$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6e3249de-4e8c-377d-980e-6a30cc94815e.roa File: 6e3249de-4e8c-377d-980e-6a30cc94815e.roa (raw, json) Hash identifier: DXvNbSg1pnrO4yFD+ghZ6xEqsZO3XTzsGkf2G+OG+BI= Subject key identifier: FB:2F:06:FE:94:09:7D:68:F4:6D:23:35:22:58:F4:9A:4A:7A:C6:63 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F432858491C0C2433B3BCE1F9EF516AC0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6e3249de-4e8c-377d-980e-6a30cc94815e.roa Signing time: Fri 07 Mar 2025 14:00:52 +0000 ROA not before: Fri 07 Mar 2025 14:00:52 +0000 ROA not after: Thu 05 Jun 2025 13:00:52 +0000 asID: 30036 IP address blocks: 108.161.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1c:0c:24:33:b3:bc:e1:f9:ef:51:6a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 7 14:00:52 2025 GMT Not After : Jun 5 13:00:52 2025 GMT Subject: CN=4d8fd216-c388-45fc-a6ab-2d3a95c66162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f9:ae:79:55:ea:36:3d:3d:12:e6:67:87:b6: 67:55:ee:4e:18:2d:58:85:e1:67:80:ed:6c:95:56: 6a:6d:6a:8c:44:d1:ee:1b:24:a3:fe:b3:b6:65:84: 88:45:bd:96:b5:03:f6:4f:51:10:a5:2f:b1:13:d8: 1f:e3:2b:d7:a9:ff:b7:85:ff:1e:76:a6:71:e2:fc: 86:db:05:03:45:47:a3:b1:4d:86:b8:4e:2b:34:d8: 71:7e:e2:03:24:ab:c4:3c:49:13:6f:d7:47:4d:d1: 3c:26:58:b8:72:d0:ef:07:33:e4:5d:49:f1:67:02: 89:f9:e1:7c:1b:a7:64:f4:66:22:97:35:78:bf:07: ac:73:cd:9f:c9:5a:79:ee:f4:a1:cf:15:10:c3:eb: c5:f0:36:d0:90:fb:d6:ad:71:0f:d7:7e:7c:82:18: 8b:40:e9:8c:ec:b1:db:d4:8f:e8:6e:e7:f6:80:3a: c0:91:b7:93:b7:be:f5:c0:02:85:f0:12:59:1f:a8: 1a:5c:65:a7:c3:dc:10:9e:0c:a8:46:30:95:d6:39: 34:e0:03:67:ef:cb:b0:de:1e:bf:a3:82:71:1c:0b: e4:c5:c9:08:ec:e7:1c:f1:d2:6f:ff:9e:0a:4d:77: 72:3a:f3:21:a9:87:a8:7c:67:bc:ae:8a:34:f2:f5: 59:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:2F:06:FE:94:09:7D:68:F4:6D:23:35:22:58:F4:9A:4A:7A:C6:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6e3249de-4e8c-377d-980e-6a30cc94815e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.161.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:17:a5:f3:59:01:f5:26:ff:ba:20:aa:ef:2c:83:b1:d5:0f: b9:ad:6d:82:db:4f:8a:ba:9d:87:30:85:f2:88:6d:f3:b4:ca: b2:4e:36:4e:fe:59:9e:05:2d:14:b4:57:f7:db:70:42:a8:4f: 10:5b:d0:c7:8d:de:41:92:c5:0b:e5:13:62:04:1e:c3:c8:b5: 04:f4:01:06:6f:e8:ac:8c:7b:c4:4a:6a:b0:b5:00:bf:df:13: 45:38:e8:63:1a:b3:38:79:96:0d:06:3a:a6:3c:c3:ab:2a:d0: f6:bd:5d:ad:eb:8a:32:9c:e1:a2:1c:d3:2b:05:82:56:f7:16: d5:cd:0e:f1:6f:eb:66:9c:79:0a:e3:7f:6a:c6:ed:a7:15:af: d5:4a:ad:00:7b:9a:66:f1:64:ba:98:da:ee:5f:f7:65:19:9f: de:9d:28:16:e7:34:05:aa:3d:c7:27:83:5e:57:fa:f6:1a:50: 07:32:f3:a6:56:40:ac:7b:24:a5:36:b8:d4:b1:7f:87:bc:99: 93:72:e3:7e:9b:b7:1e:99:b9:0b:4c:fc:f0:94:22:c4:95:fe: 43:16:5f:b8:1f:21:db:fe:ef:c1:d3:14:f7:48:fc:a7:9e:5f: 03:3f:9b:d7:25:62:3d:ee:19:8a:80:fd:6b:34:dd:77:55:05: f8:ed:16:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkcDCQzs7zh+e9RasAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDMwNzE0MDA1MloXDTI1MDYwNTEzMDA1MlowLzEtMCsGA1UEAxMk NGQ4ZmQyMTYtYzM4OC00NWZjLWE2YWItMmQzYTk1YzY2MTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvmueVXqNj09EuZnh7ZnVe5OGC1YheFngO1s lVZqbWqMRNHuGySj/rO2ZYSIRb2WtQP2T1EQpS+xE9gf4yvXqf+3hf8edqZx4vyG 2wUDRUejsU2GuE4rNNhxfuIDJKvEPEkTb9dHTdE8Jli4ctDvBzPkXUnxZwKJ+eF8 G6dk9GYilzV4vwesc82fyVp57vShzxUQw+vF8DbQkPvWrXEP1358ghiLQOmM7LHb 1I/obuf2gDrAkbeTt771wAKF8BJZH6gaXGWnw9wQngyoRjCV1jk04ANn78uw3h6/ o4JxHAvkxckI7Occ8dJv/54KTXdyOvMhqYeofGe8roo08vVZXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPsvBv6UCX1o9G0jNSJY9JpKesZjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNmUzMjQ5ZGUtNGU4Yy0z NzdkLTk4MGUtNmEzMGNjOTQ4MTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKFYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoXpfNZAfUm/7ogqu8sg7HVD7mtbYLbT4q6nYcwhfKIbfO0yrJONk7+ WZ4FLRS0V/fbcEKoTxBb0MeN3kGSxQvlE2IEHsPItQT0AQZv6KyMe8RKarC1AL/f E0U46GMaszh5lg0GOqY8w6sq0Pa9Xa3rijKc4aIc0ysFglb3FtXNDvFv62aceQrj f2rG7acVr9VKrQB7mmbxZLqY2u5f92UZn96dKBbnNAWqPccng15X+vYaUAcy86ZW QKx7JKU2uNSxf4e8mZNy436btx6ZuQtM/PCUIsSV/kMWX7gfIdv+78HTFPdI/Kee XwM/m9clYj3uGYqA/Ws03XdVBfjtFik= -----END CERTIFICATE-----Generated at Sun Apr 27 20:18:07 2025 by rpki-client