$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/9a56588a-a022-38cf-a593-5622658a6eae.roa File: 9a56588a-a022-38cf-a593-5622658a6eae.roa (raw, json) Hash identifier: xSCQpbP43XJ+JKr9O10iCWnVwix4TPby41wXXvUQvRU= Subject key identifier: A3:F2:E1:64:B5:3F:9F:DD:BD:84:A2:15:F6:B9:B2:61:3C:61:6B:DE Certificate issuer: /CN=a52f3b42-2c19-4141-8d8a-fa84b3d6a49e Certificate serial: 010D0C9F432858498CFF196A8F1435133E19DC40 Authority key identifier: 68:52:4C:59:0A:31:A3:42:1D:AB:7F:F6:7F:17:0D:9F:64:BE:41:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/9a56588a-a022-38cf-a593-5622658a6eae.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 8075 IP address blocks: 207.229.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:19:6a:8f:14:35:13:3e:19:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a52f3b42-2c19-4141-8d8a-fa84b3d6a49e Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=7d171c43-6c74-4cf4-b5af-b234d598cbb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d5:d3:2b:29:37:8e:9f:a0:5b:b8:bc:61:ff: 16:71:f2:e2:27:fc:74:9b:30:03:99:89:f5:93:53: 00:87:f6:e2:82:1a:87:51:ae:a4:46:5a:48:9f:0f: 15:f8:7a:73:a7:7a:c1:00:32:dd:9c:0f:f9:55:52: c1:38:96:f1:18:f1:64:e4:7b:7b:c7:b5:9a:c3:40: 7e:e0:9e:e6:28:79:a7:22:47:4b:f5:f4:a5:46:cb: 45:06:a7:5d:d0:06:15:0c:da:8e:d5:cb:12:ad:c6: 1d:ac:9e:51:38:df:49:39:7a:87:d0:db:00:08:59: ac:31:f2:24:06:24:a6:09:bd:0a:0f:03:bc:5d:18: e2:75:83:3c:de:00:5d:33:83:5f:30:78:65:6b:9a: 70:26:04:f0:4c:b8:c8:5c:30:2e:c8:6e:76:6c:4f: b1:06:ba:4a:a9:94:ba:d6:32:fe:64:8f:9e:4a:7c: 0f:c9:6f:32:0e:b7:94:38:7b:f8:1e:a8:0e:28:60: 3c:c2:5a:13:9a:8e:82:ea:17:c7:e3:19:52:4a:58: bd:3d:5f:fc:27:e8:db:50:38:4b:b8:4f:1a:f9:4d: 12:3d:40:40:40:dd:6f:8f:88:1d:19:6f:6d:b4:83: 14:9d:54:5e:2f:58:4b:d9:17:41:e4:42:e9:50:c5: 00:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F2:E1:64:B5:3F:9F:DD:BD:84:A2:15:F6:B9:B2:61:3C:61:6B:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/9a56588a-a022-38cf-a593-5622658a6eae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.crl X509v3 Authority Key Identifier: keyid:68:52:4C:59:0A:31:A3:42:1D:AB:7F:F6:7F:17:0D:9F:64:BE:41:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.cer sbgp-ipAddrBlock: critical IPv4: 207.229.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:dd:58:0e:f2:28:f4:83:78:9d:7d:89:ed:ea:44:75:17:30: 44:a4:92:c9:26:21:18:d5:4d:48:8c:5e:dd:b6:85:fb:73:f3: 40:95:c5:54:28:6c:34:33:92:79:1f:7a:0e:e0:92:d5:12:93: 84:f0:23:44:dd:12:19:d2:44:39:42:82:67:7b:d1:11:59:53: 34:4d:95:f6:1c:74:87:b8:5a:20:e7:6d:bd:bc:fd:42:fc:b4: 59:b4:4c:73:75:63:a4:cf:75:fb:c6:ee:c8:d2:c2:2a:54:2a: b3:d2:f7:30:3d:90:2e:dc:6d:96:08:a4:53:59:bf:6f:7c:58: e6:47:74:ca:7e:a7:e3:12:69:b5:9e:58:49:bb:9c:b5:b7:b9: ee:cc:bf:bb:7c:2e:49:42:fd:81:5c:d3:6e:4a:94:dd:17:ca: d7:0b:5e:4e:ac:1d:17:b8:b4:83:d9:2a:5d:1e:f5:69:46:a7: bf:e8:9b:62:a0:af:f6:c2:c4:03:bb:1f:ba:74:22:5a:fd:35: 1b:87:e9:18:11:74:05:31:55:ec:29:72:3a:b1:c9:fa:c0:bc: 6b:b1:53:fb:e8:ed:f3:95:e0:e0:d1:49:9c:ff:5a:32:9e:c1: 44:15:d7:fc:04:bf:f3:97:41:de:0e:1d:0d:72:6d:f0:93:3a: dc:c6:21:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/xlqjxQ1Ez4Z3EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUyZjNiNDItMmMxOS00MTQxLThkOGEtZmE4NGIzZDZh NDllMB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk N2QxNzFjNDMtNmM3NC00Y2Y0LWI1YWYtYjIzNGQ1OThjYmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldXTKyk3jp+gW7i8Yf8WcfLiJ/x0mzADmYn1 k1MAh/bighqHUa6kRlpInw8V+Hpzp3rBADLdnA/5VVLBOJbxGPFk5Ht7x7Waw0B+ 4J7mKHmnIkdL9fSlRstFBqdd0AYVDNqO1csSrcYdrJ5RON9JOXqH0NsACFmsMfIk BiSmCb0KDwO8XRjidYM83gBdM4NfMHhla5pwJgTwTLjIXDAuyG52bE+xBrpKqZS6 1jL+ZI+eSnwPyW8yDreUOHv4HqgOKGA8wloTmo6C6hfH4xlSSli9PV/8J+jbUDhL uE8a+U0SPUBAQN1vj4gdGW9ttIMUnVReL1hL2RdB5ELpUMUANwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPy4WS1P5/dvYSiFfa5smE8YWveMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hNTJm M2I0Mi0yYzE5LTQxNDEtOGQ4YS1mYTg0YjNkNmE0OWUvOWE1NjU4OGEtYTAyMi0z OGNmLWE1OTMtNTYyMjY1OGE2ZWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTUyZjNiNDItMmMxOS00MTQxLThk OGEtZmE4NGIzZDZhNDllL2E1MmYzYjQyLTJjMTktNDE0MS04ZDhhLWZhODRiM2Q2 YTQ5ZS5jcmwwHwYDVR0jBBgwFoAUaFJMWQoxo0Idq3/2fxcNn2S+QUowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hNTJmM2I0Mi0yYzE5LTQxNDEtOGQ4YS1mYTg0 YjNkNmE0OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz+V1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrdWA7yKPSDeJ19ie3qRHUXMESkkskmIRjVTUiMXt22hftz80CVxVQo bDQzknkfeg7gktUSk4TwI0TdEhnSRDlCgmd70RFZUzRNlfYcdIe4WiDnbb28/UL8 tFm0THN1Y6TPdfvG7sjSwipUKrPS9zA9kC7cbZYIpFNZv298WOZHdMp+p+MSabWe WEm7nLW3ue7Mv7t8LklC/YFc025KlN0XytcLXk6sHRe4tIPZKl0e9WlGp7/om2Kg r/bCxAO7H7p0Ilr9NRuH6RgRdAUxVewpcjqxyfrAvGuxU/vo7fOV4ODRSZz/WjKe wUQV1/wEv/OXQd4OHQ1ybfCTOtzGIaA= -----END CERTIFICATE-----Generated at Mon Apr 28 18:47:49 2025 by rpki-client