18:50:ce:6d:fe:b0:e0: 6f:63:65:7b:f7:97:f7:36:e4:41:e7:67:06:64:f2:8d:aa:37: 7f:73:7e:86:46:15:99:50:dd:73:d8:27:ca:1a:ed:fd:ae:01: 4b:01:e0:0f:24:1f:00:8a:06:80:54:70:7e:5f:35:f4:53:48: 47:24:de:00:74:21:85:95:4a:b9:05:d4:6e:d7:bd:0c:d9:85: 6e:36:bb:0b:db:d9:7b:5c:28:51:38:00:1b:86:5e:f0:4a:7e: 67:e5:9d:bc:7e:12:c0:ff:ad:c7:95:85:b7:1b:63:51:71:a8: b7:3d:16:eb:7d:29:17:97:1b:15:03:7c:21:5f:0f:db:c8:86: 60:0a:46:0f:59:d9:73:e6:91:d4:6a:38:4c:4a:7c:cc:e9:6a: 70:20:ea:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYVYQY/gIHW3QrUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkZjJlN2YtOGU4My00MzJhLThjMjctNTU0Njk0NGRk YTRiMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk NDFhZjBmZDMtMmU4ZC00OGYwLWEzMTItZGEyZDdmMzA2NGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8guEzbMTy00FIou1rFUJVAHC5JOFOhCGl2u u1QlP2r+4IPL0RW3jtYMngmsuqVJUDis5IWhI2j8qoaeUBebWgFnN9XpOsrmkq9n JQ5a6LlB+yYUlDwhb3aedQgHHzIM5pgZzeSFk/5F2AuM9BJgc8aL80bMFScnMx+D iv0XyrUHGeCiwzjEu2bpyk4PJEBGxYa1bzg3narKVNynbpdYIpayL2NZWt2M2Pq/ dIXN7FwzQoGC/wH2vVZRP6AiX62RXq2+zOt3kvwxSujXvZMApkictc/QGz3bV3c/ LYaK8hZ4/WEi+o+Q0O/vnJ7I5Q10zvgN9gBFY4W1qV3UQhL9PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4oEhIpX48SrrViib6gizxoVVryMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRm MmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2OTQ0ZGRhNGIvZmM4NjI3MTctYTY2NC0z MzY3LTg4Y2YtNWUwZWNhYWFkMTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDVkZjJlN2YtOGU4My00MzJhLThj MjctNTU0Njk0NGRkYTRiL2Q1ZGYyZTdmLThlODMtNDMyYS04YzI3LTU1NDY5NDRk ZGE0Yi5jcmwwHwYDVR0jBBgwFoAU901L3g55e/8+XSHXuRqpy68UFwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRmMmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2 OTQ0ZGRhNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz7/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6J5NzvKTW+YOTgPN6SMmWj70uSlXrcohlk682+1H0PtOeub3EzYlPY 9dVQ+PPOsoZLRhfBZgcapzEi9l66nXnoWcTW7L/XlGc68Xs+VrP/oaAQU8lU3OOX KxCBW+wK6WwXk9jCGFDObf6w4G9jZXv3l/c25EHnZwZk8o2qN39zfoZGFZlQ3XPY J8oa7f2uAUsB4A8kHwCKBoBUcH5fNfRTSEck3gB0IYWVSrkF1G7XvQzZhW42uwvb 2XtcKFE4ABuGXvBKfmflnbx+EsD/rceVhbcbY1FxqLc9Fut9KReXGxUDfCFfD9vI hmAKRg9Z2XPmkdRqOExKfMzpanAg6p0= -----END CERTIFICATE-----Generated at Sat Apr 12 11:34:04 2025 by rpki-client