$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aa000e23-1120-334a-ad1d-5bf8f562f368.roa File: aa000e23-1120-334a-ad1d-5bf8f562f368.roa (raw, json) Hash identifier: O87KN0hGCL6nKz84fL7UM9FYO0Zt/0hsCUgtJYVkPG8= Subject key identifier: AE:23:15:CD:BF:78:15:CB:47:0F:47:58:AD:07:41:E4:78:B6:AB:D3 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858498CFF09FDE401D4A086B47F80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aa000e23-1120-334a-ad1d-5bf8f562f368.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 21723 IP address blocks: 207.194.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:09:fd:e4:01:d4:a0:86:b4:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=4670b82a-b78b-400a-8727-dfafc6418171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ad:c1:a2:b6:2d:d2:f8:9c:3c:0c:fb:c6:ad: 95:84:55:8c:df:f4:f7:63:03:b2:1a:83:43:d1:9d: fb:75:d8:46:dd:a3:5d:71:2a:db:7a:0a:45:85:34: 16:af:b8:f1:e9:5a:32:95:a5:0f:89:b4:ef:59:81: a5:83:f9:b2:64:a3:1a:49:47:4b:1c:91:39:2c:47: f2:26:59:23:30:bf:6f:c4:6f:7f:26:17:48:0f:14: e0:aa:f2:70:ab:9c:4b:5d:c8:dc:c7:db:e4:b0:cb: 4a:92:69:d3:a6:98:b2:2a:16:e2:3c:f5:c7:d0:ce: 67:8d:a7:e1:96:7c:3b:34:4d:96:ee:45:e1:67:fe: 93:53:37:33:e3:f0:c5:dd:92:78:d6:7c:24:ad:aa: 32:ff:75:a8:38:f0:24:5e:71:77:74:d7:b6:3d:e9: 31:8a:04:18:c3:c5:b0:68:62:4d:e5:cc:f6:31:43: ce:3d:5e:af:3d:61:4d:ee:c9:9d:43:da:49:c6:fe: 94:8b:78:0a:0a:33:fe:33:20:90:1b:6b:e6:0e:17: 61:1d:a1:f1:c3:b9:4a:bc:c6:78:55:2d:7d:d3:01: 4f:e1:96:31:b2:c1:bf:2a:7e:cd:9d:f7:28:5c:27: 72:03:1d:82:a7:e2:72:9c:d9:ff:47:88:f4:0c:b8: a7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:23:15:CD:BF:78:15:CB:47:0F:47:58:AD:07:41:E4:78:B6:AB:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aa000e23-1120-334a-ad1d-5bf8f562f368.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.194.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:33:be:b7:83:6f:02:c5:ca:b5:78:8a:e7:e9:5a:8d:77:f2: 93:86:e9:9c:cf:2c:00:fd:ce:1d:6c:43:b9:e0:be:31:1b:0b: 2d:93:51:66:ff:66:de:b8:59:a9:1a:83:74:3d:89:76:95:e4: ff:1f:75:62:c8:e8:76:4d:15:41:4e:73:35:ff:18:eb:1a:5e: 78:a8:3e:57:19:e7:44:4e:2a:e8:02:34:76:20:88:3d:09:87: 77:13:de:46:28:df:81:9e:44:19:09:1b:e8:d2:dd:32:e9:5d: fb:a5:36:66:3d:3f:cc:8a:7c:8a:04:c5:03:ea:51:12:f8:1b: 92:40:37:e8:b6:69:29:c2:3d:81:02:af:a4:8d:ff:55:1d:31: fc:76:3d:e3:62:7c:0b:cc:06:35:37:d4:f1:ee:f3:42:51:5f: 79:f5:7a:25:0a:ab:3c:f1:3f:5d:ca:b9:6b:f8:36:a8:14:2c: 80:79:2c:c8:da:9b:07:7b:30:e2:e4:2a:17:7e:00:b0:7e:2f: c5:c7:61:6b:2f:11:5e:12:cf:bd:74:59:4a:f8:43:5c:39:54: e8:23:d0:03:1d:10:9c:5d:21:99:38:6e:e2:c8:7c:33:5e:9c: a9:fc:24:87:35:e9:05:75:50:43:9b:13:f7:44:e7:0b:29:0e: 46:9d:2c:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/wn95AHUoIa0f4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk NDY3MGI4MmEtYjc4Yi00MDBhLTg3MjctZGZhZmM2NDE4MTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK3BorYt0vicPAz7xq2VhFWM3/T3YwOyGoND 0Z37ddhG3aNdcSrbegpFhTQWr7jx6VoylaUPibTvWYGlg/myZKMaSUdLHJE5LEfy JlkjML9vxG9/JhdIDxTgqvJwq5xLXcjcx9vksMtKkmnTppiyKhbiPPXH0M5njafh lnw7NE2W7kXhZ/6TUzcz4/DF3ZJ41nwkraoy/3WoOPAkXnF3dNe2PekxigQYw8Ww aGJN5cz2MUPOPV6vPWFN7smdQ9pJxv6Ui3gKCjP+MyCQG2vmDhdhHaHxw7lKvMZ4 VS190wFP4ZYxssG/Kn7NnfcoXCdyAx2Cp+JynNn/R4j0DLinPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4jFc2/eBXLRw9HWK0HQeR4tqvTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYWEwMDBlMjMtMTEyMC0z MzRhLWFkMWQtNWJmOGY1NjJmMzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz8LIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQzvreDbwLFyrV4iufpWo138pOG6ZzPLAD9zh1sQ7ngvjEbCy2TUWb/ Zt64Wakag3Q9iXaV5P8fdWLI6HZNFUFOczX/GOsaXnioPlcZ50ROKugCNHYgiD0J h3cT3kYo34GeRBkJG+jS3TLpXfulNmY9P8yKfIoExQPqURL4G5JAN+i2aSnCPYEC r6SN/1UdMfx2PeNifAvMBjU31PHu80JRX3n1eiUKqzzxP13KuWv4NqgULIB5LMja mwd7MOLkKhd+ALB+L8XHYWsvEV4Sz710WUr4Q1w5VOgj0AMdEJxdIZk4buLIfDNe nKn8JIc16QV1UEObE/dE5wspDkadLAU= -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:45 2025 by rpki-client