$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/c8f662c9-10ab-353c-9436-2b1250c74c9a.roa File: c8f662c9-10ab-353c-9436-2b1250c74c9a.roa (raw, json) Hash identifier: BBG8kApvGTaWWs/9j/KUEoxNSzNTkwNtJBcMOlG0/9w= Subject key identifier: A8:94:A4:D8:1C:FE:8D:43:72:0D:AF:80:5A:26:38:54:4A:A0:25:EF Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584957F3FDFAD0509FB4E3AF2480 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/c8f662c9-10ab-353c-9436-2b1250c74c9a.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 54203 IP address blocks: 209.107.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f3:fd:fa:d0:50:9f:b4:e3:af:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=c3b8d656-3e83-4c78-bb83-13cf6730d5ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2f:d3:58:71:95:ce:ca:19:eb:15:33:eb:d9: c6:6f:dd:a1:b9:18:96:d4:e5:a6:6f:97:1b:9a:46: da:16:96:d1:af:0a:fc:f5:e9:18:8a:eb:1b:10:86: f7:92:b2:68:15:63:22:f1:e5:0c:67:68:fb:5d:72: 58:22:9a:34:11:9f:9a:35:51:54:22:50:6b:4c:26: c1:24:08:f3:6f:f6:06:e6:eb:6d:77:67:ae:35:a8: de:8d:50:60:17:30:ee:39:36:a5:4e:8d:92:5a:fd: 03:f7:81:eb:14:8b:31:33:24:37:28:38:0f:3e:22: 14:e1:33:3b:9b:65:95:16:ac:b9:20:3c:8a:b1:1d: cb:d0:2d:e4:d6:67:3d:26:35:84:1c:cb:45:21:92: 66:65:57:e6:ad:0a:78:a1:c8:42:be:fc:90:89:03: 1e:37:eb:74:47:d7:a7:c4:b0:5e:90:19:ef:66:08: de:cd:50:cf:61:f5:c5:80:ee:b4:10:d9:ab:ba:fe: 42:59:de:7e:04:f4:e8:21:20:7c:0d:b6:93:6e:5b: 21:d3:62:6a:b7:30:d0:f4:b5:d0:8f:5d:0e:fa:aa: 73:fe:fd:47:e6:e3:4a:8f:09:0c:26:1a:a6:5c:8d: 49:54:51:ce:b8:59:41:da:17:1e:07:f6:ad:4e:b9: 6e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:94:A4:D8:1C:FE:8D:43:72:0D:AF:80:5A:26:38:54:4A:A0:25:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/c8f662c9-10ab-353c-9436-2b1250c74c9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 209.107.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:a7:f3:1a:d7:6f:60:b4:36:89:55:a7:03:94:9e:f1:27:91: e3:fd:d4:b4:50:84:7c:86:5c:eb:f2:51:86:89:e5:52:ba:5f: c1:0d:9f:43:34:5a:46:38:6f:c8:12:3a:86:63:7b:e3:04:f5: 9f:81:ad:f9:90:bd:5d:68:08:5a:9e:24:a7:c3:97:59:fb:a5: bc:6c:fd:df:e5:15:f3:d8:d7:88:69:0c:58:73:7a:04:4a:ff: 4b:0d:96:64:14:87:54:87:93:f4:82:5c:61:58:73:d0:5e:d7: e2:ab:fb:57:70:95:e8:15:80:8b:5b:09:26:06:4c:e6:f1:e9: b2:44:70:f3:d3:bb:f3:92:5a:14:75:ec:7c:53:95:3e:4b:d4: b4:0e:04:d9:60:55:54:e9:70:43:f2:79:0a:3a:85:09:37:b9: 51:a1:ab:12:49:63:76:75:d6:72:33:e4:d8:02:6d:63:4c:72: 12:37:ff:08:cb:50:26:45:2b:a8:3b:44:63:d9:94:6e:97:76: 73:38:9b:0e:73:a3:61:2f:07:15:01:44:3a:87:d3:b7:5c:bf: ed:33:3a:5c:6e:66:d7:c2:fa:c8:13:d0:ce:a9:04:3e:49:46: b0:a1:ec:7e:d9:62:a5:1f:0a:04:6c:40:58:3f:46:d3:15:06: 81:48:74:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX8/360FCftOOvJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk YzNiOGQ2NTYtM2U4My00Yzc4LWJiODMtMTNjZjY3MzBkNWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC/TWHGVzsoZ6xUz69nGb92huRiW1OWmb5cb mkbaFpbRrwr89ekYiusbEIb3krJoFWMi8eUMZ2j7XXJYIpo0EZ+aNVFUIlBrTCbB JAjzb/YG5uttd2euNajejVBgFzDuOTalTo2SWv0D94HrFIsxMyQ3KDgPPiIU4TM7 m2WVFqy5IDyKsR3L0C3k1mc9JjWEHMtFIZJmZVfmrQp4ochCvvyQiQMeN+t0R9en xLBekBnvZgjezVDPYfXFgO60ENmruv5CWd5+BPToISB8DbaTblsh02JqtzDQ9LXQ j10O+qpz/v1H5uNKjwkMJhqmXI1JVFHOuFlB2hceB/atTrlueQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiUpNgc/o1Dcg2vgFomOFRKoCXvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvYzhmNjYyYzktMTBhYi0z NTNjLTk0MzYtMmIxMjUwYzc0YzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WvDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGn8xrXb2C0NolVpwOUnvEnkeP91LRQhHyGXOvyUYaJ5VK6X8ENn0M0 WkY4b8gSOoZje+ME9Z+BrfmQvV1oCFqeJKfDl1n7pbxs/d/lFfPY14hpDFhzegRK /0sNlmQUh1SHk/SCXGFYc9Be1+Kr+1dwlegVgItbCSYGTObx6bJEcPPTu/OSWhR1 7HxTlT5L1LQOBNlgVVTpcEPyeQo6hQk3uVGhqxJJY3Z11nIz5NgCbWNMchI3/wjL UCZFK6g7RGPZlG6XdnM4mw5zo2EvBxUBRDqH07dcv+0zOlxuZtfC+sgT0M6pBD5J RrCh7H7ZYqUfCgRsQFg/RtMVBoFIdP4= -----END CERTIFICATE-----Generated at Sat Apr 5 12:33:24 2025 by rpki-client