$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/3edda63d-a054-36de-9fc9-3501960d7503.roa File: 3edda63d-a054-36de-9fc9-3501960d7503.roa (raw, json) Hash identifier: 8Q0gzFftQwSDEW7slqmC9yTaPzowDheKB3O75OQ74ik= Subject key identifier: D8:4F:7D:0C:B0:30:72:B2:52:DB:1B:52:64:FD:62:4A:F0:5A:69:1A Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F43285849B6DF4A0F58BD3DA5E418B260 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/3edda63d-a054-36de-9fc9-3501960d7503.roa Signing time: Fri 02 May 2025 01:00:47 +0000 ROA not before: Fri 02 May 2025 01:00:47 +0000 ROA not after: Thu 31 Jul 2025 01:00:47 +0000 asID: 22652 IP address blocks: 207.96.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:df:4a:0f:58:bd:3d:a5:e4:18:b2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: May 2 01:00:47 2025 GMT Not After : Jul 31 01:00:47 2025 GMT Subject: CN=d2efa391-d02e-45cd-a131-ad49ff75bc2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b2:c5:78:4c:9a:5b:5a:c0:88:d9:c4:93:9a: c0:d4:fc:de:93:81:de:21:43:eb:b3:69:99:c1:e5: 86:c7:03:7a:3c:4e:7c:60:f6:4e:a4:3a:53:97:b3: 49:9e:0a:5e:0f:56:22:0f:f8:4f:b6:aa:76:e2:61: b8:35:25:c8:1a:30:83:ee:ff:fc:1d:9d:cc:46:c2: fb:37:9d:55:d5:04:78:86:ff:94:9c:a4:cb:f9:af: 19:26:c9:ee:ca:9c:34:b3:c2:00:65:ce:ea:c1:5b: 76:21:bf:86:88:a2:46:35:a0:c9:11:57:8d:c3:33: 31:ec:6c:51:78:3d:bb:3d:e8:43:26:4b:f8:af:78: 40:25:12:cb:05:c1:6b:12:9f:ab:86:48:d1:a7:78: c2:7b:eb:5d:4a:02:71:d6:c5:05:18:59:23:37:d6: bd:9d:1d:8a:5c:38:93:3b:f3:33:50:de:27:3f:17: d6:77:bb:1c:01:78:02:3a:bf:03:9d:52:33:fb:10: 09:91:79:7b:39:24:df:31:f4:19:7f:74:0c:bf:21: a1:2c:39:c7:93:c4:87:ba:81:f5:4d:14:1e:fa:94: 65:1f:0a:bb:42:03:a6:d0:05:ee:9b:48:f9:ce:32: e5:62:ea:26:75:7b:5f:de:92:12:e6:ba:17:d4:4f: 2c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:4F:7D:0C:B0:30:72:B2:52:DB:1B:52:64:FD:62:4A:F0:5A:69:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/3edda63d-a054-36de-9fc9-3501960d7503.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 207.96.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:36:25:04:da:30:b7:e9:74:3e:c6:53:64:6b:57:f9:21:8a: bf:5e:b0:d0:7c:df:c4:34:23:fe:96:8b:00:fd:95:0e:ec:de: 9e:f7:61:91:36:1a:c3:14:b2:8d:c8:e1:9d:96:31:e1:0c:3e: 4b:1e:8e:ee:ac:95:6e:22:0a:94:f9:02:89:a6:75:3d:16:df: 7a:5a:a8:d4:78:32:9a:66:1a:87:d5:af:ac:7e:aa:37:a5:f9: 10:d7:ae:63:d6:c3:49:91:ff:13:ba:bf:5c:de:b9:c4:ff:84: 8e:4e:3f:02:5b:7e:74:34:41:44:c1:15:00:21:fd:89:a6:11: 62:41:e7:27:51:d6:24:75:18:80:a2:00:bd:d4:08:ff:1e:4b: 81:88:ad:09:45:cc:3f:4e:5c:ed:fb:50:9a:2b:52:67:32:fa: 58:5c:9d:53:b7:9b:7e:00:ac:9b:4f:b0:10:c9:1f:98:85:8d: e0:68:0c:fb:56:85:31:ac:9e:8d:13:41:e7:1a:36:33:ec:53: 9c:0d:e6:fd:1a:36:1c:23:7f:05:7b:32:31:30:58:83:f4:d3: 01:4d:20:f3:de:60:b1:ef:ce:3a:4c:3b:65:06:04:67:37:ee: ef:5e:15:1e:8f:27:71:53:ac:fd:d3:32:2a:81:6a:76:b6:5b: c4:fd:50:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm230oPWL09peQYsmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk ZDJlZmEzOTEtZDAyZS00NWNkLWExMzEtYWQ0OWZmNzViYzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbLFeEyaW1rAiNnEk5rA1Pzek4HeIUPrs2mZ weWGxwN6PE58YPZOpDpTl7NJngpeD1YiD/hPtqp24mG4NSXIGjCD7v/8HZ3MRsL7 N51V1QR4hv+UnKTL+a8ZJsnuypw0s8IAZc7qwVt2Ib+GiKJGNaDJEVeNwzMx7GxR eD27PehDJkv4r3hAJRLLBcFrEp+rhkjRp3jCe+tdSgJx1sUFGFkjN9a9nR2KXDiT O/MzUN4nPxfWd7scAXgCOr8DnVIz+xAJkXl7OSTfMfQZf3QMvyGhLDnHk8SHuoH1 TRQe+pRlHwq7QgOm0AXum0j5zjLlYuomdXtf3pIS5roX1E8szQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhPfQywMHKyUtsbUmT9YkrwWmkaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvM2VkZGE2M2QtYTA1NC0z NmRlLTlmYzktMzUwMTk2MGQ3NTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz2DpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHA2JQTaMLfpdD7GU2RrV/khir9esNB838Q0I/6WiwD9lQ7s3p73YZE2 GsMUso3I4Z2WMeEMPkseju6slW4iCpT5AommdT0W33paqNR4MppmGofVr6x+qjel +RDXrmPWw0mR/xO6v1zeucT/hI5OPwJbfnQ0QUTBFQAh/YmmEWJB5ydR1iR1GICi AL3UCP8eS4GIrQlFzD9OXO37UJorUmcy+lhcnVO3m34ArJtPsBDJH5iFjeBoDPtW hTGsno0TQecaNjPsU5wN5v0aNhwjfwV7MjEwWIP00wFNIPPeYLHvzjpMO2UGBGc3 7u9eFR6PJ3FTrP3TMiqBana2W8T9UJI= -----END CERTIFICATE-----Generated at Sun May 11 16:00:14 2025 by rpki-client