$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/241f1b53-63a6-328e-a841-25d97fa28860.roa File: 241f1b53-63a6-328e-a841-25d97fa28860.roa (raw, json) Hash identifier: FFur5zFBMC6IZ91OCxjhyzSOkw5Bt2cRnHjcXsjUGBw= Subject key identifier: AE:C4:54:CD:E5:92:2F:CD:0B:77:7B:CF:FF:A9:73:A1:26:3C:2E:77 Certificate issuer: /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Certificate serial: 010D0C9F43285848EC968F559499868619E57DC0 Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/241f1b53-63a6-328e-a841-25d97fa28860.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 3807 IP address blocks: 207.196.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:8f:55:94:99:86:86:19:e5:7d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=c03273eb-8715-4f27-b137-4285f135c39d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:15:ec:02:60:ed:89:9f:16:c6:08:4c:40:f6: bc:6c:e4:a1:59:2e:45:8a:3b:18:3f:84:f4:53:e8: 5b:39:99:83:ec:cf:2d:b3:8e:84:65:d2:52:2a:e1: 44:6e:07:80:58:15:c1:1a:1b:18:c1:31:1a:47:30: 2e:6d:0b:de:10:8d:84:e7:6f:19:2b:1f:12:ac:68: 09:c0:93:29:f4:ab:2d:1a:32:a0:48:fd:16:af:b0: 3a:bc:f8:8b:9f:77:f3:fe:eb:55:d0:f5:35:71:10: 36:09:48:ac:46:70:35:5b:bb:da:34:62:d9:f6:2f: 90:74:2f:bb:20:08:a6:e4:80:64:e9:21:77:05:c1: fc:cd:30:3e:df:8a:fe:82:45:5d:01:12:36:0a:9a: d1:4e:4d:fb:cf:62:08:64:8a:c8:da:8c:6c:e9:a5: 8f:1f:f1:23:9c:4d:68:78:44:ab:c0:7a:f9:5e:e5: 0c:1b:ee:54:9c:9d:0b:c4:82:9f:82:01:74:5a:b7: cd:44:75:88:4b:21:14:9b:81:9c:b6:46:19:d6:03: 8c:7c:71:8c:e3:65:a9:d0:fe:44:21:be:fb:fa:4b: 5b:23:87:d9:08:42:dd:af:42:31:44:ec:63:c0:1c: ee:db:d8:a6:d9:e8:79:f8:05:99:18:bd:30:7b:28: c7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C4:54:CD:E5:92:2F:CD:0B:77:7B:CF:FF:A9:73:A1:26:3C:2E:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/241f1b53-63a6-328e-a841-25d97fa28860.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl X509v3 Authority Key Identifier: keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer sbgp-ipAddrBlock: critical IPv4: 207.196.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:45:25:56:32:64:ea:f6:37:1a:f8:0f:31:e4:8d:3f:90:da: ef:20:cc:cb:60:dd:12:6f:92:52:be:b8:00:c3:18:6c:e5:23: 42:44:f3:0b:5d:bd:3f:5d:53:52:f5:fa:e1:61:0a:5f:44:24: 0b:82:f2:e5:54:8e:f0:71:40:30:12:49:6e:ea:c9:35:64:1b: ff:6c:03:31:6f:3a:da:27:a9:96:35:9b:dc:12:b9:a2:59:bc: 0a:6d:16:c6:f3:a3:ec:85:4b:21:a7:e3:1f:58:bd:bc:fa:ca: 05:88:e5:ab:f9:91:28:5b:fc:9a:58:22:ab:0e:ff:ff:f8:b1: 97:35:1b:7d:91:f4:67:9e:b3:51:6d:d8:6b:a8:db:3f:19:78: 70:48:3e:12:3e:44:fa:f7:78:e3:0c:4a:3e:a8:73:8d:a9:c3: f7:28:fd:f3:17:30:e9:ec:1a:11:c1:18:ad:60:ef:88:8c:fe: 4e:d1:24:3d:a7:8d:d8:dc:df:f8:f4:23:85:8b:9f:37:4a:d6: c3:4d:64:23:01:a4:2e:bf:87:5a:7b:cf:64:f5:ec:c7:cb:21: cc:a1:77:ee:03:6c:2a:4a:d2:1e:3c:9a:f4:93:a1:64:97:33: e8:54:68:f1:17:98:89:0a:0a:f4:f6:9a:43:a6:50:ab:68:ac: 54:a0:84:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslo9VlJmGhhnlfcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQ1YzdjM2QtNzJhNC00MjFkLWI0MWEtZDVlN2UyNTM0 MTA3MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk YzAzMjczZWItODcxNS00ZjI3LWIxMzctNDI4NWYxMzVjMzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBXsAmDtiZ8WxghMQPa8bOShWS5FijsYP4T0 U+hbOZmD7M8ts46EZdJSKuFEbgeAWBXBGhsYwTEaRzAubQveEI2E528ZKx8SrGgJ wJMp9KstGjKgSP0Wr7A6vPiLn3fz/utV0PU1cRA2CUisRnA1W7vaNGLZ9i+QdC+7 IAim5IBk6SF3BcH8zTA+34r+gkVdARI2CprRTk37z2IIZIrI2oxs6aWPH/EjnE1o eESrwHr5XuUMG+5UnJ0LxIKfggF0WrfNRHWISyEUm4GctkYZ1gOMfHGM42Wp0P5E Ib77+ktbI4fZCELdr0IxROxjwBzu29im2eh5+AWZGL0weyjH1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7EVM3lki/NC3d7z/+pc6EmPC53MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVj N2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3ZTI1MzQxMDcvMjQxZjFiNTMtNjNhNi0z MjhlLWE4NDEtMjVkOTdmYTI4ODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDQ1YzdjM2QtNzJhNC00MjFkLWI0 MWEtZDVlN2UyNTM0MTA3LzA0NWM3YzNkLTcyYTQtNDIxZC1iNDFhLWQ1ZTdlMjUz NDEwNy5jcmwwHwYDVR0jBBgwFoAUmFPVU8y7sPSmO9Q3aLg6B77bPXcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVjN2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3 ZTI1MzQxMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz8SIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBFJVYyZOr2Nxr4DzHkjT+Q2u8gzMtg3RJvklK+uADDGGzlI0JE8wtd vT9dU1L1+uFhCl9EJAuC8uVUjvBxQDASSW7qyTVkG/9sAzFvOtonqZY1m9wSuaJZ vAptFsbzo+yFSyGn4x9Yvbz6ygWI5av5kShb/JpYIqsO///4sZc1G32R9Gees1Ft 2Guo2z8ZeHBIPhI+RPr3eOMMSj6oc42pw/co/fMXMOnsGhHBGK1g74iM/k7RJD2n jdjc3/j0I4WLnzdK1sNNZCMBpC6/h1p7z2T17MfLIcyhd+4DbCpK0h48mvSToWSX M+hUaPEXmIkKCvT2mkOmUKtorFSghJ0= -----END CERTIFICATE-----Generated at Mon Apr 28 14:15:29 2025 by rpki-client