$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/f643a4f8-97c9-3b20-8e64-ac228ee56d4e.roa File: f643a4f8-97c9-3b20-8e64-ac228ee56d4e.roa (raw, json) Hash identifier: Li7nXY2jGXU228rCqwAsmrHQeXVCaSxprPbY43cc4lc= Subject key identifier: 41:88:B7:A4:7F:4A:61:54:57:EA:E9:1A:C1:E8:B5:35:C6:00:D5:57 Certificate issuer: /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Certificate serial: 010D0C9F43285848EC9682E661583B4FEF869280 Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/f643a4f8-97c9-3b20-8e64-ac228ee56d4e.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 3807 IP address blocks: 207.196.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:82:e6:61:58:3b:4f:ef:86:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=515c0d27-66fb-402e-873d-932b76576ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:47:e3:80:e5:3a:3b:f9:f4:c1:72:c9:69:c6: 6c:cc:0d:ba:3d:97:ce:dd:2e:c9:54:d3:a3:c3:62: fb:fb:74:18:7f:1b:bc:eb:c6:d5:d9:a1:ed:1d:50: 11:46:cd:04:e0:67:2e:64:c8:47:5a:5e:0a:cd:3b: 16:1b:99:21:55:ba:e1:e1:0c:9c:75:d1:ac:6b:fa: c0:d4:21:c8:38:83:55:31:4b:42:eb:5b:7b:6b:ed: c9:48:93:f0:8b:64:33:70:b6:c8:b2:35:8c:e9:d3: c6:4b:f5:ee:86:24:36:48:b9:36:53:d2:96:4f:7f: 13:c4:27:cd:0b:15:40:8f:48:ac:38:0d:19:98:e3: ae:58:43:7e:6c:8d:62:f7:f6:57:a0:69:2a:33:62: eb:cb:54:51:09:df:05:c9:3c:8d:b6:27:26:92:32: d1:fa:b7:c4:7d:45:8f:13:45:cf:2d:a1:ab:bb:a7: 99:11:0e:8b:e2:42:bd:4b:36:68:2e:2f:55:a7:18: 1b:bd:22:a5:a2:0a:67:93:5e:9a:78:41:9a:71:53: d3:21:eb:88:e4:e8:db:36:ad:e8:8c:f3:bd:19:71: e3:84:a3:a2:08:84:97:2b:e4:2a:46:c9:f5:b6:69: 1d:2d:4b:3d:86:19:66:f8:57:14:cf:21:ca:1d:97: f6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:88:B7:A4:7F:4A:61:54:57:EA:E9:1A:C1:E8:B5:35:C6:00:D5:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/f643a4f8-97c9-3b20-8e64-ac228ee56d4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl X509v3 Authority Key Identifier: keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer sbgp-ipAddrBlock: critical IPv4: 207.196.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:9a:f1:a1:36:a3:b1:a3:2d:dc:b5:9a:46:a1:8f:d3:28:bd: 47:18:7d:66:fd:67:f4:71:fe:7f:fc:3c:e0:f1:ba:c0:88:04: e3:c3:61:9e:f1:26:cf:58:78:3c:d7:0a:f2:fb:41:b1:18:f5: 93:a1:a2:0b:e1:48:0c:b3:55:27:51:47:12:27:ba:a5:30:2a: 63:84:be:76:31:05:31:52:0c:dc:c1:c9:42:79:90:e4:32:7c: 86:1c:10:03:f7:54:1c:c4:a3:59:65:4e:7e:27:4e:84:fe:0f: 8a:f3:b9:f1:32:28:de:ce:e6:b4:a9:17:6c:2c:b1:0f:14:26: 30:b8:a9:31:8a:56:a6:2b:e1:c3:74:72:31:06:ef:11:a8:fa: 3b:cf:fd:b6:0d:1c:a1:f5:74:0d:a9:e7:19:7a:97:10:b7:5d: 08:86:5b:a2:dc:cd:a0:9d:0b:d1:76:84:b7:0b:c4:c8:e6:72: e7:86:7f:d9:24:97:80:81:62:a0:9b:78:8d:e1:9d:83:f1:96: 60:f2:a5:c2:9e:f2:f5:a4:ff:77:75:a5:43:05:32:d2:39:ec: 1b:96:ae:c5:e3:66:09:e5:00:8f:0a:d7:c0:39:f2:ee:de:f0: 38:cc:03:4e:f0:15:1b:ef:36:ac:d2:15:ea:91:4a:23:52:fc: 86:0c:ef:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjsloLmYVg7T++GkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQ1YzdjM2QtNzJhNC00MjFkLWI0MWEtZDVlN2UyNTM0 MTA3MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk NTE1YzBkMjctNjZmYi00MDJlLTg3M2QtOTMyYjc2NTc2Y2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUfjgOU6O/n0wXLJacZszA26PZfO3S7JVNOj w2L7+3QYfxu868bV2aHtHVARRs0E4GcuZMhHWl4KzTsWG5khVbrh4QycddGsa/rA 1CHIOINVMUtC61t7a+3JSJPwi2QzcLbIsjWM6dPGS/XuhiQ2SLk2U9KWT38TxCfN CxVAj0isOA0ZmOOuWEN+bI1i9/ZXoGkqM2Lry1RRCd8FyTyNticmkjLR+rfEfUWP E0XPLaGru6eZEQ6L4kK9SzZoLi9VpxgbvSKlogpnk16aeEGacVPTIeuI5OjbNq3o jPO9GXHjhKOiCISXK+QqRsn1tmkdLUs9hhlm+FcUzyHKHZf2lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGIt6R/SmFUV+rpGsHotTXGANVXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVj N2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3ZTI1MzQxMDcvZjY0M2E0ZjgtOTdjOS0z YjIwLThlNjQtYWMyMjhlZTU2ZDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDQ1YzdjM2QtNzJhNC00MjFkLWI0 MWEtZDVlN2UyNTM0MTA3LzA0NWM3YzNkLTcyYTQtNDIxZC1iNDFhLWQ1ZTdlMjUz NDEwNy5jcmwwHwYDVR0jBBgwFoAUmFPVU8y7sPSmO9Q3aLg6B77bPXcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVjN2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3 ZTI1MzQxMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz8S4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFya8aE2o7GjLdy1mkahj9MovUcYfWb9Z/Rx/n/8PODxusCIBOPDYZ7x Js9YeDzXCvL7QbEY9ZOhogvhSAyzVSdRRxInuqUwKmOEvnYxBTFSDNzByUJ5kOQy fIYcEAP3VBzEo1llTn4nToT+D4rzufEyKN7O5rSpF2wssQ8UJjC4qTGKVqYr4cN0 cjEG7xGo+jvP/bYNHKH1dA2p5xl6lxC3XQiGW6LczaCdC9F2hLcLxMjmcueGf9kk l4CBYqCbeI3hnYPxlmDypcKe8vWk/3d1pUMFMtI57BuWrsXjZgnlAI8K18A58u7e 8DjMA07wFRvvNqzSFeqRSiNS/IYM7wM= -----END CERTIFICATE-----Generated at Tue May 6 03:04:26 2025 by rpki-client