$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/23108a10-4450-3a24-b6ea-1b522a5b1f91.roa File: 23108a10-4450-3a24-b6ea-1b522a5b1f91.roa (raw, json) Hash identifier: YlVGI3EVLTXMhgUruO8DvdWiCPJnEIHIWuFTuV+NDqg= Subject key identifier: 2F:33:44:DB:57:23:18:EA:AD:4E:BE:4F:EC:FA:61:42:D8:58:8C:A2 Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F43285848E9CBE761AE92909A4AF95C00 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/23108a10-4450-3a24-b6ea-1b522a5b1f91.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 62651 IP address blocks: 209.107.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:e7:61:ae:92:90:9a:4a:f9:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=c4d66bf0-0d55-43d0-a79e-b9bc784c06a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:43:0a:6a:9e:4e:47:5d:fb:50:2e:77:7c:b5: 8c:eb:81:c8:a3:ee:1e:d9:1d:69:ac:f6:47:00:c6: 12:d9:6f:ee:63:71:23:ed:af:22:e4:5f:ff:c9:5b: cc:d2:5f:3f:7b:bd:61:af:4c:bb:0d:55:f3:4a:3e: a1:a6:e2:04:50:9a:dc:44:24:f3:5e:59:a4:26:72: a3:bc:6e:6e:3f:8e:66:e2:42:dc:85:0e:cf:1b:d1: 69:c8:fe:d6:f4:b2:74:c3:97:02:7f:a3:6e:4a:73: 88:03:65:53:bd:3a:aa:87:45:01:24:f9:bd:d1:2b: 37:c8:cf:d0:3e:45:41:38:09:16:48:6c:4f:72:7a: 1a:87:69:c4:6d:54:3d:28:5d:52:cf:08:a6:07:0b: fd:df:f2:65:20:3a:34:ca:b0:25:60:ac:02:aa:e6: 56:8b:42:bc:47:e4:31:e2:e3:fc:c5:4b:a1:53:1e: 22:f2:0e:99:5b:13:98:f4:d1:3b:56:cd:31:a6:04: 83:80:97:74:ff:62:ab:3c:17:ca:59:52:b3:38:85: 44:93:71:d8:98:8a:c8:6a:a6:02:e6:52:0d:8d:1c: 8b:02:17:08:6c:9a:69:fd:ad:12:73:fa:65:0a:cf: d5:ba:fa:35:13:7d:95:17:76:a9:b8:39:7e:83:48: 3c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:33:44:DB:57:23:18:EA:AD:4E:BE:4F:EC:FA:61:42:D8:58:8C:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/23108a10-4450-3a24-b6ea-1b522a5b1f91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 209.107.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:4e:8c:4e:9a:56:ae:fb:07:81:de:a3:01:78:1c:12:bd:4f: c3:0f:41:9c:ce:0e:80:d7:8e:11:c7:5f:c9:a8:1e:68:5a:e1: 20:82:c1:d9:e8:2e:02:9c:c4:9b:c5:70:df:99:24:0e:0f:82: d9:a8:ee:1d:89:09:47:d7:53:75:aa:72:ba:84:84:1a:a8:68: a5:a3:25:3d:3e:85:7e:06:77:c0:d1:02:f0:c7:a4:85:95:95: e2:99:a5:28:8a:26:80:3b:1a:f6:ff:5c:75:6d:b5:44:35:f8: cb:c7:14:33:0d:c4:20:5c:82:b1:0e:f9:b4:0c:89:c7:48:6c: 7c:f9:f7:a9:98:79:24:ff:63:7d:0f:ad:d1:79:05:a5:e5:c2: 1c:0c:73:c2:14:71:70:75:03:da:50:1a:ce:4f:88:be:a7:89: ad:db:1d:79:32:65:c5:a7:1f:d3:a1:1b:e7:b8:7c:5f:44:7e: f1:e4:6c:db:0c:aa:26:25:aa:3c:81:36:1e:77:d7:da:0f:01: 17:3e:72:1b:d6:7e:80:b4:a0:a2:8f:69:f5:a9:4c:3d:5d:52: ba:7f:2e:b1:cd:26:b9:ce:7b:bc:bb:97:90:c1:e5:a9:44:b0: 80:0d:fe:4b:13:04:e3:76:65:69:79:18:a5:ea:09:e7:84:68: 79:50:ed:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy+dhrpKQmkr5XAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk YzRkNjZiZjAtMGQ1NS00M2QwLWE3OWUtYjliYzc4NGMwNmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEMKap5OR137UC53fLWM64HIo+4e2R1prPZH AMYS2W/uY3Ej7a8i5F//yVvM0l8/e71hr0y7DVXzSj6hpuIEUJrcRCTzXlmkJnKj vG5uP45m4kLchQ7PG9FpyP7W9LJ0w5cCf6NuSnOIA2VTvTqqh0UBJPm90Ss3yM/Q PkVBOAkWSGxPcnoah2nEbVQ9KF1SzwimBwv93/JlIDo0yrAlYKwCquZWi0K8R+Qx 4uP8xUuhUx4i8g6ZWxOY9NE7Vs0xpgSDgJd0/2KrPBfKWVKzOIVEk3HYmIrIaqYC 5lINjRyLAhcIbJpp/a0Sc/plCs/Vuvo1E32VF3apuDl+g0g8aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8zRNtXIxjqrU6+T+z6YULYWIyiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvMjMxMDhhMTAtNDQ1MC0z YTI0LWI2ZWEtMWI1MjJhNWIxZjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WvYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBOjE6aVq77B4HeowF4HBK9T8MPQZzODoDXjhHHX8moHmha4SCCwdno LgKcxJvFcN+ZJA4Pgtmo7h2JCUfXU3WqcrqEhBqoaKWjJT0+hX4Gd8DRAvDHpIWV leKZpSiKJoA7Gvb/XHVttUQ1+MvHFDMNxCBcgrEO+bQMicdIbHz596mYeST/Y30P rdF5BaXlwhwMc8IUcXB1A9pQGs5PiL6nia3bHXkyZcWnH9OhG+e4fF9EfvHkbNsM qiYlqjyBNh5319oPARc+chvWfoC0oKKPafWpTD1dUrp/LrHNJrnOe7y7l5DB5alE sIAN/ksTBON2ZWl5GKXqCeeEaHlQ7U0= -----END CERTIFICATE-----Generated at Sat Apr 5 16:41:58 2025 by rpki-client