$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/826ab303-5f30-342d-91ae-d20393f81fa2.roa File: 826ab303-5f30-342d-91ae-d20393f81fa2.roa (raw, json) Hash identifier: muIRiSKXssyp51R5b4uF73D4YMBXKvOWmp4tbEwZcHg= Subject key identifier: E6:E5:0C:F5:F2:8F:5C:6B:FC:32:82:6C:A0:9D:AB:EA:FF:A5:45:CF Certificate issuer: /CN=4a81e924-7e18-4312-95fd-09d6d0b08bce Certificate serial: 010D0C9F43285848E16BEBD593902EB79D946980 Authority key identifier: 33:97:1D:92:B7:90:2A:45:99:91:58:D6:D6:F9:0C:FA:A5:76:46:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/826ab303-5f30-342d-91ae-d20393f81fa2.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 33099 IP address blocks: 207.167.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/4a81e924-7e18-4312-95fd-09d6d0b08bce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/4a81e924-7e18-4312-95fd-09d6d0b08bce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:eb:d5:93:90:2e:b7:9d:94:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a81e924-7e18-4312-95fd-09d6d0b08bce Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=01319cf2-509d-466a-93b6-10e26c94f63e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d0:94:ed:92:ef:d0:8e:04:d6:84:a4:00:2a: e0:26:3d:20:d9:19:be:71:c3:3e:17:20:87:02:ae: 59:85:dc:e7:8b:e9:a9:e1:7d:98:ba:2a:4f:be:bd: 14:48:3f:ed:2e:c2:0a:ea:6c:61:a7:ac:43:f1:21: af:dc:91:43:a9:55:af:55:60:09:c8:d4:c3:43:5b: 90:7c:ff:8c:be:f1:f0:f3:5a:8c:37:99:3a:b3:44: 5d:8b:f7:9b:97:96:7a:b1:64:8b:a9:3e:69:2e:74: e1:9a:68:8c:6f:4a:91:f0:09:be:2b:1e:dc:b8:2b: 9b:2a:9e:5c:92:15:77:c0:bf:d4:c1:0d:03:9a:f5: 26:d9:f0:11:94:3a:86:27:03:af:58:b9:ed:17:a0: c2:4e:91:67:06:a5:f9:89:3f:ab:d8:f5:a5:64:8a: d1:97:55:d8:da:b1:f6:4f:f8:b8:f3:fb:6d:d2:a0: 02:cc:90:08:25:08:9e:c2:c6:2e:00:a2:f1:ee:6f: de:ca:76:8f:76:c6:08:03:eb:e3:cd:17:6d:ed:d7: 8c:e8:c8:ae:b9:75:ee:9d:13:cd:ac:45:6e:ca:50: f1:13:4a:03:d2:46:b3:de:99:4f:93:06:0e:62:59: a3:94:5d:15:10:1f:c9:82:60:32:da:60:ea:86:35: cc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E5:0C:F5:F2:8F:5C:6B:FC:32:82:6C:A0:9D:AB:EA:FF:A5:45:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/826ab303-5f30-342d-91ae-d20393f81fa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/4a81e924-7e18-4312-95fd-09d6d0b08bce.crl X509v3 Authority Key Identifier: keyid:33:97:1D:92:B7:90:2A:45:99:91:58:D6:D6:F9:0C:FA:A5:76:46:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce.cer sbgp-ipAddrBlock: critical IPv4: 207.167.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:44:95:60:c5:44:a8:98:ee:81:5a:bf:b1:e5:22:bf:2b:bc: 72:e1:8b:2f:8a:53:64:be:06:32:10:8c:22:c3:05:e6:b3:16: 25:f9:b4:0b:60:1a:a0:41:67:56:ec:d3:73:ff:df:88:a8:f3: a4:5c:01:1b:a5:32:de:b7:19:a7:dd:91:0a:60:82:e1:a0:54: 17:e1:aa:2a:b3:52:5c:6a:6b:36:c3:29:53:91:8d:74:57:0b: f0:ee:e6:a9:9b:fc:7f:3c:b5:99:83:6a:a1:cd:46:9f:15:85: 32:f7:3e:46:4b:a0:56:db:cf:18:36:58:c1:9e:08:17:e3:84: 4d:33:45:8e:95:fe:3a:61:bd:9d:71:0a:29:b1:62:91:f3:89: 1f:46:b6:8f:81:82:16:47:ff:a1:40:3d:bd:9e:a7:5f:ff:0e: 8b:8d:a3:9b:5f:a1:48:2e:e4:39:b8:9a:46:f7:dd:da:08:1f: d6:2e:cb:bf:d4:52:a1:49:72:80:bd:07:b0:42:c3:ad:1d:f3: c9:5c:3b:ab:a2:14:b5:69:b5:2a:27:dc:eb:e1:b2:ca:21:24: a7:fd:17:ee:9a:d9:e1:b5:87:ca:0c:7d:6d:4e:dd:ad:64:a7: 8b:9b:ee:79:d1:78:38:8f:95:04:93:66:48:a4:3e:ef:3f:92: 52:58:d7:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha+vVk5Aut52UaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGE4MWU5MjQtN2UxOC00MzEyLTk1ZmQtMDlkNmQwYjA4 YmNlMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk MDEzMTljZjItNTA5ZC00NjZhLTkzYjYtMTBlMjZjOTRmNjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstCU7ZLv0I4E1oSkACrgJj0g2Rm+ccM+FyCH Aq5Zhdzni+mp4X2YuipPvr0USD/tLsIK6mxhp6xD8SGv3JFDqVWvVWAJyNTDQ1uQ fP+MvvHw81qMN5k6s0Rdi/ebl5Z6sWSLqT5pLnThmmiMb0qR8Am+Kx7cuCubKp5c khV3wL/UwQ0DmvUm2fARlDqGJwOvWLntF6DCTpFnBqX5iT+r2PWlZIrRl1XY2rH2 T/i48/tt0qACzJAIJQiewsYuAKLx7m/eynaPdsYIA+vjzRdt7deM6MiuuXXunRPN rEVuylDxE0oD0kaz3plPkwYOYlmjlF0VEB/JgmAy2mDqhjXMbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOblDPXyj1xr/DKCbKCdq+r/pUXPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YTgx ZTkyNC03ZTE4LTQzMTItOTVmZC0wOWQ2ZDBiMDhiY2UvODI2YWIzMDMtNWYzMC0z NDJkLTkxYWUtZDIwMzkzZjgxZmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGE4MWU5MjQtN2UxOC00MzEyLTk1 ZmQtMDlkNmQwYjA4YmNlLzRhODFlOTI0LTdlMTgtNDMxMi05NWZkLTA5ZDZkMGIw OGJjZS5jcmwwHwYDVR0jBBgwFoAUM5cdkreQKkWZkVjW1vkM+qV2RlkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80YTgxZTkyNC03ZTE4LTQzMTItOTVmZC0wOWQ2 ZDBiMDhiY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz6dsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxElWDFRKiY7oFav7HlIr8rvHLhiy+KU2S+BjIQjCLDBeazFiX5tAtg GqBBZ1bs03P/34io86RcARulMt63GafdkQpgguGgVBfhqiqzUlxqazbDKVORjXRX C/Du5qmb/H88tZmDaqHNRp8VhTL3PkZLoFbbzxg2WMGeCBfjhE0zRY6V/jphvZ1x CimxYpHziR9Gto+BghZH/6FAPb2ep1//DouNo5tfoUgu5Dm4mkb33doIH9Yuy7/U UqFJcoC9B7BCw60d88lcO6uiFLVptSon3OvhssohJKf9F+6a2eG1h8oMfW1O3a1k p4ub7nnReDiPlQSTZkikPu8/klJY14A= -----END CERTIFICATE-----Generated at Fri May 2 12:04:05 2025 by rpki-client