$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/ff3babc3-a1f6-304a-8dc7-d7b29caa7ae1.roa File: ff3babc3-a1f6-304a-8dc7-d7b29caa7ae1.roa (raw, json) Hash identifier: HkIqFaUehUTK/sWyV15tlC5qbB883jccOrUW0lBoJGk= Subject key identifier: 77:2E:5C:0A:04:AE:8D:15:A7:A2:DA:31:DB:DF:11:AC:E8:76:48:2E Certificate issuer: /CN=25ec66d9-6873-4655-8a15-555b07c2edb4 Certificate serial: 010D0C9F432858494B640FA299A8C86CC0502840 Authority key identifier: E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/ff3babc3-a1f6-304a-8dc7-d7b29caa7ae1.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 394893 IP address blocks: 209.112.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:0f:a2:99:a8:c8:6c:c0:50:28:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25ec66d9-6873-4655-8a15-555b07c2edb4 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=f520da1a-94eb-4b7c-b7d1-05ea95c746ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e7:48:bf:7c:42:e6:d0:e9:ac:f0:96:22:75: 8d:f2:1a:4f:d5:cc:68:8a:0e:e2:98:46:47:8e:1b: 69:ea:c2:ee:dd:04:b1:13:58:4f:1b:91:f0:21:ff: 5c:59:d0:0c:e9:9c:48:43:83:2a:87:f2:4c:93:86: aa:94:21:e4:c7:49:1c:ee:da:4e:a6:dd:59:53:bb: 62:0e:51:f4:94:6c:12:b1:9a:71:99:0f:ab:66:43: 41:d5:a1:53:58:d7:0f:ad:46:eb:eb:17:41:ee:49: 28:8c:39:dc:c1:d2:cc:92:ae:81:e3:81:79:f3:cf: 31:95:67:b0:aa:19:2d:89:23:e6:b6:18:6c:ea:7d: b2:2d:62:ae:c4:e7:05:f8:1f:82:c6:84:4b:41:f5: d6:7b:40:a6:06:29:9e:0d:94:65:f0:e7:08:dc:67: da:1a:c5:58:5f:ec:8c:aa:85:9b:83:51:0b:a9:4b: a3:cc:0f:38:ea:93:c4:1f:39:1c:c1:0c:ba:cc:8c: be:93:24:14:45:bc:58:8b:d7:07:20:13:7d:05:d2: c4:da:da:25:d6:8e:97:71:13:b4:60:1d:a9:96:1c: fb:d1:24:0f:f9:17:90:0f:f0:9a:ff:4e:af:6b:7d: 77:65:f9:ac:3c:1f:42:46:70:35:af:1b:7f:4a:cd: 1c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:2E:5C:0A:04:AE:8D:15:A7:A2:DA:31:DB:DF:11:AC:E8:76:48:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/ff3babc3-a1f6-304a-8dc7-d7b29caa7ae1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl X509v3 Authority Key Identifier: keyid:E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer sbgp-ipAddrBlock: critical IPv4: 209.112.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:fa:3d:27:2d:18:af:6e:f5:47:59:b5:b6:8b:3c:58:08:26: e7:e2:3e:54:4d:8c:02:51:ab:7c:af:19:55:93:b2:11:f6:24: a2:61:fc:c5:36:83:cf:f2:69:82:0e:93:1b:e1:95:f3:96:96: 3e:43:8b:3d:ac:45:e6:f0:02:86:2f:99:24:13:f1:d9:45:fe: 5d:11:17:a8:22:5b:69:23:da:82:03:f2:46:1c:89:3d:f0:b4: 7c:0e:d4:2e:f9:6b:12:40:1c:c4:c7:fd:c1:a2:af:e8:46:43: 66:a7:32:53:7f:9e:03:9f:bf:96:27:46:1c:28:46:b5:f2:3e: b4:9b:b6:6a:af:c4:e4:eb:a6:73:fe:26:f4:45:98:16:14:2b: bd:6d:e2:73:10:12:b8:3f:d2:5b:85:08:f7:42:f4:97:6c:7b: 8a:8d:81:08:15:bd:5a:b9:31:5c:a0:0d:38:9d:fd:8b:95:5c: 20:c3:ac:16:d9:f1:63:51:d4:49:fc:34:08:80:af:d5:15:9a: 63:e0:77:fe:eb:84:60:25:87:9d:12:87:19:a4:08:7c:1a:2f: e8:3f:84:b0:55:fd:f5:be:b5:30:57:80:52:84:d8:2c:aa:d1: fa:28:ba:33:5c:d1:af:45:4a:aa:c7:83:82:84:6f:3b:0e:81: e6:98:b1:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZA+imajIbMBQKEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVlYzY2ZDktNjg3My00NjU1LThhMTUtNTU1YjA3YzJl ZGI0MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk ZjUyMGRhMWEtOTRlYi00YjdjLWI3ZDEtMDVlYTk1Yzc0NmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqedIv3xC5tDprPCWInWN8hpP1cxoig7imEZH jhtp6sLu3QSxE1hPG5HwIf9cWdAM6ZxIQ4Mqh/JMk4aqlCHkx0kc7tpOpt1ZU7ti DlH0lGwSsZpxmQ+rZkNB1aFTWNcPrUbr6xdB7kkojDncwdLMkq6B44F5888xlWew qhktiSPmthhs6n2yLWKuxOcF+B+CxoRLQfXWe0CmBimeDZRl8OcI3GfaGsVYX+yM qoWbg1ELqUujzA846pPEHzkcwQy6zIy+kyQURbxYi9cHIBN9BdLE2tol1o6XcRO0 YB2plhz70SQP+ReQD/Ca/06va313ZfmsPB9CRnA1rxt/Ss0cBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcuXAoEro0Vp6LaMdvfEazodkguMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNWVj NjZkOS02ODczLTQ2NTUtOGExNS01NTViMDdjMmVkYjQvZmYzYmFiYzMtYTFmNi0z MDRhLThkYzctZDdiMjljYWE3YWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjVlYzY2ZDktNjg3My00NjU1LThh MTUtNTU1YjA3YzJlZGI0LzI1ZWM2NmQ5LTY4NzMtNDY1NS04YTE1LTU1NWIwN2My ZWRiNC5jcmwwHwYDVR0jBBgwFoAU4SNp7dNw6XPTAABlwTj8t+2yeQYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNWVjNjZkOS02ODczLTQ2NTUtOGExNS01NTVi MDdjMmVkYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XBsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANH6PSctGK9u9UdZtbaLPFgIJufiPlRNjAJRq3yvGVWTshH2JKJh/MU2 g8/yaYIOkxvhlfOWlj5Diz2sRebwAoYvmSQT8dlF/l0RF6giW2kj2oID8kYciT3w tHwO1C75axJAHMTH/cGir+hGQ2anMlN/ngOfv5YnRhwoRrXyPrSbtmqvxOTrpnP+ JvRFmBYUK71t4nMQErg/0luFCPdC9Jdse4qNgQgVvVq5MVygDTid/YuVXCDDrBbZ 8WNR1En8NAiAr9UVmmPgd/7rhGAlh50ShxmkCHwaL+g/hLBV/fW+tTBXgFKE2Cyq 0fooujNc0a9FSqrHg4KEbzsOgeaYsbg= -----END CERTIFICATE-----Generated at Fri Apr 11 22:15:39 2025 by rpki-client