$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0d084d81-9d27-3c5b-afac-f54841ddb9a8.roa File: 0d084d81-9d27-3c5b-afac-f54841ddb9a8.roa (raw, json) Hash identifier: vAV/pQhg7dEneqFphOr3YkXLiApPcz5ZEPcjHnzAimI= Subject key identifier: 33:11:E7:71:2A:9B:BA:A2:7A:DD:80:EA:FF:0B:73:75:E6:80:39:2D Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584917DC34321CE1FDB15D2C38C0 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0d084d81-9d27-3c5b-afac-f54841ddb9a8.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 30238 IP address blocks: 207.54.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:34:32:1c:e1:fd:b1:5d:2c:38:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=1b91f8df-4070-4f39-a528-aee052d794ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:01:e4:04:21:8c:42:0b:99:6c:8d:f0:98:8f: d9:1d:d6:6e:97:e4:be:d3:fc:83:ff:31:1c:c1:23: c4:d4:1d:20:ab:5b:fb:91:f7:3d:20:2c:c6:2c:b9: 54:69:1c:d7:c9:27:c9:1c:20:67:72:cb:72:30:91: b9:e2:0a:69:ee:40:98:62:a8:e2:54:cc:46:c4:36: 00:7d:6f:7d:56:63:4d:a3:5d:dc:95:90:f5:17:31: 17:46:18:7c:14:ba:34:fa:b4:eb:88:fd:95:8a:b8: 3b:b2:33:26:bc:73:e9:6d:b6:c9:2f:29:e7:33:9b: a2:fa:cd:39:51:c0:c4:b3:42:48:9a:8a:79:5e:c3: 02:32:f5:00:d4:ee:11:fd:99:66:9d:63:65:46:24: 2b:4f:0a:d5:0f:50:eb:0c:c3:18:3f:44:b2:62:1d: c4:d7:25:67:17:cb:2d:cd:71:3d:ee:1a:b9:87:4b: cf:7a:72:74:18:48:fe:63:e2:9c:ca:2e:ce:71:8d: 40:eb:00:7c:b2:6c:54:6f:97:47:20:12:31:5a:e6: 59:b7:a5:b8:12:6d:85:98:a1:27:35:ff:26:ab:9f: 66:6c:31:0a:75:40:62:73:7b:0a:20:14:ca:6d:e7: fc:7c:be:3f:9e:d7:cc:69:eb:db:24:99:0d:69:e8: 07:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:11:E7:71:2A:9B:BA:A2:7A:DD:80:EA:FF:0B:73:75:E6:80:39:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0d084d81-9d27-3c5b-afac-f54841ddb9a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 207.54.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:9c:b5:74:fe:f3:c4:93:d5:82:ca:0f:6d:cb:3e:6e:76:45: 32:e7:66:3c:27:3a:32:c0:c6:b5:81:b5:c0:fb:df:00:5b:ee: 1a:24:99:d7:ea:d0:71:66:c9:62:25:68:b2:14:ed:49:85:94: 2d:10:cc:60:4a:e9:b7:b2:97:74:25:0b:74:fb:dd:9e:82:ec: 22:d9:bd:10:98:67:2d:2e:cb:75:90:d6:c5:a7:f1:1f:c3:a6: 1b:9d:47:6c:a2:02:0c:f3:45:6a:80:61:71:b6:26:9e:83:a9: a9:73:47:60:dd:df:42:9f:51:20:32:e7:1e:9b:63:23:bc:3d: 7a:d2:1b:54:da:e1:04:6f:cf:12:9a:58:e6:e6:87:4a:16:ca: 27:e3:38:8f:dd:bc:97:62:ff:0d:de:c2:76:c2:b1:16:0b:f5: 65:92:93:15:10:c5:3c:0b:e5:0e:d1:0c:51:02:f7:52:db:1b: 6b:40:4b:9d:ba:4a:5f:23:2c:18:bc:19:e8:f9:da:41:54:8e: 95:6c:11:b2:aa:1a:33:ac:b0:be:41:82:e4:0e:f8:15:a6:b1: c4:d6:fa:51:f1:78:4b:9e:a5:c8:3b:96:4d:54:87:94:b8:bf: 95:05:43:02:48:aa:54:fd:c2:3f:2a:99:0f:11:d2:de:0a:18: 01:af:d4:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3DQyHOH9sV0sOMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk MWI5MWY4ZGYtNDA3MC00ZjM5LWE1MjgtYWVlMDUyZDc5NGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigHkBCGMQguZbI3wmI/ZHdZul+S+0/yD/zEc wSPE1B0gq1v7kfc9ICzGLLlUaRzXySfJHCBncstyMJG54gpp7kCYYqjiVMxGxDYA fW99VmNNo13clZD1FzEXRhh8FLo0+rTriP2Virg7sjMmvHPpbbbJLynnM5ui+s05 UcDEs0JImop5XsMCMvUA1O4R/ZlmnWNlRiQrTwrVD1DrDMMYP0SyYh3E1yVnF8st zXE97hq5h0vPenJ0GEj+Y+Kcyi7OcY1A6wB8smxUb5dHIBIxWuZZt6W4Em2FmKEn Nf8mq59mbDEKdUBic3sKIBTKbef8fL4/ntfMaevbJJkNaegH+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMR53Eqm7qiet2A6v8Lc3XmgDktMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMGQwODRkODEtOWQyNy0z YzViLWFmYWMtZjU0ODQxZGRiOWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzZIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2ctXT+88ST1YLKD23LPm52RTLnZjwnOjLAxrWBtcD73wBb7hokmdfq 0HFmyWIlaLIU7UmFlC0QzGBK6beyl3QlC3T73Z6C7CLZvRCYZy0uy3WQ1sWn8R/D phudR2yiAgzzRWqAYXG2Jp6DqalzR2Dd30KfUSAy5x6bYyO8PXrSG1Ta4QRvzxKa WObmh0oWyifjOI/dvJdi/w3ewnbCsRYL9WWSkxUQxTwL5Q7RDFEC91LbG2tAS526 Sl8jLBi8Gej52kFUjpVsEbKqGjOssL5BguQO+BWmscTW+lHxeEuepcg7lk1Uh5S4 v5UFQwJIqlT9wj8qmQ8R0t4KGAGv1Jw= -----END CERTIFICATE-----Generated at Mon Apr 28 15:03:47 2025 by rpki-client