$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/9b4c5b67-82da-3608-bf8e-90d6e84e0d74.roa File: 9b4c5b67-82da-3608-bf8e-90d6e84e0d74.roa (raw, json) Hash identifier: pF0n+7McjSxwEU9+j+fZXyufdBZW97qrHSp+RLNr0TY= Subject key identifier: 8F:7F:C1:CE:1B:CE:FD:CC:4A:60:B7:1A:7F:8B:8D:FB:D0:B8:5A:CE Certificate issuer: /CN=51dcdcba-3766-4509-a479-bbf02514719f Certificate serial: 010D0C9F4328584949FE8A02417946D84E3783D4 Authority key identifier: ED:B9:EC:F3:1C:12:4D:68:7A:77:73:BA:F0:21:76:8D:E7:2D:F2:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/9b4c5b67-82da-3608-bf8e-90d6e84e0d74.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 62164 IP address blocks: 207.90.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/51dcdcba-3766-4509-a479-bbf02514719f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/51dcdcba-3766-4509-a479-bbf02514719f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:8a:02:41:79:46:d8:4e:37:83:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51dcdcba-3766-4509-a479-bbf02514719f Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=bfde9835-2b92-4139-8e31-d4fc32f17607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:08:07:4a:4d:93:5b:c4:65:8f:c0:22:d5:c0: 5b:f1:e4:02:81:af:92:23:40:cd:78:f8:0a:2b:3a: d6:66:16:3c:f9:94:18:ce:9c:87:b7:4f:45:20:47: 19:c6:b5:33:06:13:31:ea:57:22:47:00:31:82:7e: 12:b7:4a:f7:0f:f8:55:60:a6:35:e4:c4:84:c9:fd: 20:fd:38:97:d4:0e:ce:43:f2:7b:fc:75:ae:2f:4f: c3:dc:21:b0:62:eb:7c:70:62:50:9f:8e:61:8e:a1: c0:ce:91:92:4b:8b:6d:e1:55:73:b0:4a:52:5e:69: fc:11:26:5c:e9:94:ce:f0:49:a7:cd:7f:94:f1:88: f7:d3:d8:d3:89:ba:22:02:15:2d:09:8a:c9:66:fd: 0e:7e:29:2d:56:66:ad:6e:32:4d:71:8f:a5:65:a7: 9c:87:45:ee:59:b7:bd:00:a5:4d:00:72:81:1e:d1: e3:6d:2c:a1:40:ce:d1:f7:8f:9b:47:74:a2:41:31: 4a:fc:5d:ca:ac:37:2c:14:69:8d:c2:f5:fd:53:8d: fe:63:03:52:ea:4d:a1:df:54:1e:24:ea:a3:23:29: 40:55:32:e4:f9:92:d8:c0:b2:ce:91:d3:93:74:05: 25:62:16:84:fb:b7:65:bc:da:8a:7b:f8:aa:98:3d: 0f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:7F:C1:CE:1B:CE:FD:CC:4A:60:B7:1A:7F:8B:8D:FB:D0:B8:5A:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/9b4c5b67-82da-3608-bf8e-90d6e84e0d74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/51dcdcba-3766-4509-a479-bbf02514719f.crl X509v3 Authority Key Identifier: keyid:ED:B9:EC:F3:1C:12:4D:68:7A:77:73:BA:F0:21:76:8D:E7:2D:F2:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f.cer sbgp-ipAddrBlock: critical IPv4: 207.90.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:c9:09:4c:24:47:b1:f5:a4:d6:cc:d9:dd:6b:33:9f:d2:0b: 01:eb:fa:d2:08:00:04:58:53:39:f9:f3:a7:d6:9b:5d:39:58: 6d:11:e0:74:31:88:fd:ac:f6:cb:94:41:0d:ce:6c:d7:2d:25: 72:48:9b:81:37:27:8e:07:3d:1f:00:a3:59:9c:8f:20:be:52: 52:94:53:1f:ad:3f:04:6b:d4:59:74:8c:6c:53:29:f0:a1:5e: 94:db:75:68:0f:c4:c6:c0:de:da:8f:b9:24:a4:2f:fb:77:65: e5:0d:28:86:11:48:f8:29:71:77:a2:90:e0:d1:28:e7:95:d4: 9e:96:e9:05:d9:39:88:bc:0b:44:d7:f3:4c:dd:67:4e:25:08: c0:76:c7:72:91:a2:4e:d5:dc:20:c0:4a:bf:fa:69:c3:27:f8: 9c:40:ee:50:58:53:04:44:cd:d2:8d:83:16:2c:88:5e:b5:db: d7:8a:ba:92:25:6a:b2:dc:f3:ca:cd:e2:e5:68:e1:23:86:52: 46:34:9e:54:d1:ea:94:1c:f0:23:cb:c5:70:66:0c:8b:bd:2c: 7f:54:14:4d:e1:39:7b:0c:ff:eb:39:a2:e9:6f:b1:c2:4b:e5: 2a:c9:22:c6:64:54:a2:7d:6d:89:6c:75:70:4a:42:fe:26:15: 67:fc:a7:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/ooCQXlG2E43g9QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTFkY2RjYmEtMzc2Ni00NTA5LWE0NzktYmJmMDI1MTQ3 MTlmMB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk YmZkZTk4MzUtMmI5Mi00MTM5LThlMzEtZDRmYzMyZjE3NjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQgHSk2TW8Rlj8Ai1cBb8eQCga+SI0DNePgK KzrWZhY8+ZQYzpyHt09FIEcZxrUzBhMx6lciRwAxgn4St0r3D/hVYKY15MSEyf0g /TiX1A7OQ/J7/HWuL0/D3CGwYut8cGJQn45hjqHAzpGSS4tt4VVzsEpSXmn8ESZc 6ZTO8EmnzX+U8Yj309jTiboiAhUtCYrJZv0OfiktVmatbjJNcY+lZaech0XuWbe9 AKVNAHKBHtHjbSyhQM7R94+bR3SiQTFK/F3KrDcsFGmNwvX9U43+YwNS6k2h31Qe JOqjIylAVTLk+ZLYwLLOkdOTdAUlYhaE+7dlvNqKe/iqmD0PswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9/wc4bzv3MSmC3Gn+LjfvQuFrOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWRj ZGNiYS0zNzY2LTQ1MDktYTQ3OS1iYmYwMjUxNDcxOWYvOWI0YzViNjctODJkYS0z NjA4LWJmOGUtOTBkNmU4NGUwZDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkY2RjYmEtMzc2Ni00NTA5LWE0 NzktYmJmMDI1MTQ3MTlmLzUxZGNkY2JhLTM3NjYtNDUwOS1hNDc5LWJiZjAyNTE0 NzE5Zi5jcmwwHwYDVR0jBBgwFoAU7bns8xwSTWh6d3O68CF2ject8m8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MWRjZGNiYS0zNzY2LTQ1MDktYTQ3OS1iYmYw MjUxNDcxOWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz1rNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTJCUwkR7H1pNbM2d1rM5/SCwHr+tIIAARYUzn586fWm105WG0R4HQx iP2s9suUQQ3ObNctJXJIm4E3J44HPR8Ao1mcjyC+UlKUUx+tPwRr1Fl0jGxTKfCh XpTbdWgPxMbA3tqPuSSkL/t3ZeUNKIYRSPgpcXeikODRKOeV1J6W6QXZOYi8C0TX 80zdZ04lCMB2x3KRok7V3CDASr/6acMn+JxA7lBYUwREzdKNgxYsiF6129eKupIl arLc88rN4uVo4SOGUkY0nlTR6pQc8CPLxXBmDIu9LH9UFE3hOXsM/+s5oulvscJL 5SrJIsZkVKJ9bYlsdXBKQv4mFWf8p4Y= -----END CERTIFICATE-----Generated at Wed Apr 30 04:52:43 2025 by rpki-client