$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff/31fbfac3-3eee-330b-b4fc-6a494f86a985.roa File: 31fbfac3-3eee-330b-b4fc-6a494f86a985.roa (raw, json) Hash identifier: bpVXA5hdad1jOjSXOqqZ/cSkh5jq3NPRbqXWTSYZ46Y= Subject key identifier: ED:C4:7E:AE:09:85:80:52:38:C6:D6:3E:3C:DB:2A:1D:72:88:93:80 Certificate issuer: /CN=f40e4177-8831-4c30-83f0-fa2c74173aff Certificate serial: 010D0C9F432858498769A86B49341C17635E3FC0 Authority key identifier: 19:D9:FD:6D:F5:8C:FE:30:7D:D1:9A:39:59:39:DC:F3:7B:81:68:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff/31fbfac3-3eee-330b-b4fc-6a494f86a985.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 400860 IP address blocks: 207.166.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff/f40e4177-8831-4c30-83f0-fa2c74173aff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff/f40e4177-8831-4c30-83f0-fa2c74173aff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:a8:6b:49:34:1c:17:63:5e:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f40e4177-8831-4c30-83f0-fa2c74173aff Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=b3bdc1a3-8840-4777-917f-dbf2335f8b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c1:c3:26:17:78:6e:85:e1:94:7a:c1:54:55: b7:48:65:3a:08:90:0b:f5:3e:25:a0:9e:83:22:88: e7:91:2e:14:0a:f1:e9:1b:89:44:84:1a:8d:e4:f9: 10:22:b3:65:c4:7b:35:9f:ca:18:76:48:b9:19:13: c2:25:77:fe:49:dc:59:e1:70:18:29:3d:12:d5:6f: 6c:29:f3:18:23:c2:d4:73:07:7b:86:c7:98:8d:77: b4:06:33:5c:1e:59:06:98:08:e5:74:08:17:c0:78: 34:8f:b4:7f:cc:d8:1f:dc:3a:77:99:cb:5c:ec:8a: e0:58:f3:c2:32:27:a4:a5:7a:05:d1:ef:80:97:4a: 6c:dc:9d:76:9f:24:eb:37:fd:a1:6a:0b:45:c0:91: f9:a1:00:db:9e:9c:f3:e4:ac:90:fe:22:b5:c8:c8: 04:92:58:92:3e:b6:10:6e:59:f1:16:eb:72:76:24: d4:36:8b:ca:29:40:04:d9:78:73:1d:cf:3a:66:1e: 98:1f:3f:09:ff:cf:36:26:c8:2d:c8:13:3e:f7:40: a3:d4:d3:6c:c6:d9:a4:90:b0:92:36:22:c6:bb:89: 66:d9:35:a2:14:55:8c:14:5b:72:53:bd:1b:bf:50: 45:2e:56:79:0c:4d:30:2e:68:54:f0:12:3a:85:f7: 46:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C4:7E:AE:09:85:80:52:38:C6:D6:3E:3C:DB:2A:1D:72:88:93:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff/31fbfac3-3eee-330b-b4fc-6a494f86a985.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff/f40e4177-8831-4c30-83f0-fa2c74173aff.crl X509v3 Authority Key Identifier: keyid:19:D9:FD:6D:F5:8C:FE:30:7D:D1:9A:39:59:39:DC:F3:7B:81:68:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff.cer sbgp-ipAddrBlock: critical IPv4: 207.166.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:e4:67:63:c7:69:f5:80:ac:63:2b:c1:81:62:63:15:ba:10: 8e:ce:d5:84:3c:98:a3:eb:0a:ca:d2:7a:ea:a0:7e:e5:14:3e: 96:0b:b7:e2:4c:72:cc:38:d2:b8:ee:36:df:6b:96:a9:d5:ad: ad:4c:9d:5a:99:03:08:14:cb:e8:e9:77:5e:2c:70:a9:b1:fa: ec:bc:01:28:d9:73:56:32:97:61:b0:41:3d:04:c4:68:c9:c5: 3e:30:3c:72:10:f6:dc:8e:a7:9b:a1:17:9b:d3:31:24:4b:a6: 0b:10:54:16:ba:11:5e:52:00:61:d0:3a:ad:c7:d3:60:66:92: ea:d7:47:11:c3:a3:74:e1:72:90:5e:f2:53:58:32:a4:3e:2b: f8:65:9c:4d:39:84:20:e4:42:6f:f7:01:98:f3:aa:a8:d2:73: e6:13:50:34:6f:b1:19:6d:7f:f6:1a:7f:77:91:d1:ba:9b:da: 20:9d:17:4a:30:09:88:91:cd:71:90:79:34:9a:b5:ab:8c:17: c0:65:90:fb:58:21:72:85:88:a4:43:4a:5a:6d:05:7f:70:67: eb:32:b4:1a:a1:23:51:52:cc:17:96:4a:3a:7d:31:9f:06:84: ce:ee:31:7e:90:75:cc:eb:92:08:33:92:33:7d:a1:e9:3d:61: 95:29:9a:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHaahrSTQcF2NeP8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQwZTQxNzctODgzMS00YzMwLTgzZjAtZmEyYzc0MTcz YWZmMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk YjNiZGMxYTMtODg0MC00Nzc3LTkxN2YtZGJmMjMzNWY4YjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMHDJhd4boXhlHrBVFW3SGU6CJAL9T4loJ6D IojnkS4UCvHpG4lEhBqN5PkQIrNlxHs1n8oYdki5GRPCJXf+SdxZ4XAYKT0S1W9s KfMYI8LUcwd7hseYjXe0BjNcHlkGmAjldAgXwHg0j7R/zNgf3Dp3mctc7IrgWPPC MiekpXoF0e+Al0ps3J12nyTrN/2hagtFwJH5oQDbnpzz5KyQ/iK1yMgEkliSPrYQ blnxFutydiTUNovKKUAE2XhzHc86Zh6YHz8J/882JsgtyBM+90Cj1NNsxtmkkLCS NiLGu4lm2TWiFFWMFFtyU70bv1BFLlZ5DE0wLmhU8BI6hfdGwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3Efq4JhYBSOMbWPjzbKh1yiJOAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDBl NDE3Ny04ODMxLTRjMzAtODNmMC1mYTJjNzQxNzNhZmYvMzFmYmZhYzMtM2VlZS0z MzBiLWI0ZmMtNmE0OTRmODZhOTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQwZTQxNzctODgzMS00YzMwLTgz ZjAtZmEyYzc0MTczYWZmL2Y0MGU0MTc3LTg4MzEtNGMzMC04M2YwLWZhMmM3NDE3 M2FmZi5jcmwwHwYDVR0jBBgwFoAUGdn9bfWM/jB90Zo5WTnc83uBaAwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDBlNDE3Ny04ODMxLTRjMzAtODNmMC1mYTJj NzQxNzNhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6aBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzkZ2PHafWArGMrwYFiYxW6EI7O1YQ8mKPrCsrSeuqgfuUUPpYLt+JM csw40rjuNt9rlqnVra1MnVqZAwgUy+jpd14scKmx+uy8ASjZc1Yyl2GwQT0ExGjJ xT4wPHIQ9tyOp5uhF5vTMSRLpgsQVBa6EV5SAGHQOq3H02BmkurXRxHDo3ThcpBe 8lNYMqQ+K/hlnE05hCDkQm/3AZjzqqjSc+YTUDRvsRltf/Yaf3eR0bqb2iCdF0ow CYiRzXGQeTSatauMF8BlkPtYIXKFiKRDSlptBX9wZ+sytBqhI1FSzBeWSjp9MZ8G hM7uMX6QdczrkggzkjN9oek9YZUpmtA= -----END CERTIFICATE-----Generated at Sat May 10 03:33:32 2025 by rpki-client