$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/fa98bf03-3a4a-3f8b-9f82-955114524d20.roa File: fa98bf03-3a4a-3f8b-9f82-955114524d20.roa (raw, json) Hash identifier: QUys3VnUsx9WaeHW6pwvcM3yvaESwkpuebJksCcQyas= Subject key identifier: D5:8D:EC:CD:04:B3:B5:D1:19:F0:70:0E:98:F4:C4:4E:22:E6:FC:DE Certificate issuer: /CN=e7a6341b-5a5e-4ac0-a760-5a54190af913 Certificate serial: 010D0C9F432858498BBB529AD8B51175F36EA680 Authority key identifier: 31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/fa98bf03-3a4a-3f8b-9f82-955114524d20.roa Signing time: Wed 16 Apr 2025 14:08:37 +0000 ROA not before: Wed 16 Apr 2025 14:08:37 +0000 ROA not after: Tue 15 Jul 2025 14:08:37 +0000 asID: 274773 IP address blocks: 207.2.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8b:bb:52:9a:d8:b5:11:75:f3:6e:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7a6341b-5a5e-4ac0-a760-5a54190af913 Validity Not Before: Apr 16 14:08:37 2025 GMT Not After : Jul 15 14:08:37 2025 GMT Subject: CN=ec7e0c84-f82a-4af1-b865-6a364ae98b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e6:4a:c1:4a:d3:5c:5f:2f:73:33:fa:c7:bb: d5:50:3a:de:fd:f3:b1:fd:78:3b:f0:20:bb:9b:86: ec:47:4b:55:71:0c:33:d8:ed:bc:97:e8:15:8c:45: b2:e9:3d:a8:ab:b7:7c:dd:ff:b5:19:fa:74:4d:48: d1:44:9d:1e:f8:d8:b3:09:6e:18:54:41:38:77:ba: 94:69:7c:30:0c:13:f5:ad:ab:fb:93:d1:66:19:27: f8:96:dd:d5:13:4d:60:6a:cc:d5:ea:dd:a4:cc:b8: 8c:2f:c3:7c:10:7e:09:f9:43:e8:41:33:0b:8d:a5: 19:a2:af:4c:fa:4c:df:1d:77:52:a4:f5:fa:55:aa: c7:2e:44:62:8d:6e:91:e5:2b:84:e7:5f:9d:26:90: f7:40:37:7a:dc:bc:6f:a6:5b:b4:23:8d:8c:f8:08: 3e:f5:38:5e:f0:f9:6a:c0:3c:1a:e7:0d:f3:60:44: 9e:94:94:5f:83:60:5d:54:46:31:a3:6c:9f:78:e4: ea:99:7c:94:4e:02:38:04:65:b3:72:ba:43:e0:d5: 0d:23:ba:93:32:a0:dc:2b:c5:96:a4:1c:5a:e4:12: 77:38:54:d7:76:58:50:59:56:23:4b:df:f4:4b:73: ea:83:a5:63:89:3f:8d:c4:87:ac:21:fb:87:f5:fa: 17:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:8D:EC:CD:04:B3:B5:D1:19:F0:70:0E:98:F4:C4:4E:22:E6:FC:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/fa98bf03-3a4a-3f8b-9f82-955114524d20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl X509v3 Authority Key Identifier: keyid:31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer sbgp-ipAddrBlock: critical IPv4: 207.2.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:b0:b2:9d:db:18:5b:6f:75:75:be:ce:f3:7e:ec:ac:54:a0: 3d:46:f5:28:61:4c:cd:c9:aa:f2:c3:99:eb:ca:9f:ed:db:28: ae:b2:a9:51:6b:5e:9a:93:24:f1:16:8b:44:f3:f4:94:0c:18: a8:db:56:4d:fa:97:f4:4c:64:ba:51:b0:be:1e:1e:28:51:46: 8a:8c:be:e9:51:d1:37:a5:7d:3a:be:cf:3b:f2:53:14:37:77: 5b:74:e1:23:fb:0f:f4:99:cd:54:44:c5:16:4b:a0:c8:02:2a: c5:dd:9f:d6:4b:0a:cd:e3:26:88:5c:e1:73:3c:9e:47:66:7d: ba:51:f4:f2:cf:49:0d:95:88:e3:8e:e2:04:9b:12:87:dc:6b: 89:3c:25:40:3b:67:d9:62:d5:12:7d:6a:b1:bf:df:95:9e:7b: f5:f9:fb:f6:35:86:5f:79:27:f5:9a:ac:f0:b8:5c:0a:4d:3c: 43:33:20:f4:28:3e:20:99:c6:30:63:2f:00:0d:0e:81:94:1d: 41:2c:d7:f8:02:35:bc:d8:a1:ff:ec:bf:fe:f3:3f:b5:f5:28: da:26:a0:00:49:58:bb:b5:8a:54:af:3b:34:32:63:31:9c:7d: 12:7a:a3:a1:43:d8:27:bf:c1:ab:fd:ab:b0:7d:a7:9a:c9:91: a7:98:57:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmLu1Ka2LURdfNupoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdhNjM0MWItNWE1ZS00YWMwLWE3NjAtNWE1NDE5MGFm OTEzMB4XDTI1MDQxNjE0MDgzN1oXDTI1MDcxNTE0MDgzN1owLzEtMCsGA1UEAxMk ZWM3ZTBjODQtZjgyYS00YWYxLWI4NjUtNmEzNjRhZTk4Yjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeZKwUrTXF8vczP6x7vVUDre/fOx/Xg78CC7 m4bsR0tVcQwz2O28l+gVjEWy6T2oq7d83f+1Gfp0TUjRRJ0e+NizCW4YVEE4d7qU aXwwDBP1rav7k9FmGSf4lt3VE01gaszV6t2kzLiML8N8EH4J+UPoQTMLjaUZoq9M +kzfHXdSpPX6VarHLkRijW6R5SuE51+dJpD3QDd63Lxvplu0I42M+Ag+9The8Plq wDwa5w3zYESelJRfg2BdVEYxo2yfeOTqmXyUTgI4BGWzcrpD4NUNI7qTMqDcK8WW pBxa5BJ3OFTXdlhQWVYjS9/0S3Pqg6VjiT+NxIesIfuH9foX3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWN7M0Es7XRGfBwDpj0xE4i5vzeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lN2E2 MzQxYi01YTVlLTRhYzAtYTc2MC01YTU0MTkwYWY5MTMvZmE5OGJmMDMtM2E0YS0z ZjhiLTlmODItOTU1MTE0NTI0ZDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTdhNjM0MWItNWE1ZS00YWMwLWE3 NjAtNWE1NDE5MGFmOTEzL2U3YTYzNDFiLTVhNWUtNGFjMC1hNzYwLTVhNTQxOTBh ZjkxMy5jcmwwHwYDVR0jBBgwFoAUMaKt48OVDcaXQR4vjLH8a7eDJcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lN2E2MzQxYi01YTVlLTRhYzAtYTc2MC01YTU0 MTkwYWY5MTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzwJ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHawsp3bGFtvdXW+zvN+7KxUoD1G9ShhTM3JqvLDmevKn+3bKK6yqVFr XpqTJPEWi0Tz9JQMGKjbVk36l/RMZLpRsL4eHihRRoqMvulR0TelfTq+zzvyUxQ3 d1t04SP7D/SZzVRExRZLoMgCKsXdn9ZLCs3jJohc4XM8nkdmfbpR9PLPSQ2ViOOO 4gSbEofca4k8JUA7Z9li1RJ9arG/35Wee/X5+/Y1hl95J/WarPC4XApNPEMzIPQo PiCZxjBjLwANDoGUHUEs1/gCNbzYof/sv/7zP7X1KNomoABJWLu1ilSvOzQyYzGc fRJ6o6FD2Ce/wav9q7B9p5rJkaeYV9g= -----END CERTIFICATE-----Generated at Mon May 5 11:35:02 2025 by rpki-client