$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/3b70ef49-61e8-3c1d-a33a-51d194acff5e.roa File: 3b70ef49-61e8-3c1d-a33a-51d194acff5e.roa (raw, json) Hash identifier: dcdcSThqNmkuhHsT01N4HXjGqbdh5mdIa9c18fKObsA= Subject key identifier: 3C:5C:7F:27:44:CD:2A:81:AC:3B:E7:6C:21:2F:A8:18:61:DF:51:E0 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F43285849C20A247E8FFBDD4A071A04B0 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/3b70ef49-61e8-3c1d-a33a-51d194acff5e.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 46687 IP address blocks: 207.68.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:24:7e:8f:fb:dd:4a:07:1a:04:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=22b00d35-6631-49ce-ab29-f2587d6dcc07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:32:b7:5c:3e:78:79:38:ce:7d:5a:2a:d3:91: 36:1a:8a:6e:2f:a9:98:8f:e6:6d:aa:ce:79:21:97: fd:75:9d:09:96:63:75:5f:45:4c:5d:eb:75:b9:33: ce:ef:b8:be:8f:2a:51:8f:83:e9:73:0a:64:27:16: 59:c2:c9:6e:91:7b:2b:de:f1:0b:93:40:65:a2:04: 14:59:ef:ed:be:8e:52:35:7b:1a:dd:02:e9:a5:a6: 58:6e:d6:d2:c3:82:1e:f6:bd:ce:ce:10:e8:16:c1: 44:59:22:d5:10:6f:3a:44:56:0b:c7:6f:64:b6:48: 0e:b0:f6:33:60:d3:d8:62:9f:4f:68:03:98:aa:bb: 15:a4:ee:89:8f:d6:07:25:94:65:6f:d3:36:b0:52: 4e:0f:94:11:9e:2f:74:0f:33:99:3c:ae:83:4d:c8: 98:81:83:5f:52:f0:aa:a7:6e:ec:65:f4:c8:ad:72: 94:bc:44:fd:76:24:ac:a8:3c:81:a7:13:6f:d3:c2: 44:20:41:3a:37:fe:41:ae:47:f7:b6:71:b0:b7:41: bd:46:e4:eb:c3:c3:b6:35:67:01:6e:df:c1:7e:82: d4:c5:9c:bb:03:a8:44:c6:e5:00:08:58:91:e2:6c: 18:e8:35:d7:a5:20:06:c3:8f:b0:3e:ae:fb:63:9f: 28:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:5C:7F:27:44:CD:2A:81:AC:3B:E7:6C:21:2F:A8:18:61:DF:51:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/3b70ef49-61e8-3c1d-a33a-51d194acff5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 207.68.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:dc:e9:cd:d2:ff:7e:54:e5:c8:88:08:28:5c:16:08:07:82: 09:23:8e:cb:ab:09:cb:74:91:2b:11:9a:6d:d2:ad:32:77:33: b6:3a:a7:6e:98:f0:5f:ea:94:a9:39:ed:ca:b5:72:c6:98:6b: d9:7d:65:75:f5:0c:5e:07:31:25:ef:c8:29:eb:50:45:50:3f: e4:07:3a:12:91:fe:43:ef:cf:e5:3c:a7:0d:18:b2:3e:9c:d6: ae:7a:48:8e:60:2a:87:26:5f:45:cb:ea:dd:3e:14:9a:7a:eb: 16:a7:dc:aa:76:1b:f9:6c:fa:ee:d7:0d:f1:ca:77:ff:55:df: 85:ac:f9:a8:5b:02:37:66:71:b3:b8:3f:9b:82:55:d2:83:fb: 16:e8:0d:71:3c:8d:f3:21:75:ca:0d:a3:a1:d6:31:47:d2:6b: 75:e7:bc:d1:51:40:c9:78:d6:73:15:14:de:4c:04:3a:40:2e: 67:78:ce:3c:46:97:b8:4e:ce:19:02:88:7c:84:98:3f:ca:d2: 02:4c:cc:bf:a2:cf:ad:77:39:9e:88:bc:f2:0c:0f:7d:5e:26: 90:d3:72:93:15:0c:f2:3f:6b:b1:90:a9:cc:8f:27:65:d0:a4: 75:68:e3:20:6c:9e:52:57:c3:b9:66:09:00:63:fe:d7:e2:cb: e3:77:f6:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCiR+j/vdSgcaBLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk MjJiMDBkMzUtNjYzMS00OWNlLWFiMjktZjI1ODdkNmRjYzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDK3XD54eTjOfVoq05E2GopuL6mYj+Ztqs55 IZf9dZ0JlmN1X0VMXet1uTPO77i+jypRj4PpcwpkJxZZwslukXsr3vELk0BlogQU We/tvo5SNXsa3QLppaZYbtbSw4Ie9r3OzhDoFsFEWSLVEG86RFYLx29ktkgOsPYz YNPYYp9PaAOYqrsVpO6Jj9YHJZRlb9M2sFJOD5QRni90DzOZPK6DTciYgYNfUvCq p27sZfTIrXKUvET9diSsqDyBpxNv08JEIEE6N/5Brkf3tnGwt0G9RuTrw8O2NWcB bt/BfoLUxZy7A6hExuUACFiR4mwY6DXXpSAGw4+wPq77Y58oawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxcfydEzSqBrDvnbCEvqBhh31HgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvM2I3MGVmNDktNjFlOC0z YzFkLWEzM2EtNTFkMTk0YWNmZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFz0TgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDc6c3S/35U5ciICChcFggHggkjjsurCct0kSsRmm3SrTJ3M7Y6p26Y 8F/qlKk57cq1csaYa9l9ZXX1DF4HMSXvyCnrUEVQP+QHOhKR/kPvz+U8pw0Ysj6c 1q56SI5gKocmX0XL6t0+FJp66xan3Kp2G/ls+u7XDfHKd/9V34Ws+ahbAjdmcbO4 P5uCVdKD+xboDXE8jfMhdcoNo6HWMUfSa3XnvNFRQMl41nMVFN5MBDpALmd4zjxG l7hOzhkCiHyEmD/K0gJMzL+iz613OZ6IvPIMD31eJpDTcpMVDPI/a7GQqcyPJ2XQ pHVo4yBsnlJXw7lmCQBj/tfiy+N39i0= -----END CERTIFICATE-----Generated at Mon May 12 05:28:21 2025 by rpki-client