$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/a7eb1b7a-38b5-351a-9820-21a52e05575a.roa File: a7eb1b7a-38b5-351a-9820-21a52e05575a.roa (raw, json) Hash identifier: 64RznNUj0NIJCU/AtfsB1HKHvIFajjpbgn6DuyB2sWg= Subject key identifier: 08:F1:19:33:97:9A:79:F2:4F:53:9F:4E:10:3A:AB:DB:8D:1F:93:44 Certificate issuer: /CN=c3a9f614-c620-42e4-acad-b328d6a97099 Certificate serial: 010D0C9F432858498CFF1F60903D7F33BAE53F40 Authority key identifier: CC:33:C4:9B:48:E5:B4:6F:57:2F:B3:5D:B4:0F:D0:5C:B1:D2:61:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/a7eb1b7a-38b5-351a-9820-21a52e05575a.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 16509 IP address blocks: 207.188.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/c3a9f614-c620-42e4-acad-b328d6a97099.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/c3a9f614-c620-42e4-acad-b328d6a97099.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:1f:60:90:3d:7f:33:ba:e5:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3a9f614-c620-42e4-acad-b328d6a97099 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=ac392393-8920-44f0-8205-425bfd762811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:20:bd:5b:7c:97:a4:56:db:70:b7:bb:b8:a5: ce:84:c0:0e:6e:78:7e:dc:3d:e1:c5:03:b0:9e:3b: b7:f3:15:eb:59:f4:92:97:55:dc:94:80:4b:c9:b6: 9f:53:16:f9:f4:b2:72:29:80:bd:cc:53:8e:3e:3f: ed:2e:41:cd:14:ae:6b:a2:4b:82:57:d7:85:ad:de: 75:76:e8:fc:d1:0c:53:8c:34:60:58:be:a0:37:a0: b1:5e:6b:2d:73:57:77:a8:09:f4:59:6c:68:58:20: 7e:a2:3b:d9:04:b0:7d:91:5c:6f:fc:28:ce:18:30: 29:91:1c:cd:fe:dd:54:bd:41:f2:c0:39:43:68:df: 44:ae:c4:dc:42:ba:43:33:04:ce:ec:8c:e6:eb:e8: be:2f:fe:2c:8c:d4:a5:f4:ac:0f:f5:12:2e:43:c1: 9e:9a:12:6c:c7:78:a1:99:3b:8e:69:19:15:32:8d: e1:94:02:98:b8:2a:77:20:aa:e7:8b:6c:c8:35:b5: 5a:e4:e0:79:5d:59:cf:c4:fc:1b:57:0b:e5:bb:55: 9b:4c:ff:8c:06:3a:33:fe:2d:32:ce:50:83:19:6b: cd:6b:af:cc:96:66:97:50:5d:62:97:a4:7c:11:f9: b5:d1:56:c6:9e:3d:b5:95:0c:12:19:8a:5b:2c:d8: 94:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F1:19:33:97:9A:79:F2:4F:53:9F:4E:10:3A:AB:DB:8D:1F:93:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/a7eb1b7a-38b5-351a-9820-21a52e05575a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/c3a9f614-c620-42e4-acad-b328d6a97099.crl X509v3 Authority Key Identifier: keyid:CC:33:C4:9B:48:E5:B4:6F:57:2F:B3:5D:B4:0F:D0:5C:B1:D2:61:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099.cer sbgp-ipAddrBlock: critical IPv4: 207.188.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:bf:0f:1f:cd:e4:ca:64:d7:1f:27:2e:88:35:cd:33:3d:70: 20:ab:b2:f2:73:70:46:1e:d1:89:be:76:e2:3b:f0:8e:8a:53: 5f:6c:4d:80:13:15:4b:f3:c7:1d:39:8d:c1:0e:bd:86:bb:7f: 0e:4d:2b:c3:41:91:0c:f7:27:8a:75:fb:0b:4a:a5:7c:f5:af: 7f:90:7d:82:09:4a:5b:a4:ee:62:f9:f4:2b:97:a6:f5:47:97: a2:63:90:af:a9:12:ba:69:4c:20:34:40:99:2d:dd:f8:79:c1: 81:95:7c:94:57:24:a6:a8:0c:9c:28:07:71:e3:cf:fe:42:db: 3f:a0:fa:4b:2e:4d:9e:74:03:48:ff:be:08:25:98:05:63:a2: 97:87:61:16:27:ca:19:03:80:6c:e3:1e:7b:6d:ac:e0:a4:49: ed:33:f8:e1:42:1e:44:bd:fb:64:ca:e5:7d:c3:c7:68:35:93: 5a:ef:17:53:a1:76:15:f6:4a:83:14:6c:e5:29:6e:a4:77:25: de:59:12:e8:b3:1e:07:c1:be:7c:06:77:98:da:29:3f:b4:06: cf:14:1d:1c:2e:d8:96:52:37:80:91:5e:2b:6a:ad:ed:77:bf: f8:04:5b:57:28:8e:df:cb:ec:32:59:be:ed:12:b9:11:02:1b: cc:56:a8:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/x9gkD1/M7rlP0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNhOWY2MTQtYzYyMC00MmU0LWFjYWQtYjMyOGQ2YTk3 MDk5MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk YWMzOTIzOTMtODkyMC00NGYwLTgyMDUtNDI1YmZkNzYyODExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCC9W3yXpFbbcLe7uKXOhMAObnh+3D3hxQOw nju38xXrWfSSl1XclIBLybafUxb59LJyKYC9zFOOPj/tLkHNFK5rokuCV9eFrd51 duj80QxTjDRgWL6gN6CxXmstc1d3qAn0WWxoWCB+ojvZBLB9kVxv/CjOGDApkRzN /t1UvUHywDlDaN9ErsTcQrpDMwTO7Izm6+i+L/4sjNSl9KwP9RIuQ8GemhJsx3ih mTuOaRkVMo3hlAKYuCp3IKrni2zINbVa5OB5XVnPxPwbVwvlu1WbTP+MBjoz/i0y zlCDGWvNa6/MlmaXUF1il6R8Efm10VbGnj21lQwSGYpbLNiUXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjxGTOXmnnyT1OfThA6q9uNH5NEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2E5 ZjYxNC1jNjIwLTQyZTQtYWNhZC1iMzI4ZDZhOTcwOTkvYTdlYjFiN2EtMzhiNS0z NTFhLTk4MjAtMjFhNTJlMDU1NzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNhOWY2MTQtYzYyMC00MmU0LWFj YWQtYjMyOGQ2YTk3MDk5L2MzYTlmNjE0LWM2MjAtNDJlNC1hY2FkLWIzMjhkNmE5 NzA5OS5jcmwwHwYDVR0jBBgwFoAUzDPEm0jltG9XL7NdtA/QXLHSYUAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2E5ZjYxNC1jNjIwLTQyZTQtYWNhZC1iMzI4 ZDZhOTcwOTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz7wQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJm/Dx/N5Mpk1x8nLog1zTM9cCCrsvJzcEYe0Ym+duI78I6KU19sTYAT FUvzxx05jcEOvYa7fw5NK8NBkQz3J4p1+wtKpXz1r3+QfYIJSluk7mL59CuXpvVH l6JjkK+pErppTCA0QJkt3fh5wYGVfJRXJKaoDJwoB3Hjz/5C2z+g+ksuTZ50A0j/ vgglmAVjopeHYRYnyhkDgGzjHnttrOCkSe0z+OFCHkS9+2TK5X3Dx2g1k1rvF1Oh dhX2SoMUbOUpbqR3Jd5ZEuizHgfBvnwGd5jaKT+0Bs8UHRwu2JZSN4CRXitqre13 v/gEW1cojt/L7DJZvu0SuRECG8xWqNg= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:48 2025 by rpki-client