$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/1a3867f1-c270-3c9c-a033-c26bb00a910e.roa File: 1a3867f1-c270-3c9c-a033-c26bb00a910e.roa (raw, json) Hash identifier: cjB0TcEwVxCNhYlOuIWedl20xH54tpJhhUYZaAOGlHo= Subject key identifier: CE:32:C2:86:57:9E:21:FB:BA:9A:EB:8C:8E:6A:5E:14:C0:FD:60:F9 Certificate issuer: /CN=590468a2-be81-410c-b887-a35157322fb1 Certificate serial: 010D0C9F43285849C0A4E32CCF59DD3D82A99500 Authority key identifier: CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/1a3867f1-c270-3c9c-a033-c26bb00a910e.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 393891 IP address blocks: 207.229.98.0/24 maxlen: 24 207.229.110.0/24 maxlen: 24 207.229.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:e3:2c:cf:59:dd:3d:82:a9:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590468a2-be81-410c-b887-a35157322fb1 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=13e7ee6a-f13e-4d0b-9d9c-53a2b6259acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:68:0d:d5:76:d7:85:63:a3:55:f3:f3:35:a7: 36:5e:ee:f0:bb:f6:31:6e:5a:e4:d4:f8:94:9f:f8: 1c:18:32:52:fa:81:2b:70:be:34:4c:db:8d:83:b4: fa:0e:6c:fe:f0:76:b1:8e:e3:c1:be:81:9c:80:0f: 85:8c:ec:9c:89:23:49:1d:e0:ad:bd:60:fa:f5:5c: e2:23:aa:5d:c0:10:64:cd:80:68:cc:73:74:41:f4: 75:5b:7a:e8:63:38:5e:1a:1b:0a:21:73:6f:04:26: 97:cc:29:2a:63:65:7d:43:68:97:a9:ca:14:74:0e: cd:49:32:9d:08:cd:7a:5e:14:3b:67:3e:a3:41:cd: 86:b1:f3:24:b9:b2:9e:68:52:be:cb:31:44:72:b6: cb:ab:33:ce:35:ff:74:7e:ae:e5:67:81:75:85:bd: ca:b4:0d:2e:4b:fa:b5:8f:53:6c:78:03:71:ea:56: 5d:bb:bf:32:24:44:d0:32:9b:9b:d0:bc:82:d7:f4: 97:ec:ca:ed:cd:36:5e:b0:ce:17:4e:f7:2d:b8:ba: ce:1b:cc:a9:b6:c4:ca:57:e0:fa:13:e2:c1:57:a4: f5:b0:33:1f:5b:db:a6:3f:ba:8a:0c:cc:da:6e:40: c4:44:a9:a2:d8:21:8b:08:f3:65:be:11:b7:1c:6c: bd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:32:C2:86:57:9E:21:FB:BA:9A:EB:8C:8E:6A:5E:14:C0:FD:60:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/1a3867f1-c270-3c9c-a033-c26bb00a910e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl X509v3 Authority Key Identifier: keyid:CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer sbgp-ipAddrBlock: critical IPv4: 207.229.98.0/24 207.229.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:06:09:6f:7b:f6:4d:d0:d3:b3:c9:5f:89:1e:e3:fc:87:58: e5:c3:44:9c:f2:5f:9a:58:19:97:e7:77:11:23:f3:89:bf:dd: d9:1a:b9:b7:5b:25:38:21:b1:53:54:e2:b2:48:98:fd:70:4e: a8:a2:90:6a:2f:79:ec:5d:41:91:d8:ca:09:4a:14:41:82:9b: 2f:c0:e3:aa:11:b0:dd:6e:60:06:cd:3d:49:5e:c6:5b:70:08: 23:3e:0c:05:00:fe:30:93:c1:b8:6a:04:d4:30:3f:b2:21:d5: f2:22:94:fb:8b:94:29:a4:70:5f:9e:af:73:b8:bd:e4:c5:1e: aa:f3:d1:65:66:f7:e9:35:06:1b:58:87:1e:1a:9a:e3:65:b8: 72:48:e6:be:a3:16:3f:bd:1e:96:70:9d:3d:a6:48:6a:69:39: 49:0c:88:57:73:c7:97:4b:82:0d:4d:50:4e:21:fa:97:22:8c: bd:99:41:b0:c0:5a:00:18:17:f1:d2:b3:17:21:90:1d:73:a8: a9:de:16:15:d8:94:85:36:14:4f:9d:e9:56:7c:d8:ba:79:84: 55:02:08:ef:be:a2:30:9e:42:bf:04:4a:f3:f4:b4:11:b8:1d: 14:b3:84:7c:8a:a3:96:f7:a7:94:c1:c9:49:42:ac:95:20:87: b9:0e:6e:1c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnApOMsz1ndPYKplQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkwNDY4YTItYmU4MS00MTBjLWI4ODctYTM1MTU3MzIy ZmIxMB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk MTNlN2VlNmEtZjEzZS00ZDBiLTlkOWMtNTNhMmI2MjU5YWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWgN1XbXhWOjVfPzNac2Xu7wu/Yxblrk1PiU n/gcGDJS+oErcL40TNuNg7T6Dmz+8HaxjuPBvoGcgA+FjOyciSNJHeCtvWD69Vzi I6pdwBBkzYBozHN0QfR1W3roYzheGhsKIXNvBCaXzCkqY2V9Q2iXqcoUdA7NSTKd CM16XhQ7Zz6jQc2GsfMkubKeaFK+yzFEcrbLqzPONf90fq7lZ4F1hb3KtA0uS/q1 j1NseANx6lZdu78yJETQMpub0LyC1/SX7MrtzTZesM4XTvctuLrOG8yptsTKV+D6 E+LBV6T1sDMfW9umP7qKDMzabkDERKmi2CGLCPNlvhG3HGy91wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFM4ywoZXniH7uprrjI5qXhTA/WD5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTA0 NjhhMi1iZTgxLTQxMGMtYjg4Ny1hMzUxNTczMjJmYjEvMWEzODY3ZjEtYzI3MC0z YzljLWEwMzMtYzI2YmIwMGE5MTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTkwNDY4YTItYmU4MS00MTBjLWI4 ODctYTM1MTU3MzIyZmIxLzU5MDQ2OGEyLWJlODEtNDEwYy1iODg3LWEzNTE1NzMy MmZiMS5jcmwwHwYDVR0jBBgwFoAUz9+cv10n/WlBCOCkwLzC2qnoDokwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTA0NjhhMi1iZTgxLTQxMGMtYjg4Ny1hMzUx NTczMjJmYjEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAz+ViAwQB z+VuMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBALsGCW979k3Q07PJX4ke4/yHWOXDRJzyX5pYGZfndxEj84m/ 3dkaubdbJTghsVNU4rJImP1wTqiikGoveexdQZHYyglKFEGCmy/A46oRsN1uYAbN PUlexltwCCM+DAUA/jCTwbhqBNQwP7Ih1fIilPuLlCmkcF+er3O4veTFHqrz0WVm 9+k1BhtYhx4amuNluHJI5r6jFj+9HpZwnT2mSGppOUkMiFdzx5dLgg1NUE4h+pci jL2ZQbDAWgAYF/HSsxchkB1zqKneFhXYlIU2FE+d6VZ82Lp5hFUCCO++ojCeQr8E SvP0tBG4HRSzhHyKo5b3p5TByUlCrJUgh7kObhw= -----END CERTIFICATE-----Generated at Wed Jun 18 15:47:27 2025 by rpki-client