$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/226257d4-f43f-3f67-b662-d0922b1e31e3.roa File: 226257d4-f43f-3f67-b662-d0922b1e31e3.roa (raw, json) Hash identifier: CzoOmSOn/rHf1ZFOV/6BKtMMkAzuRCjjP8s/SVkCdW8= Subject key identifier: F2:2C:ED:08:DA:DD:BF:59:B5:48:B3:C7:15:A9:38:B0:B8:4A:3A:67 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584961B99B7607261DD74F179BE4 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/226257d4-f43f-3f67-b662-d0922b1e31e3.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 397543 IP address blocks: 207.23.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:9b:76:07:26:1d:d7:4f:17:9b:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=aa1d93d1-ebd2-400a-8c7f-ab9b86254745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e9:4f:5e:57:32:70:a7:84:40:b2:90:cd:2d: 86:77:cc:4f:f1:89:5a:77:fa:d5:97:3d:25:13:5f: 9f:7b:86:2b:36:e6:c0:88:af:e9:83:bb:03:49:46: 8e:a9:45:ed:68:ae:a2:c7:83:a0:df:29:2e:f6:44: 1d:07:76:24:3a:c6:5c:09:f9:5f:b7:5e:f7:d8:d5: 82:80:03:77:a6:96:ae:b8:97:1f:aa:ab:df:ae:cc: 88:a2:55:9e:1c:3b:c3:84:b2:6a:8d:84:81:c7:4b: 64:d1:d0:12:4b:4f:cf:c1:d9:13:7d:fd:fc:bb:f4: b7:d1:22:64:86:1a:8b:07:52:00:f7:49:60:a4:d9: b9:c8:5e:be:14:d9:8c:04:24:38:0f:43:8a:68:50: bb:71:5c:a3:b1:20:95:f4:14:f0:f9:37:b8:60:25: 6d:cc:9e:64:9e:ed:2a:4b:0b:96:1b:c2:14:18:60: e2:d8:7b:fe:77:3d:2a:0b:3c:cb:90:00:c5:30:0a: 55:dc:f4:d0:43:1a:98:b9:3c:c0:32:c4:dc:56:35: 6d:5b:73:eb:bd:f2:23:f3:38:64:ca:d5:6b:75:69: d8:18:9d:22:1a:0c:7b:70:f1:8a:e7:aa:0a:d9:31: ef:8a:a6:44:02:18:07:97:25:a3:6c:59:15:81:07: 2b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:2C:ED:08:DA:DD:BF:59:B5:48:B3:C7:15:A9:38:B0:B8:4A:3A:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/226257d4-f43f-3f67-b662-d0922b1e31e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 207.23.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:44:3d:7a:fa:bc:36:44:6d:48:21:28:79:ef:66:48:be:b9: bb:01:3b:5b:64:f2:ae:81:06:f1:31:6f:2e:69:80:8e:f9:02: 5d:8c:e6:14:9d:92:a0:47:48:ab:ab:ce:1d:cb:b5:86:15:f6: 0a:17:0c:00:81:34:5b:f4:bc:ca:10:84:9b:a8:8d:89:4d:3d: 8a:c2:7c:78:6e:4e:9e:14:b1:3c:3e:0c:41:2a:b8:98:67:8e: 62:76:e8:df:75:b7:47:50:4d:ef:00:bf:94:37:21:33:c1:c5: be:e7:a5:1f:92:16:bb:3f:96:e0:c3:2b:5d:f1:80:bf:2c:7d: 3a:a6:f1:e0:f4:ed:9e:d7:12:8e:23:17:7c:a3:3e:4f:6a:68: 58:9c:22:fa:d8:55:b5:87:95:23:2a:46:c2:82:c6:64:29:77: 70:62:cc:83:41:a0:01:09:3e:c0:be:6c:14:44:68:e5:14:c7: ad:d4:0c:14:47:6e:83:bb:7e:73:6a:98:c5:2b:b6:af:a7:c5: c2:0c:b3:d8:d8:27:d3:1e:7a:59:c8:17:01:46:5a:56:9d:fe: 29:b2:17:89:81:a8:11:df:d1:24:cd:e3:0c:93:d7:05:61:a0: 9b:6b:f8:1c:89:5c:fd:e3:03:ae:33:7e:e9:29:13:65:2f:81: e2:b7:51:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuZt2ByYd108Xm+QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk YWExZDkzZDEtZWJkMi00MDBhLThjN2YtYWI5Yjg2MjU0NzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjulPXlcycKeEQLKQzS2Gd8xP8Ylad/rVlz0l E1+fe4YrNubAiK/pg7sDSUaOqUXtaK6ix4Og3yku9kQdB3YkOsZcCflft1732NWC gAN3ppauuJcfqqvfrsyIolWeHDvDhLJqjYSBx0tk0dASS0/PwdkTff38u/S30SJk hhqLB1IA90lgpNm5yF6+FNmMBCQ4D0OKaFC7cVyjsSCV9BTw+Te4YCVtzJ5knu0q SwuWG8IUGGDi2Hv+dz0qCzzLkADFMApV3PTQQxqYuTzAMsTcVjVtW3PrvfIj8zhk ytVrdWnYGJ0iGgx7cPGK56oK2THviqZEAhgHlyWjbFkVgQcrEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIs7Qja3b9ZtUizxxWpOLC4SjpnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvMjI2MjU3ZDQtZjQzZi0z ZjY3LWI2NjItZDA5MjJiMWUzMWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzxdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALREPXr6vDZEbUghKHnvZki+ubsBO1tk8q6BBvExby5pgI75Al2M5hSd kqBHSKurzh3LtYYV9goXDACBNFv0vMoQhJuojYlNPYrCfHhuTp4UsTw+DEEquJhn jmJ26N91t0dQTe8Av5Q3ITPBxb7npR+SFrs/luDDK13xgL8sfTqm8eD07Z7XEo4j F3yjPk9qaFicIvrYVbWHlSMqRsKCxmQpd3BizINBoAEJPsC+bBREaOUUx63UDBRH boO7fnNqmMUrtq+nxcIMs9jYJ9MeelnIFwFGWlad/imyF4mBqBHf0STN4wyT1wVh oJtr+ByJXP3jA64zfukpE2UvgeK3UbQ= -----END CERTIFICATE-----Generated at Mon Apr 28 05:55:35 2025 by rpki-client