$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8f987717-1c0d-3f24-96f9-8ed1e7f70f5e.roa File: 8f987717-1c0d-3f24-96f9-8ed1e7f70f5e.roa (raw, json) Hash identifier: zOoNC3KgQDzrk3/HlI75TxZ5jYpOl7UMTcQ9CW1lihc= Subject key identifier: A3:55:15:EC:0E:9E:37:72:5B:72:22:CC:26:32:39:3F:EE:C2:77:50 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F43285848F65BDF08E83B75C101562D50 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8f987717-1c0d-3f24-96f9-8ed1e7f70f5e.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 12491 IP address blocks: 207.226.32.0/20 maxlen: 24 207.226.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:df:08:e8:3b:75:c1:01:56:2d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=043df0a7-b151-4e30-a119-d90f4bc6d5ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b3:7b:8d:e3:bc:fb:54:0a:40:1a:8c:bb:2e: ba:82:ec:72:97:7b:3f:54:b0:14:bb:60:36:3c:fe: 10:a3:26:42:26:bb:d7:76:e2:1a:bc:a5:95:47:e9: e3:4b:b2:5e:58:cc:06:4d:f0:e1:8e:da:89:cc:fc: 7c:04:74:a8:b5:03:c1:f0:6d:9b:f5:99:63:a5:11: f7:6d:ad:6f:b5:17:09:bd:a2:a7:b6:bf:60:43:e6: c4:f3:3b:11:b6:d8:52:ad:ad:70:04:3d:31:f6:da: 4c:df:65:a9:8b:8d:29:26:5b:ae:20:ba:65:a7:5d: 56:2f:67:72:e5:e5:c9:93:da:e6:da:61:a8:8f:cd: 9d:f4:d6:22:a8:54:f0:57:d7:e6:2c:9e:23:4b:da: cf:0d:27:b0:0d:8e:a1:a8:be:e8:72:83:67:47:ad: 48:0d:1f:78:9e:e7:7d:64:ba:e6:c0:ed:7b:31:db: 00:ae:79:36:67:7d:50:e9:1d:63:bb:90:90:0c:d4: dd:04:84:e7:2b:14:92:d2:97:7f:8d:93:8a:2f:1d: 3a:bf:ea:8b:5d:85:d3:1c:c1:89:44:2a:3b:3c:db: ba:29:95:71:e2:e4:89:94:ad:e7:db:2b:3b:6b:2d: 6c:d4:18:21:45:9f:fe:43:47:cb:56:58:7f:30:6b: 7f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:55:15:EC:0E:9E:37:72:5B:72:22:CC:26:32:39:3F:EE:C2:77:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8f987717-1c0d-3f24-96f9-8ed1e7f70f5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 207.226.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:60:07:4c:43:c3:c8:d7:93:57:d8:62:d6:a7:b2:b8:db:5a: 65:92:f2:2c:a9:4e:4b:88:d9:20:80:33:50:fa:b2:b9:42:13: 74:b2:93:49:81:3e:bc:0c:ad:3c:fd:77:8b:9e:22:e8:18:42: 23:e0:0a:60:56:b9:5b:be:18:3a:09:5d:7f:db:f4:04:54:31: 90:1b:7d:88:70:07:9e:6c:6e:eb:da:dd:03:c0:d8:09:c6:38: a1:f4:b9:3f:09:9f:c6:e9:09:5f:47:39:84:2e:53:32:53:1d: be:e3:6a:52:52:0f:a9:06:b5:e8:e1:24:ce:93:51:99:35:b7: bf:cc:6f:2a:d2:c4:bf:44:0e:8b:72:0a:20:01:75:74:cd:65: d4:1d:8b:2a:7c:da:a8:83:1e:13:8e:96:01:6a:fa:1e:5e:a5: 13:8d:80:ea:96:b1:0b:1d:d3:cb:4a:dc:83:1e:1a:bb:a3:80: 63:2d:57:2d:51:07:47:09:7a:3e:4a:2e:ea:99:66:06:e1:3c: 3b:2c:41:74:a9:28:b4:1b:c0:5f:2d:e2:d4:84:e6:37:f2:4a: ce:b0:33:73:08:d6:08:3b:22:f7:70:19:49:79:38:b2:79:a2: ee:51:3e:2b:f2:56:03:54:48:52:cf:27:fa:fd:a6:90:46:5d: 43:5e:f7:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W98I6Dt1wQFWLVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk MDQzZGYwYTctYjE1MS00ZTMwLWExMTktZDkwZjRiYzZkNWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7N7jeO8+1QKQBqMuy66guxyl3s/VLAUu2A2 PP4QoyZCJrvXduIavKWVR+njS7JeWMwGTfDhjtqJzPx8BHSotQPB8G2b9ZljpRH3 ba1vtRcJvaKntr9gQ+bE8zsRtthSra1wBD0x9tpM32Wpi40pJluuILplp11WL2dy 5eXJk9rm2mGoj82d9NYiqFTwV9fmLJ4jS9rPDSewDY6hqL7ocoNnR61IDR94nud9 ZLrmwO17MdsArnk2Z31Q6R1ju5CQDNTdBITnKxSS0pd/jZOKLx06v+qLXYXTHMGJ RCo7PNu6KZVx4uSJlK3n2ys7ay1s1BghRZ/+Q0fLVlh/MGt/awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNVFewOnjdyW3IizCYyOT/uwndQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvOGY5ODc3MTctMWMwZC0z ZjI0LTk2ZjktOGVkMWU3ZjcwZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz+IgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZgB0xDw8jXk1fYYtansrjbWmWS8iypTkuI2SCAM1D6srlCE3Syk0mB PrwMrTz9d4ueIugYQiPgCmBWuVu+GDoJXX/b9ARUMZAbfYhwB55sbuva3QPA2AnG OKH0uT8Jn8bpCV9HOYQuUzJTHb7jalJSD6kGtejhJM6TUZk1t7/MbyrSxL9EDoty CiABdXTNZdQdiyp82qiDHhOOlgFq+h5epRONgOqWsQsd08tK3IMeGrujgGMtVy1R B0cJej5KLuqZZgbhPDssQXSpKLQbwF8t4tSE5jfySs6wM3MI1gg7IvdwGUl5OLJ5 ou5RPivyVgNUSFLPJ/r9ppBGXUNe9zM= -----END CERTIFICATE-----Generated at Fri May 9 16:31:21 2025 by rpki-client