$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/980354e2-3c42-4edd-9777-d1d6e1642181/9133a9df-5488-32e9-9f31-295fa33ac5e5.roa File: 9133a9df-5488-32e9-9f31-295fa33ac5e5.roa (raw, json) Hash identifier: r4eSjFVjmIQN0QFgX8aG3N8w5MSmmdwFxq7cMJaVjeU= Subject key identifier: F6:26:74:3B:12:AD:72:4F:CB:46:16:E7:45:07:8A:51:95:3D:06:B5 Certificate issuer: /CN=980354e2-3c42-4edd-9777-d1d6e1642181 Certificate serial: 010D0C9F43285849AD78CB4E62BF7BF707523240 Authority key identifier: F4:5F:9F:9B:76:DF:58:13:AB:80:5E:79:65:DB:F7:4F:29:2A:2D:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/980354e2-3c42-4edd-9777-d1d6e1642181.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/980354e2-3c42-4edd-9777-d1d6e1642181/9133a9df-5488-32e9-9f31-295fa33ac5e5.roa Signing time: Mon 28 Apr 2025 16:12:03 +0000 ROA not before: Mon 28 Apr 2025 16:12:03 +0000 ROA not after: Sun 27 Jul 2025 16:12:03 +0000 asID: 394621 IP address blocks: 207.166.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/980354e2-3c42-4edd-9777-d1d6e1642181/980354e2-3c42-4edd-9777-d1d6e1642181.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/980354e2-3c42-4edd-9777-d1d6e1642181/980354e2-3c42-4edd-9777-d1d6e1642181.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/980354e2-3c42-4edd-9777-d1d6e1642181.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:78:cb:4e:62:bf:7b:f7:07:52:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=980354e2-3c42-4edd-9777-d1d6e1642181 Validity Not Before: Apr 28 16:12:03 2025 GMT Not After : Jul 27 16:12:03 2025 GMT Subject: CN=3569b69c-04c8-4dda-b606-f2f0358d6cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:38:ad:30:43:6e:8f:d3:6a:cb:1f:93:e8:6d: 2f:97:5f:75:3d:76:ba:df:4b:46:9f:6e:d9:3f:c9: 89:aa:37:e5:67:60:26:ae:a6:e0:bb:eb:f6:06:96: 0e:eb:1f:14:8e:5a:53:74:90:56:b7:e0:42:8f:ea: 7a:58:1f:9e:72:28:0d:e2:d5:bf:2b:d9:42:8c:8e: fd:b2:6c:7f:4f:24:bb:96:02:0e:dc:3b:c8:6e:c9: 2a:4a:07:d7:fb:cd:7e:d8:ab:03:86:41:65:9f:27: 7f:60:76:96:fa:f5:88:55:1f:63:6b:8f:3d:2c:03: e0:13:01:1b:f9:3e:13:01:42:5b:21:12:22:7b:00: b6:07:5d:7d:d5:99:ad:a7:79:7c:47:d9:9f:ef:0c: df:a8:c9:8c:17:09:a1:da:a0:02:04:66:14:bd:3e: ce:ea:b1:1e:59:a9:e4:5b:5e:e8:5e:f0:23:54:71: 05:25:1b:68:01:75:ac:88:e3:9d:92:9c:7a:98:6f: 9e:bb:b7:77:85:68:83:27:7d:19:1f:fd:02:04:ee: 02:4a:db:ac:d5:f6:3c:b8:e0:af:73:b8:49:b7:73: 06:3c:5a:c9:89:67:a7:13:f6:06:39:63:7e:73:25: b0:be:52:3f:f0:18:76:d4:56:4d:78:1e:90:6b:f5: 4d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:26:74:3B:12:AD:72:4F:CB:46:16:E7:45:07:8A:51:95:3D:06:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/980354e2-3c42-4edd-9777-d1d6e1642181/9133a9df-5488-32e9-9f31-295fa33ac5e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/980354e2-3c42-4edd-9777-d1d6e1642181/980354e2-3c42-4edd-9777-d1d6e1642181.crl X509v3 Authority Key Identifier: keyid:F4:5F:9F:9B:76:DF:58:13:AB:80:5E:79:65:DB:F7:4F:29:2A:2D:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/980354e2-3c42-4edd-9777-d1d6e1642181.cer sbgp-ipAddrBlock: critical IPv4: 207.166.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:ab:32:eb:63:71:c2:7c:29:cf:a7:fc:43:c6:da:3d:fc:d5: 5a:f7:f3:a0:79:2d:9d:db:0a:92:e7:6a:60:29:bb:15:15:c7: ee:31:09:16:8c:a1:7f:65:90:54:26:39:e6:ed:8a:18:b7:b1: 51:98:dc:fd:23:25:44:a9:bb:b1:03:2a:91:c3:46:e5:34:35: 1d:15:53:ba:3e:b1:92:3f:fe:f3:8b:eb:57:9c:76:eb:ec:94: 61:b5:6e:22:18:2e:38:e3:99:32:e2:ee:a0:41:d8:33:dc:cf: 13:ad:04:d6:1d:c1:1a:47:a8:e2:aa:64:98:7d:c1:29:28:24: 6d:f7:c9:5b:fa:b7:c7:7b:03:2b:db:0e:77:c5:72:cc:20:c0: 79:f7:62:b5:00:a5:a9:3b:1e:8d:71:b4:44:19:eb:13:66:20: 3c:e3:c3:5b:32:35:02:5c:f6:ad:11:55:64:ae:0f:47:8a:9f: 27:bb:31:c0:b8:bd:2e:5a:8d:c4:dc:07:79:43:c1:b0:9a:37: a8:4a:e1:4f:e0:99:9a:06:1f:5f:d7:06:e1:25:6d:fc:73:d5: 91:49:24:d7:b4:01:00:18:d6:e0:a4:85:22:4a:6c:99:60:2a: 59:c3:47:eb:ff:bf:c4:48:5e:4c:2d:77:30:61:80:41:77:a3: 29:7c:05:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmteMtOYr979wdSMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgwMzU0ZTItM2M0Mi00ZWRkLTk3NzctZDFkNmUxNjQy MTgxMB4XDTI1MDQyODE2MTIwM1oXDTI1MDcyNzE2MTIwM1owLzEtMCsGA1UEAxMk MzU2OWI2OWMtMDRjOC00ZGRhLWI2MDYtZjJmMDM1OGQ2Y2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTitMENuj9Nqyx+T6G0vl191PXa630tGn27Z P8mJqjflZ2Amrqbgu+v2BpYO6x8UjlpTdJBWt+BCj+p6WB+ecigN4tW/K9lCjI79 smx/TyS7lgIO3DvIbskqSgfX+81+2KsDhkFlnyd/YHaW+vWIVR9ja489LAPgEwEb +T4TAUJbIRIiewC2B1191Zmtp3l8R9mf7wzfqMmMFwmh2qACBGYUvT7O6rEeWank W17oXvAjVHEFJRtoAXWsiOOdkpx6mG+eu7d3hWiDJ30ZH/0CBO4CStus1fY8uOCv c7hJt3MGPFrJiWenE/YGOWN+cyWwvlI/8Bh21FZNeB6Qa/VN4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPYmdDsSrXJPy0YW50UHilGVPQa1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85ODAz NTRlMi0zYzQyLTRlZGQtOTc3Ny1kMWQ2ZTE2NDIxODEvOTEzM2E5ZGYtNTQ4OC0z MmU5LTlmMzEtMjk1ZmEzM2FjNWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOTgwMzU0ZTItM2M0Mi00ZWRkLTk3 NzctZDFkNmUxNjQyMTgxLzk4MDM1NGUyLTNjNDItNGVkZC05Nzc3LWQxZDZlMTY0 MjE4MS5jcmwwHwYDVR0jBBgwFoAU9F+fm3bfWBOrgF55Zdv3TykqLQgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy85ODAzNTRlMi0zYzQyLTRlZGQtOTc3Ny1kMWQ2 ZTE2NDIxODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6aLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWrMutjccJ8Kc+n/EPG2j381Vr386B5LZ3bCpLnamApuxUVx+4xCRaM oX9lkFQmOebtihi3sVGY3P0jJUSpu7EDKpHDRuU0NR0VU7o+sZI//vOL61ecduvs lGG1biIYLjjjmTLi7qBB2DPczxOtBNYdwRpHqOKqZJh9wSkoJG33yVv6t8d7Ayvb DnfFcswgwHn3YrUApak7Ho1xtEQZ6xNmIDzjw1syNQJc9q0RVWSuD0eKnye7McC4 vS5ajcTcB3lDwbCaN6hK4U/gmZoGH1/XBuElbfxz1ZFJJNe0AQAY1uCkhSJKbJlg KlnDR+v/v8RIXkwtdzBhgEF3oyl8BdA= -----END CERTIFICATE-----Generated at Tue May 13 12:42:47 2025 by rpki-client