$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/fb4a00c9-7f8b-3a5b-8362-3da4105e6390.roa File: fb4a00c9-7f8b-3a5b-8362-3da4105e6390.roa (raw, json) Hash identifier: dQDYFEIQc57gqx63oUVvP2ppuKecHvWYEI0dqH9PmmM= Subject key identifier: F9:36:05:88:5C:20:53:BA:C6:8B:5C:20:C6:5C:11:1B:1A:DB:0E:CC Certificate issuer: /CN=ee6bee5d-23d5-44e1-9615-76f9de86f2dd Certificate serial: 010D0C9F43285849ABB49E6B7935B291B9DD6D70 Authority key identifier: 52:51:B6:B9:53:49:BF:16:DC:4B:79:FB:8C:F9:F8:46:0E:8D:5A:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/fb4a00c9-7f8b-3a5b-8362-3da4105e6390.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 22611 IP address blocks: 209.163.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:9e:6b:79:35:b2:91:b9:dd:6d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee6bee5d-23d5-44e1-9615-76f9de86f2dd Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=07978d14-a15b-4879-98ca-c2d3e9dc83d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cd:8f:60:13:ab:39:40:2d:41:95:15:cb:36: 62:24:9a:9a:74:e0:a7:c7:1f:15:30:56:0a:b8:83: 4f:8d:cf:39:5e:6d:dc:41:65:b7:85:e4:0c:18:86: ff:99:70:e2:56:26:dd:89:b0:f1:70:4b:e1:1a:6d: dd:24:b7:1a:0e:fc:c4:31:c9:59:5a:0c:aa:d3:30: 50:f8:b3:54:32:62:08:bb:d8:ee:b7:85:20:06:91: 69:42:5b:94:91:c7:32:78:51:7d:41:cb:3e:dc:54: fa:35:17:1d:ef:67:99:d0:78:55:a0:65:91:b2:d6: 35:ba:ad:44:d1:48:7c:af:fa:b5:ec:d1:81:06:d9: ca:b6:b7:25:c4:05:1d:dc:ce:77:54:7e:a1:17:c3: 38:0b:78:ea:a4:4a:dd:11:4b:d8:48:0c:17:a1:b4: ab:e3:d2:02:ea:82:2e:46:47:cd:6c:0e:38:f4:84: 0a:16:ac:af:ee:10:f6:3f:56:b6:1d:cd:7b:96:3b: 49:04:51:0e:8e:72:65:d3:c3:15:7d:1d:8a:25:cc: f8:82:23:b8:a2:ec:fa:f4:3a:b9:9b:f1:de:7a:bd: 4a:4a:25:c7:b6:2b:4b:1f:6a:83:de:a1:d8:f8:12: af:1c:4e:d6:75:60:fa:3b:c2:c9:05:a1:f0:63:d8: fd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:36:05:88:5C:20:53:BA:C6:8B:5C:20:C6:5C:11:1B:1A:DB:0E:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/fb4a00c9-7f8b-3a5b-8362-3da4105e6390.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.crl X509v3 Authority Key Identifier: keyid:52:51:B6:B9:53:49:BF:16:DC:4B:79:FB:8C:F9:F8:46:0E:8D:5A:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.cer sbgp-ipAddrBlock: critical IPv4: 209.163.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:a4:d8:20:7a:58:d3:71:40:d0:7b:9e:20:55:ef:65:6b:1b: 24:ee:42:db:04:fa:38:93:0c:a1:04:63:84:6f:44:84:18:d5: 46:78:2d:39:b3:a5:8f:fd:6c:9f:2c:d0:1d:ed:73:67:57:83: e2:20:6f:5f:31:f9:88:ba:2d:ed:82:a2:65:a5:1d:09:db:d9: d7:e6:a4:af:82:23:a9:08:fc:f0:17:1f:f2:2d:02:9d:6b:ab: b6:02:9d:9c:7c:1c:90:53:a7:1c:49:60:f0:47:1c:1a:a1:42: ca:b5:25:97:09:a9:4e:c4:3c:38:af:b1:77:33:9c:b6:b2:90: 0b:35:9f:c3:d6:af:0b:ec:5e:92:ec:fa:12:b4:f9:90:9b:ea: a4:b8:25:e9:84:8e:5a:ce:0f:77:87:5d:1e:4a:7b:95:3e:97: a0:f9:4f:83:e0:90:fa:4f:a8:1b:94:e4:8b:84:f6:91:75:10: 90:9f:7f:40:21:a7:76:c1:2f:f8:50:86:33:63:81:43:14:40: ad:aa:e4:a2:ad:ee:f9:be:7c:b5:14:ba:d5:d5:1d:e2:5b:4e: 30:d9:86:86:b1:42:3a:5b:5a:6a:1b:ec:6f:44:a9:10:7b:00: bd:e8:5c:fe:0b:83:64:36:a5:bd:c7:a6:57:af:fb:26:3d:cc: 09:86:02:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtJ5reTWykbndbXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWU2YmVlNWQtMjNkNS00NGUxLTk2MTUtNzZmOWRlODZm MmRkMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk MDc5NzhkMTQtYTE1Yi00ODc5LTk4Y2EtYzJkM2U5ZGM4M2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo82PYBOrOUAtQZUVyzZiJJqadOCnxx8VMFYK uINPjc85Xm3cQWW3heQMGIb/mXDiVibdibDxcEvhGm3dJLcaDvzEMclZWgyq0zBQ +LNUMmIIu9jut4UgBpFpQluUkccyeFF9Qcs+3FT6NRcd72eZ0HhVoGWRstY1uq1E 0Uh8r/q17NGBBtnKtrclxAUd3M53VH6hF8M4C3jqpErdEUvYSAwXobSr49IC6oIu RkfNbA449IQKFqyv7hD2P1a2Hc17ljtJBFEOjnJl08MVfR2KJcz4giO4ouz69Dq5 m/Heer1KSiXHtitLH2qD3qHY+BKvHE7WdWD6O8LJBaHwY9j9NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPk2BYhcIFO6xotcIMZcERsa2w7MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZTZi ZWU1ZC0yM2Q1LTQ0ZTEtOTYxNS03NmY5ZGU4NmYyZGQvZmI0YTAwYzktN2Y4Yi0z YTViLTgzNjItM2RhNDEwNWU2MzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWU2YmVlNWQtMjNkNS00NGUxLTk2 MTUtNzZmOWRlODZmMmRkL2VlNmJlZTVkLTIzZDUtNDRlMS05NjE1LTc2ZjlkZTg2 ZjJkZC5jcmwwHwYDVR0jBBgwFoAUUlG2uVNJvxbcS3n7jPn4Rg6NWuUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZTZiZWU1ZC0yM2Q1LTQ0ZTEtOTYxNS03NmY5 ZGU4NmYyZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aNrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFik2CB6WNNxQNB7niBV72VrGyTuQtsE+jiTDKEEY4RvRIQY1UZ4LTmz pY/9bJ8s0B3tc2dXg+Igb18x+Yi6Le2ComWlHQnb2dfmpK+CI6kI/PAXH/ItAp1r q7YCnZx8HJBTpxxJYPBHHBqhQsq1JZcJqU7EPDivsXcznLaykAs1n8PWrwvsXpLs +hK0+ZCb6qS4JemEjlrOD3eHXR5Ke5U+l6D5T4PgkPpPqBuU5IuE9pF1EJCff0Ah p3bBL/hQhjNjgUMUQK2q5KKt7vm+fLUUutXVHeJbTjDZhoaxQjpbWmob7G9EqRB7 AL3oXP4Lg2Q2pb3Hplev+yY9zAmGAgA= -----END CERTIFICATE-----Generated at Tue Apr 29 07:01:19 2025 by rpki-client