$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a525a569-13be-3f73-852c-988f930cc537.roa File: a525a569-13be-3f73-852c-988f930cc537.roa (raw, json) Hash identifier: ZK0Im1G/7ZHTPD2MVyvKXhGWqfb1Od5eObGk/kPu7C0= Subject key identifier: 57:74:EF:83:A8:01:B6:2D:41:AA:6E:BF:FD:D7:7E:92:F8:D5:8A:99 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F43285849ED4FD11654216A29E24A1480 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a525a569-13be-3f73-852c-988f930cc537.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 271 IP address blocks: 207.23.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:d1:16:54:21:6a:29:e2:4a:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=aebe1662-f08f-4568-b37a-7be9ce24aa71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2a:80:27:91:5d:53:bc:5d:a4:bc:35:f8:93: 6f:1f:06:9d:ac:0d:28:f5:b9:b4:56:7a:a4:3f:06: cc:fa:50:7a:90:df:7d:6e:aa:f4:3b:4e:78:5b:e3: 03:dc:c4:3a:14:05:70:f4:eb:e2:e1:6d:fc:a6:59: f2:91:4a:4a:93:c6:a6:f0:06:e5:f3:0a:8d:32:52: e9:9f:8c:86:37:a8:80:c6:02:bc:23:1d:d0:90:33: 03:43:f4:67:e0:8c:e2:a7:ff:da:23:61:8e:4e:9a: 53:2a:3c:25:9c:da:f5:8d:16:d7:d1:d3:b8:b4:c9: 21:5c:88:f6:7e:c3:91:12:9e:33:1e:4b:7a:5d:f2: ce:9c:14:a2:18:60:15:3a:88:8d:a7:58:75:3b:36: a4:dd:9d:5f:ec:99:00:00:0e:94:5a:3a:4e:a6:fb: ce:41:f1:20:17:6e:ef:04:55:44:a7:94:0c:45:2c: 7f:18:68:8e:c0:84:77:66:73:95:c1:18:83:f4:6e: 6e:1a:5f:94:9d:89:96:0a:53:58:80:9f:3f:5e:44: 7e:e6:84:3b:92:0b:1e:95:48:68:a3:d0:f7:b4:d9: 19:ab:89:4a:90:50:5c:1f:5a:86:60:39:7d:0b:db: 6c:8b:6a:cb:64:7e:26:22:36:6d:5b:7a:7e:dd:d7: 63:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:74:EF:83:A8:01:B6:2D:41:AA:6E:BF:FD:D7:7E:92:F8:D5:8A:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a525a569-13be-3f73-852c-988f930cc537.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 207.23.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:17:ba:fb:65:8c:c5:72:98:72:41:9f:27:06:9c:42:4a:a6: 46:a6:6b:b4:16:fa:16:bd:d9:72:ce:56:4c:61:d1:e8:2e:7a: e5:ab:0b:e3:01:0b:5f:53:d9:78:2e:07:9c:3d:50:b6:f6:87: 8d:d6:b5:9f:83:2c:15:5f:fd:33:16:38:8c:4b:04:59:23:05: b7:3f:0b:be:8a:a0:43:e7:3c:67:b6:21:b8:3f:e5:05:82:2b: e1:e5:89:dc:c7:5e:c7:f1:32:d4:c6:80:ea:d0:2a:c1:7e:68: f2:da:ce:12:d4:65:c1:21:48:d6:d4:59:7d:56:3a:b6:fd:76: 92:f8:dd:66:82:1c:bf:c2:65:87:66:aa:d2:41:37:38:81:3e: dd:dd:bb:91:00:f4:c3:17:69:29:05:50:be:27:08:80:9a:c6: ab:0b:4e:e9:60:ba:b7:ca:54:9b:5a:20:ff:1f:e8:52:06:de: 0b:07:72:01:fc:93:29:f9:e8:dc:f9:c6:d0:46:79:c7:5d:7d: 15:a7:00:54:cf:14:db:fd:51:fc:33:69:42:c2:a3:40:67:ed: d9:19:72:7e:73:08:72:fe:f9:5d:74:5d:b9:2b:01:b4:ef:65: da:6d:72:d7:bf:1c:77:ba:73:42:46:35:80:0e:a9:32:08:a7: a1:ac:51:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT9EWVCFqKeJKFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk YWViZTE2NjItZjA4Zi00NTY4LWIzN2EtN2JlOWNlMjRhYTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyqAJ5FdU7xdpLw1+JNvHwadrA0o9bm0Vnqk PwbM+lB6kN99bqr0O054W+MD3MQ6FAVw9Ovi4W38plnykUpKk8am8Abl8wqNMlLp n4yGN6iAxgK8Ix3QkDMDQ/Rn4Izip//aI2GOTppTKjwlnNr1jRbX0dO4tMkhXIj2 fsOREp4zHkt6XfLOnBSiGGAVOoiNp1h1Ozak3Z1f7JkAAA6UWjpOpvvOQfEgF27v BFVEp5QMRSx/GGiOwIR3ZnOVwRiD9G5uGl+UnYmWClNYgJ8/XkR+5oQ7kgselUho o9D3tNkZq4lKkFBcH1qGYDl9C9tsi2rLZH4mIjZtW3p+3ddjVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFd074OoAbYtQapuv/3XfpL41YqZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvYTUyNWE1NjktMTNiZS0z ZjczLTg1MmMtOTg4ZjkzMGNjNTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzxf0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALEXuvtljMVymHJBnycGnEJKpkama7QW+ha92XLOVkxh0egueuWrC+MB C19T2XguB5w9ULb2h43WtZ+DLBVf/TMWOIxLBFkjBbc/C76KoEPnPGe2Ibg/5QWC K+HlidzHXsfxMtTGgOrQKsF+aPLazhLUZcEhSNbUWX1WOrb9dpL43WaCHL/CZYdm qtJBNziBPt3du5EA9MMXaSkFUL4nCICaxqsLTulgurfKVJtaIP8f6FIG3gsHcgH8 kyn56Nz5xtBGecddfRWnAFTPFNv9UfwzaULCo0Bn7dkZcn5zCHL++V10XbkrAbTv Zdptcte/HHe6c0JGNYAOqTIIp6GsUZ4= -----END CERTIFICATE-----Generated at Sat Jun 14 12:22:47 2025 by rpki-client