$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7aca890-2adc-3203-a3d0-ebbfbdd2790b.roa File: c7aca890-2adc-3203-a3d0-ebbfbdd2790b.roa (raw, json) Hash identifier: pZJWcldVKmQQOeI/NtQSgvd9a7Spcth8TRc7hRoaWRI= Subject key identifier: 6D:EB:43:D8:48:C9:E8:50:55:5C:07:EB:6A:9A:AC:50:D4:13:89:3F Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285849912F29FC906172EA52585600 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7aca890-2adc-3203-a3d0-ebbfbdd2790b.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 7861 IP address blocks: 207.167.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:29:fc:90:61:72:ea:52:58:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=10748111-81c4-417a-abae-4d9f60bdba77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e2:14:40:8e:5a:44:a6:d8:6f:c9:fd:71:4d: 64:67:c6:ff:c5:80:20:9d:38:0f:eb:91:43:bf:0a: 60:4d:93:5f:ce:a8:72:e7:74:b8:83:75:f1:5f:f6: 90:f9:69:77:a8:ab:72:25:df:0a:fd:7e:e0:1f:1d: a9:67:53:f0:82:25:d1:65:2e:52:e3:8d:14:02:d0: d5:fe:27:ce:e0:d6:b2:1f:f3:e4:97:2d:f4:5f:37: 87:60:49:16:44:64:84:03:69:ff:7b:0f:56:a3:f3: dc:db:34:a9:bd:03:52:b7:c5:45:f2:1d:5f:29:16: b1:22:df:f8:d3:18:8c:f6:6d:cf:95:08:35:13:00: 4b:a1:98:f2:59:6a:52:08:10:1b:91:89:21:0a:0a: e5:6a:c6:14:48:82:4b:ce:ca:41:fc:94:be:14:12: 34:da:8e:ca:cf:1f:56:71:60:33:ac:43:cc:2b:14: 26:ed:06:f9:4f:ea:63:6c:21:f1:fc:29:79:9a:3b: b2:88:6f:86:2b:b3:c3:18:b1:7a:c5:eb:82:01:38: a8:dc:fa:36:33:1b:ce:3a:9b:07:91:ed:ae:7e:32: 10:94:f6:a5:50:e8:0b:2b:ee:54:28:78:e2:1e:1d: bc:03:6c:67:96:ed:bd:cd:5d:d7:76:99:eb:62:8a: 8b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:EB:43:D8:48:C9:E8:50:55:5C:07:EB:6A:9A:AC:50:D4:13:89:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7aca890-2adc-3203-a3d0-ebbfbdd2790b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.167.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:b5:f8:83:ca:ee:81:22:62:14:a6:bf:ef:25:86:7d:0d:66: 60:8e:e2:6d:97:7d:6a:29:58:b2:de:79:e1:09:dd:16:1f:ec: c6:ed:1f:71:57:83:17:77:e5:b3:cf:03:f4:93:ac:63:0e:6f: b7:f1:8d:af:41:ca:a8:0c:94:20:9a:ea:d0:68:4c:70:d4:5e: 37:6d:c7:85:c4:27:de:7a:b7:cd:a6:f3:41:05:5a:45:6c:ec: 2d:de:5c:a2:2f:2c:25:f0:34:b3:57:13:44:ad:b7:d3:b1:70: 66:1a:16:3e:15:d8:8f:23:86:d7:e5:d0:2e:a3:8b:81:99:27: 4b:31:50:f8:9d:35:c2:b4:97:3b:ef:d9:88:31:47:bb:e0:f2: e2:df:e3:7a:ce:95:15:a3:de:45:5a:6d:50:8d:74:6b:36:09: e4:11:94:85:af:41:9c:aa:0b:2c:c3:82:9a:3e:27:84:78:23: 37:77:78:78:a9:9b:54:70:47:ca:96:0d:d5:e7:fa:34:77:1c: 46:79:e5:c5:93:a0:a2:57:fa:ab:bb:eb:df:aa:4f:85:87:6c: a1:41:46:27:09:a1:25:eb:1a:3d:b7:ac:c4:6d:33:75:c5:4e: 24:6e:e2:44:f8:00:90:e2:f2:fe:a6:e0:61:0a:e1:30:d1:ba: 83:f8:bd:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRLyn8kGFy6lJYVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk MTA3NDgxMTEtODFjNC00MTdhLWFiYWUtNGQ5ZjYwYmRiYTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+IUQI5aRKbYb8n9cU1kZ8b/xYAgnTgP65FD vwpgTZNfzqhy53S4g3XxX/aQ+Wl3qKtyJd8K/X7gHx2pZ1PwgiXRZS5S440UAtDV /ifO4NayH/Pkly30XzeHYEkWRGSEA2n/ew9Wo/Pc2zSpvQNSt8VF8h1fKRaxIt/4 0xiM9m3PlQg1EwBLoZjyWWpSCBAbkYkhCgrlasYUSIJLzspB/JS+FBI02o7Kzx9W cWAzrEPMKxQm7Qb5T+pjbCHx/Cl5mjuyiG+GK7PDGLF6xeuCATio3Po2MxvOOpsH ke2ufjIQlPalUOgLK+5UKHjiHh28A2xnlu29zV3XdpnrYoqLfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3rQ9hIyehQVVwH62qarFDUE4k/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYzdhY2E4OTAtMmFkYy0z MjAzLWEzZDAtZWJiZmJkZDI3OTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6foMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKO1+IPK7oEiYhSmv+8lhn0NZmCO4m2XfWopWLLeeeEJ3RYf7MbtH3FX gxd35bPPA/STrGMOb7fxja9ByqgMlCCa6tBoTHDUXjdtx4XEJ956t82m80EFWkVs 7C3eXKIvLCXwNLNXE0Stt9OxcGYaFj4V2I8jhtfl0C6ji4GZJ0sxUPidNcK0lzvv 2YgxR7vg8uLf43rOlRWj3kVabVCNdGs2CeQRlIWvQZyqCyzDgpo+J4R4Izd3eHip m1RwR8qWDdXn+jR3HEZ55cWToKJX+qu769+qT4WHbKFBRicJoSXrGj23rMRtM3XF TiRu4kT4AJDi8v6m4GEK4TDRuoP4vfI= -----END CERTIFICATE-----Generated at Sun Apr 27 13:12:39 2025 by rpki-client