$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/a12882fe-d453-381a-9a7a-cbe2ae96018a.roa File: a12882fe-d453-381a-9a7a-cbe2ae96018a.roa (raw, json) Hash identifier: pJ1BIH9EOzABhYk9qses89JL86Y2G/nKfIM8Z5Rur8U= Subject key identifier: CF:94:BB:2E:A4:02:F3:81:85:5C:E7:55:44:3B:16:34:13:0F:25:5A Certificate issuer: /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Certificate serial: 010D0C9F43285848EC96831136FFE8F13058E100 Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/a12882fe-d453-381a-9a7a-cbe2ae96018a.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 3807 IP address blocks: 207.196.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:83:11:36:ff:e8:f1:30:58:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=f530c64a-b74f-483f-9a6e-b40ae7b4a863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:29:dd:46:e8:f8:fe:ae:7f:db:7a:27:cc:ef: 16:24:5a:c4:a9:c5:3e:bb:d2:0e:b5:7e:7d:fe:85: 9d:07:82:22:41:f1:84:b7:62:52:3e:d9:16:80:c0: 5c:f4:9a:99:88:33:4a:f3:7a:55:af:c3:77:a7:7c: de:bd:74:da:6d:2d:4f:28:8f:9d:6a:53:71:89:ad: cb:b2:c5:47:40:c6:56:50:f8:23:79:f9:60:dc:6e: f6:3e:c5:7c:b8:50:16:6e:ba:f0:43:36:27:c7:92: 8d:21:68:c2:b0:03:97:3b:90:6e:e2:b2:18:13:93: cd:a6:52:c9:75:a3:12:e7:ab:96:7e:4a:e5:de:5c: f7:92:e7:69:4a:c7:61:c9:d5:9c:cc:d5:44:f1:1a: 73:83:4f:9e:a1:41:47:c6:d9:65:fb:0d:12:b9:77: 45:24:3f:a2:8d:62:63:a5:f5:f3:d4:52:04:2d:30: 62:83:82:e4:49:a2:30:42:03:c0:68:70:fb:36:03: ae:35:18:a1:bb:43:e0:94:ce:36:1f:f2:4c:d0:d2: cb:c6:44:66:5a:40:cf:5e:fd:7a:ce:52:e5:65:05: 22:20:f9:8f:e1:da:30:1a:42:d3:4e:91:f8:b2:c7: 8e:d2:10:f6:8d:3c:fa:78:1c:8f:02:4f:1e:73:d7: 95:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:94:BB:2E:A4:02:F3:81:85:5C:E7:55:44:3B:16:34:13:0F:25:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/a12882fe-d453-381a-9a7a-cbe2ae96018a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl X509v3 Authority Key Identifier: keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer sbgp-ipAddrBlock: critical IPv4: 207.196.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:59:09:78:b6:b9:5d:f8:14:06:4a:df:33:5b:61:e1:05:4e: a7:f5:9e:ac:a1:a7:46:39:07:f4:8d:bb:dd:c3:8c:23:ec:32: 6a:94:a5:24:00:7a:1e:ef:ed:19:11:6c:45:6d:33:5b:9a:91: 26:c9:9c:92:47:1b:e7:3a:e8:99:d1:9a:06:b9:0e:5a:29:66: 76:d8:d7:bb:3e:14:f4:36:33:6f:d1:b8:41:9b:d5:69:36:fe: 52:4b:16:8f:99:8d:cc:62:ce:cc:bb:7e:8b:70:3e:d6:c2:4b: 8f:db:a0:69:25:02:bf:74:79:86:ab:a4:5b:7b:79:e6:13:cf: 7a:5f:be:44:5c:94:3d:e9:5b:8f:33:f5:77:74:a3:f7:df:e1: e4:bd:e8:b5:18:94:71:41:f7:53:68:79:35:e8:cc:bb:7b:e9: 8e:be:8e:31:0c:d8:0d:06:ca:bd:c4:24:c2:f7:f9:cf:6e:33: 41:75:93:f2:cf:39:8b:6e:02:49:44:4a:b7:14:6c:39:5c:ff: db:d9:dc:c5:c0:c0:6c:cf:64:dc:b1:92:4d:60:67:8e:b6:bc: fc:b5:9d:4f:8f:74:a7:2f:bc:f8:71:22:c0:8e:67:a0:cc:14: 6d:f2:5b:3b:51:3f:a8:fe:bd:fb:78:00:20:6d:70:82:55:13: 16:80:d8:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjsloMRNv/o8TBY4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQ1YzdjM2QtNzJhNC00MjFkLWI0MWEtZDVlN2UyNTM0 MTA3MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk ZjUzMGM2NGEtYjc0Zi00ODNmLTlhNmUtYjQwYWU3YjRhODYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSndRuj4/q5/23onzO8WJFrEqcU+u9IOtX59 /oWdB4IiQfGEt2JSPtkWgMBc9JqZiDNK83pVr8N3p3zevXTabS1PKI+dalNxia3L ssVHQMZWUPgjeflg3G72PsV8uFAWbrrwQzYnx5KNIWjCsAOXO5Bu4rIYE5PNplLJ daMS56uWfkrl3lz3kudpSsdhydWczNVE8Rpzg0+eoUFHxtll+w0SuXdFJD+ijWJj pfXz1FIELTBig4LkSaIwQgPAaHD7NgOuNRihu0PglM42H/JM0NLLxkRmWkDPXv16 zlLlZQUiIPmP4dowGkLTTpH4sseO0hD2jTz6eByPAk8ec9eVdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+Uuy6kAvOBhVznVUQ7FjQTDyVaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVj N2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3ZTI1MzQxMDcvYTEyODgyZmUtZDQ1My0z ODFhLTlhN2EtY2JlMmFlOTYwMThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDQ1YzdjM2QtNzJhNC00MjFkLWI0 MWEtZDVlN2UyNTM0MTA3LzA0NWM3YzNkLTcyYTQtNDIxZC1iNDFhLWQ1ZTdlMjUz NDEwNy5jcmwwHwYDVR0jBBgwFoAUmFPVU8y7sPSmO9Q3aLg6B77bPXcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVjN2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3 ZTI1MzQxMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz8TwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFZCXi2uV34FAZK3zNbYeEFTqf1nqyhp0Y5B/SNu93DjCPsMmqUpSQA eh7v7RkRbEVtM1uakSbJnJJHG+c66JnRmga5DlopZnbY17s+FPQ2M2/RuEGb1Wk2 /lJLFo+Zjcxizsy7fotwPtbCS4/boGklAr90eYarpFt7eeYTz3pfvkRclD3pW48z 9Xd0o/ff4eS96LUYlHFB91NoeTXozLt76Y6+jjEM2A0Gyr3EJML3+c9uM0F1k/LP OYtuAklESrcUbDlc/9vZ3MXAwGzPZNyxkk1gZ462vPy1nU+PdKcvvPhxIsCOZ6DM FG3yWztRP6j+vft4ACBtcIJVExaA2Pk= -----END CERTIFICATE-----Generated at Mon Apr 28 12:26:52 2025 by rpki-client