$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/0d3a9201-b626-32e3-8ba2-32af8872019c.roa File: 0d3a9201-b626-32e3-8ba2-32af8872019c.roa (raw, json) Hash identifier: 7VgdIs+QiwxuZGTzHhcIyF5lcb4NF/fvmZ/n1D6gDT8= Subject key identifier: 44:9E:02:A6:32:C8:5E:CE:A4:9F:6E:AE:79:FD:3C:C7:57:DE:FD:F6 Certificate issuer: /CN=e407c8fd-b808-41d1-af5e-a88d2dd556f9 Certificate serial: 010D0C9F43285849912F27B7F98DEA6AE51067C0 Authority key identifier: 39:88:56:13:51:28:01:35:37:02:BA:15:76:26:0A:52:03:98:3E:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/0d3a9201-b626-32e3-8ba2-32af8872019c.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 396982 IP address blocks: 168.235.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/e407c8fd-b808-41d1-af5e-a88d2dd556f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/e407c8fd-b808-41d1-af5e-a88d2dd556f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:27:b7:f9:8d:ea:6a:e5:10:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e407c8fd-b808-41d1-af5e-a88d2dd556f9 Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=7c1450b8-d580-4b32-acd5-4b37ec2c46ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a5:6b:58:53:57:31:7f:46:ce:46:de:c4:29: 6c:9b:ed:52:15:2b:c0:ac:ba:ad:de:40:f4:62:35: 82:a4:fb:57:1f:02:9d:b9:e5:26:aa:49:59:8a:50: 94:1d:27:90:3b:95:08:6e:1e:81:a1:de:fc:2e:d2: d3:0f:da:fe:23:50:2b:09:03:4e:91:bf:fb:2c:4d: c8:6b:3c:10:43:e6:28:8b:63:cb:27:33:02:39:05: bd:c5:a5:1e:15:b0:9f:26:d0:e1:9f:16:3d:e9:31: 82:85:cf:a7:e4:16:15:94:73:2d:c4:35:e2:6a:2f: f4:4d:61:a5:3c:0b:60:12:b6:aa:e7:cb:0f:d4:03: 01:85:fb:b5:6c:14:62:cb:94:a6:ed:f8:4b:da:2b: 07:8c:a7:5d:9b:b4:b6:8f:c3:b3:58:6f:71:47:50: 52:39:ad:70:78:8c:da:09:9f:0f:06:39:31:3d:83: 98:00:39:cb:74:24:5c:14:e3:af:c6:96:49:67:32: a3:b9:a9:1e:c7:6c:00:a9:48:d2:0c:43:89:50:21: 4e:1d:ff:6c:35:b7:1b:d6:eb:ba:fe:61:91:e1:d2: 40:e4:e2:db:07:31:2a:4e:49:df:d5:3d:6c:45:b4: ba:6b:03:f7:a1:25:60:c3:4d:e7:00:5f:3a:8d:26: 94:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:9E:02:A6:32:C8:5E:CE:A4:9F:6E:AE:79:FD:3C:C7:57:DE:FD:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/0d3a9201-b626-32e3-8ba2-32af8872019c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/e407c8fd-b808-41d1-af5e-a88d2dd556f9.crl X509v3 Authority Key Identifier: keyid:39:88:56:13:51:28:01:35:37:02:BA:15:76:26:0A:52:03:98:3E:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer sbgp-ipAddrBlock: critical IPv4: 168.235.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:a2:82:22:fe:d9:f8:20:fb:75:dd:f2:2a:e3:f5:4b:6a:61: 07:c0:4c:73:20:95:15:69:fa:ff:7a:20:51:c7:0d:81:4e:f2: 4e:c3:4c:9f:3e:56:a6:0a:62:1d:39:84:15:58:e1:0d:d3:57: 7f:81:a9:7b:3b:77:77:22:05:cc:f0:76:22:52:ce:1e:1b:60: 2a:0d:c8:ee:ba:5b:21:33:be:ff:43:46:39:86:82:7b:b3:29: 30:cd:b5:39:4d:f6:50:55:23:f3:39:81:9d:15:35:74:f3:87: 78:a0:87:a9:22:87:a4:c6:a0:45:bc:21:57:10:6c:99:d3:9f: bd:e1:f5:66:e2:af:36:d7:be:81:20:78:a3:2e:d8:13:1e:0d: 79:fa:29:42:60:df:79:d9:a8:53:9e:b0:16:97:50:90:11:1e: 05:d9:80:49:e4:66:bd:8e:41:c6:05:e0:0a:ab:a2:3d:9e:b5: 24:b0:43:66:6f:38:f7:1a:f9:7e:01:ee:cd:85:df:4f:5c:d0: e8:03:53:cf:b2:c4:c4:8d:a1:1d:93:99:ef:6a:97:85:cd:b3: b6:76:e9:1a:19:5e:2d:2d:d8:58:05:45:ef:7a:9f:06:87:b6: 50:d6:a3:e7:03:67:e6:1e:45:01:8d:a0:be:4d:8c:a8:de:f3: b9:b6:f1:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRLye3+Y3qauUQZ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQwN2M4ZmQtYjgwOC00MWQxLWFmNWUtYTg4ZDJkZDU1 NmY5MB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk N2MxNDUwYjgtZDU4MC00YjMyLWFjZDUtNGIzN2VjMmM0NmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqVrWFNXMX9GzkbexClsm+1SFSvArLqt3kD0 YjWCpPtXHwKdueUmqklZilCUHSeQO5UIbh6Bod78LtLTD9r+I1ArCQNOkb/7LE3I azwQQ+Yoi2PLJzMCOQW9xaUeFbCfJtDhnxY96TGChc+n5BYVlHMtxDXiai/0TWGl PAtgEraq58sP1AMBhfu1bBRiy5Sm7fhL2isHjKddm7S2j8OzWG9xR1BSOa1weIza CZ8PBjkxPYOYADnLdCRcFOOvxpZJZzKjuakex2wAqUjSDEOJUCFOHf9sNbcb1uu6 /mGR4dJA5OLbBzEqTknf1T1sRbS6awP3oSVgw03nAF86jSaUcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESeAqYyyF7OpJ9urnn9PMdX3v32MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNDA3 YzhmZC1iODA4LTQxZDEtYWY1ZS1hODhkMmRkNTU2ZjkvMGQzYTkyMDEtYjYyNi0z MmUzLThiYTItMzJhZjg4NzIwMTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTQwN2M4ZmQtYjgwOC00MWQxLWFm NWUtYTg4ZDJkZDU1NmY5L2U0MDdjOGZkLWI4MDgtNDFkMS1hZjVlLWE4OGQyZGQ1 NTZmOS5jcmwwHwYDVR0jBBgwFoAUOYhWE1EoATU3AroVdiYKUgOYPgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNDA3YzhmZC1iODA4LTQxZDEtYWY1ZS1hODhk MmRkNTU2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKigiL+2fgg+3Xd8irj9UtqYQfATHMglRVp+v96IFHHDYFO8k7DTJ8+ VqYKYh05hBVY4Q3TV3+BqXs7d3ciBczwdiJSzh4bYCoNyO66WyEzvv9DRjmGgnuz KTDNtTlN9lBVI/M5gZ0VNXTzh3igh6kih6TGoEW8IVcQbJnTn73h9WbirzbXvoEg eKMu2BMeDXn6KUJg33nZqFOesBaXUJARHgXZgEnkZr2OQcYF4Aqroj2etSSwQ2Zv OPca+X4B7s2F309c0OgDU8+yxMSNoR2Tme9ql4XNs7Z26RoZXi0t2FgFRe96nwaH tlDWo+cDZ+YeRQGNoL5NjKje87m28ZY= -----END CERTIFICATE-----Generated at Sat Apr 26 14:53:25 2025 by rpki-client