$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18/25742bec-3680-3006-9f66-dea23bf8fa9c.roa File: 25742bec-3680-3006-9f66-dea23bf8fa9c.roa (raw, json) Hash identifier: WX7A5O7abTrDwYKKnmjj11tc0Wmwcl2XZjwkOq9fB8Y= Subject key identifier: 54:87:DF:D1:B1:7F:24:96:B4:F2:07:C2:81:0A:81:FB:4A:2E:92:7D Certificate issuer: /CN=5937a29a-1b30-48a0-ad3c-37d4a97ffe18 Certificate serial: 010D0C9F43285849244E791CB513A70E8C6271D0 Authority key identifier: 83:9F:E5:51:A0:D2:09:AB:21:3E:8D:4D:B5:CD:63:25:6C:B1:B4:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18/25742bec-3680-3006-9f66-dea23bf8fa9c.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 208.93.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18/5937a29a-1b30-48a0-ad3c-37d4a97ffe18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18/5937a29a-1b30-48a0-ad3c-37d4a97ffe18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:79:1c:b5:13:a7:0e:8c:62:71:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5937a29a-1b30-48a0-ad3c-37d4a97ffe18 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=0223be9c-f481-47d2-97cd-4f8cc0b980a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ea:0d:43:5f:4f:5a:ac:6c:7a:f5:d4:39:7f: 5e:70:9f:71:06:a6:eb:d7:60:5d:79:56:fd:4c:51: 54:c6:33:91:09:0c:d9:81:5d:c5:04:6f:90:f4:ce: 58:b2:f7:15:2d:0d:5b:31:59:a8:5a:0f:3e:d7:8f: da:ff:f4:9a:ca:cd:05:11:78:7e:5e:98:79:e6:8c: 34:9b:3a:56:ca:3e:14:43:88:2e:e6:73:d9:5a:47: 14:27:37:c0:c5:e0:a7:50:aa:bb:ca:b3:e4:66:98: ed:9b:9d:07:87:13:f0:82:7b:26:9e:a0:92:14:85: 35:54:be:14:98:b3:29:16:60:09:63:84:f9:b3:82: fb:f5:22:4d:f1:7e:77:04:4f:97:85:70:5c:e7:85: bd:ce:1a:6b:32:08:bc:a2:d3:90:ce:86:79:32:2d: 8f:2f:83:df:2c:19:7d:44:26:49:79:4e:00:45:b6: cc:b6:de:f4:7a:bb:ef:da:82:8b:31:04:bf:82:2c: c0:c8:0b:fc:3d:00:c5:40:5e:07:61:af:27:92:c7: 6e:f9:e0:6a:c0:30:f1:61:71:bb:f7:b2:bf:b5:13: 3a:25:2c:b1:69:27:f1:eb:0a:c9:5b:7f:b2:b3:01: 5c:68:81:8d:b4:fd:33:19:ef:6f:b7:89:9b:c8:8b: fb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:87:DF:D1:B1:7F:24:96:B4:F2:07:C2:81:0A:81:FB:4A:2E:92:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18/25742bec-3680-3006-9f66-dea23bf8fa9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18/5937a29a-1b30-48a0-ad3c-37d4a97ffe18.crl X509v3 Authority Key Identifier: keyid:83:9F:E5:51:A0:D2:09:AB:21:3E:8D:4D:B5:CD:63:25:6C:B1:B4:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18.cer sbgp-ipAddrBlock: critical IPv4: 208.93.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:5c:ff:44:4e:0a:a8:c5:37:60:d9:33:93:61:64:c8:7a:1f: 1d:ae:10:af:c7:f1:1e:92:39:33:2e:17:0f:d5:1a:7f:87:1c: a0:c3:34:d2:33:24:59:a4:54:d5:2b:d0:2b:09:83:14:82:46: 5f:fb:d5:c7:75:19:b1:c0:8a:b8:d5:86:77:b7:04:e6:a8:80: 4f:89:5e:7b:12:eb:3e:1e:10:a7:60:d3:d2:7a:6d:93:ac:f9: e4:6b:3f:cc:15:77:a5:63:3f:1b:4d:d7:bd:39:ac:2d:ed:d7: 72:24:a8:e7:0f:9e:89:bb:15:e9:79:d4:11:28:8c:68:54:e0: 54:65:1f:34:69:59:3d:7a:fe:83:5a:5e:0c:1f:52:78:fd:0b: 03:a6:45:1e:38:7a:b8:a0:b3:c2:0e:97:02:18:3b:06:eb:69: 2e:17:e3:62:06:96:9c:aa:45:74:c8:e4:93:57:d2:d1:74:d8: b5:d8:b0:f5:f3:c8:1f:a3:27:01:e0:c3:c0:94:61:c9:c3:45: 15:cf:25:a9:ca:c9:a5:0b:16:ed:04:aa:80:b8:83:5d:b7:64: 7f:c5:6c:8e:fd:ef:69:2a:b0:62:8b:c6:6d:82:84:32:a1:cb: a7:4d:72:63:59:36:4a:d3:66:5e:10:11:87:6f:32:8f:21:80: 39:03:0d:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTnkctROnDoxicdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkzN2EyOWEtMWIzMC00OGEwLWFkM2MtMzdkNGE5N2Zm ZTE4MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk MDIyM2JlOWMtZjQ4MS00N2QyLTk3Y2QtNGY4Y2MwYjk4MGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOoNQ19PWqxsevXUOX9ecJ9xBqbr12BdeVb9 TFFUxjORCQzZgV3FBG+Q9M5YsvcVLQ1bMVmoWg8+14/a//Says0FEXh+Xph55ow0 mzpWyj4UQ4gu5nPZWkcUJzfAxeCnUKq7yrPkZpjtm50HhxPwgnsmnqCSFIU1VL4U mLMpFmAJY4T5s4L79SJN8X53BE+XhXBc54W9zhprMgi8otOQzoZ5Mi2PL4PfLBl9 RCZJeU4ARbbMtt70ervv2oKLMQS/gizAyAv8PQDFQF4HYa8nksdu+eBqwDDxYXG7 97K/tRM6JSyxaSfx6wrJW3+yswFcaIGNtP0zGe9vt4mbyIv7WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSH39GxfySWtPIHwoEKgftKLpJ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OTM3 YTI5YS0xYjMwLTQ4YTAtYWQzYy0zN2Q0YTk3ZmZlMTgvMjU3NDJiZWMtMzY4MC0z MDA2LTlmNjYtZGVhMjNiZjhmYTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTkzN2EyOWEtMWIzMC00OGEwLWFk M2MtMzdkNGE5N2ZmZTE4LzU5MzdhMjlhLTFiMzAtNDhhMC1hZDNjLTM3ZDRhOTdm ZmUxOC5jcmwwHwYDVR0jBBgwFoAUg5/lUaDSCashPo1Ntc1jJWyxtNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81OTM3YTI5YS0xYjMwLTQ4YTAtYWQzYy0zN2Q0 YTk3ZmZlMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F1vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRc/0ROCqjFN2DZM5NhZMh6Hx2uEK/H8R6SOTMuFw/VGn+HHKDDNNIz JFmkVNUr0CsJgxSCRl/71cd1GbHAirjVhne3BOaogE+JXnsS6z4eEKdg09J6bZOs +eRrP8wVd6VjPxtN1705rC3t13IkqOcPnom7Fel51BEojGhU4FRlHzRpWT16/oNa XgwfUnj9CwOmRR44erigs8IOlwIYOwbraS4X42IGlpyqRXTI5JNX0tF02LXYsPXz yB+jJwHgw8CUYcnDRRXPJanKyaULFu0EqoC4g123ZH/FbI7972kqsGKLxm2ChDKh y6dNcmNZNkrTZl4QEYdvMo8hgDkDDZE= -----END CERTIFICATE-----Generated at Fri Mar 14 10:13:03 2025 by rpki-client