$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/d8b08568-caba-3e3f-8142-0e3cc3e8bc42.roa File: d8b08568-caba-3e3f-8142-0e3cc3e8bc42.roa (raw, json) Hash identifier: K5fqVgZeAnNi6eXwBOJCJoDUTROrPCQmmbkahwXtqpw= Subject key identifier: EF:5F:8C:2A:1A:7E:31:98:CD:E4:92:11:14:D9:29:A2:A1:25:39:2D Certificate issuer: /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Certificate serial: 010D0C9F43285849CBCF938E715243CE9D5B6FC0 Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/d8b08568-caba-3e3f-8142-0e3cc3e8bc42.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 3807 IP address blocks: 207.196.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:93:8e:71:52:43:ce:9d:5b:6f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=c349fdae-35e5-42c0-9254-dcf7c91face3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a6:5e:d8:bd:fa:fb:0a:64:d5:df:92:15:56: cd:7b:a1:9a:af:9f:93:1a:80:22:35:26:6e:06:82: 6f:c9:a3:00:54:83:6a:08:f2:2e:6a:19:7a:78:79: 63:c1:18:22:93:62:65:6d:00:89:6f:11:84:54:28: c6:43:77:50:76:1c:ba:a5:25:91:ad:eb:8e:9d:e4: 06:4b:f4:55:2f:45:ca:73:ca:ce:95:3f:f6:47:64: 10:78:98:e7:25:c4:fc:a4:31:2f:35:a4:ce:dc:58: c9:c5:b0:ee:60:80:18:76:bc:9f:a5:f8:b8:8a:38: 7f:7d:6a:ea:49:d1:06:62:44:d2:0d:1b:8c:d9:4a: e9:16:01:d4:05:6c:67:38:41:28:ef:65:86:37:9f: a8:33:02:48:2f:19:2f:47:25:9a:19:03:6d:87:e0: 54:a7:e6:09:99:ef:62:11:c9:43:67:6f:89:6c:50: be:cd:bc:d0:b3:28:30:bd:f7:b1:c6:92:b0:19:4d: 17:01:92:06:da:52:b0:f4:be:4f:db:4e:84:75:9c: f7:0b:5b:1a:9f:d7:de:30:94:0b:9c:c8:1a:36:3c: 35:af:6f:bc:d9:9d:06:a5:04:34:e6:2d:0a:79:91: ed:42:a1:81:3d:7a:68:ee:e1:48:50:24:64:08:70: 6d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:5F:8C:2A:1A:7E:31:98:CD:E4:92:11:14:D9:29:A2:A1:25:39:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/d8b08568-caba-3e3f-8142-0e3cc3e8bc42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl X509v3 Authority Key Identifier: keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer sbgp-ipAddrBlock: critical IPv4: 207.196.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:e4:72:90:53:d1:3d:f0:87:68:12:81:8e:d3:12:07:0a:4c: 50:03:0f:75:da:99:9a:e6:74:53:ef:94:c1:7e:05:cc:e1:b8: 21:72:3b:d5:dd:8d:ee:4e:39:97:ae:0e:ed:b0:7e:cb:81:3f: 51:57:42:3f:15:b3:bb:d0:99:6f:d7:90:d1:28:21:4b:f2:db: 92:11:7f:b0:12:5e:8b:45:5f:b1:5b:de:52:de:ab:b4:3b:60: a5:76:f4:74:b8:7c:d7:bf:46:3a:26:60:6a:9d:de:49:32:1a: 98:41:c9:d2:b2:78:70:03:63:2b:6d:b6:95:c7:cb:d6:b3:77: 76:3d:c7:80:8c:70:08:35:8b:b6:7a:5d:8a:dc:53:6a:37:8f: 17:14:b3:76:2c:8e:ce:42:e9:db:dd:4c:34:68:b2:cd:08:48: 64:be:47:83:b8:a8:e0:0a:0a:39:9c:4c:44:7e:68:17:70:63: 81:f0:3d:ac:53:82:4e:12:e1:28:f9:f4:ef:cf:2f:9d:fc:23: ea:ae:8b:07:d3:bd:2e:4d:47:69:99:d6:38:7d:0f:34:90:c5: 02:26:2b:d2:2c:df:b1:75:37:9c:a4:10:96:31:08:74:c4:ca: 04:92:d1:d9:6a:d9:b8:57:49:17:19:00:ab:0a:43:e9:ae:d4: a6:43:58:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz5OOcVJDzp1bb8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQ1YzdjM2QtNzJhNC00MjFkLWI0MWEtZDVlN2UyNTM0 MTA3MB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk YzM0OWZkYWUtMzVlNS00MmMwLTkyNTQtZGNmN2M5MWZhY2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqZe2L36+wpk1d+SFVbNe6Gar5+TGoAiNSZu BoJvyaMAVINqCPIuahl6eHljwRgik2JlbQCJbxGEVCjGQ3dQdhy6pSWRreuOneQG S/RVL0XKc8rOlT/2R2QQeJjnJcT8pDEvNaTO3FjJxbDuYIAYdryfpfi4ijh/fWrq SdEGYkTSDRuM2UrpFgHUBWxnOEEo72WGN5+oMwJILxkvRyWaGQNth+BUp+YJme9i EclDZ2+JbFC+zbzQsygwvfexxpKwGU0XAZIG2lKw9L5P206EdZz3C1san9feMJQL nMgaNjw1r2+82Z0GpQQ05i0KeZHtQqGBPXpo7uFIUCRkCHBt3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO9fjCoafjGYzeSSERTZKaKhJTktMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVj N2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3ZTI1MzQxMDcvZDhiMDg1NjgtY2FiYS0z ZTNmLTgxNDItMGUzY2MzZThiYzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDQ1YzdjM2QtNzJhNC00MjFkLWI0 MWEtZDVlN2UyNTM0MTA3LzA0NWM3YzNkLTcyYTQtNDIxZC1iNDFhLWQ1ZTdlMjUz NDEwNy5jcmwwHwYDVR0jBBgwFoAUmFPVU8y7sPSmO9Q3aLg6B77bPXcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVjN2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3 ZTI1MzQxMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz8SQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbkcpBT0T3wh2gSgY7TEgcKTFADD3XamZrmdFPvlMF+BczhuCFyO9Xd je5OOZeuDu2wfsuBP1FXQj8Vs7vQmW/XkNEoIUvy25IRf7ASXotFX7Fb3lLeq7Q7 YKV29HS4fNe/RjomYGqd3kkyGphBydKyeHADYytttpXHy9azd3Y9x4CMcAg1i7Z6 XYrcU2o3jxcUs3Ysjs5C6dvdTDRoss0ISGS+R4O4qOAKCjmcTER+aBdwY4HwPaxT gk4S4Sj59O/PL538I+quiwfTvS5NR2mZ1jh9DzSQxQImK9Is37F1N5ykEJYxCHTE ygSS0dlq2bhXSRcZAKsKQ+mu1KZDWO8= -----END CERTIFICATE-----Generated at Sun Jun 15 15:31:36 2025 by rpki-client