$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15eefb33-983f-41ca-b75b-50ef1b0aa5fc/4f2cf2f8-1ae7-3372-9b98-2fbddeafdea4.roa File: 4f2cf2f8-1ae7-3372-9b98-2fbddeafdea4.roa (raw, json) Hash identifier: gcXC82mHb3ULpF+octa/9/4sObSpYfpXAwRjxKx7e/o= Subject key identifier: CB:43:87:CB:0C:A1:89:DF:EF:5B:1E:51:D4:51:24:79:F9:93:CD:A1 Certificate issuer: /CN=15eefb33-983f-41ca-b75b-50ef1b0aa5fc Certificate serial: 010D0C9F43285848EF613F9C7D5D28305B7A37B0 Authority key identifier: 83:26:8B:9B:F9:11:81:24:6E:B7:F6:9A:3E:55:DB:0C:41:66:A2:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15eefb33-983f-41ca-b75b-50ef1b0aa5fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15eefb33-983f-41ca-b75b-50ef1b0aa5fc/4f2cf2f8-1ae7-3372-9b98-2fbddeafdea4.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 397856 IP address blocks: 207.188.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15eefb33-983f-41ca-b75b-50ef1b0aa5fc/15eefb33-983f-41ca-b75b-50ef1b0aa5fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15eefb33-983f-41ca-b75b-50ef1b0aa5fc/15eefb33-983f-41ca-b75b-50ef1b0aa5fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15eefb33-983f-41ca-b75b-50ef1b0aa5fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:3f:9c:7d:5d:28:30:5b:7a:37:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15eefb33-983f-41ca-b75b-50ef1b0aa5fc Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=40d2965c-1b97-4123-a823-96e9704ea9c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a3:20:25:0a:69:54:4a:4e:9d:2a:bd:ca:a5: b5:17:02:ae:df:2b:5a:c1:fc:e3:f8:6c:44:3a:58: 0e:8c:85:17:6b:4d:60:8f:34:71:15:71:04:98:fc: 90:82:d9:8c:75:5c:ce:79:29:bd:c7:52:11:ce:1b: 07:4a:9e:dc:23:a6:32:ff:dd:f7:b6:a8:e8:ad:99: 89:fd:16:73:b4:69:54:c1:7a:5f:71:d4:33:12:58: 9e:a1:fc:5b:6e:54:53:2f:55:d5:45:1c:e2:81:f3: dd:6a:e8:56:55:19:4d:b4:ec:e1:18:65:13:a1:eb: 52:ce:14:de:f7:30:da:bb:62:74:ed:06:70:5d:0d: 01:8b:6b:59:5f:59:d0:5f:0f:4e:bb:7b:40:83:c7: d7:5c:a9:5c:5a:8b:94:17:09:ee:81:cb:8f:95:70: 8d:05:e4:fd:a8:68:32:dc:b3:ed:0f:12:87:89:2d: 4a:e8:9e:5b:1d:00:ae:82:b0:12:a2:1e:01:bf:85: c9:80:1c:10:1c:31:89:0c:ca:b3:b5:3e:23:76:1a: 47:d1:62:9c:1b:4c:c3:9a:13:70:6d:40:11:45:43: 43:bb:1d:64:04:a8:7e:64:07:c0:f0:e9:f0:6d:7b: 47:94:92:e7:8b:4d:84:4b:f8:2d:d8:2c:86:f7:28: 84:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:43:87:CB:0C:A1:89:DF:EF:5B:1E:51:D4:51:24:79:F9:93:CD:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15eefb33-983f-41ca-b75b-50ef1b0aa5fc/4f2cf2f8-1ae7-3372-9b98-2fbddeafdea4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15eefb33-983f-41ca-b75b-50ef1b0aa5fc/15eefb33-983f-41ca-b75b-50ef1b0aa5fc.crl X509v3 Authority Key Identifier: keyid:83:26:8B:9B:F9:11:81:24:6E:B7:F6:9A:3E:55:DB:0C:41:66:A2:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15eefb33-983f-41ca-b75b-50ef1b0aa5fc.cer sbgp-ipAddrBlock: critical IPv4: 207.188.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:07:fa:94:1c:31:f4:9b:3e:9a:e3:b9:36:2e:3c:bc:06:e7: f8:bb:74:46:74:26:cb:06:8a:b9:37:48:03:83:e8:85:cd:30: 6a:8a:61:dc:25:4b:ca:85:c8:49:80:79:95:a2:b6:3c:3f:c8: 4a:71:b4:47:71:81:c1:b8:65:c0:70:fc:20:b5:f2:4b:e9:6f: 55:e2:64:fd:23:e8:5d:41:69:b7:63:a4:81:76:79:cb:ca:81: a8:39:85:7d:01:ed:70:2a:c5:f0:ab:80:a8:73:08:e7:98:6b: 3f:eb:d2:94:71:98:79:88:d6:92:d0:8c:6a:c7:c8:55:09:33: 95:af:b5:e1:3a:22:06:97:09:78:c2:f1:c8:e1:da:d8:b9:2c: 5c:3a:b1:ac:60:92:49:e7:d5:1a:35:3e:a7:7a:35:00:90:57: 39:54:ff:2c:23:e0:18:a7:3e:da:5a:e0:96:90:02:de:71:6c: dc:53:9e:76:7d:5e:df:12:6b:72:58:5a:60:ad:d1:9b:0d:c6: c1:15:40:37:8d:8d:ae:41:8d:a9:17:f5:f6:a7:91:23:e1:36: 44:a0:39:b5:a9:e9:f5:ba:22:a8:fb:6a:99:be:72:8c:78:21: 08:9a:fa:c8:18:93:4e:f2:f8:32:0f:aa:f8:a3:40:dc:94:01: 47:8e:34:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYT+cfV0oMFt6N7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTVlZWZiMzMtOTgzZi00MWNhLWI3NWItNTBlZjFiMGFh NWZjMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk NDBkMjk2NWMtMWI5Ny00MTIzLWE4MjMtOTZlOTcwNGVhOWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKMgJQppVEpOnSq9yqW1FwKu3ytawfzj+GxE OlgOjIUXa01gjzRxFXEEmPyQgtmMdVzOeSm9x1IRzhsHSp7cI6Yy/933tqjorZmJ /RZztGlUwXpfcdQzElieofxbblRTL1XVRRzigfPdauhWVRlNtOzhGGUToetSzhTe 9zDau2J07QZwXQ0Bi2tZX1nQXw9Ou3tAg8fXXKlcWouUFwnugcuPlXCNBeT9qGgy 3LPtDxKHiS1K6J5bHQCugrASoh4Bv4XJgBwQHDGJDMqztT4jdhpH0WKcG0zDmhNw bUARRUNDux1kBKh+ZAfA8OnwbXtHlJLni02ES/gt2CyG9yiEFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtDh8sMoYnf71seUdRRJHn5k82hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNWVl ZmIzMy05ODNmLTQxY2EtYjc1Yi01MGVmMWIwYWE1ZmMvNGYyY2YyZjgtMWFlNy0z MzcyLTliOTgtMmZiZGRlYWZkZWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTVlZWZiMzMtOTgzZi00MWNhLWI3 NWItNTBlZjFiMGFhNWZjLzE1ZWVmYjMzLTk4M2YtNDFjYS1iNzViLTUwZWYxYjBh YTVmYy5jcmwwHwYDVR0jBBgwFoAUgyaLm/kRgSRut/aaPlXbDEFmosYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xNWVlZmIzMy05ODNmLTQxY2EtYjc1Yi01MGVm MWIwYWE1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz7wEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIH+pQcMfSbPprjuTYuPLwG5/i7dEZ0JssGirk3SAOD6IXNMGqKYdwl S8qFyEmAeZWitjw/yEpxtEdxgcG4ZcBw/CC18kvpb1XiZP0j6F1BabdjpIF2ecvK gag5hX0B7XAqxfCrgKhzCOeYaz/r0pRxmHmI1pLQjGrHyFUJM5WvteE6IgaXCXjC 8cjh2ti5LFw6saxgkknn1Ro1Pqd6NQCQVzlU/ywj4BinPtpa4JaQAt5xbNxTnnZ9 Xt8Sa3JYWmCt0ZsNxsEVQDeNja5BjakX9fankSPhNkSgObWp6fW6Iqj7apm+cox4 IQia+sgYk07y+DIPqvijQNyUAUeONEk= -----END CERTIFICATE-----Generated at Thu May 8 19:02:03 2025 by rpki-client