$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/af50b1a0-b749-35e1-af0a-03a5e6201e8b.roa File: af50b1a0-b749-35e1-af0a-03a5e6201e8b.roa (raw, json) Hash identifier: rTJdl35goOnxDZu49h4ZE+AiUAez0d0lyhr/Q65xeg4= Subject key identifier: 82:F5:9E:A2:7B:61:1A:84:22:7D:3C:9C:4E:92:67:39:40:10:E5:C9 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F432858491076448805AA99FA4EB5C980 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/af50b1a0-b749-35e1-af0a-03a5e6201e8b.roa Signing time: Mon 03 Mar 2025 10:25:03 +0000 ROA not before: Mon 03 Mar 2025 10:25:03 +0000 ROA not after: Sun 01 Jun 2025 09:25:03 +0000 asID: 30036 IP address blocks: 108.178.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:76:44:88:05:aa:99:fa:4e:b5:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 3 10:25:03 2025 GMT Not After : Jun 1 09:25:03 2025 GMT Subject: CN=1bc854f5-0cde-4fb4-ac3f-e92626f6e5cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:29:23:ac:e9:4a:16:aa:62:4b:59:b3:b9:91: 33:b0:5e:36:09:ee:ac:9c:f0:67:f0:20:ce:c7:4d: c4:17:aa:4f:2d:31:7c:00:13:69:9a:16:7a:54:11: 5a:4f:35:8a:69:f6:f7:e8:30:61:61:e9:6d:6f:47: 18:ca:2b:d1:a7:36:87:c3:38:0e:83:51:90:3a:4a: fa:ae:89:5f:21:6b:78:59:1b:dc:f6:a0:6d:05:9d: 40:28:bb:f4:ce:aa:12:c8:3f:68:e4:57:4d:34:c8: 44:b0:15:28:8a:ff:0e:64:bd:aa:b3:01:92:49:be: 99:22:de:dd:97:6a:37:73:28:11:89:37:1c:80:12: 24:d9:b6:f9:dc:d9:39:ea:7b:12:a4:36:e8:72:ef: ac:09:1d:bc:4a:8d:d2:ca:d6:9f:8b:08:19:fa:5b: ec:89:ac:b4:87:d8:27:a2:9d:76:50:41:17:1f:63: 15:21:e7:55:f6:e4:b9:98:1a:f7:81:1b:8b:89:b2: db:8b:1e:44:9d:27:5c:86:52:88:23:09:1a:28:07: 31:42:09:9b:47:bc:d4:ef:fe:47:c5:78:17:bb:79: 45:88:81:46:95:de:e2:92:29:2e:df:fb:ff:bc:68: 0a:8d:96:17:1a:f7:6f:ac:3e:23:d0:f7:aa:c6:bf: d5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F5:9E:A2:7B:61:1A:84:22:7D:3C:9C:4E:92:67:39:40:10:E5:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/af50b1a0-b749-35e1-af0a-03a5e6201e8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.178.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:12:57:d1:44:f9:c8:fb:ac:76:91:58:64:cd:b0:ea:fc:9c: 65:0b:80:0f:03:3e:f8:f9:03:2e:e4:31:c1:b4:a3:48:c8:07: 24:41:93:8f:b7:4c:84:63:52:29:98:41:5e:c5:2b:8d:e2:de: 0f:a0:6c:5c:75:8b:98:36:6a:28:e0:6c:fd:30:8f:9b:29:e7: ea:51:5a:54:0a:f5:df:e6:e5:86:37:38:d2:cf:67:f9:4d:60: 2b:a9:6f:4c:77:24:0f:29:ba:69:c9:03:44:99:68:08:83:20: 20:93:7e:77:22:9a:11:f7:c7:13:f3:f2:fa:6a:33:34:23:da: 8c:32:5c:f0:10:4d:4e:6e:a7:55:a7:6a:ec:7b:a3:15:4f:69: 99:e1:44:ce:36:ec:e9:73:37:3c:02:16:a9:f2:ef:eb:4b:27: fb:fb:b7:c0:7a:ec:b4:d6:18:e7:e9:c7:38:4f:b8:62:ec:fc: 8d:eb:e4:b9:40:09:cf:09:82:63:af:10:5d:72:75:a6:1a:c9: 60:91:b5:4d:fd:b9:9a:5d:c2:fc:fe:08:e6:4f:28:f3:7d:e8: 31:33:50:7b:98:20:e3:a6:65:b4:ce:c5:da:7a:33:1f:b3:48: c3:b4:b9:26:67:22:41:76:81:9b:17:57:23:26:64:e8:96:2c: 36:bf:c1:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQdkSIBaqZ+k61yYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDMwMzEwMjUwM1oXDTI1MDYwMTA5MjUwM1owLzEtMCsGA1UEAxMk MWJjODU0ZjUtMGNkZS00ZmI0LWFjM2YtZTkyNjI2ZjZlNWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSkjrOlKFqpiS1mzuZEzsF42Ce6snPBn8CDO x03EF6pPLTF8ABNpmhZ6VBFaTzWKafb36DBhYeltb0cYyivRpzaHwzgOg1GQOkr6 rolfIWt4WRvc9qBtBZ1AKLv0zqoSyD9o5FdNNMhEsBUoiv8OZL2qswGSSb6ZIt7d l2o3cygRiTccgBIk2bb53Nk56nsSpDbocu+sCR28So3SytafiwgZ+lvsiay0h9gn op12UEEXH2MVIedV9uS5mBr3gRuLibLbix5EnSdchlKIIwkaKAcxQgmbR7zU7/5H xXgXu3lFiIFGld7ikiku3/v/vGgKjZYXGvdvrD4j0Peqxr/VfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIL1nqJ7YRqEIn08nE6SZzlAEOXJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYWY1MGIxYTAtYjc0OS0z NWUxLWFmMGEtMDNhNWU2MjAxZThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLL6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMSV9FE+cj7rHaRWGTNsOr8nGULgA8DPvj5Ay7kMcG0o0jIByRBk4+3 TIRjUimYQV7FK43i3g+gbFx1i5g2aijgbP0wj5sp5+pRWlQK9d/m5YY3ONLPZ/lN YCupb0x3JA8pumnJA0SZaAiDICCTfncimhH3xxPz8vpqMzQj2owyXPAQTU5up1Wn aux7oxVPaZnhRM427OlzNzwCFqny7+tLJ/v7t8B67LTWGOfpxzhPuGLs/I3r5LlA Cc8JgmOvEF1ydaYayWCRtU39uZpdwvz+COZPKPN96DEzUHuYIOOmZbTOxdp6Mx+z SMO0uSZnIkF2gZsXVyMmZOiWLDa/waI= -----END CERTIFICATE-----Generated at Wed Apr 9 00:01:09 2025 by rpki-client