$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/2a9fd13b-0666-34b8-b8c2-074c52f22efa.roa File: 2a9fd13b-0666-34b8-b8c2-074c52f22efa.roa (raw, json) Hash identifier: vympyAL38xy5ivxflur4zFq7UcRs6J7pMyN6+qL0esY= Subject key identifier: 84:AE:36:7D:45:16:A8:39:9D:3D:32:C6:54:57:E4:7D:A8:D4:B8:7C Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Certificate serial: 010D0C9F43285848C5817E1AC8F927FC06237A60 Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/2a9fd13b-0666-34b8-b8c2-074c52f22efa.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 36492 IP address blocks: 209.107.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:7e:1a:c8:f9:27:fc:06:23:7a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=88510ced-91bc-4027-bfe3-9ba9ff7d5dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:59:a0:28:d7:60:d7:61:f3:02:10:fb:a4:51: ee:36:bd:42:21:5e:0d:32:cd:4e:42:4a:dd:dc:5a: 7c:f6:aa:d5:d7:ff:c0:f0:6a:5c:46:9f:03:5e:4b: 63:fe:06:6a:7f:bd:0d:38:88:b8:a9:16:ed:8d:4d: c3:fc:f6:31:53:cc:d9:af:a2:05:97:e6:85:2a:26: 7d:bc:c8:1e:88:76:d7:5c:be:78:49:24:bd:62:26: 73:9c:e9:38:57:b0:13:18:79:74:86:bc:1b:70:26: f8:54:c3:86:d3:31:5b:57:1a:13:8c:db:20:37:52: 6b:67:45:a9:69:84:a8:ac:c9:7b:47:4c:15:2c:9d: d6:16:92:df:8b:a0:1d:22:ef:4b:60:bc:01:83:61: 92:09:8d:8b:93:2d:7d:e1:4f:6c:89:19:69:43:e5: bc:9e:a5:78:1d:30:fd:e6:77:4c:8d:15:de:72:ed: b4:a9:bf:0d:3a:c0:7c:13:49:31:58:8e:18:2a:3e: 1b:b7:71:53:83:3f:6e:48:ad:1d:10:e1:46:18:b4: 60:b7:7c:c7:b5:d9:e4:34:af:9f:9d:c5:53:f1:56: 92:2d:0e:ed:53:00:7a:4d:d2:1d:c4:81:aa:67:ba: 03:d3:f4:4a:33:fe:71:ef:5c:3e:e0:47:17:c7:4b: 1f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AE:36:7D:45:16:A8:39:9D:3D:32:C6:54:57:E4:7D:A8:D4:B8:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/2a9fd13b-0666-34b8-b8c2-074c52f22efa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl X509v3 Authority Key Identifier: keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer sbgp-ipAddrBlock: critical IPv4: 209.107.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:c3:02:b8:2c:39:15:51:50:19:8f:1f:8f:aa:ec:15:32:32: 1a:a8:87:1a:07:81:8a:33:85:9a:d8:6b:8d:57:1f:98:66:49: 81:3e:13:70:d1:1b:18:c9:65:ed:87:f2:33:91:4a:38:e8:43: bc:3c:ee:85:bd:15:f4:64:90:0c:d1:35:45:5b:90:ce:2e:88: eb:5b:46:c0:1f:79:39:36:50:cb:e1:56:4e:dd:aa:61:e0:91: 73:37:bb:f4:b6:8e:b4:82:32:5e:bd:e0:87:b9:4c:2e:13:5a: de:6f:3c:59:5f:de:e6:82:83:bb:b0:4b:2c:2e:40:b9:68:84: 1b:da:e2:13:c7:67:35:a7:b7:ef:de:b4:21:b5:e9:c7:73:14: 0d:8b:f2:55:5d:ea:c1:12:68:21:8d:ee:05:50:17:4c:81:de: 5d:a6:00:bb:7d:e5:2e:79:b5:6e:c5:87:aa:a2:a0:d6:a2:1d: ea:20:2c:40:52:b4:a7:11:de:dd:a3:85:56:b7:33:b6:b2:6a: 4e:c8:0a:33:a3:9f:7e:42:4d:76:ed:7c:68:c0:3d:8a:82:27: 84:8f:c7:6e:a7:ad:44:2f:fe:e6:89:fb:d3:dc:0e:10:1f:58: 45:f2:31:a5:76:33:5d:1a:37:c4:8d:66:a9:0e:94:d5:e6:73: 08:aa:62:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgX4ayPkn/AYjemAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5 ZTJkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ODg1MTBjZWQtOTFiYy00MDI3LWJmZTMtOWJhOWZmN2Q1ZGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1mgKNdg12HzAhD7pFHuNr1CIV4NMs1OQkrd 3Fp89qrV1//A8GpcRp8DXktj/gZqf70NOIi4qRbtjU3D/PYxU8zZr6IFl+aFKiZ9 vMgeiHbXXL54SSS9YiZznOk4V7ATGHl0hrwbcCb4VMOG0zFbVxoTjNsgN1JrZ0Wp aYSorMl7R0wVLJ3WFpLfi6AdIu9LYLwBg2GSCY2Lky194U9siRlpQ+W8nqV4HTD9 5ndMjRXecu20qb8NOsB8E0kxWI4YKj4bt3FTgz9uSK0dEOFGGLRgt3zHtdnkNK+f ncVT8VaSLQ7tUwB6TdIdxIGqZ7oD0/RKM/5x71w+4EcXx0sfpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISuNn1FFqg5nT0yxlRX5H2o1Lh8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvMmE5ZmQxM2ItMDY2Ni0z NGI4LWI4YzItMDc0YzUyZjIyZWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2 OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Wu+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTDArgsORVRUBmPH4+q7BUyMhqohxoHgYozhZrYa41XH5hmSYE+E3DR GxjJZe2H8jORSjjoQ7w87oW9FfRkkAzRNUVbkM4uiOtbRsAfeTk2UMvhVk7dqmHg kXM3u/S2jrSCMl694Ie5TC4TWt5vPFlf3uaCg7uwSywuQLlohBva4hPHZzWnt+/e tCG16cdzFA2L8lVd6sESaCGN7gVQF0yB3l2mALt95S55tW7Fh6qioNaiHeogLEBS tKcR3t2jhVa3M7ayak7ICjOjn35CTXbtfGjAPYqCJ4SPx26nrUQv/uaJ+9PcDhAf WEXyMaV2M10aN8SNZqkOlNXmcwiqYpA= -----END CERTIFICATE-----Generated at Sun Apr 6 00:49:02 2025 by rpki-client