$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9130d001-57e1-34a0-9bc6-86505547de41.roa File: 9130d001-57e1-34a0-9bc6-86505547de41.roa (raw, json) Hash identifier: od+55ihPimmeZv2qpqKLvgkXBDMPjgygMn9SNSMXAE0= Subject key identifier: B9:E8:A0:5A:91:33:53:4F:C2:2C:C0:B1:71:15:45:67:67:A8:E9:12 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F432858491076302F7FEF47D86046D5C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9130d001-57e1-34a0-9bc6-86505547de41.roa Signing time: Mon 03 Mar 2025 10:24:54 +0000 ROA not before: Mon 03 Mar 2025 10:24:54 +0000 ROA not after: Sun 01 Jun 2025 09:24:54 +0000 asID: 30036 IP address blocks: 108.178.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:76:30:2f:7f:ef:47:d8:60:46:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 3 10:24:54 2025 GMT Not After : Jun 1 09:24:54 2025 GMT Subject: CN=9a58a4f0-f7b3-4bc4-b16b-847ef4c9880a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:26:ca:af:30:b9:d7:cd:b0:cb:c5:df:0f:7c: aa:fa:6e:bc:d9:48:26:ba:a7:e3:dc:83:86:6d:34: e2:a5:a6:ce:6a:26:4e:72:18:08:14:50:66:ff:e0: 88:90:a9:b3:02:2b:22:f3:5b:be:c8:81:ab:ce:35: 28:a4:57:6a:56:8e:ab:f6:48:3c:1b:0e:32:74:9c: 89:e7:c9:b9:b2:8d:22:fc:f9:4d:1c:7d:7b:33:1c: 59:25:b4:78:8b:df:79:6b:63:27:21:34:eb:8e:99: 77:28:7d:39:a6:64:98:0c:22:35:a1:ec:1a:15:b5: 8b:e2:e2:14:e1:2e:aa:c4:a4:32:b0:58:ed:de:44: 7c:e4:49:7a:35:a5:79:d6:88:d0:13:12:10:53:34: 2f:c7:4d:95:7e:98:23:09:50:c1:b4:3d:70:85:f8: ad:85:a8:b1:f8:66:29:3e:14:cb:90:2f:3e:78:2c: 9d:de:54:d9:02:07:06:25:b1:fe:70:3b:c5:32:6b: fb:62:b1:5b:d8:43:2c:8b:ed:5f:5f:c9:ec:df:0c: 72:27:45:b9:83:63:79:f0:92:99:c7:4b:60:e3:78: 46:cd:36:99:ae:e6:7f:0d:e0:54:cd:0f:ed:4a:87: 8a:e3:f3:c3:fe:15:64:e0:ea:c0:74:01:18:2b:09: b7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E8:A0:5A:91:33:53:4F:C2:2C:C0:B1:71:15:45:67:67:A8:E9:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9130d001-57e1-34a0-9bc6-86505547de41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.178.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:53:c3:39:1c:b6:d0:a5:05:17:b4:ff:33:82:53:f2:4a:87: 2a:2a:2d:3f:47:c6:f6:5d:b7:92:06:15:08:41:d3:10:e7:33: 2e:fc:54:00:e0:1d:d4:c1:d5:f2:d8:94:9f:17:5d:a6:27:8b: 14:74:85:66:b5:3c:e0:0b:71:9c:bf:53:46:d1:34:06:3a:01: 39:f9:0e:44:03:33:a0:71:e3:a2:1f:91:03:c8:90:87:12:75: 06:3b:b3:62:8a:a9:1a:f5:fb:e5:f6:03:0a:e2:87:b9:14:63: b5:0f:fd:aa:54:1f:76:01:31:21:a1:cc:6d:17:c9:63:49:ca: 0b:7e:60:09:fe:59:24:77:f5:0d:a6:db:cf:83:3f:f5:9f:9f: 77:42:01:0b:3b:3f:21:cb:c1:db:86:bb:53:98:cb:ed:46:cf: f9:e7:26:70:46:ab:0d:22:3c:76:cf:39:0a:ba:f8:e0:7e:de: be:cf:2b:fe:41:73:02:75:0c:99:fe:4e:f0:74:48:9b:5b:b3: 90:88:0f:2e:b7:71:74:d7:f5:bc:b7:5c:53:0f:ea:ca:04:04: a0:dd:26:25:4c:19:78:25:80:b1:8c:ce:e5:74:52:a5:a6:55: f4:c9:98:88:e3:9d:30:b1:7c:34:00:61:0d:86:35:84:96:31: 90:a3:d7:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQdjAvf+9H2GBG1cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDMwMzEwMjQ1NFoXDTI1MDYwMTA5MjQ1NFowLzEtMCsGA1UEAxMk OWE1OGE0ZjAtZjdiMy00YmM0LWIxNmItODQ3ZWY0Yzk4ODBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxibKrzC5182wy8XfD3yq+m682Ugmuqfj3IOG bTTipabOaiZOchgIFFBm/+CIkKmzAisi81u+yIGrzjUopFdqVo6r9kg8Gw4ydJyJ 58m5so0i/PlNHH17MxxZJbR4i995a2MnITTrjpl3KH05pmSYDCI1oewaFbWL4uIU 4S6qxKQysFjt3kR85El6NaV51ojQExIQUzQvx02VfpgjCVDBtD1whfithaix+GYp PhTLkC8+eCyd3lTZAgcGJbH+cDvFMmv7YrFb2EMsi+1fX8ns3wxyJ0W5g2N58JKZ x0tg43hGzTaZruZ/DeBUzQ/tSoeK4/PD/hVk4OrAdAEYKwm3JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnooFqRM1NPwizAsXEVRWdnqOkSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOTEzMGQwMDEtNTdlMS0z NGEwLTliYzYtODY1MDU1NDdkZTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLLyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRTwzkcttClBRe0/zOCU/JKhyoqLT9HxvZdt5IGFQhB0xDnMy78VADg HdTB1fLYlJ8XXaYnixR0hWa1POALcZy/U0bRNAY6ATn5DkQDM6Bx46IfkQPIkIcS dQY7s2KKqRr1++X2Awrih7kUY7UP/apUH3YBMSGhzG0XyWNJygt+YAn+WSR39Q2m 28+DP/Wfn3dCAQs7PyHLwduGu1OYy+1Gz/nnJnBGqw0iPHbPOQq6+OB+3r7PK/5B cwJ1DJn+TvB0SJtbs5CIDy63cXTX9by3XFMP6soEBKDdJiVMGXglgLGMzuV0UqWm VfTJmIjjnTCxfDQAYQ2GNYSWMZCj11s= -----END CERTIFICATE-----Generated at Tue Apr 29 11:28:03 2025 by rpki-client