$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/9119fabc-90f7-3929-9c68-10927c4f5854.roa File: 9119fabc-90f7-3929-9c68-10927c4f5854.roa (raw, json) Hash identifier: Q+UYlM++zIz48oqXgIglRms6EL4MendS1doiIPIZvPA= Subject key identifier: F8:D0:81:ED:69:7B:6B:72:74:15:AB:4A:7B:A4:2B:4D:FD:E5:52:8D Certificate issuer: /CN=a1ffc192-d4a8-4189-bab2-ce7a37ea683c Certificate serial: 010D0C9F4328584949FE93878FE3AD0303EB4280 Authority key identifier: 68:BB:AC:66:A8:07:8B:85:E6:ED:9C:01:3D:C2:35:BD:D2:A7:AB:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/9119fabc-90f7-3929-9c68-10927c4f5854.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 398774 IP address blocks: 204.108.188.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:93:87:8f:e3:ad:03:03:eb:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ffc192-d4a8-4189-bab2-ce7a37ea683c Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=ded557c6-634b-4621-bd86-a5a203df513a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:64:e5:f7:96:70:07:99:39:df:6a:ba:86:57: 03:af:c3:c6:24:47:57:8e:b2:ae:0d:68:ee:d6:d1: 29:70:7b:60:30:68:d8:01:aa:b6:32:98:71:6d:a7: 90:d7:c0:8e:6c:27:21:44:d7:ae:13:1d:4d:c6:52: 39:2d:dd:54:9f:73:51:95:66:c4:9e:ac:23:44:92: 27:e2:ef:25:56:70:77:66:e9:3d:51:42:04:02:ed: 2b:c1:aa:8d:09:97:ea:05:08:8a:d2:3b:35:6b:aa: b1:25:f7:c9:41:fc:4b:58:43:1a:46:2f:13:07:73: a7:c0:07:77:93:4a:ca:40:b0:ca:95:e9:f9:6f:37: 5d:84:a4:55:28:d6:4c:c4:93:dc:1a:c6:f6:ba:3c: 9c:f6:92:1c:3f:ed:1d:25:fe:99:db:93:54:cb:ec: 89:2a:f0:fa:9a:40:e9:26:bf:88:6a:7e:ba:f1:8f: 4d:05:b4:c3:95:bd:c4:3f:cc:cb:a6:77:8e:f1:56: 68:9d:69:68:c5:6d:b7:91:eb:df:23:9b:49:bf:c6: 92:11:fc:88:7a:61:d3:7b:0f:e9:55:2d:1b:de:4f: 23:8f:05:9b:3f:58:4c:e7:79:16:f3:0b:c5:72:ff: 45:65:b2:60:80:b3:be:85:44:a0:a0:d2:61:ae:e8: ab:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D0:81:ED:69:7B:6B:72:74:15:AB:4A:7B:A4:2B:4D:FD:E5:52:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/9119fabc-90f7-3929-9c68-10927c4f5854.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.crl X509v3 Authority Key Identifier: keyid:68:BB:AC:66:A8:07:8B:85:E6:ED:9C:01:3D:C2:35:BD:D2:A7:AB:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer sbgp-ipAddrBlock: critical IPv4: 204.108.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:e5:67:05:c4:9c:58:8a:ac:41:1d:82:4e:66:7c:60:4d:64: 46:e0:40:22:bc:f4:82:8a:99:96:6a:0e:e0:bf:4d:d5:80:99: e3:6c:fa:45:d6:7e:11:47:01:d7:aa:81:ea:75:83:bc:c3:c2: cc:bb:95:6d:08:b9:f6:bd:45:2f:84:79:25:b0:42:3e:01:87: bb:cc:48:8c:14:6d:61:af:86:ff:5a:90:e8:5d:bd:47:b4:85: c2:fc:52:5d:06:e0:d0:50:4d:42:9b:c6:d6:40:71:06:9e:8d: 30:84:ca:cd:6d:b9:3e:83:97:32:eb:ac:ee:9f:c9:b7:47:a2: 00:c3:e5:6e:7e:47:61:41:49:da:5c:d7:a4:06:02:70:cd:ac: 3b:41:bd:64:be:80:70:67:8c:c7:a2:37:7e:11:4a:dc:fe:d7: 6c:65:0a:ee:b6:bc:72:8e:8c:d8:75:a7:77:a8:57:98:11:dc: ec:17:6e:5e:14:61:b4:79:09:5b:98:d0:59:d2:1b:13:ff:bb: 57:a3:6d:61:56:13:5b:cf:da:48:cb:b3:b8:4b:78:c6:40:cf: a2:8e:1c:c8:41:b1:4c:2e:d5:6c:a2:50:bd:e3:b3:6e:21:74: 93:dd:3f:a9:94:fb:11:44:19:93:5b:1c:1e:cd:f4:99:e6:5d: df:57:2f:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/pOHj+OtAwPrQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFmZmMxOTItZDRhOC00MTg5LWJhYjItY2U3YTM3ZWE2 ODNjMB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk ZGVkNTU3YzYtNjM0Yi00NjIxLWJkODYtYTVhMjAzZGY1MTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGTl95ZwB5k532q6hlcDr8PGJEdXjrKuDWju 1tEpcHtgMGjYAaq2MphxbaeQ18CObCchRNeuEx1NxlI5Ld1Un3NRlWbEnqwjRJIn 4u8lVnB3Zuk9UUIEAu0rwaqNCZfqBQiK0js1a6qxJffJQfxLWEMaRi8TB3OnwAd3 k0rKQLDKlen5bzddhKRVKNZMxJPcGsb2ujyc9pIcP+0dJf6Z25NUy+yJKvD6mkDp Jr+Ian668Y9NBbTDlb3EP8zLpneO8VZonWloxW23kevfI5tJv8aSEfyIemHTew/p VS0b3k8jjwWbP1hM53kW8wvFcv9FZbJggLO+hUSgoNJhruirBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjQge1pe2tydBWrSnukK0395VKNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWZm YzE5Mi1kNGE4LTQxODktYmFiMi1jZTdhMzdlYTY4M2MvOTExOWZhYmMtOTBmNy0z OTI5LTljNjgtMTA5MjdjNGY1ODU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTFmZmMxOTItZDRhOC00MTg5LWJh YjItY2U3YTM3ZWE2ODNjL2ExZmZjMTkyLWQ0YTgtNDE4OS1iYWIyLWNlN2EzN2Vh NjgzYy5jcmwwHwYDVR0jBBgwFoAUaLusZqgHi4Xm7ZwBPcI1vdKnq/MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWZmYzE5Mi1kNGE4LTQxODktYmFiMi1jZTdh MzdlYTY4M2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzGy8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnlZwXEnFiKrEEdgk5mfGBNZEbgQCK89IKKmZZqDuC/TdWAmeNs+kXW fhFHAdeqgep1g7zDwsy7lW0Iufa9RS+EeSWwQj4Bh7vMSIwUbWGvhv9akOhdvUe0 hcL8Ul0G4NBQTUKbxtZAcQaejTCEys1tuT6DlzLrrO6fybdHogDD5W5+R2FBSdpc 16QGAnDNrDtBvWS+gHBnjMeiN34RStz+12xlCu62vHKOjNh1p3eoV5gR3OwXbl4U YbR5CVuY0FnSGxP/u1ejbWFWE1vP2kjLs7hLeMZAz6KOHMhBsUwu1WyiUL3js24h dJPdP6mU+xFEGZNbHB7N9JnmXd9XL6g= -----END CERTIFICATE-----Generated at Sat Apr 5 00:38:15 2025 by rpki-client