$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/a9b294af-ddbd-365a-bb3f-75c215c307a2.roa File: a9b294af-ddbd-365a-bb3f-75c215c307a2.roa (raw, json) Hash identifier: GaTYq4asWHtj6P2rNJl0FZmYCCOYzBnmm1KCr8E+epM= Subject key identifier: BF:27:DF:21:8F:EF:2F:65:D2:03:88:6D:64:EB:2F:FD:48:58:80:95 Certificate issuer: /CN=c3a9f614-c620-42e4-acad-b328d6a97099 Certificate serial: 010D0C9F432858498CFF1F6D0CB0DC838CA7AD00 Authority key identifier: CC:33:C4:9B:48:E5:B4:6F:57:2F:B3:5D:B4:0F:D0:5C:B1:D2:61:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/a9b294af-ddbd-365a-bb3f-75c215c307a2.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 14618 IP address blocks: 207.188.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/c3a9f614-c620-42e4-acad-b328d6a97099.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/c3a9f614-c620-42e4-acad-b328d6a97099.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:1f:6d:0c:b0:dc:83:8c:a7:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3a9f614-c620-42e4-acad-b328d6a97099 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=55a63bc6-d7b9-4252-a265-1118742d68d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:bf:ee:78:20:21:43:ec:15:40:86:84:d0:57: 45:58:86:c8:7e:06:1f:fe:7d:51:40:5b:51:6a:a1: 0e:ed:50:90:2e:43:34:6b:97:4d:70:f9:6a:28:68: d2:aa:58:df:54:8c:fc:01:d6:e9:02:e8:92:40:55: 9f:79:71:98:a6:b1:75:65:04:7f:5a:d5:02:2f:59: 07:ae:31:c2:1e:a2:ff:d3:d7:e1:3a:8c:b1:c6:40: 53:69:07:ea:26:2e:77:e4:23:bc:02:e8:88:5e:13: 8e:11:1f:39:0a:56:17:ea:00:94:d2:f6:bc:7c:c6: 5e:0c:a5:c1:1d:6f:c7:28:ee:73:2c:cd:59:44:59: 8a:96:a1:76:d3:52:ad:b1:cc:c0:22:07:3a:d0:30: d0:55:d6:4c:df:63:f0:b0:8e:0c:25:0c:8f:bf:bf: e8:5e:4e:73:57:ef:3c:96:54:75:0a:29:15:36:d3: f1:c4:73:59:2e:fb:28:eb:31:2c:20:c0:10:8d:3d: e6:e5:30:d7:7f:fd:5d:4a:74:2a:c6:5e:ae:52:e3: 89:91:19:6e:3c:77:14:17:50:54:8d:83:9b:0f:e6: 7e:88:1e:ac:72:9a:1a:6a:87:34:a3:96:cb:33:52: ee:b1:36:ac:b3:45:34:69:7c:64:4f:8a:16:a3:cb: dd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:27:DF:21:8F:EF:2F:65:D2:03:88:6D:64:EB:2F:FD:48:58:80:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/a9b294af-ddbd-365a-bb3f-75c215c307a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/c3a9f614-c620-42e4-acad-b328d6a97099.crl X509v3 Authority Key Identifier: keyid:CC:33:C4:9B:48:E5:B4:6F:57:2F:B3:5D:B4:0F:D0:5C:B1:D2:61:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099.cer sbgp-ipAddrBlock: critical IPv4: 207.188.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:60:b2:3f:e4:eb:cf:7c:19:58:74:4f:ea:15:03:35:35:5c: f7:f6:7a:d3:39:8b:49:c7:a5:83:8f:03:39:c2:4e:b7:e0:c8: 5d:60:70:a1:06:6f:68:e4:88:b4:3d:12:3b:b2:40:40:f2:c1: 57:e1:ee:8e:2a:23:bd:b0:99:a4:87:36:c7:06:0e:cc:6d:e9: fe:32:d3:74:69:cd:16:30:e0:c2:ad:59:84:c5:1e:14:39:71: a6:07:46:05:52:e0:14:65:eb:c3:bf:ac:30:c8:66:0e:9b:fa: 07:d6:d0:c6:cc:a4:a4:bf:c1:be:7e:68:38:15:ce:c5:2e:f6: bc:eb:70:59:a9:cf:17:d4:bf:54:67:45:11:5c:4b:bd:a9:47: c0:f4:18:64:38:ed:5d:80:b8:d5:54:58:61:cd:75:39:ce:69: 27:30:de:6b:76:76:da:8f:29:64:88:da:ec:97:98:bc:b5:df: 4e:a8:ef:49:90:3d:3a:32:ff:5a:60:80:3f:11:e2:c0:f2:4c: 8a:14:23:6d:9a:d9:fb:a4:3a:4f:ae:00:8f:1b:e7:4b:b6:49: ee:48:85:9b:7c:7d:05:28:47:15:66:99:95:7a:b8:cc:f8:a3: ad:02:90:e9:25:1b:fc:df:c4:fe:d1:9d:aa:84:a9:10:1d:b6: 4f:13:6f:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/x9tDLDcg4ynrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNhOWY2MTQtYzYyMC00MmU0LWFjYWQtYjMyOGQ2YTk3 MDk5MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk NTVhNjNiYzYtZDdiOS00MjUyLWEyNjUtMTExODc0MmQ2OGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgb/ueCAhQ+wVQIaE0FdFWIbIfgYf/n1RQFtR aqEO7VCQLkM0a5dNcPlqKGjSqljfVIz8AdbpAuiSQFWfeXGYprF1ZQR/WtUCL1kH rjHCHqL/09fhOoyxxkBTaQfqJi535CO8AuiIXhOOER85ClYX6gCU0va8fMZeDKXB HW/HKO5zLM1ZRFmKlqF201KtsczAIgc60DDQVdZM32PwsI4MJQyPv7/oXk5zV+88 llR1CikVNtPxxHNZLvso6zEsIMAQjT3m5TDXf/1dSnQqxl6uUuOJkRluPHcUF1BU jYObD+Z+iB6scpoaaoc0o5bLM1LusTass0U0aXxkT4oWo8vdsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8n3yGP7y9l0gOIbWTrL/1IWICVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2E5 ZjYxNC1jNjIwLTQyZTQtYWNhZC1iMzI4ZDZhOTcwOTkvYTliMjk0YWYtZGRiZC0z NjVhLWJiM2YtNzVjMjE1YzMwN2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNhOWY2MTQtYzYyMC00MmU0LWFj YWQtYjMyOGQ2YTk3MDk5L2MzYTlmNjE0LWM2MjAtNDJlNC1hY2FkLWIzMjhkNmE5 NzA5OS5jcmwwHwYDVR0jBBgwFoAUzDPEm0jltG9XL7NdtA/QXLHSYUAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2E5ZjYxNC1jNjIwLTQyZTQtYWNhZC1iMzI4 ZDZhOTcwOTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz7wQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZgsj/k6898GVh0T+oVAzU1XPf2etM5i0nHpYOPAznCTrfgyF1gcKEG b2jkiLQ9EjuyQEDywVfh7o4qI72wmaSHNscGDsxt6f4y03RpzRYw4MKtWYTFHhQ5 caYHRgVS4BRl68O/rDDIZg6b+gfW0MbMpKS/wb5+aDgVzsUu9rzrcFmpzxfUv1Rn RRFcS72pR8D0GGQ47V2AuNVUWGHNdTnOaScw3mt2dtqPKWSI2uyXmLy1306o70mQ PToy/1pggD8R4sDyTIoUI22a2fukOk+uAI8b50u2Se5IhZt8fQUoRxVmmZV6uMz4 o60CkOklG/zfxP7RnaqEqRAdtk8Tbzg= -----END CERTIFICATE-----Generated at Sat Apr 26 13:30:32 2025 by rpki-client