$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/00088c77-4f49-355a-8e08-519168e1f1ef.roa File: 00088c77-4f49-355a-8e08-519168e1f1ef.roa (raw, json) Hash identifier: vhaHDZFpu6AgfUu544RieUs27L8rGOGh2um9uidzrus= Subject key identifier: 99:AF:48:59:48:95:2F:72:2B:D8:05:0D:E9:C3:3E:B5:49:4B:9B:63 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584981D44A91B113DF6EEEC28040 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/00088c77-4f49-355a-8e08-519168e1f1ef.roa Signing time: Sun 13 Apr 2025 01:00:44 +0000 ROA not before: Sun 13 Apr 2025 01:00:44 +0000 ROA not after: Sat 12 Jul 2025 01:00:44 +0000 asID: 22652 IP address blocks: 207.253.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:81:d4:4a:91:b1:13:df:6e:ee:c2:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Apr 13 01:00:44 2025 GMT Not After : Jul 12 01:00:44 2025 GMT Subject: CN=22627326-6b86-4836-ab2e-d5758439d4d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:65:71:e2:d7:32:ef:a7:96:67:ef:aa:27:45: df:f6:60:3b:59:65:de:48:eb:5d:00:10:ac:be:73: 1b:00:37:a8:bd:54:f0:da:9d:1e:80:9a:fc:a4:fa: 00:65:cd:55:9c:dc:48:3e:0e:09:27:fe:b0:03:d2: 00:c8:c8:2e:db:02:cf:5e:b5:2b:38:47:ee:e7:48: 34:eb:97:e4:9e:a1:b7:bc:df:a0:69:af:d7:42:e5: b8:96:7c:54:51:3b:7e:1a:2f:cc:71:d8:31:35:7e: b9:21:7b:70:75:01:d7:70:61:de:e1:3d:bd:2f:87: a9:07:74:87:4f:49:c2:16:c7:76:5e:68:72:49:67: 58:b6:fa:0c:94:11:91:c7:0e:2b:e3:b2:c0:d6:fd: 69:bd:99:95:c1:eb:83:85:9d:73:c4:0d:e6:ac:a9: 91:88:fa:de:1a:b9:1b:d8:cd:d2:ee:3e:76:74:2c: 29:a8:c3:00:10:16:e3:9d:b6:5e:f0:b3:ec:3c:b0: 4c:f7:6b:12:d1:46:2a:06:2c:24:2f:62:d7:74:28: b5:eb:12:13:b6:75:fe:7c:8f:b0:29:37:3f:a6:8d: a2:db:15:c0:66:59:6c:9f:e6:8b:24:ca:0a:e2:bd: 7e:8e:88:11:c0:3c:fb:8c:78:32:f6:27:ba:a7:bb: 70:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AF:48:59:48:95:2F:72:2B:D8:05:0D:E9:C3:3E:B5:49:4B:9B:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/00088c77-4f49-355a-8e08-519168e1f1ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 207.253.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:d1:34:4c:d8:61:8b:a2:67:dd:66:b0:33:aa:d3:9a:f7:5d: fb:bf:a7:74:9b:32:3f:37:97:5e:62:af:0b:a3:ef:cf:83:1e: 03:c4:60:be:d9:6b:07:a6:2a:66:46:3c:28:f4:d3:08:28:47: 33:e8:59:0e:5e:53:f7:83:6a:bc:ac:41:e5:ad:29:cf:3e:fd: 86:b9:b9:4d:65:d7:cc:8b:84:54:58:9b:8f:bb:e6:a4:3e:85: 00:09:92:d8:01:e8:9a:67:82:e8:69:09:81:41:6f:1a:a1:2a: f5:cb:fb:3b:98:73:57:8c:4e:b6:b0:4c:66:49:d8:bf:0c:c3: 42:06:15:aa:4f:eb:1d:27:0f:22:be:e8:0d:55:5f:55:3f:55: 75:e2:0b:a0:66:e8:2e:e5:6b:4a:de:cf:51:4c:47:7a:17:3f: ea:ee:b1:55:8b:96:31:03:8c:64:59:29:29:82:ee:8c:9f:0f: 33:fd:5d:71:df:5f:68:81:ff:8c:1c:0d:c5:43:38:2f:3e:82: e0:72:42:ff:d3:fb:c9:18:23:34:67:30:f5:05:97:f6:ff:84: 78:28:f8:79:37:75:4c:ad:c5:2a:d3:81:10:01:c1:b7:64:08: eb:6e:93:c9:7c:22:a9:4f:de:e0:91:71:80:0d:30:9a:a4:be: c1:7a:70:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmB1EqRsRPfbu7CgEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk MjI2MjczMjYtNmI4Ni00ODM2LWFiMmUtZDU3NTg0MzlkNGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WVx4tcy76eWZ++qJ0Xf9mA7WWXeSOtdABCs vnMbADeovVTw2p0egJr8pPoAZc1VnNxIPg4JJ/6wA9IAyMgu2wLPXrUrOEfu50g0 65fknqG3vN+gaa/XQuW4lnxUUTt+Gi/McdgxNX65IXtwdQHXcGHe4T29L4epB3SH T0nCFsd2XmhySWdYtvoMlBGRxw4r47LA1v1pvZmVweuDhZ1zxA3mrKmRiPreGrkb 2M3S7j52dCwpqMMAEBbjnbZe8LPsPLBM92sS0UYqBiwkL2LXdCi16xITtnX+fI+w KTc/po2i2xXAZllsn+aLJMoK4r1+jogRwDz7jHgy9ie6p7tw/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmvSFlIlS9yK9gFDenDPrVJS5tjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvMDAwODhjNzctNGY0OS0z NTVhLThlMDgtNTE5MTY4ZTFmMWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/0pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXRNEzYYYuiZ91msDOq05r3Xfu/p3SbMj83l15irwuj78+DHgPEYL7Z awemKmZGPCj00wgoRzPoWQ5eU/eDarysQeWtKc8+/Ya5uU1l18yLhFRYm4+75qQ+ hQAJktgB6JpnguhpCYFBbxqhKvXL+zuYc1eMTrawTGZJ2L8Mw0IGFapP6x0nDyK+ 6A1VX1U/VXXiC6Bm6C7la0rez1FMR3oXP+rusVWLljEDjGRZKSmC7oyfDzP9XXHf X2iB/4wcDcVDOC8+guByQv/T+8kYIzRnMPUFl/b/hHgo+Hk3dUytxSrTgRABwbdk COtuk8l8IqlP3uCRcYANMJqkvsF6cLM= -----END CERTIFICATE-----Generated at Wed Apr 30 09:03:48 2025 by rpki-client