$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/25199343-1161-33f9-b82e-3f54d559b4c4.roa File: 25199343-1161-33f9-b82e-3f54d559b4c4.roa (raw, json) Hash identifier: aZN8qzZRex3LxcUWNF8p9REnqtHeoQMFv81DYIfb324= Subject key identifier: 08:17:F0:31:0D:F6:4D:6D:6A:E1:32:8B:F4:61:53:C9:97:4A:9D:94 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584981D44AB7AA39B967FA89CD00 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/25199343-1161-33f9-b82e-3f54d559b4c4.roa Signing time: Sun 13 Apr 2025 01:00:44 +0000 ROA not before: Sun 13 Apr 2025 01:00:44 +0000 ROA not after: Sat 12 Jul 2025 01:00:44 +0000 asID: 22652 IP address blocks: 207.253.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:81:d4:4a:b7:aa:39:b9:67:fa:89:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Apr 13 01:00:44 2025 GMT Not After : Jul 12 01:00:44 2025 GMT Subject: CN=c9bf2b6f-ba59-4fa0-b084-7dd4f0932da8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b7:7d:32:28:d6:a0:b1:f2:40:ae:21:3c:fd: 74:3f:8c:b6:20:50:a0:f9:85:c9:c3:fa:de:e4:93: 76:6d:54:20:c1:9b:47:e5:e8:b0:8b:67:34:a0:b9: bd:ca:c2:e9:7d:53:ee:e7:52:b6:91:b8:0c:70:f6: 22:5f:f1:e5:b6:44:fc:12:5f:0f:05:69:17:25:ab: 2e:df:2a:3c:aa:9e:f2:e9:1b:ea:f5:37:af:05:02: 73:86:7c:71:a7:1f:4d:ff:35:ed:73:bd:39:51:67: f0:78:76:6a:fc:e0:01:b8:96:1c:c6:22:93:45:26: 66:1e:f7:a5:87:19:c4:af:c7:e5:96:1d:a9:54:6d: 01:08:7c:90:37:21:7e:19:6d:2a:96:9c:5e:d6:dc: 6e:e6:a6:f9:7b:09:e3:11:90:2f:60:9f:3c:2b:ca: 91:ea:2a:86:d8:e7:06:c2:ae:15:73:40:f9:72:64: 59:62:cc:30:21:4f:28:0e:89:35:26:69:49:d2:7c: 8f:c9:f2:47:cf:52:7d:9b:93:a6:b3:a9:07:49:cd: 29:30:3e:75:4c:23:c1:bf:09:e3:ff:6b:56:72:27: 0e:c3:b8:7d:ef:8d:19:a4:60:91:59:b4:68:ee:8d: a3:f2:93:8c:d1:80:7f:c8:c4:81:02:9f:32:a5:18: 68:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:17:F0:31:0D:F6:4D:6D:6A:E1:32:8B:F4:61:53:C9:97:4A:9D:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/25199343-1161-33f9-b82e-3f54d559b4c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 207.253.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:4b:b1:83:3a:f3:ea:a0:54:23:ec:0d:1c:5a:1d:4d:c9:f4: ad:da:76:05:01:d2:21:e5:23:20:37:27:d5:46:2e:67:6e:d9: 7a:68:8c:36:12:9a:00:60:f7:47:18:67:cf:db:eb:db:6d:b7: ba:74:2a:21:39:d0:a2:37:41:9d:d7:a6:b4:69:99:d2:28:c2: 4e:2d:60:8d:19:92:c3:c8:2f:c0:96:f5:0a:3e:89:b4:5a:7a: ad:9a:75:33:20:ee:d8:b1:ba:20:09:f7:7a:63:99:3e:ab:c5: eb:fb:e9:6b:3c:0d:32:f1:69:92:80:00:c3:00:e1:83:c9:18: f3:b9:db:cd:d0:93:ab:cc:17:f7:68:b3:41:6a:66:25:d3:10: 9c:75:ed:8f:48:39:80:4a:ed:d6:33:3d:f0:68:24:89:61:2a: 55:3f:34:b3:a3:20:c4:58:63:c1:a8:f0:62:8f:ea:78:e5:09: d8:bb:8b:66:55:02:39:e1:2e:4a:70:97:a3:8f:f1:2a:90:ab: 9e:61:11:e8:c2:f9:54:eb:b1:0f:c2:10:80:93:25:a9:79:de: 48:be:74:bf:37:c7:18:1d:2d:f7:57:4b:cc:bc:92:6b:8f:1b: 31:ae:ab:76:f2:69:13:3e:0f:67:73:06:0e:d0:da:52:68:17: e6:8d:de:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmB1Eq3qjm5Z/qJzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk YzliZjJiNmYtYmE1OS00ZmEwLWIwODQtN2RkNGYwOTMyZGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbd9MijWoLHyQK4hPP10P4y2IFCg+YXJw/re 5JN2bVQgwZtH5eiwi2c0oLm9ysLpfVPu51K2kbgMcPYiX/HltkT8El8PBWkXJasu 3yo8qp7y6Rvq9TevBQJzhnxxpx9N/zXtc705UWfweHZq/OABuJYcxiKTRSZmHvel hxnEr8fllh2pVG0BCHyQNyF+GW0qlpxe1txu5qb5ewnjEZAvYJ88K8qR6iqG2OcG wq4Vc0D5cmRZYswwIU8oDok1JmlJ0nyPyfJHz1J9m5Oms6kHSc0pMD51TCPBvwnj /2tWcicOw7h9740ZpGCRWbRo7o2j8pOM0YB/yMSBAp8ypRhouQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgX8DEN9k1tauEyi/RhU8mXSp2UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvMjUxOTkzNDMtMTE2MS0z M2Y5LWI4MmUtM2Y1NGQ1NTliNGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/1EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBLsYM68+qgVCPsDRxaHU3J9K3adgUB0iHlIyA3J9VGLmdu2XpojDYS mgBg90cYZ8/b69ttt7p0KiE50KI3QZ3XprRpmdIowk4tYI0ZksPIL8CW9Qo+ibRa eq2adTMg7tixuiAJ93pjmT6rxev76Ws8DTLxaZKAAMMA4YPJGPO5283Qk6vMF/do s0FqZiXTEJx17Y9IOYBK7dYzPfBoJIlhKlU/NLOjIMRYY8Go8GKP6njlCdi7i2ZV AjnhLkpwl6OP8SqQq55hEejC+VTrsQ/CEICTJal53ki+dL83xxgdLfdXS8y8kmuP GzGuq3byaRM+D2dzBg7Q2lJoF+aN3ng= -----END CERTIFICATE-----Generated at Thu May 1 11:10:05 2025 by rpki-client