$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a5b4829-2d99-3de8-8efe-3261710e92cb.roa File: 4a5b4829-2d99-3de8-8efe-3261710e92cb.roa (raw, json) Hash identifier: cZv6FfxnG1ui5Em85MLdk+2pmaV1CX5HPfOwJTb0nEU= Subject key identifier: FD:9F:9C:76:45:35:73:D5:33:30:45:A2:04:F9:3D:CC:7F:81:CA:49 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F432858491075F682D9C28E2852DABB80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a5b4829-2d99-3de8-8efe-3261710e92cb.roa Signing time: Mon 03 Mar 2025 10:24:26 +0000 ROA not before: Mon 03 Mar 2025 10:24:26 +0000 ROA not after: Sun 01 Jun 2025 09:24:26 +0000 asID: 30036 IP address blocks: 108.178.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:75:f6:82:d9:c2:8e:28:52:da:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 3 10:24:26 2025 GMT Not After : Jun 1 09:24:26 2025 GMT Subject: CN=838c88d4-209b-4b5f-968d-feb690eb4e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:3d:a8:a1:28:c0:66:6e:4e:11:b1:d3:61:c0: 02:ed:9a:49:67:94:c1:23:9b:eb:a4:db:18:b7:a9: ba:7d:3f:71:47:24:f1:ab:7b:3d:19:85:21:ae:36: ca:a4:84:b1:2f:4b:4f:1d:0e:e9:8c:94:8c:5d:c3: d3:0a:17:c5:cb:3d:89:b0:d6:18:1d:bd:ce:b3:ee: 16:93:ee:da:de:04:54:f6:7d:f7:ec:1e:a9:86:bc: be:36:60:b0:35:8c:a3:a0:3c:d2:96:64:c6:73:fd: 9b:6f:4e:46:fe:40:57:e8:6f:f2:ac:12:9a:92:bb: 68:7a:6d:06:c8:32:24:af:08:b9:8f:2d:39:99:6a: b3:5f:f4:f8:6b:0b:a4:60:9a:a0:13:6a:5a:99:1f: 00:b3:19:98:8c:26:a4:d3:2e:d9:06:c3:95:c1:22: d9:d1:79:da:dd:3b:40:4a:df:18:3e:e6:61:42:f4: 30:09:f0:1b:98:89:a6:d0:28:92:f8:cf:75:75:1b: 95:8a:df:65:36:2c:3d:1d:1e:c1:ca:71:f1:bb:51: af:7f:cb:65:d6:27:47:79:e8:53:58:2c:dc:78:e5: 2f:18:63:ae:59:4f:21:60:6a:fd:f4:3b:70:c0:91: 4c:c4:40:6c:61:31:0c:31:db:ad:04:73:5f:ad:9e: 93:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:9F:9C:76:45:35:73:D5:33:30:45:A2:04:F9:3D:CC:7F:81:CA:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a5b4829-2d99-3de8-8efe-3261710e92cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.178.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:ec:3d:3c:30:f0:93:a0:cd:9a:7b:23:ac:af:54:49:2e:85: 27:74:f1:fb:d9:e7:8c:e0:de:da:8d:e0:b8:d4:ac:26:ff:88: 72:c6:0b:a7:60:c5:29:46:17:ce:86:5e:2f:a4:02:a2:b2:c8: 93:b4:70:25:ad:49:b4:79:1a:80:5a:7c:86:cd:5a:51:21:b7: b6:9c:bb:58:a0:98:5a:ea:ba:75:24:7d:c2:23:6c:31:b6:fb: 2b:15:9f:ba:af:ba:90:fb:63:a0:f7:21:77:ad:b2:76:e5:13: f2:49:f1:47:81:e6:ca:e8:19:b4:93:61:1a:99:bc:39:d7:04: 85:c6:47:98:d7:48:48:43:dd:6d:b5:05:8c:aa:ad:28:44:88: 3b:11:3a:99:8f:a0:9e:dd:31:56:7b:9a:07:cd:b4:aa:23:d6: fa:e3:0a:73:13:e1:ea:85:58:28:f2:2f:3b:04:3c:70:26:c2: b3:16:8a:56:e1:ba:2f:36:b9:6a:8f:16:05:8a:a4:27:0b:b8: 7f:e0:b5:16:12:9c:36:41:0e:b1:6f:d1:3f:c9:39:3d:3b:ae: 00:b9:0a:62:cb:2c:99:a2:49:47:b3:40:4d:52:48:6a:f7:ec: 1f:a4:f9:e2:40:4a:e4:82:9c:18:60:e6:ec:8a:db:45:9c:73: a4:bf:fb:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQdfaC2cKOKFLau4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDMwMzEwMjQyNloXDTI1MDYwMTA5MjQyNlowLzEtMCsGA1UEAxMk ODM4Yzg4ZDQtMjA5Yi00YjVmLTk2OGQtZmViNjkwZWI0ZTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgT2ooSjAZm5OEbHTYcAC7ZpJZ5TBI5vrpNsY t6m6fT9xRyTxq3s9GYUhrjbKpISxL0tPHQ7pjJSMXcPTChfFyz2JsNYYHb3Os+4W k+7a3gRU9n337B6phry+NmCwNYyjoDzSlmTGc/2bb05G/kBX6G/yrBKakrtoem0G yDIkrwi5jy05mWqzX/T4awukYJqgE2pamR8AsxmYjCak0y7ZBsOVwSLZ0Xna3TtA St8YPuZhQvQwCfAbmImm0CiS+M91dRuVit9lNiw9HR7BynHxu1Gvf8tl1idHeehT WCzceOUvGGOuWU8hYGr99DtwwJFMxEBsYTEMMdutBHNfrZ6T2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2fnHZFNXPVMzBFogT5Pcx/gcpJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNGE1YjQ4MjktMmQ5OS0z ZGU4LThlZmUtMzI2MTcxMGU5MmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLLbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvsPTww8JOgzZp7I6yvVEkuhSd08fvZ54zg3tqN4LjUrCb/iHLGC6dg xSlGF86GXi+kAqKyyJO0cCWtSbR5GoBafIbNWlEht7acu1igmFrqunUkfcIjbDG2 +ysVn7qvupD7Y6D3IXetsnblE/JJ8UeB5sroGbSTYRqZvDnXBIXGR5jXSEhD3W21 BYyqrShEiDsROpmPoJ7dMVZ7mgfNtKoj1vrjCnMT4eqFWCjyLzsEPHAmwrMWilbh ui82uWqPFgWKpCcLuH/gtRYSnDZBDrFv0T/JOT07rgC5CmLLLJmiSUezQE1SSGr3 7B+k+eJASuSCnBhg5uyK20Wcc6S/+7A= -----END CERTIFICATE-----Generated at Wed Apr 9 02:00:41 2025 by rpki-client