$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/42abb8fe-6b4f-30e9-a73a-88d6247422fa.roa File: 42abb8fe-6b4f-30e9-a73a-88d6247422fa.roa (raw, json) Hash identifier: B4u5op1ewfQ8LZ28oFAEvOWxFcvzVS7gUlZdUYRpYAw= Subject key identifier: 0C:AB:D3:38:F7:31:12:81:AE:3A:9A:9F:79:1C:4B:1B:15:2A:2C:35 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F43285849780F0FD6489D4B1D5E980880 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/42abb8fe-6b4f-30e9-a73a-88d6247422fa.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 13536 IP address blocks: 207.136.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:0f:d6:48:9d:4b:1d:5e:98:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=278a33dd-bd50-4c35-a813-9dee52269bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:48:cb:0f:12:ec:c6:a8:c6:50:73:73:18:04: 5a:3d:ec:fa:04:a2:0c:b7:dc:d7:b3:b6:3a:85:34: 0d:ba:68:01:40:ff:e1:71:54:20:be:c5:09:9c:2b: 2c:43:36:af:59:79:87:d9:29:1e:3f:63:a2:c3:68: da:d1:34:af:ec:f6:84:0c:e6:cf:23:36:71:ac:75: b0:f8:f7:f3:dc:43:1b:df:06:23:f7:1e:c1:e0:1c: 7c:4a:88:9f:b3:49:bb:0e:7e:ba:2c:03:70:d8:e0: 00:09:bb:8d:9f:6e:24:d9:10:68:b4:b3:56:6c:71: 38:89:72:0e:eb:f2:d9:e8:fc:c9:8d:bf:a0:24:43: 65:79:14:e2:c4:9d:be:8b:78:66:4c:91:27:a4:16: 9b:19:2f:85:e7:40:e8:4c:3b:8e:07:13:6c:db:15: a4:82:6d:c6:a2:c1:77:58:8d:a2:f3:47:c4:c7:08: 3b:f3:ba:84:4a:f7:69:56:f8:27:70:40:d9:4c:25: b7:9c:7a:4c:54:f0:fe:c5:f5:0b:a9:48:9e:eb:ce: df:96:64:f0:43:88:14:a9:84:d5:23:79:43:a8:52: f8:29:8b:32:78:90:5a:99:d3:e0:b0:c8:81:c8:a9: e3:86:40:c2:bd:8a:00:fb:d5:a1:23:76:67:95:e4: cb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AB:D3:38:F7:31:12:81:AE:3A:9A:9F:79:1C:4B:1B:15:2A:2C:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/42abb8fe-6b4f-30e9-a73a-88d6247422fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 207.136.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:07:c3:f9:5a:b8:f8:75:81:36:cd:9a:fd:26:7f:cf:2a:72: 2b:e4:bc:32:89:28:53:fd:6e:1a:aa:63:e3:b1:9a:9e:ec:00: 03:37:7e:c9:94:66:2d:a5:db:89:40:bc:ff:83:4f:46:68:7a: 1e:35:89:74:2a:70:22:9b:83:19:5d:1d:6a:6d:50:27:b8:bc: 35:08:ea:3a:da:87:66:16:ca:70:83:fb:41:71:ef:83:00:05: ce:92:92:bb:be:35:1e:fc:b6:d3:66:2e:06:f0:b7:8b:ab:53: 3a:f6:9c:c4:d8:eb:0d:74:1e:03:c4:9f:76:2b:8b:29:3e:1c: 11:50:31:f5:5f:71:d6:6a:0b:65:27:02:11:65:44:2f:22:c3: e5:d7:ee:f9:5b:08:66:36:36:0d:d0:d5:65:f8:dd:3f:5d:e2: 27:82:f5:1e:a3:94:9c:cb:66:31:a9:6c:5b:b4:82:a0:74:52: 02:a3:10:8e:19:ed:b1:ac:6d:7b:ea:3b:ef:5b:17:fd:c7:3c: 66:8d:1b:46:c0:41:08:96:d8:49:f8:cd:f2:81:4c:fb:71:72: f9:47:7a:19:6f:10:f8:62:d8:7d:1b:78:5f:70:35:d6:8d:20: 5f:56:ae:5d:1a:bb:f3:ae:6c:13:32:ea:01:d4:b5:2d:f3:d2: 30:63:49:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl4Dw/WSJ1LHV6YCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk Mjc4YTMzZGQtYmQ1MC00YzM1LWE4MTMtOWRlZTUyMjY5YmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkjLDxLsxqjGUHNzGARaPez6BKIMt9zXs7Y6 hTQNumgBQP/hcVQgvsUJnCssQzavWXmH2SkeP2Oiw2ja0TSv7PaEDObPIzZxrHWw +Pfz3EMb3wYj9x7B4Bx8Soifs0m7Dn66LANw2OAACbuNn24k2RBotLNWbHE4iXIO 6/LZ6PzJjb+gJENleRTixJ2+i3hmTJEnpBabGS+F50DoTDuOBxNs2xWkgm3GosF3 WI2i80fExwg787qESvdpVvgncEDZTCW3nHpMVPD+xfULqUie687flmTwQ4gUqYTV I3lDqFL4KYsyeJBamdPgsMiByKnjhkDCvYoA+9WhI3ZnleTLxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyr0zj3MRKBrjqan3kcSxsVKiw1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvNDJhYmI4ZmUtNmI0Zi0z MGU5LWE3M2EtODhkNjI0NzQyMmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz4j6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoHw/lauPh1gTbNmv0mf88qcivkvDKJKFP9bhqqY+Oxmp7sAAM3fsmU Zi2l24lAvP+DT0Zoeh41iXQqcCKbgxldHWptUCe4vDUI6jrah2YWynCD+0Fx74MA Bc6Skru+NR78ttNmLgbwt4urUzr2nMTY6w10HgPEn3Yriyk+HBFQMfVfcdZqC2Un AhFlRC8iw+XX7vlbCGY2Ng3Q1WX43T9d4ieC9R6jlJzLZjGpbFu0gqB0UgKjEI4Z 7bGsbXvqO+9bF/3HPGaNG0bAQQiW2En4zfKBTPtxcvlHehlvEPhi2H0beF9wNdaN IF9Wrl0au/OubBMy6gHUtS3z0jBjSTU= -----END CERTIFICATE-----Generated at Tue Apr 29 01:00:38 2025 by rpki-client