$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fe2fc2b5-6900-319a-8681-9bc72e43643a.roa File: fe2fc2b5-6900-319a-8681-9bc72e43643a.roa (raw, json) Hash identifier: sTEem46kaeKlCCGdgqnbJLt9CwbU9n8Fcum5YmTGbU4= Subject key identifier: D1:57:EB:D9:16:1B:AF:41:1B:6F:FF:15:B0:CE:6E:08:2E:A3:2C:C0 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849107625DEF2A3D473A19D7A00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fe2fc2b5-6900-319a-8681-9bc72e43643a.roa Signing time: Mon 03 Mar 2025 10:24:49 +0000 ROA not before: Mon 03 Mar 2025 10:24:49 +0000 ROA not after: Sun 01 Jun 2025 09:24:49 +0000 asID: 30036 IP address blocks: 108.178.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:76:25:de:f2:a3:d4:73:a1:9d:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 3 10:24:49 2025 GMT Not After : Jun 1 09:24:49 2025 GMT Subject: CN=d0f95978-ac2b-4fe7-b5f9-681d6d0c41c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:44:d7:4e:25:c1:d9:da:d9:cd:b3:ee:6d:b3: 01:63:53:a4:a3:33:d2:f1:2e:e2:9a:7f:78:29:4e: 2b:03:40:3e:fa:ee:b6:13:9a:05:3e:e9:e4:5f:b6: 61:98:12:6d:2b:bc:eb:3d:23:73:ea:c2:f8:0a:d5: c0:21:b5:07:97:11:0b:88:eb:b7:cc:c0:d7:34:b1: e2:da:d2:98:44:e4:aa:f7:92:10:4f:4d:38:ec:f2: 85:c5:b9:d9:88:ce:0a:3a:e1:9b:f6:1a:21:75:e2: 70:e8:04:29:45:f2:62:c6:0e:ae:00:b9:fb:1d:49: 7e:19:30:a6:a3:98:54:f8:31:bf:a5:29:99:d5:ec: d4:e9:aa:4c:2b:78:69:6d:0e:51:80:e6:07:34:8e: 08:31:d3:74:2a:10:55:c6:a7:8b:e7:b1:69:6f:9a: 36:b0:0a:5a:91:ee:93:f0:ea:b4:43:5e:e5:16:fb: b8:fe:cf:4a:5b:94:48:ed:61:9b:f2:44:58:8b:b4: 7b:99:65:9a:9f:6c:d1:53:36:9c:f4:36:7e:1b:fc: fb:6c:43:bf:2c:f7:9c:f9:c7:cc:21:ec:fc:1f:21: 35:69:39:2a:1c:58:15:67:ac:93:3e:b7:7e:78:e5: 04:5a:5d:9e:9c:2a:7f:8e:f9:78:9f:ac:b0:e1:e9: bb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:57:EB:D9:16:1B:AF:41:1B:6F:FF:15:B0:CE:6E:08:2E:A3:2C:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fe2fc2b5-6900-319a-8681-9bc72e43643a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.178.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:d1:32:21:c4:99:93:e3:ee:e8:34:ee:6f:e3:55:af:ee:c0: 90:cd:62:af:a9:88:a2:40:aa:9b:d6:1a:e8:63:e2:8d:a0:ab: 75:86:95:19:e5:4d:12:a6:4e:0d:be:33:81:a4:28:f4:ff:86: ee:e1:73:38:fe:64:29:32:72:c7:28:34:d1:a8:6f:44:f5:cc: 33:5d:2a:40:13:f1:52:4a:39:86:32:01:7d:d3:37:2d:22:ad: 5c:bc:7b:3b:8f:3b:48:1e:40:69:db:23:53:91:0f:0e:48:25: db:68:35:d3:f3:5e:69:45:32:2a:32:fd:83:ef:70:c5:a2:4d: ba:15:54:d4:dc:b2:07:aa:39:b2:c3:0a:5a:f9:da:cd:87:c7: 88:27:30:4f:78:aa:e4:1e:8f:72:d4:ce:36:fc:84:e3:42:53: c7:02:c4:b1:1a:59:27:c2:07:f9:70:65:ba:b5:54:fc:d7:2f: 35:9c:05:68:09:27:49:8a:78:6d:1e:b5:9e:25:a8:57:cf:2f: 83:bd:4d:99:60:5c:95:92:71:a1:31:02:c4:cd:65:0a:09:75: cc:7c:cc:07:e9:de:5c:1c:0c:eb:f8:86:db:84:86:fa:54:4b: 22:24:d9:58:76:02:3b:e7:bc:79:d5:86:51:7c:6d:25:52:33: 34:1e:6c:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQdiXe8qPUc6GdegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDMwMzEwMjQ0OVoXDTI1MDYwMTA5MjQ0OVowLzEtMCsGA1UEAxMk ZDBmOTU5NzgtYWMyYi00ZmU3LWI1ZjktNjgxZDZkMGM0MWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kTXTiXB2drZzbPubbMBY1OkozPS8S7imn94 KU4rA0A++u62E5oFPunkX7ZhmBJtK7zrPSNz6sL4CtXAIbUHlxELiOu3zMDXNLHi 2tKYROSq95IQT0047PKFxbnZiM4KOuGb9hohdeJw6AQpRfJixg6uALn7HUl+GTCm o5hU+DG/pSmZ1ezU6apMK3hpbQ5RgOYHNI4IMdN0KhBVxqeL57Fpb5o2sApake6T 8Oq0Q17lFvu4/s9KW5RI7WGb8kRYi7R7mWWan2zRUzac9DZ+G/z7bEO/LPec+cfM Iez8HyE1aTkqHFgVZ6yTPrd+eOUEWl2enCp/jvl4n6yw4em7XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFX69kWG69BG2//FbDObgguoyzAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZmUyZmMyYjUtNjkwMC0z MTlhLTg2ODEtOWJjNzJlNDM2NDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLLuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/RMiHEmZPj7ug07m/jVa/uwJDNYq+piKJAqpvWGuhj4o2gq3WGlRnl TRKmTg2+M4GkKPT/hu7hczj+ZCkycscoNNGob0T1zDNdKkAT8VJKOYYyAX3TNy0i rVy8ezuPO0geQGnbI1ORDw5IJdtoNdPzXmlFMioy/YPvcMWiTboVVNTcsgeqObLD Clr52s2Hx4gnME94quQej3LUzjb8hONCU8cCxLEaWSfCB/lwZbq1VPzXLzWcBWgJ J0mKeG0etZ4lqFfPL4O9TZlgXJWScaExAsTNZQoJdcx8zAfp3lwcDOv4htuEhvpU SyIk2Vh2AjvnvHnVhlF8bSVSMzQebMM= -----END CERTIFICATE-----Generated at Wed Apr 9 00:23:41 2025 by rpki-client