$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/d8207238-f42f-3e03-914f-1208ebf45ac1.roa File: d8207238-f42f-3e03-914f-1208ebf45ac1.roa (raw, json) Hash identifier: 7IpQg5xzqsKSFqAiU6MoCdamN8NUyrmpEcDKBJkXGgc= Subject key identifier: A4:CC:DF:8C:2E:86:01:98:5C:6D:6F:8E:1A:42:64:5E:A2:59:1C:A8 Certificate issuer: /CN=1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07 Certificate serial: 010D0C9F43285849C4D4CAA27CAB54F231450480 Authority key identifier: 7D:8E:A4:82:0C:DC:9A:6F:4F:C9:31:C7:23:75:90:14:E4:AE:3A:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/d8207238-f42f-3e03-914f-1208ebf45ac1.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 7029 IP address blocks: 207.90.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:ca:a2:7c:ab:54:f2:31:45:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=eb2e03aa-8fc1-4f7e-a2a1-58bfdddf946a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d0:c7:9d:d7:7f:36:7c:21:38:ef:cb:4a:36: 87:8c:7d:f1:39:b5:28:97:76:55:bc:e4:54:50:6b: 31:73:6a:45:fb:0d:86:86:04:00:26:e3:21:c8:1b: b5:29:4c:f1:ab:30:c9:1d:f1:12:1f:d8:fd:b6:69: e7:72:73:b0:90:85:01:ef:b6:6b:2c:26:cc:8b:c5: c5:7e:c6:1d:3f:60:72:2b:58:08:91:c0:3c:34:4e: f0:2e:38:5b:1c:1b:1c:01:4d:4f:32:9c:28:71:b4: b0:7e:17:f0:52:66:82:f6:39:16:ed:51:d8:30:bb: d2:39:da:fb:a2:33:70:cc:81:0b:19:9e:de:89:70: e1:21:df:5a:0f:7e:e1:d5:75:85:4e:92:49:f8:21: 69:1c:eb:24:41:72:35:43:13:5a:f0:5b:19:7d:1a: 54:97:f5:fe:6a:53:a5:45:e9:e8:f0:f2:6b:13:54: ad:ce:7c:96:76:aa:49:df:0d:83:a8:a8:fe:a2:ac: 5e:86:28:ef:7d:2c:a2:7b:b6:dc:d1:f6:fe:4a:72: fb:e3:47:a4:2e:02:1e:79:2c:df:2c:7a:c9:51:5f: e6:76:b8:6a:80:ff:90:7d:1d:52:8c:01:29:f2:78: 4d:b6:9e:e1:6d:df:d0:7a:f4:4b:04:bf:b9:76:7a: 6e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:CC:DF:8C:2E:86:01:98:5C:6D:6F:8E:1A:42:64:5E:A2:59:1C:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/d8207238-f42f-3e03-914f-1208ebf45ac1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.crl X509v3 Authority Key Identifier: keyid:7D:8E:A4:82:0C:DC:9A:6F:4F:C9:31:C7:23:75:90:14:E4:AE:3A:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.cer sbgp-ipAddrBlock: critical IPv4: 207.90.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:88:74:92:d6:c1:09:6e:73:75:bb:a8:09:ab:e6:81:a6:61: e8:7d:41:4b:01:dc:66:4a:08:dd:dc:54:4e:52:3d:e4:17:08: 71:f3:0b:19:29:a9:80:c3:f0:65:b9:d2:2a:51:d5:e9:4e:3c: 04:d9:60:d2:9e:6f:e6:d5:ac:0a:b9:d1:01:6b:3e:5b:47:22: aa:4e:3a:07:cb:2f:7e:65:73:11:e5:b8:34:10:c4:9d:ea:9b: 7b:4a:6c:34:84:5b:67:a4:bb:00:78:dc:c0:b5:f1:9d:f2:04: 61:ee:31:a0:d6:20:1e:71:7b:b8:ec:54:f2:f5:e3:b6:57:3a: 90:25:a0:ad:eb:ce:99:e7:83:5c:45:dc:8e:12:0f:5f:0b:91: af:b7:d5:a7:04:50:7d:7c:d1:99:eb:ba:81:3c:ca:a7:45:60: 4b:da:39:d1:a8:e4:48:7e:34:8c:5b:e7:8d:fd:c2:69:82:35: 8c:12:8d:17:ea:3d:6d:3a:c5:91:38:c2:dc:c8:a6:d9:63:fc: 16:da:c2:c7:64:05:6e:78:b9:24:eb:9a:e6:06:3a:dd:ae:a3: 3c:10:3f:ea:9d:2b:c1:20:e9:e8:c3:e9:70:29:19:54:61:53: 9f:e0:04:1d:b6:f3:d1:57:68:48:13:d0:6a:04:21:2c:c8:86: bb:fb:12:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1MqifKtU8jFFBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyYzEzNzctNGYyNi00YWU0LWJiNmMtM2NhN2ZlMjVi ZTA3MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk ZWIyZTAzYWEtOGZjMS00ZjdlLWEyYTEtNThiZmRkZGY5NDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNDHndd/NnwhOO/LSjaHjH3xObUol3ZVvORU UGsxc2pF+w2GhgQAJuMhyBu1KUzxqzDJHfESH9j9tmnncnOwkIUB77ZrLCbMi8XF fsYdP2ByK1gIkcA8NE7wLjhbHBscAU1PMpwocbSwfhfwUmaC9jkW7VHYMLvSOdr7 ojNwzIELGZ7eiXDhId9aD37h1XWFTpJJ+CFpHOskQXI1QxNa8FsZfRpUl/X+alOl Reno8PJrE1StznyWdqpJ3w2DqKj+oqxehijvfSyie7bc0fb+SnL740ekLgIeeSzf LHrJUV/mdrhqgP+QfR1SjAEp8nhNtp7hbd/QevRLBL+5dnpuGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTM34wuhgGYXG1vjhpCZF6iWRyoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xZDJj MTM3Ny00ZjI2LTRhZTQtYmI2Yy0zY2E3ZmUyNWJlMDcvZDgyMDcyMzgtZjQyZi0z ZTAzLTkxNGYtMTIwOGViZjQ1YWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWQyYzEzNzctNGYyNi00YWU0LWJi NmMtM2NhN2ZlMjViZTA3LzFkMmMxMzc3LTRmMjYtNGFlNC1iYjZjLTNjYTdmZTI1 YmUwNy5jcmwwHwYDVR0jBBgwFoAUfY6kggzcmm9PyTHHI3WQFOSuOv0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xZDJjMTM3Ny00ZjI2LTRhZTQtYmI2Yy0zY2E3 ZmUyNWJlMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz1rUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCIdJLWwQluc3W7qAmr5oGmYeh9QUsB3GZKCN3cVE5SPeQXCHHzCxkp qYDD8GW50ipR1elOPATZYNKeb+bVrAq50QFrPltHIqpOOgfLL35lcxHluDQQxJ3q m3tKbDSEW2ekuwB43MC18Z3yBGHuMaDWIB5xe7jsVPL147ZXOpAloK3rzpnng1xF 3I4SD18Lka+31acEUH180ZnruoE8yqdFYEvaOdGo5Eh+NIxb5439wmmCNYwSjRfq PW06xZE4wtzIptlj/BbawsdkBW54uSTrmuYGOt2uozwQP+qdK8Eg6ejD6XApGVRh U5/gBB2289FXaEgT0GoEISzIhrv7EjE= -----END CERTIFICATE-----Generated at Wed May 7 10:04:47 2025 by rpki-client