$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/28db5388-3028-3372-82b7-0e51f7f410ea.roa File: 28db5388-3028-3372-82b7-0e51f7f410ea.roa (raw, json) Hash identifier: UoVNnfhbJA6FxlQK0/QwNEF2v1s7eJu51Kr0yk88JTI= Subject key identifier: 19:AE:F7:E4:46:A1:25:8E:62:5C:CC:1B:43:CF:7C:11:09:46:BE:E6 Certificate issuer: /CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Certificate serial: 010D0C9F432858499829CD769636126AC4ADB380 Authority key identifier: F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/28db5388-3028-3372-82b7-0e51f7f410ea.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 400564 IP address blocks: 207.174.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:cd:76:96:36:12:6a:c4:ad:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=b9084f7d-6adf-47f3-ade9-78f0e9773eb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d8:12:d9:ae:db:8c:b4:bb:57:aa:19:c6:91: 1f:38:33:67:e8:28:5d:15:6c:f0:02:39:3c:3d:81: c4:5c:ce:e6:ca:97:8f:d0:4a:47:13:2e:46:53:98: 04:4a:c7:6a:df:e0:27:f1:c8:cb:34:04:bb:21:e5: 81:51:c0:ba:4b:00:ab:61:ed:b7:30:f5:f8:b9:c3: 1a:d5:35:c6:15:ab:ec:fc:9f:2e:d4:f6:63:c9:df: 3d:93:ed:43:94:c3:26:74:eb:34:ae:e3:a3:c5:af: e1:fe:9d:26:26:0a:38:d7:f4:63:04:31:5a:aa:85: fe:52:5b:11:71:02:be:5a:95:2b:9d:0d:05:b6:ab: 59:4c:ee:51:6a:94:49:91:92:25:23:ca:2a:ba:2c: 48:09:0b:a6:41:26:32:90:14:e3:5a:b3:61:2d:ca: 00:e4:31:97:ad:a4:82:8d:82:23:f6:38:36:33:08: 2c:74:72:a5:32:05:f3:20:b9:e3:31:3b:d8:05:62: a2:f3:87:98:5b:21:a7:ee:c7:41:8e:25:65:22:d1: 8c:c9:3b:5d:57:2a:4c:b4:03:52:d6:71:ec:f6:b7: 67:f7:11:a4:86:33:44:86:dd:12:03:e5:90:70:a2: 43:28:f6:62:c0:46:c9:ab:be:87:50:cc:da:9c:00: b3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:AE:F7:E4:46:A1:25:8E:62:5C:CC:1B:43:CF:7C:11:09:46:BE:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/28db5388-3028-3372-82b7-0e51f7f410ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl X509v3 Authority Key Identifier: keyid:F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer sbgp-ipAddrBlock: critical IPv4: 207.174.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:84:6a:78:b2:17:cb:f2:63:fd:31:a4:18:e6:af:ed:3c:67: c7:7e:37:b4:90:3d:c2:ad:11:d8:69:fe:07:6b:cf:52:94:ee: 6f:4b:ff:59:69:c3:b5:97:60:f4:d3:d7:83:d7:35:8c:ab:b3: 4f:46:23:3a:b3:de:d1:d4:73:18:ec:8d:0e:d8:07:cf:fd:f6: 07:53:30:63:f2:19:58:fe:c3:0d:4a:11:57:89:e5:79:a4:98: d2:d1:91:20:e4:75:2e:43:b4:34:03:0e:b7:35:59:52:f6:ad: 13:65:87:3c:06:03:54:e3:d1:c2:79:b0:23:19:2b:7c:70:d5: a6:b1:b5:a9:c3:70:20:2a:72:f0:c2:3c:11:ec:ea:0c:65:bd: b9:19:0f:68:95:c1:52:02:4a:82:4b:96:54:f4:63:6a:ad:9d: ee:78:8f:4a:25:3b:5f:98:4d:95:7a:29:d8:59:ca:02:76:f5: 2c:03:ee:ad:34:19:20:7d:36:02:94:c9:a4:3b:bc:0d:5e:2d: 81:7d:b9:6f:6d:1d:04:4c:6a:63:8b:e5:72:10:43:6d:fc:43: 47:5c:cd:e4:6d:01:88:23:fa:f3:36:bf:4f:79:54:56:43:be: 14:b5:1d:a0:d2:de:db:18:9d:b7:c2:5b:55:5e:2e:b2:02:b0: b5:82:06:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKc12ljYSasSts4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4OTM5YTYtNmFjYi00OGU1LWFmOWEtZDFmN2NjYTNi MThlMB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk YjkwODRmN2QtNmFkZi00N2YzLWFkZTktNzhmMGU5NzczZWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltgS2a7bjLS7V6oZxpEfODNn6ChdFWzwAjk8 PYHEXM7mypeP0EpHEy5GU5gESsdq3+An8cjLNAS7IeWBUcC6SwCrYe23MPX4ucMa 1TXGFavs/J8u1PZjyd89k+1DlMMmdOs0ruOjxa/h/p0mJgo41/RjBDFaqoX+UlsR cQK+WpUrnQ0FtqtZTO5RapRJkZIlI8oquixICQumQSYykBTjWrNhLcoA5DGXraSC jYIj9jg2MwgsdHKlMgXzILnjMTvYBWKi84eYWyGn7sdBjiVlItGMyTtdVypMtANS 1nHs9rdn9xGkhjNEht0SA+WQcKJDKPZiwEbJq76HUMzanACzAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmu9+RGoSWOYlzMG0PPfBEJRr7mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5 MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3Y2NhM2IxOGUvMjhkYjUzODgtMzAyOC0z MzcyLTgyYjctMGU1MWY3ZjQxMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGU4OTM5YTYtNmFjYi00OGU1LWFm OWEtZDFmN2NjYTNiMThlL2RlODkzOWE2LTZhY2ItNDhlNS1hZjlhLWQxZjdjY2Ez YjE4ZS5jcmwwHwYDVR0jBBgwFoAU9xsfJFQFgH9uxl1GG4KiieftgsYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3 Y2NhM2IxOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz64UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCEaniyF8vyY/0xpBjmr+08Z8d+N7SQPcKtEdhp/gdrz1KU7m9L/1lp w7WXYPTT14PXNYyrs09GIzqz3tHUcxjsjQ7YB8/99gdTMGPyGVj+ww1KEVeJ5Xmk mNLRkSDkdS5DtDQDDrc1WVL2rRNlhzwGA1Tj0cJ5sCMZK3xw1aaxtanDcCAqcvDC PBHs6gxlvbkZD2iVwVICSoJLllT0Y2qtne54j0olO1+YTZV6KdhZygJ29SwD7q00 GSB9NgKUyaQ7vA1eLYF9uW9tHQRMamOL5XIQQ238Q0dczeRtAYgj+vM2v095VFZD vhS1HaDS3tsYnbfCW1VeLrICsLWCBgY= -----END CERTIFICATE-----Generated at Sun May 11 05:58:27 2025 by rpki-client