$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/ef2ac345-ce2f-3081-b10e-8289c3bf995e.roa File: ef2ac345-ce2f-3081-b10e-8289c3bf995e.roa (raw, json) Hash identifier: nXO9CizHPhMgGgDrE+kWMnv6EXy465ir8taoEw7fYsw= Subject key identifier: 97:74:A1:C5:C9:16:6E:3C:A4:5B:DD:CE:FE:A3:F8:C3:65:9B:2E:D5 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F43285848F4F6989516D3C0F46C0CEE40 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/ef2ac345-ce2f-3081-b10e-8289c3bf995e.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 3491 IP address blocks: 207.176.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:98:95:16:d3:c0:f4:6c:0c:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=cd013fc1-aab5-4382-8517-458aa8907a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f1:ac:a5:b5:4e:96:c8:a6:53:b4:0c:bd:7e: 29:64:bb:8b:60:57:5f:8f:e0:02:48:99:d8:3f:39: 79:2d:e0:83:b3:71:e0:2b:a2:37:a3:63:c2:ba:83: 2e:be:c6:50:32:53:0e:73:7a:43:0d:2a:ad:df:b7: ae:f3:53:83:b5:fd:c1:f6:37:fc:b6:75:48:b7:ce: a8:a5:70:d6:9a:d1:02:9e:5f:e1:72:5c:4d:27:71: 32:85:4e:1b:d6:55:7d:1c:55:45:da:93:72:39:ac: 0c:b7:e5:2c:a6:8f:ec:d6:08:38:c6:fa:82:20:24: 11:30:46:70:e3:a0:dd:ec:c4:8f:ae:ab:ab:ed:c3: 47:33:75:39:20:56:11:a6:14:c9:85:6e:d9:a3:c6: 26:98:45:81:1b:f8:24:28:3c:ce:53:d4:38:03:fc: 28:30:cf:14:e0:b5:56:fa:87:d5:3c:d5:dc:f8:dd: 96:61:53:dd:26:1e:67:0a:33:93:58:5e:9a:de:1b: 4d:c1:7e:69:61:5e:fb:39:09:bf:83:81:31:06:8e: 44:66:b0:cf:64:98:9b:2d:ba:9f:3d:73:ae:a4:52: 80:fd:b3:e2:f2:28:df:c7:6b:0e:82:27:be:a7:c5: 84:5e:76:01:78:16:08:c2:c6:86:bb:f4:02:7b:5a: 1f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:74:A1:C5:C9:16:6E:3C:A4:5B:DD:CE:FE:A3:F8:C3:65:9B:2E:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/ef2ac345-ce2f-3081-b10e-8289c3bf995e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 207.176.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:bd:97:4c:58:d8:61:78:5e:c3:b6:e2:96:2f:f5:a8:8e:3e: 8d:aa:62:80:8d:6e:0f:6a:8b:30:0e:f4:33:3c:61:08:3f:92: ec:2a:f4:5d:05:a1:bb:2f:c5:15:a7:a8:6f:a3:9f:31:69:bd: f5:86:61:a4:a3:8a:87:d9:18:76:5b:a1:35:4f:ad:e7:92:e3: e7:83:0d:dc:0d:a4:94:09:c4:55:0d:42:5d:99:41:4c:8d:dd: 04:e3:87:bb:74:5d:7a:26:bf:6f:b8:87:48:a3:f0:a7:1e:1d: 65:53:42:df:47:03:4b:79:c5:05:72:a8:d7:74:cb:a3:8e:1e: 1c:28:97:07:d7:0f:27:4c:16:bc:61:7c:1f:5e:25:a7:ae:f5: bf:99:4a:37:dd:14:e9:e4:6a:8c:d3:2b:9f:4e:5d:a0:3a:7f: c8:83:f6:97:90:aa:56:07:b8:01:6a:93:5b:a3:7d:44:80:da: af:a1:68:47:7b:d1:71:b8:73:ff:1f:6b:89:d2:88:3f:7c:44: 59:de:d1:2e:e6:37:20:43:9e:68:82:16:4d:6f:4a:f8:73:29: 21:c9:c6:e7:19:59:5b:53:1e:7f:85:9b:f6:20:2e:22:d9:8a: 74:14:8c:6e:ef:af:f7:4c:dc:47:f1:57:7c:92:bd:e7:87:89: e9:9a:29:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09piVFtPA9GwM7kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk Y2QwMTNmYzEtYWFiNS00MzgyLTg1MTctNDU4YWE4OTA3YTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfGspbVOlsimU7QMvX4pZLuLYFdfj+ACSJnY Pzl5LeCDs3HgK6I3o2PCuoMuvsZQMlMOc3pDDSqt37eu81ODtf3B9jf8tnVIt86o pXDWmtECnl/hclxNJ3EyhU4b1lV9HFVF2pNyOawMt+Uspo/s1gg4xvqCICQRMEZw 46Dd7MSPrqur7cNHM3U5IFYRphTJhW7Zo8YmmEWBG/gkKDzOU9Q4A/woMM8U4LVW +ofVPNXc+N2WYVPdJh5nCjOTWF6a3htNwX5pYV77OQm/g4ExBo5EZrDPZJibLbqf PXOupFKA/bPi8ijfx2sOgie+p8WEXnYBeBYIwsaGu/QCe1ofyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJd0ocXJFm48pFvdzv6j+MNlmy7VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvZWYyYWMzNDUtY2UyZi0z MDgxLWIxMGUtODI4OWMzYmY5OTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHz7AAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAu9l0xY2GF4XsO24pYv9aiOPo2qYoCNbg9qizAO9DM8YQg/kuwq9F0F obsvxRWnqG+jnzFpvfWGYaSjiofZGHZboTVPreeS4+eDDdwNpJQJxFUNQl2ZQUyN 3QTjh7t0XXomv2+4h0ij8KceHWVTQt9HA0t5xQVyqNd0y6OOHhwolwfXDydMFrxh fB9eJaeu9b+ZSjfdFOnkaozTK59OXaA6f8iD9peQqlYHuAFqk1ujfUSA2q+haEd7 0XG4c/8fa4nSiD98RFne0S7mNyBDnmiCFk1vSvhzKSHJxucZWVtTHn+Fm/YgLiLZ inQUjG7vr/dM3EfxV3ySveeHiemaKfk= -----END CERTIFICATE-----Generated at Wed May 7 18:16:33 2025 by rpki-client