$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/148bae10-4b3a-3470-87c3-6c21a344d540.roa File: 148bae10-4b3a-3470-87c3-6c21a344d540.roa (raw, json) Hash identifier: JzeDVPC6m8wUsOkvuBxT4Hmbs104Eq7vfLrlsBeGE6o= Subject key identifier: 69:F4:88:B4:FA:F0:16:65:95:CC:D3:C5:49:EF:C5:DC:6A:1D:04:1F Certificate issuer: /CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Certificate serial: 010D0C9F4328584988CF33764E69B9D0D5AF2B70 Authority key identifier: 43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/148bae10-4b3a-3470-87c3-6c21a344d540.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 395567 IP address blocks: 207.65.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:33:76:4e:69:b9:d0:d5:af:2b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=dbe51cec-80cf-4aa5-b009-4a6a484a5a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:aa:b9:f1:d7:3e:e9:0d:42:2c:d5:f6:4e:ba: 92:54:ce:58:9d:29:70:28:e2:26:1c:79:58:43:73: 6a:d3:6d:fd:d1:c3:41:b4:d2:b4:ce:e6:73:43:21: 00:ba:62:aa:6d:50:7b:5d:19:5e:21:25:ed:ab:da: 31:b2:10:66:94:2f:4d:49:f4:0a:67:9a:80:17:c3: c7:f9:d9:8f:01:25:0d:31:23:24:58:fa:8c:e1:2e: 29:1a:99:3b:9f:a9:97:49:97:7a:f4:13:45:2a:67: fa:c2:36:1c:3d:cc:fe:65:89:64:f8:92:fb:11:ca: b3:7a:3c:f0:57:aa:24:4c:c2:53:79:ea:b0:fa:3c: 3d:65:57:59:18:9b:ed:50:56:54:96:06:b2:21:73: 45:6a:36:e9:8c:ac:90:c1:c6:72:a0:91:55:d6:6e: e5:df:cd:ee:e4:2f:57:f6:5d:bf:4b:87:6b:09:2b: 58:86:91:d2:9d:55:d4:50:35:b2:ad:51:74:ed:71: 49:23:f1:2b:05:df:36:1f:73:56:32:a7:e5:47:6a: 2e:47:74:de:e3:77:4e:0b:8e:9a:7f:05:21:76:4e: 8a:f3:6f:d0:9f:12:07:83:5c:44:bd:25:66:9c:66: c2:d0:3a:3c:68:32:16:81:a5:88:ea:14:31:73:78: 97:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F4:88:B4:FA:F0:16:65:95:CC:D3:C5:49:EF:C5:DC:6A:1D:04:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/148bae10-4b3a-3470-87c3-6c21a344d540.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl X509v3 Authority Key Identifier: keyid:43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer sbgp-ipAddrBlock: critical IPv4: 207.65.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:f2:af:e0:31:7c:7c:58:9d:99:2c:33:85:b4:59:02:33:39: 84:53:08:0b:69:df:ae:13:3d:c1:45:79:34:d6:c4:be:31:8f: 2d:6f:cc:42:5d:08:40:be:91:17:65:e4:03:bc:41:be:5b:65: 6c:60:77:11:f4:fa:1a:1b:91:69:62:f2:fd:3f:e7:40:77:b1: 81:96:82:1c:08:64:13:32:5a:5f:f8:e3:40:04:20:59:af:5b: ac:aa:10:0a:44:4b:81:35:86:79:3f:13:eb:e3:ee:1f:dd:b1: 01:35:40:8b:82:2a:0f:a9:68:db:ce:8c:bc:48:6f:f6:0e:88: d1:51:90:d0:6c:7c:ea:00:45:87:e8:ab:8a:8b:26:3b:da:7f: e4:86:1f:13:69:41:73:75:39:1d:e7:9a:7f:aa:fc:f2:0e:1f: f6:4c:b7:e1:47:93:64:b6:72:43:95:cd:35:81:23:cf:eb:6a: 3d:85:de:45:36:36:a4:7e:da:d4:fd:47:9a:eb:72:d4:1f:ba: 5c:4f:49:6d:ed:21:1b:a6:9f:1c:34:4f:99:65:28:32:2b:e7: 85:11:84:f6:d2:4e:48:a8:02:56:ca:a8:59:9c:29:12:a6:b1: 22:b2:64:58:42:d1:76:83:a7:5c:b3:89:4d:49:09:e6:f3:c5: 1f:7b:17:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzzN2Tmm50NWvK3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU3N2I1YWYtYTFiNS00ODU4LWI2MWQtZjA5ZmQ2N2Y3 Y2IzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk ZGJlNTFjZWMtODBjZi00YWE1LWIwMDktNGE2YTQ4NGE1YTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqq58dc+6Q1CLNX2TrqSVM5YnSlwKOImHHlY Q3Nq02390cNBtNK0zuZzQyEAumKqbVB7XRleISXtq9oxshBmlC9NSfQKZ5qAF8PH +dmPASUNMSMkWPqM4S4pGpk7n6mXSZd69BNFKmf6wjYcPcz+ZYlk+JL7Ecqzejzw V6okTMJTeeqw+jw9ZVdZGJvtUFZUlgayIXNFajbpjKyQwcZyoJFV1m7l383u5C9X 9l2/S4drCStYhpHSnVXUUDWyrVF07XFJI/ErBd82H3NWMqflR2ouR3Te43dOC46a fwUhdk6K82/QnxIHg1xEvSVmnGbC0Do8aDIWgaWI6hQxc3iXbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGn0iLT68BZllczTxUnvxdxqHQQfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3 YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlmZDY3ZjdjYjMvMTQ4YmFlMTAtNGIzYS0z NDcwLTg3YzMtNmMyMWEzNDRkNTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWU3N2I1YWYtYTFiNS00ODU4LWI2 MWQtZjA5ZmQ2N2Y3Y2IzL2FlNzdiNWFmLWExYjUtNDg1OC1iNjFkLWYwOWZkNjdm N2NiMy5jcmwwHwYDVR0jBBgwFoAUQ8bZZVYwh5KCSgXB185ho81dPhkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlm ZDY3ZjdjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz0EqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTyr+AxfHxYnZksM4W0WQIzOYRTCAtp364TPcFFeTTWxL4xjy1vzEJd CEC+kRdl5AO8Qb5bZWxgdxH0+hobkWli8v0/50B3sYGWghwIZBMyWl/440AEIFmv W6yqEApES4E1hnk/E+vj7h/dsQE1QIuCKg+paNvOjLxIb/YOiNFRkNBsfOoARYfo q4qLJjvaf+SGHxNpQXN1OR3nmn+q/PIOH/ZMt+FHk2S2ckOVzTWBI8/raj2F3kU2 NqR+2tT9R5rrctQfulxPSW3tIRumnxw0T5llKDIr54URhPbSTkioAlbKqFmcKRKm sSKyZFhC0XaDp1yziU1JCebzxR97F/w= -----END CERTIFICATE-----Generated at Wed May 14 21:57:38 2025 by rpki-client