$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/b26835a9-1b09-38a9-a219-717ce4702b6a.roa File: b26835a9-1b09-38a9-a219-717ce4702b6a.roa (raw, json) Hash identifier: NWMa6Aq59Fnx53VSVrQFxHSXETdcD8z6gB/JhQyLSGo= Subject key identifier: CE:01:A1:27:22:20:2D:FC:7D:9E:20:A5:D0:DA:A4:8F:DD:96:0F:DC Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Certificate serial: 010D0C9F43285849A4BB5D662FBAD74FC5FFF880 Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/b26835a9-1b09-38a9-a219-717ce4702b6a.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 36492 IP address blocks: 209.107.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:5d:66:2f:ba:d7:4f:c5:ff:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=1d25bbb1-1bdf-4a1c-b1c0-318d44481f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9e:a5:97:b4:d2:c8:00:75:cd:b3:c8:89:e8: 4a:00:b7:1e:5f:20:fa:a2:3a:2f:22:2b:1d:b7:07: 4b:eb:c9:3c:13:71:ff:2c:7b:73:c5:4f:5d:9f:54: e2:27:52:bb:5a:58:d7:ff:e6:93:d0:55:be:93:9d: 54:c9:e3:17:10:b0:3b:86:9a:27:6c:fd:0f:09:49: 23:cd:fe:d0:3d:5c:b0:93:e8:8b:8b:be:aa:d1:56: ae:dc:18:24:a8:5e:7e:37:ca:c0:dc:cd:83:6e:7d: dc:d7:6b:1b:8c:92:7c:16:ea:f4:5c:a7:01:9f:a5: 46:7e:ea:8f:81:af:2c:11:42:b5:b6:50:2f:a7:cb: a8:a3:f1:26:a4:54:86:b1:e6:39:13:6b:e4:e0:d3: 70:65:c4:d3:66:92:0b:cc:09:b2:6a:c6:a2:b8:72: 93:28:0a:f1:7c:bb:23:49:69:d9:b9:b7:26:70:4f: 9f:73:be:df:c7:90:bb:49:7e:5b:d5:e8:da:40:14: 4e:43:70:83:8d:2a:70:fc:2e:58:62:32:c1:46:de: 2c:00:cc:00:d8:5c:9e:0d:73:be:8a:4a:95:46:45: c1:e3:e0:b8:f9:b9:c1:1d:ca:f2:3f:2a:fd:bd:3b: ef:a5:b6:c9:58:18:92:ed:84:10:39:2f:7e:9b:f5: f2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:01:A1:27:22:20:2D:FC:7D:9E:20:A5:D0:DA:A4:8F:DD:96:0F:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/b26835a9-1b09-38a9-a219-717ce4702b6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl X509v3 Authority Key Identifier: keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer sbgp-ipAddrBlock: critical IPv4: 209.107.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:04:94:72:16:14:9c:c7:1b:18:a9:07:91:4f:8b:00:fa:81: 0b:2e:f0:35:8c:96:5c:93:d4:02:d4:c3:a3:02:11:fc:a4:76: b1:ab:1e:ae:c4:b8:07:3e:cf:94:e1:2b:aa:45:39:f9:f4:c5: b6:ce:4a:92:9e:fe:79:30:e1:24:9a:fe:93:91:7e:09:79:0a: ea:6a:89:7a:cc:f8:0d:30:7d:6f:fc:2c:d8:ec:0e:2c:58:42: c1:41:fe:75:71:a0:9c:7c:05:2a:69:bb:12:5b:65:69:18:94: c4:08:de:fd:3c:d8:77:de:16:c5:e9:f0:bb:85:a6:3e:69:db: 41:17:6c:b2:9b:b4:f9:e2:62:7d:56:d1:22:26:cd:9e:96:df: ef:e2:06:18:54:90:d2:be:84:bf:dc:00:dd:02:6f:8e:b9:a9: 17:35:38:9e:49:57:ee:21:97:5f:19:ea:a5:c9:ac:7e:91:42: 09:00:11:5f:ac:6f:fe:0e:2e:2e:2c:bf:2e:29:ad:8b:df:f4: d4:29:4d:34:95:e4:5e:8a:4e:df:6b:81:18:05:71:4b:b9:1e: fb:45:9f:79:1c:2e:b5:25:99:d3:5f:25:3a:63:ca:c9:6a:7e: dd:7f:0f:fd:46:a2:fd:bc:e0:46:70:a9:f3:9c:7d:3a:de:4d: 06:ab:c2:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku11mL7rXT8X/+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5 ZTJkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MWQyNWJiYjEtMWJkZi00YTFjLWIxYzAtMzE4ZDQ0NDgxZjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ6ll7TSyAB1zbPIiehKALceXyD6ojovIisd twdL68k8E3H/LHtzxU9dn1TiJ1K7WljX/+aT0FW+k51UyeMXELA7hponbP0PCUkj zf7QPVywk+iLi76q0Vau3BgkqF5+N8rA3M2Dbn3c12sbjJJ8Fur0XKcBn6VGfuqP ga8sEUK1tlAvp8uoo/EmpFSGseY5E2vk4NNwZcTTZpILzAmyasaiuHKTKArxfLsj SWnZubcmcE+fc77fx5C7SX5b1ejaQBROQ3CDjSpw/C5YYjLBRt4sAMwA2FyeDXO+ ikqVRkXB4+C4+bnBHcryPyr9vTvvpbbJWBiS7YQQOS9+m/Xy8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4BoSciIC38fZ4gpdDapI/dlg/cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvYjI2ODM1YTktMWIwOS0z OGE5LWEyMTktNzE3Y2U0NzAyYjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2 OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Wu8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYElHIWFJzHGxipB5FPiwD6gQsu8DWMllyT1ALUw6MCEfykdrGrHq7E uAc+z5ThK6pFOfn0xbbOSpKe/nkw4SSa/pORfgl5CupqiXrM+A0wfW/8LNjsDixY QsFB/nVxoJx8BSppuxJbZWkYlMQI3v082HfeFsXp8LuFpj5p20EXbLKbtPniYn1W 0SImzZ6W3+/iBhhUkNK+hL/cAN0Cb465qRc1OJ5JV+4hl18Z6qXJrH6RQgkAEV+s b/4OLi4svy4prYvf9NQpTTSV5F6KTt9rgRgFcUu5HvtFn3kcLrUlmdNfJTpjyslq ft1/D/1Gov284EZwqfOcfTreTQarwmE= -----END CERTIFICATE-----Generated at Sun Apr 27 23:03:28 2025 by rpki-client