$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/977bc849-5b1d-34c5-91eb-81e2477f1b1a.roa File: 977bc849-5b1d-34c5-91eb-81e2477f1b1a.roa (raw, json) Hash identifier: TdYqA8umcS8LvriS034xXFCcRdliLUzbSNEYv8dvgPw= Subject key identifier: 98:A7:BA:AE:E7:B3:DD:1B:59:31:59:FC:66:49:32:0C:91:3F:ED:1E Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Certificate serial: 010D0C9F43285849A4BB5F0A52303DB97951B000 Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/977bc849-5b1d-34c5-91eb-81e2477f1b1a.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 36492 IP address blocks: 209.107.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:5f:0a:52:30:3d:b9:79:51:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=25a7dc83-8ce7-4a6e-9a47-e461f918305c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3f:92:33:34:a4:7a:e1:13:cb:36:2c:cd:a0: 2d:86:68:43:7e:b7:81:56:b3:f5:82:62:22:69:55: 69:1a:83:f7:b5:13:b8:6b:3d:81:6d:e9:14:44:d1: 49:75:fe:45:2b:8d:96:75:70:46:9c:eb:35:f0:99: be:c9:6c:12:42:62:c3:ac:aa:64:e3:9c:38:e7:d6: 48:5c:80:34:90:6e:4a:27:a7:24:83:e1:c3:8a:35: c4:59:b3:c0:ba:ac:46:91:53:77:e8:9d:f1:2d:06: 57:ba:45:0b:86:87:8f:bc:41:f1:5c:e5:fb:1b:31: 81:a2:26:b7:66:89:f9:d9:ec:3d:92:db:07:36:22: 5b:77:67:7f:5d:8c:95:17:86:f6:4d:62:d3:e1:75: 8d:0d:ef:9c:a4:df:98:f8:2b:eb:90:f3:71:81:4c: 64:67:bd:36:70:98:fc:31:f1:b9:d5:14:83:86:d8: 30:cd:de:64:a4:2b:cb:71:da:0b:c3:d8:86:53:36: d7:08:dd:84:a2:c2:4c:41:9b:f6:e8:a0:33:7a:67: c1:56:f9:25:5f:38:f9:f9:5d:d7:2f:ba:eb:dd:e0: 94:a1:4b:28:cc:1e:ac:21:d3:49:6e:b7:ad:26:4c: 3d:13:6e:fc:33:6a:5e:af:5a:79:cd:71:bb:a3:3c: 3e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A7:BA:AE:E7:B3:DD:1B:59:31:59:FC:66:49:32:0C:91:3F:ED:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/977bc849-5b1d-34c5-91eb-81e2477f1b1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl X509v3 Authority Key Identifier: keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer sbgp-ipAddrBlock: critical IPv4: 209.107.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:66:71:a7:18:83:a4:fb:db:37:2b:a1:7a:fa:9a:80:9e:18: 92:f4:e0:50:7a:32:c9:cd:8d:74:4a:9a:04:27:72:cf:5c:33: 46:16:06:ca:9f:25:51:ee:cd:90:4b:7a:57:38:16:e8:bc:c6: 65:49:f5:20:e0:0d:49:9b:69:d4:fb:27:81:b5:c9:77:12:59: a1:16:69:25:93:a9:6f:14:ab:26:4d:23:d8:aa:19:db:5a:55: e7:cc:9e:da:6b:94:dd:da:36:dc:16:29:98:e0:5d:ee:e2:70: d9:e2:11:50:6b:07:59:76:8b:57:21:fe:38:36:e3:a5:33:1f: b8:02:d9:da:b1:56:48:54:5c:28:43:e9:cd:af:9f:15:ef:a5: 2f:57:59:8d:fc:3d:38:b5:68:51:d3:00:4b:bd:75:57:ea:9c: 94:89:73:b7:53:42:aa:8d:72:84:35:a6:4c:8c:9e:27:85:f2: 8b:94:63:9c:19:3f:62:3e:45:6e:0a:b9:45:d8:ba:07:93:be: 5a:72:a7:c3:6b:5f:60:f2:2e:1c:0a:7c:58:bc:07:27:0c:b0: bf:89:4e:0b:ca:13:a0:c0:f8:7d:ca:34:55:c7:ce:90:75:89: 93:cf:6f:40:cc:3a:5b:41:e2:64:9c:89:3a:b4:66:d7:42:73: 89:b8:d6:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku18KUjA9uXlRsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5 ZTJkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MjVhN2RjODMtOGNlNy00YTZlLTlhNDctZTQ2MWY5MTgzMDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlD+SMzSkeuETyzYszaAthmhDfreBVrP1gmIi aVVpGoP3tRO4az2BbekURNFJdf5FK42WdXBGnOs18Jm+yWwSQmLDrKpk45w459ZI XIA0kG5KJ6ckg+HDijXEWbPAuqxGkVN36J3xLQZXukULhoePvEHxXOX7GzGBoia3 Zon52ew9ktsHNiJbd2d/XYyVF4b2TWLT4XWNDe+cpN+Y+CvrkPNxgUxkZ702cJj8 MfG51RSDhtgwzd5kpCvLcdoLw9iGUzbXCN2EosJMQZv26KAzemfBVvklXzj5+V3X L7rr3eCUoUsozB6sIdNJbretJkw9E278M2per1p5zXG7ozw+jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJinuq7ns90bWTFZ/GZJMgyRP+0eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvOTc3YmM4NDktNWIxZC0z NGM1LTkxZWItODFlMjQ3N2YxYjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2 OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WuwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRmcacYg6T72zcroXr6moCeGJL04FB6MsnNjXRKmgQncs9cM0YWBsqf JVHuzZBLelc4Fui8xmVJ9SDgDUmbadT7J4G1yXcSWaEWaSWTqW8UqyZNI9iqGdta VefMntprlN3aNtwWKZjgXe7icNniEVBrB1l2i1ch/jg246UzH7gC2dqxVkhUXChD 6c2vnxXvpS9XWY38PTi1aFHTAEu9dVfqnJSJc7dTQqqNcoQ1pkyMnieF8ouUY5wZ P2I+RW4KuUXYugeTvlpyp8NrX2DyLhwKfFi8BycMsL+JTgvKE6DA+H3KNFXHzpB1 iZPPb0DMOltB4mSciTq0ZtdCc4m41ps= -----END CERTIFICATE-----Generated at Sun Apr 27 06:56:18 2025 by rpki-client