$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/23108a10-4450-3a24-b6ea-1b522a5b1f91.roa File: 23108a10-4450-3a24-b6ea-1b522a5b1f91.roa (raw, json) Hash identifier: bJTZOoh9/BAkrmASGd4dqS7Hy+D32K8r8LiYPwC/by8= Subject key identifier: F9:C0:B3:85:FA:92:00:28:B8:46:9D:B9:80:38:94:32:D3:3F:4A:AC Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F43285849C904EF256D1632DB30A071E8 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/23108a10-4450-3a24-b6ea-1b522a5b1f91.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 62651 IP address blocks: 209.107.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:ef:25:6d:16:32:db:30:a0:71:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=7ce6b666-74a1-4123-9737-23d24495379f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:36:14:3c:9d:bd:35:48:6e:e4:d7:0d:1a:f4: fd:65:bb:cc:bc:67:be:06:61:e7:bf:fb:ab:76:96: 99:ce:26:40:e3:1a:67:1c:08:cf:4b:c9:2a:43:82: 73:45:dd:0f:d1:dd:fc:49:65:51:0c:bf:50:7f:69: 31:5e:5d:6d:58:4e:c9:92:95:9c:5c:5a:79:20:06: 04:99:8b:a9:77:25:ff:ab:16:5c:39:b5:ea:11:b3: fe:90:e8:73:00:6d:d2:b4:99:54:72:0e:e3:67:e0: 58:4d:f5:6b:4e:f6:b8:ca:7e:fa:49:73:e9:9d:06: 22:c0:1d:c5:84:52:9c:f6:05:8f:d9:d8:23:e9:e9: e0:8f:2a:a9:db:64:af:31:ab:f8:f8:ea:e5:ed:79: 04:bb:13:b5:d3:2a:c8:7e:ce:ec:dc:81:f2:bf:96: 6c:38:de:49:17:bf:88:93:01:d2:fd:dd:8f:d6:c3: 74:3f:fc:cc:65:08:e2:fc:d0:af:f2:86:5b:f5:ce: 56:33:66:33:b5:22:21:c7:25:88:f5:ca:8f:7d:78: da:6b:c9:9c:30:4d:92:bb:68:83:b9:20:a0:e8:26: 2a:a1:49:e7:49:a2:e4:4c:69:bc:ac:03:9f:2f:1a: 78:66:a4:86:01:d4:5e:1e:f6:e1:5a:cb:2e:e5:2b: 94:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C0:B3:85:FA:92:00:28:B8:46:9D:B9:80:38:94:32:D3:3F:4A:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/23108a10-4450-3a24-b6ea-1b522a5b1f91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 209.107.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:b7:55:9e:6c:7d:d8:74:e8:79:47:8b:65:fe:fd:b7:ac:75: f0:71:00:ac:65:b3:74:59:5f:2b:66:d3:92:0e:15:8a:4c:33: b5:32:ee:f9:ce:dc:db:5b:b5:a9:9e:12:3f:40:dc:3a:f2:72: 16:96:60:42:0b:56:60:78:50:51:6d:6b:1c:fd:7f:cf:da:8e: fd:36:30:5a:65:0a:45:f6:a9:13:fb:49:73:8c:e0:19:94:87: 88:af:f6:ce:a3:d1:d5:db:10:50:13:24:7f:02:c6:0c:a0:0e: e1:dc:b3:db:39:d6:fb:d2:5e:56:fe:ea:98:a1:28:9d:df:c7: 82:3c:60:90:b9:3b:1a:f0:f5:5a:56:cd:a4:8a:4c:02:18:2f: 6b:3b:bf:2f:5f:d9:e0:a5:27:19:19:4f:c4:aa:a1:3e:cd:9d: c4:5b:83:76:b1:49:4f:9e:e2:49:35:82:0b:52:5a:b7:34:6f: 9b:06:0a:07:dc:62:c2:c6:bf:73:4a:9d:69:fc:4a:1d:7c:a3: d5:84:d4:7b:6d:df:28:ae:87:a3:ae:8a:dc:36:7b:7f:6c:e0: 3a:fe:d3:df:82:6a:f6:bd:77:9c:2f:4c:ea:05:a4:23:c9:e2: 3d:08:83:e8:44:bb:3c:65:01:c2:84:91:b5:86:ec:6d:45:88: 7f:23:c9:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBO8lbRYy2zCgcegwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk N2NlNmI2NjYtNzRhMS00MTIzLTk3MzctMjNkMjQ0OTUzNzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDYUPJ29NUhu5NcNGvT9ZbvMvGe+BmHnv/ur dpaZziZA4xpnHAjPS8kqQ4JzRd0P0d38SWVRDL9Qf2kxXl1tWE7JkpWcXFp5IAYE mYupdyX/qxZcObXqEbP+kOhzAG3StJlUcg7jZ+BYTfVrTva4yn76SXPpnQYiwB3F hFKc9gWP2dgj6engjyqp22SvMav4+Orl7XkEuxO10yrIfs7s3IHyv5ZsON5JF7+I kwHS/d2P1sN0P/zMZQji/NCv8oZb9c5WM2YztSIhxyWI9cqPfXjaa8mcME2Su2iD uSCg6CYqoUnnSaLkTGm8rAOfLxp4ZqSGAdReHvbhWssu5SuUPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnAs4X6kgAouEaduYA4lDLTP0qsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvMjMxMDhhMTAtNDQ1MC0z YTI0LWI2ZWEtMWI1MjJhNWIxZjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WvYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIa3VZ5sfdh06HlHi2X+/besdfBxAKxls3RZXytm05IOFYpMM7Uy7vnO 3NtbtameEj9A3DrychaWYEILVmB4UFFtaxz9f8/ajv02MFplCkX2qRP7SXOM4BmU h4iv9s6j0dXbEFATJH8CxgygDuHcs9s51vvSXlb+6pihKJ3fx4I8YJC5Oxrw9VpW zaSKTAIYL2s7vy9f2eClJxkZT8SqoT7NncRbg3axSU+e4kk1ggtSWrc0b5sGCgfc YsLGv3NKnWn8Sh18o9WE1Htt3yiuh6Ouitw2e39s4Dr+09+Cava9d5wvTOoFpCPJ 4j0Ig+hEuzxlAcKEkbWG7G1FiH8jyVU= -----END CERTIFICATE-----Generated at Mon Jun 16 05:39:45 2025 by rpki-client