$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/9b4cbddb-faa2-329b-b7cc-9036654e5d1d.roa File: 9b4cbddb-faa2-329b-b7cc-9036654e5d1d.roa (raw, json) Hash identifier: QOBza9mn/JSUUhaenW5M+miBsPdAI+KSZd4ZA3Kh1E0= Subject key identifier: C3:8D:D7:59:6B:77:38:9C:93:F7:AB:72:38:1B:84:9B:AC:34:E7:F3 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F432858499294A92F10C636D0C90B53F0 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/9b4cbddb-faa2-329b-b7cc-9036654e5d1d.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 5650 IP address blocks: 207.210.112.0/24 maxlen: 24 207.210.113.0/24 maxlen: 24 209.51.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:a9:2f:10:c6:36:d0:c9:0b:53:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=9a2c541c-280d-483b-a09d-cd80735b19a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:3e:27:9e:15:09:3f:ae:61:e2:e7:3a:90:86: e0:1d:bc:cb:2a:f3:61:28:aa:42:42:4e:3b:96:73: 59:74:92:95:4e:25:1c:ba:66:52:59:47:92:5c:27: 2b:13:8b:e8:4e:95:a5:8b:59:3d:e8:62:e9:28:c8: 7f:c2:f6:0d:c1:e0:a3:d5:08:19:fe:3a:d4:aa:8e: 2a:7a:f6:db:11:05:d9:56:60:26:ad:c7:20:c0:85: f6:5f:d9:0d:ca:d6:29:a4:c8:d8:53:07:4e:d3:7d: 84:a4:7d:97:16:a2:cd:cd:99:32:6e:95:1e:20:41: 53:0f:4e:8a:b5:66:46:e1:c0:6b:98:7e:fd:65:50: b6:0f:f8:57:c7:73:19:45:b6:8c:cc:60:1f:7c:0c: e5:6d:34:5e:6d:2f:07:c2:8d:6a:ce:3b:2b:d7:01: 2d:37:b2:bf:d2:15:8e:b6:71:25:cd:10:00:d2:ae: a9:91:1c:7e:ab:4f:69:3d:0b:b0:ce:15:a2:d1:f5: 40:c7:83:25:54:2b:a7:24:35:7b:ff:1a:5f:60:13: e9:79:16:8d:12:c7:4d:fd:5b:3d:2d:b8:03:9c:9c: 0e:a4:d1:db:75:76:1a:34:0e:2a:1d:f7:d3:f3:1d: de:2f:b6:3b:bc:4c:a9:ad:b5:6b:52:68:95:b5:45: 89:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:8D:D7:59:6B:77:38:9C:93:F7:AB:72:38:1B:84:9B:AC:34:E7:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/9b4cbddb-faa2-329b-b7cc-9036654e5d1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 207.210.112.0/23 209.51.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:4a:b5:82:0c:37:f9:92:4c:68:16:6d:dd:c2:9c:1e:76:c2: c1:78:f1:2f:ab:7d:df:be:af:10:47:3b:47:99:e7:8e:b0:04: e1:ae:de:da:5c:6e:65:b5:dd:dc:42:35:10:86:db:6d:02:33: e5:56:97:92:72:e4:11:c1:f6:8e:75:c7:c7:8d:d9:7d:9f:1f: 0b:90:98:09:9e:a7:65:64:6d:3a:e0:78:c5:ff:28:74:6c:28: c9:79:04:2b:5e:98:bc:5d:a5:d8:21:ee:f8:65:48:29:95:a6: 20:e5:39:6c:43:0c:98:45:80:98:91:d7:1a:fe:d0:bf:5e:9e: e4:08:49:0e:61:be:ad:0c:1e:10:66:8d:40:fd:72:ab:18:95: 72:50:98:c9:77:75:6e:97:9b:61:8e:d3:0c:75:8e:15:6f:27: 47:89:b0:d4:cb:59:53:d1:2c:25:b3:a2:db:9d:d2:70:df:3c: fb:6d:c4:e4:96:f1:ea:dd:3f:7e:4c:2a:8c:b1:27:24:3b:c7: a5:8c:33:70:a4:6d:89:1a:f3:fc:3d:ce:79:69:5c:ae:1e:49: f5:3e:8c:22:d2:a8:f0:00:65:f2:43:79:08:9c:87:34:8e:90: 82:ee:e1:d0:b2:b3:1e:fa:3a:0d:2b:58:53:05:cd:a0:9a:d5: 02:24:f2:26 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEmSlKkvEMY20MkLU/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk OWEyYzU0MWMtMjgwZC00ODNiLWEwOWQtY2Q4MDczNWIxOWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgT4nnhUJP65h4uc6kIbgHbzLKvNhKKpCQk47 lnNZdJKVTiUcumZSWUeSXCcrE4voTpWli1k96GLpKMh/wvYNweCj1QgZ/jrUqo4q evbbEQXZVmAmrccgwIX2X9kNytYppMjYUwdO032EpH2XFqLNzZkybpUeIEFTD06K tWZG4cBrmH79ZVC2D/hXx3MZRbaMzGAffAzlbTRebS8Hwo1qzjsr1wEtN7K/0hWO tnElzRAA0q6pkRx+q09pPQuwzhWi0fVAx4MlVCunJDV7/xpfYBPpeRaNEsdN/Vs9 LbgDnJwOpNHbdXYaNA4qHffT8x3eL7Y7vEyprbVrUmiVtUWJuQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMON11lrdzick/ercjgbhJusNOfzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvOWI0Y2JkZGItZmFhMi0z MjliLWI3Y2MtOTAzNjY1NGU1ZDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBz9JwAwQA 0TOXMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAINKtYIMN/mSTGgWbd3CnB52wsF48S+rfd++rxBHO0eZ546w BOGu3tpcbmW13dxCNRCG220CM+VWl5Jy5BHB9o51x8eN2X2fHwuQmAmep2VkbTrg eMX/KHRsKMl5BCtemLxdpdgh7vhlSCmVpiDlOWxDDJhFgJiR1xr+0L9enuQISQ5h vq0MHhBmjUD9cqsYlXJQmMl3dW6Xm2GO0wx1jhVvJ0eJsNTLWVPRLCWzotud0nDf PPttxOSW8erdP35MKoyxJyQ7x6WMM3CkbYka8/w9znlpXK4eSfU+jCLSqPAAZfJD eQichzSOkILu4dCysx76Og0rWFMFzaCa1QIk8iY= -----END CERTIFICATE-----Generated at Wed May 7 15:42:00 2025 by rpki-client