$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/6bba2c0d-ca7e-37f5-913a-b8bcd19381c5.roa File: 6bba2c0d-ca7e-37f5-913a-b8bcd19381c5.roa (raw, json) Hash identifier: wL7JG+MQHnTdbfW1YcjkchQjIdxR5jXW7J3HFCflvLI= Subject key identifier: 6D:5C:B8:0C:06:F1:44:0B:E3:BC:A7:D8:5C:16:45:A5:72:89:B7:0F Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584981D44A0779258A5576A3EE00 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/6bba2c0d-ca7e-37f5-913a-b8bcd19381c5.roa Signing time: Sun 13 Apr 2025 01:00:44 +0000 ROA not before: Sun 13 Apr 2025 01:00:44 +0000 ROA not after: Sat 12 Jul 2025 01:00:44 +0000 asID: 14659 IP address blocks: 207.253.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:81:d4:4a:07:79:25:8a:55:76:a3:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Apr 13 01:00:44 2025 GMT Not After : Jul 12 01:00:44 2025 GMT Subject: CN=9ccd4250-2b0c-4179-ae3f-574822efbcf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e4:ef:4b:5a:31:61:37:06:f7:7a:3f:44:50: 99:51:44:66:55:d3:f9:f9:a4:30:b4:31:78:01:e5: f7:96:c6:32:df:bb:ec:66:e0:48:9a:9a:a9:a3:c0: 39:e1:b2:a5:17:a9:c8:a2:ad:eb:8a:d1:da:a7:12: 83:99:4c:ad:06:c8:9b:c1:1d:e4:fb:9c:32:20:c0: 04:93:a7:9d:f9:f5:06:aa:ae:b7:22:a7:a1:8b:e2: 92:80:a9:bc:5e:ea:3e:ce:61:5c:83:47:bb:ad:cf: 2a:95:17:2a:61:73:69:9a:1f:b4:f8:88:3c:25:dd: 71:21:96:6b:f8:1f:80:52:3d:76:6d:f6:86:45:e9: ab:22:a0:dc:14:81:37:f0:6f:83:c9:f4:fd:65:ab: 3e:e9:1a:2b:11:d9:9e:8c:e5:b4:f0:bb:f5:82:d5: 44:d1:fc:80:57:88:80:0d:5e:af:7e:0f:ff:20:40: cf:3a:76:37:b6:43:a2:8e:6c:b9:0c:51:a1:b8:e1: 5e:6f:48:f0:90:b9:11:31:ad:58:cd:61:53:b6:c7: 48:75:13:a5:02:cd:15:d5:bc:ba:80:f2:0a:6c:c1: 1c:b8:66:8c:f8:7f:9b:39:78:bb:80:7e:70:37:07: ab:99:ac:41:09:3b:6c:12:b9:26:89:1d:5d:8e:5a: 24:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5C:B8:0C:06:F1:44:0B:E3:BC:A7:D8:5C:16:45:A5:72:89:B7:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/6bba2c0d-ca7e-37f5-913a-b8bcd19381c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 207.253.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:df:4a:16:f6:ff:d0:e2:56:84:7d:b4:18:f0:01:70:36:7c: f6:ec:18:12:61:5d:e9:ed:d5:a7:59:8e:13:e1:10:2a:07:db: 5e:d6:0b:d4:aa:22:1b:6e:c6:33:7f:4a:b2:a4:40:b2:37:f0: ed:61:31:49:45:1a:c4:91:93:45:27:05:d6:94:d5:e4:6d:e8: e9:25:4d:d5:54:5d:72:e7:4f:9f:f6:3f:d7:38:f2:e4:83:3c: b2:66:25:ed:17:96:22:c0:85:1c:e4:94:c9:a2:32:71:17:dc: 59:d9:a0:08:35:9c:c2:f7:b0:fe:26:00:01:c7:92:1c:6b:38: b0:f9:1d:6e:2d:8d:2c:05:49:76:17:6d:18:b6:95:39:0b:bd: af:ab:a6:16:8c:fc:5d:40:38:a0:e7:9d:25:71:94:81:b1:f6: 24:aa:0f:ea:38:18:c6:74:29:4c:55:30:1a:ca:77:79:b2:fd: 53:ab:fb:76:c2:40:6f:65:4d:4b:f0:15:c7:66:72:6f:82:14: 17:c6:16:f6:0c:3e:17:a6:9e:5d:3a:ac:82:33:82:9f:21:2b: c5:b5:21:1d:4a:62:c3:fb:29:48:5c:b6:29:8d:6e:af:a6:04: f8:5d:1b:e6:37:77:96:f4:d8:3d:2f:8e:72:d7:55:30:70:92: 42:ad:bf:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmB1EoHeSWKVXaj7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk OWNjZDQyNTAtMmIwYy00MTc5LWFlM2YtNTc0ODIyZWZiY2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+TvS1oxYTcG93o/RFCZUURmVdP5+aQwtDF4 AeX3lsYy37vsZuBImpqpo8A54bKlF6nIoq3ritHapxKDmUytBsibwR3k+5wyIMAE k6ed+fUGqq63Iqehi+KSgKm8Xuo+zmFcg0e7rc8qlRcqYXNpmh+0+Ig8Jd1xIZZr +B+AUj12bfaGRemrIqDcFIE38G+DyfT9Zas+6RorEdmejOW08Lv1gtVE0fyAV4iA DV6vfg//IEDPOnY3tkOijmy5DFGhuOFeb0jwkLkRMa1YzWFTtsdIdROlAs0V1by6 gPIKbMEcuGaM+H+bOXi7gH5wNwermaxBCTtsErkmiR1djlokyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1cuAwG8UQL47yn2FwWRaVyibcPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvNmJiYTJjMGQtY2E3ZS0z N2Y1LTkxM2EtYjhiY2QxOTM4MWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/1+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPfShb2/9DiVoR9tBjwAXA2fPbsGBJhXent1adZjhPhECoH217WC9Sq IhtuxjN/SrKkQLI38O1hMUlFGsSRk0UnBdaU1eRt6OklTdVUXXLnT5/2P9c48uSD PLJmJe0XliLAhRzklMmiMnEX3FnZoAg1nML3sP4mAAHHkhxrOLD5HW4tjSwFSXYX bRi2lTkLva+rphaM/F1AOKDnnSVxlIGx9iSqD+o4GMZ0KUxVMBrKd3my/VOr+3bC QG9lTUvwFcdmcm+CFBfGFvYMPhemnl06rIIzgp8hK8W1IR1KYsP7KUhctimNbq+m BPhdG+Y3d5b02D0vjnLXVTBwkkKtv0A= -----END CERTIFICATE-----Generated at Sat May 10 19:03:36 2025 by rpki-client