$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/fc862717-a664-3367-88cf-5e0ecaaad117.roa File: fc862717-a664-3367-88cf-5e0ecaaad117.roa (raw, json) Hash identifier: TUDoar2hTByyLpcOjgWuAX+9/Y/nEuUkCa8gaPrQqsk= Subject key identifier: 59:55:2F:68:EE:9F:22:9F:5A:BC:6D:C5:E9:F0:35:28:96:4C:0C:FF Certificate issuer: /CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Certificate serial: 010D0C9F43285849CE9A40635A7EA988ED46F300 Authority key identifier: F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/fc862717-a664-3367-88cf-5e0ecaaad117.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 46408 IP address blocks: 207.191.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:40:63:5a:7e:a9:88:ed:46:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=10131638-e699-4c92-82ac-1ab6d8480e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:da:a4:bf:37:1b:49:ee:87:01:c7:8d:b3:a8: 99:70:7e:71:cd:c1:67:be:85:fa:87:b0:7a:2a:01: 63:64:4e:8a:6b:83:dc:4c:86:5a:f8:a8:0b:dd:b0: 00:ab:f1:ac:34:52:b1:0d:83:e3:0e:ea:ff:2e:51: 01:ab:e4:98:2d:1c:02:fc:39:d7:b2:7b:47:3c:23: 4c:19:d9:69:cc:82:fd:8f:82:b0:10:f5:99:51:0c: f3:79:18:f8:18:30:38:57:70:81:3e:65:3c:91:50: 95:9b:02:bd:3d:c9:98:1f:43:df:34:ac:92:fb:69: 0c:f0:ad:ae:77:aa:03:17:c8:3b:eb:2a:65:d3:33: e5:13:4c:41:9d:e6:ec:df:00:ea:61:83:af:26:68: 6f:dd:fd:da:bc:ec:1c:7e:37:aa:98:d9:d3:24:06: d9:c3:4c:8b:41:fa:c0:1d:f9:23:ba:48:20:ab:dd: 86:6a:b7:5f:6b:77:ec:33:64:c2:f9:26:5a:95:dd: 76:ee:71:c2:9b:f4:2b:d2:1b:c9:23:d9:05:b9:75: e3:a5:42:bc:21:9d:10:1f:2d:37:32:ad:0f:f9:fa: f6:1c:fd:0c:1e:48:02:77:8c:90:2a:b9:d6:6b:31: c4:57:9b:a9:23:ee:0f:98:ac:fd:d2:9b:21:9e:8f: 32:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:55:2F:68:EE:9F:22:9F:5A:BC:6D:C5:E9:F0:35:28:96:4C:0C:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/fc862717-a664-3367-88cf-5e0ecaaad117.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl X509v3 Authority Key Identifier: keyid:F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer sbgp-ipAddrBlock: critical IPv4: 207.191.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:4c:33:90:f9:00:a2:4b:da:6a:b5:c5:83:e4:72:71:8c:94: 22:b3:7a:48:bb:19:e6:28:a0:0d:58:7f:fa:2f:63:54:f9:4d: cb:10:09:2e:d7:2a:cd:8a:7d:5c:fe:c6:af:f9:fb:fb:57:cb: 83:08:95:e3:8c:67:5a:e8:8c:d4:8b:95:0b:d1:1c:4c:47:d3: 9e:21:2f:31:27:53:b3:2a:ed:96:08:9e:72:62:2d:35:68:f0: 94:30:a8:17:d9:4f:82:54:ec:66:18:bb:bc:c9:31:27:d3:c6: f7:21:5c:88:d7:4b:73:b6:d3:26:ba:c8:99:1e:1e:4a:08:a2: d1:bc:03:05:c7:5e:70:42:0f:c9:ff:c1:e1:c8:ec:70:31:5f: ed:1d:11:f3:9f:9c:b0:fc:2f:be:53:48:55:13:23:f7:41:6c: e3:98:6e:ef:cf:e1:12:2d:ff:10:b9:d9:c6:b5:1a:cb:a7:ad: ba:be:8a:b1:c1:ed:6c:e7:d6:d9:9a:ff:eb:d0:54:0f:a3:01: c3:7b:4b:ad:8f:f8:84:77:8a:44:5e:91:13:cc:70:39:bc:e4: 66:02:58:21:b1:d3:1b:7a:22:74:32:f0:4b:4d:a0:9c:d9:ab: 3a:0f:41:3f:06:55:e2:fd:24:fd:50:70:27:c1:87:a6:27:54: cf:3f:bc:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmkBjWn6piO1G8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkZjJlN2YtOGU4My00MzJhLThjMjctNTU0Njk0NGRk YTRiMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk MTAxMzE2MzgtZTY5OS00YzkyLTgyYWMtMWFiNmQ4NDgwZTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdqkvzcbSe6HAceNs6iZcH5xzcFnvoX6h7B6 KgFjZE6Ka4PcTIZa+KgL3bAAq/GsNFKxDYPjDur/LlEBq+SYLRwC/DnXsntHPCNM GdlpzIL9j4KwEPWZUQzzeRj4GDA4V3CBPmU8kVCVmwK9PcmYH0PfNKyS+2kM8K2u d6oDF8g76ypl0zPlE0xBnebs3wDqYYOvJmhv3f3avOwcfjeqmNnTJAbZw0yLQfrA Hfkjukggq92Gardfa3fsM2TC+SZald127nHCm/Qr0hvJI9kFuXXjpUK8IZ0QHy03 Mq0P+fr2HP0MHkgCd4yQKrnWazHEV5upI+4PmKz90pshno8yZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlVL2junyKfWrxtxenwNSiWTAz/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRm MmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2OTQ0ZGRhNGIvZmM4NjI3MTctYTY2NC0z MzY3LTg4Y2YtNWUwZWNhYWFkMTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDVkZjJlN2YtOGU4My00MzJhLThj MjctNTU0Njk0NGRkYTRiL2Q1ZGYyZTdmLThlODMtNDMyYS04YzI3LTU1NDY5NDRk ZGE0Yi5jcmwwHwYDVR0jBBgwFoAU901L3g55e/8+XSHXuRqpy68UFwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRmMmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2 OTQ0ZGRhNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz7/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANBMM5D5AKJL2mq1xYPkcnGMlCKzeki7GeYooA1Yf/ovY1T5TcsQCS7X Ks2KfVz+xq/5+/tXy4MIleOMZ1rojNSLlQvRHExH054hLzEnU7Mq7ZYInnJiLTVo 8JQwqBfZT4JU7GYYu7zJMSfTxvchXIjXS3O20ya6yJkeHkoIotG8AwXHXnBCD8n/ weHI7HAxX+0dEfOfnLD8L75TSFUTI/dBbOOYbu/P4RIt/xC52ca1Gsunrbq+irHB 7Wzn1tma/+vQVA+jAcN7S62P+IR3ikRekRPMcDm85GYCWCGx0xt6InQy8EtNoJzZ qzoPQT8GVeL9JP1QcCfBh6YnVM8/vA8= -----END CERTIFICATE-----Generated at Sun Jun 15 15:36:45 2025 by rpki-client