$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/39dd2d93-c649-306e-ae8b-55aa6bf9f22c.roa File: 39dd2d93-c649-306e-ae8b-55aa6bf9f22c.roa (raw, json) Hash identifier: mEBgfn4zt92gUxy5ZL/nPidUtUto0GATevbL3HNOFLk= Subject key identifier: 9D:AE:1F:EC:67:08:41:02:17:A9:58:13:07:60:AF:95:5C:15:2E:56 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849106EB46561E336CEF1A937A0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/39dd2d93-c649-306e-ae8b-55aa6bf9f22c.roa Signing time: Mon 03 Mar 2025 10:09:49 +0000 ROA not before: Mon 03 Mar 2025 10:09:49 +0000 ROA not after: Sun 01 Jun 2025 09:09:49 +0000 asID: 30036 IP address blocks: 108.178.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:6e:b4:65:61:e3:36:ce:f1:a9:37:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 3 10:09:49 2025 GMT Not After : Jun 1 09:09:49 2025 GMT Subject: CN=276412fe-35a5-4dee-a4c2-e47701858b6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:16:a1:5d:c9:78:73:e8:c0:ee:96:9c:cf:63: ed:84:a3:9a:26:38:23:28:f1:02:b9:da:d5:75:59: d9:62:8d:49:e1:8c:15:26:91:69:ee:fd:9a:ff:35: f6:6b:3b:55:1d:1d:0c:e5:d6:ad:09:2c:c7:7e:b6: 43:44:3e:c7:9d:8e:e3:21:94:95:a4:e6:7c:ad:9f: d1:23:f4:e4:90:c0:b8:d5:3b:0e:95:2e:6e:ed:e3: 8f:64:f0:9b:b7:c7:ce:58:82:33:6c:21:c3:29:50: 75:a7:0f:7b:94:d5:a0:13:b6:6c:6e:a4:33:3c:b7: 01:d3:71:45:17:bf:27:92:8b:ab:bd:7d:2b:29:fb: aa:12:b9:12:2e:17:2c:4f:6f:07:a3:2d:fb:31:92: e4:bd:f2:91:2c:28:31:c6:f1:e7:14:04:8c:9d:dc: 3c:ba:4d:e9:80:ff:c0:cb:70:ce:b8:65:2a:54:10: 8d:28:96:9d:d6:86:20:8c:4b:0a:1e:57:05:0f:48: e6:ba:c1:c8:a4:47:1b:7a:31:b0:f7:b1:22:ce:97: 63:e9:91:a3:67:1b:fa:53:c5:bb:09:d6:19:9e:a5: 45:0d:6b:12:34:5d:f9:41:99:85:00:63:86:1e:10: 8d:16:22:61:22:31:5f:0e:6e:30:71:cd:11:4d:5b: 6d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:AE:1F:EC:67:08:41:02:17:A9:58:13:07:60:AF:95:5C:15:2E:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/39dd2d93-c649-306e-ae8b-55aa6bf9f22c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.178.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:99:e0:3c:b2:d9:ae:ba:d5:e9:d0:98:aa:ad:e1:58:c5:8a: 5a:46:f0:92:df:78:cd:69:d8:01:a8:12:d6:e1:d8:22:e1:35: b8:82:6a:16:47:7b:0f:fa:1d:30:41:0b:a9:b9:5a:a3:72:ac: 9f:ac:55:0d:7a:2e:87:a8:cf:c5:d7:98:71:12:42:15:e7:95: 1b:d7:41:88:55:bd:da:ca:68:02:dd:24:40:65:14:a3:48:d1: 1b:74:2d:16:6e:46:84:cd:45:70:96:5a:ab:0f:00:fd:bb:e0: ea:92:c6:7c:74:69:3e:09:71:cc:50:7d:c7:26:b9:27:a9:e1: 53:7b:62:50:01:1a:13:12:ba:73:c9:d1:da:aa:f0:34:00:ea: a4:9f:ad:c6:a9:c2:7b:b5:32:46:a4:ab:76:ca:54:cb:bc:5e: 7c:29:53:fa:d4:46:67:64:bd:c9:c5:1d:d0:dc:17:04:8d:e8: a0:20:ab:47:c2:07:6a:c6:4c:bf:e5:a4:95:44:54:43:50:db: af:f6:a4:16:b0:42:7d:3f:05:34:52:0b:70:27:9e:8f:bc:e7: 36:61:b1:b5:9e:73:50:d0:4a:a6:ec:51:8c:df:be:7b:77:25: e9:91:8a:22:ba:b5:33:4b:d9:ce:27:74:95:b1:fa:b5:26:97: a7:9f:95:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQbrRlYeM2zvGpN6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDMwMzEwMDk0OVoXDTI1MDYwMTA5MDk0OVowLzEtMCsGA1UEAxMk Mjc2NDEyZmUtMzVhNS00ZGVlLWE0YzItZTQ3NzAxODU4YjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBahXcl4c+jA7pacz2PthKOaJjgjKPECudrV dVnZYo1J4YwVJpFp7v2a/zX2aztVHR0M5datCSzHfrZDRD7HnY7jIZSVpOZ8rZ/R I/TkkMC41TsOlS5u7eOPZPCbt8fOWIIzbCHDKVB1pw97lNWgE7ZsbqQzPLcB03FF F78nkourvX0rKfuqErkSLhcsT28Hoy37MZLkvfKRLCgxxvHnFASMndw8uk3pgP/A y3DOuGUqVBCNKJad1oYgjEsKHlcFD0jmusHIpEcbejGw97Eizpdj6ZGjZxv6U8W7 CdYZnqVFDWsSNF35QZmFAGOGHhCNFiJhIjFfDm4wcc0RTVttewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2uH+xnCEECF6lYEwdgr5VcFS5WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzlkZDJkOTMtYzY0OS0z MDZlLWFlOGItNTVhYTZiZjlmMjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLLXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6Z4Dyy2a661enQmKqt4VjFilpG8JLfeM1p2AGoEtbh2CLhNbiCahZH ew/6HTBBC6m5WqNyrJ+sVQ16Loeoz8XXmHESQhXnlRvXQYhVvdrKaALdJEBlFKNI 0Rt0LRZuRoTNRXCWWqsPAP274OqSxnx0aT4JccxQfccmuSep4VN7YlABGhMSunPJ 0dqq8DQA6qSfrcapwnu1Mkakq3bKVMu8XnwpU/rURmdkvcnFHdDcFwSN6KAgq0fC B2rGTL/lpJVEVENQ26/2pBawQn0/BTRSC3Anno+85zZhsbWec1DQSqbsUYzfvnt3 JemRiiK6tTNL2c4ndJWx+rUml6eflUY= -----END CERTIFICATE-----Generated at Mon Apr 28 21:01:47 2025 by rpki-client