$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/cb39a4bc-93a6-3a08-a76b-ebfc5f6cf246.roa File: cb39a4bc-93a6-3a08-a76b-ebfc5f6cf246.roa (raw, json) Hash identifier: cVdIc1gNGaoO+L6L7G0nedfzsWvAnNv3JqgofEaZCH4= Subject key identifier: F5:37:BD:CD:FF:02:EA:CE:AC:21:89:63:C3:C1:A6:17:7D:6E:B0:6B Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F432858498CFF0EB520ECC076446E3FF8 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/cb39a4bc-93a6-3a08-a76b-ebfc5f6cf246.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 54315 IP address blocks: 207.54.135.0/24 maxlen: 24 207.54.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:0e:b5:20:ec:c0:76:44:6e:3f:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=8060e8b9-921f-47ae-88aa-7f9a43387188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:97:39:e2:0e:05:ed:99:b6:db:8b:0d:ab:e0: 25:f1:02:4b:62:03:53:f8:1c:42:74:75:d6:7d:ca: 00:4f:ce:13:65:ac:0e:3a:26:1b:9c:c1:2c:8c:cb: 3e:ab:a4:ed:3e:d1:06:1e:55:d7:e1:3a:82:5c:5f: 3c:bb:e3:aa:d5:ad:22:31:b8:0f:ff:2b:1b:df:cc: 33:f5:f0:fe:3f:38:dd:6d:92:57:3a:26:66:18:62: b9:dc:23:c8:b6:da:7c:80:d4:a7:be:18:4c:8d:f5: 61:cb:c2:fb:d1:96:b0:e0:20:71:bf:ec:2d:09:62: 4f:a3:61:54:5c:19:51:b4:b6:d4:f4:7f:64:b9:b9: 4e:4a:19:18:49:da:25:02:48:75:5d:f9:37:0c:ef: f8:f2:66:b8:f4:f2:35:73:8e:57:28:2e:ef:18:af: fa:9f:33:06:ac:8e:9c:06:92:83:b7:bd:d3:c8:db: d0:19:91:c2:0f:9d:45:ea:3a:03:01:52:a2:65:f8: 98:d5:24:58:b3:61:01:62:11:ff:99:e7:4d:f8:da: 5c:47:d7:ef:7e:6d:e8:92:64:48:13:7f:dd:fd:71: 54:84:2a:3e:97:c4:a3:9b:61:43:00:55:e4:58:36: 38:03:70:cf:62:e3:4d:f0:10:d0:8d:7e:79:de:bf: ec:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:37:BD:CD:FF:02:EA:CE:AC:21:89:63:C3:C1:A6:17:7D:6E:B0:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/cb39a4bc-93a6-3a08-a76b-ebfc5f6cf246.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 207.54.135.0/24 207.54.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:ed:50:47:74:e3:77:42:7e:c6:db:f0:2e:1b:27:15:1f:33: 86:ba:e6:90:06:21:24:51:15:c5:0e:f3:a3:6f:db:47:6f:e8: 17:bd:96:c0:92:e5:0d:57:e6:93:e9:a6:de:ea:66:98:c9:07: ba:55:0b:78:04:59:99:42:9c:cc:b6:75:69:59:cc:e6:5a:a2: 24:dc:c9:bc:55:91:70:0c:4a:f7:b4:c7:44:ea:96:de:ee:58: 18:64:94:34:79:14:ff:8a:27:4c:bc:e8:8a:6a:c9:1e:34:d9: fb:63:de:d9:d2:ed:2a:4d:d9:d6:f8:d1:5a:8b:ad:66:e3:c5: 6c:44:f4:6a:f9:71:6b:8c:b8:d9:f1:32:e6:81:2e:4d:6a:ec: ee:e1:64:cb:83:9f:ab:ac:81:87:81:c0:0a:b6:dc:9c:ab:a1: 49:4b:25:68:34:ca:c1:19:84:ee:03:c2:b4:9f:bf:9b:97:61: ec:2a:c6:c3:a6:1c:08:50:d2:e0:ca:1e:62:14:49:ff:e6:0f: 72:15:73:53:8e:c1:ae:7f:83:88:a1:36:97:50:81:81:42:52: 29:e4:51:0f:df:1a:1d:b6:6b:5c:25:ca:72:40:5a:7f:de:0f: b2:87:8c:01:11:68:92:5f:ff:f3:77:e9:2e:7f:4c:67:e8:eb: a5:83:db:af -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEmM/w61IOzAdkRuP/gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk ODA2MGU4YjktOTIxZi00N2FlLTg4YWEtN2Y5YTQzMzg3MTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZc54g4F7Zm224sNq+Al8QJLYgNT+BxCdHXW fcoAT84TZawOOiYbnMEsjMs+q6TtPtEGHlXX4TqCXF88u+Oq1a0iMbgP/ysb38wz 9fD+PzjdbZJXOiZmGGK53CPIttp8gNSnvhhMjfVhy8L70Zaw4CBxv+wtCWJPo2FU XBlRtLbU9H9kublOShkYSdolAkh1Xfk3DO/48ma49PI1c45XKC7vGK/6nzMGrI6c BpKDt73TyNvQGZHCD51F6joDAVKiZfiY1SRYs2EBYhH/medN+NpcR9fvfm3okmRI E3/d/XFUhCo+l8Sjm2FDAFXkWDY4A3DPYuNN8BDQjX553r/s9QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPU3vc3/AurOrCGJY8PBphd9brBrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvY2IzOWE0YmMtOTNhNi0z YTA4LWE3NmItZWJmYzVmNmNmMjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAzzaHAwQA zzaOMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIbtUEd043dCfsbb8C4bJxUfM4a65pAGISRRFcUO86Nv20dv 6Be9lsCS5Q1X5pPppt7qZpjJB7pVC3gEWZlCnMy2dWlZzOZaoiTcybxVkXAMSve0 x0Tqlt7uWBhklDR5FP+KJ0y86IpqyR402ftj3tnS7SpN2db40VqLrWbjxWxE9Gr5 cWuMuNnxMuaBLk1q7O7hZMuDn6usgYeBwAq23JyroUlLJWg0ysEZhO4DwrSfv5uX YewqxsOmHAhQ0uDKHmIUSf/mD3IVc1OOwa5/g4ihNpdQgYFCUinkUQ/fGh22a1wl ynJAWn/eD7KHjAERaJJf//N36S5/TGfo66WD268= -----END CERTIFICATE-----Generated at Tue Apr 29 18:33:05 2025 by rpki-client