$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/916afa76-935d-33a9-a3db-50f9d0e2771e.roa File: 916afa76-935d-33a9-a3db-50f9d0e2771e.roa (raw, json) Hash identifier: 0W5UT2H9JKxL2IpN8fefITyPsMYWsxtaUP4PeSptgF0= Subject key identifier: 60:56:8A:99:2B:F5:A6:BC:CF:44:E4:09:68:97:B5:DC:A0:43:86:CC Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F432858499AF4798A7EFA4DF6127AB140 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/916afa76-935d-33a9-a3db-50f9d0e2771e.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 3561 IP address blocks: 207.149.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:79:8a:7e:fa:4d:f6:12:7a:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=89fd6cdc-7759-494b-b9b4-d25a7c71283e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:58:84:79:6f:3f:a3:0b:83:43:39:36:8a:bd: ce:dd:34:1e:7b:34:81:ef:de:fa:60:85:14:92:ad: f0:f0:8d:2b:74:e2:41:fe:89:f1:88:1a:1f:7a:96: f8:ac:84:72:40:c7:02:42:d9:6d:96:77:9d:04:12: 2c:4b:80:8d:ac:6d:72:a3:b7:33:f4:4a:9e:e4:2c: b5:2c:05:b2:4f:cf:6b:80:17:f7:a8:f5:8b:c0:78: f3:4c:97:d5:df:f2:02:b5:ae:8b:bd:b8:a5:07:43: a2:46:f8:fc:7d:62:ca:5d:bf:0f:7b:ae:12:bb:da: a2:38:eb:e9:f6:3e:fc:56:3f:88:f8:d8:99:69:e2: 92:ff:71:2b:eb:ad:7e:a9:de:0a:bd:ee:ca:02:bf: 47:c5:9e:98:25:b1:2f:60:06:80:7d:e9:26:d0:eb: 94:57:e6:78:b8:a7:9d:4d:b0:18:85:23:02:8d:22: 7c:4c:7e:29:c3:a0:77:8d:45:b5:cb:1a:41:bb:02: 83:6e:cd:cc:e5:09:fa:20:75:57:34:d2:04:50:1a: 8f:84:a5:22:c5:40:2b:9b:eb:72:a9:28:47:07:0c: 6e:e8:ed:ed:b8:43:36:ee:c5:f1:b2:9a:00:17:50: 2f:8c:64:9e:7f:70:1d:c2:15:47:26:31:f7:36:4d: fc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:56:8A:99:2B:F5:A6:BC:CF:44:E4:09:68:97:B5:DC:A0:43:86:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/916afa76-935d-33a9-a3db-50f9d0e2771e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 207.149.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:2d:7d:ca:a0:a7:2e:1b:ce:5a:00:a0:6a:a3:ac:8c:fa:46: a5:ea:a9:80:7d:8d:af:16:71:ea:8c:9d:b8:0b:d5:fe:3f:c3: b7:9b:5e:3f:55:9b:07:9b:97:f6:65:d5:6a:c8:1c:0d:64:71: 71:8a:5f:be:5c:7c:db:1a:ff:a8:61:94:51:59:ea:ca:44:ac: 8c:55:d7:21:71:87:a4:ef:75:6d:ba:54:eb:df:dd:fb:a7:41: 4c:f7:ea:be:a1:09:bd:64:47:98:1a:82:33:b5:12:60:eb:5c: 2f:af:84:84:b9:ae:da:c9:4d:0b:fe:08:fa:13:6e:d4:d2:19: e3:df:b0:d4:24:e7:c5:fb:08:2c:b1:a8:c4:74:c1:9a:b3:1c: 7c:33:18:dd:a2:4c:b1:a2:94:60:ce:74:65:78:81:c7:5b:29: b8:5a:6d:e3:ba:bf:88:a4:5e:1f:ad:ad:71:cc:a1:a7:67:0c: a9:9c:80:0a:99:ef:51:88:23:6e:85:61:d7:94:b8:fd:a6:af: b4:12:ab:88:20:0c:25:48:68:c5:ff:7b:80:f3:ec:dc:47:1a: 07:a3:38:1a:0c:45:a1:82:8b:5b:50:89:ca:49:7d:74:42:b7: 8f:91:54:8d:fa:69:55:e4:29:85:09:5f:09:2e:d8:cb:b4:0f: b9:81:1e:e1 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEma9HmKfvpN9hJ6sUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ODlmZDZjZGMtNzc1OS00OTRiLWI5YjQtZDI1YTdjNzEyODNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFiEeW8/owuDQzk2ir3O3TQeezSB7976YIUU kq3w8I0rdOJB/onxiBofepb4rIRyQMcCQtltlnedBBIsS4CNrG1yo7cz9Eqe5Cy1 LAWyT89rgBf3qPWLwHjzTJfV3/ICta6LvbilB0OiRvj8fWLKXb8Pe64Su9qiOOvp 9j78Vj+I+NiZaeKS/3Er661+qd4Kve7KAr9HxZ6YJbEvYAaAfekm0OuUV+Z4uKed TbAYhSMCjSJ8TH4pw6B3jUW1yxpBuwKDbs3M5Qn6IHVXNNIEUBqPhKUixUArm+ty qShHBwxu6O3tuEM27sXxspoAF1AvjGSef3AdwhVHJjH3Nk382wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGBWipkr9aa8z0TkCWiXtdygQ4bMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvOTE2YWZhNzYtOTM1ZC0z M2E5LWEzZGItNTBmOWQwZTI3NzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAz5UwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAKC19yqCnLhvOWgCgaqOsjPpGpeqpgH2NrxZx6oyduAvV/j/Dt5teP1Wb B5uX9mXVasgcDWRxcYpfvlx82xr/qGGUUVnqykSsjFXXIXGHpO91bbpU69/d+6dB TPfqvqEJvWRHmBqCM7USYOtcL6+EhLmu2slNC/4I+hNu1NIZ49+w1CTnxfsILLGo xHTBmrMcfDMY3aJMsaKUYM50ZXiBx1spuFpt47q/iKReH62tccyhp2cMqZyACpnv UYgjboVh15S4/aavtBKriCAMJUhoxf97gPPs3EcaB6M4GgxFoYKLW1CJykl9dEK3 j5FUjfppVeQphQlfCS7Yy7QPuYEe4Q== -----END CERTIFICATE-----Generated at Sun Apr 27 08:36:17 2025 by rpki-client