$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/b456e174-0477-3ac6-8337-55bc87b1ea88.roa File: b456e174-0477-3ac6-8337-55bc87b1ea88.roa (raw, json) Hash identifier: qOtqjTKvpaxB0rqfzt4eDlaIfTrO1n6kkmyc7DFiqns= Subject key identifier: FB:E6:63:F4:46:A4:9C:9E:2D:95:FD:B8:BD:30:5B:CE:5D:61:32:65 Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Certificate serial: 010D0C9F43285849A4BB72E9617BDFDDC7BAD340 Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/b456e174-0477-3ac6-8337-55bc87b1ea88.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 36492 IP address blocks: 209.107.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:72:e9:61:7b:df:dd:c7:ba:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=e922a97d-bebd-44b8-943b-e4940e62414a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c9:f2:92:0f:ae:f2:12:59:33:5b:68:a7:4c: 92:6a:95:6d:e2:8d:3f:cc:5e:f0:36:83:0b:3f:b0: cf:5c:59:7f:3d:fd:87:65:66:2c:a1:d0:b8:47:b5: ed:2b:ed:e4:e4:ca:ef:2c:d6:d4:58:a3:eb:cf:a0: 3d:9e:1a:c1:3d:51:9e:09:0d:01:7f:94:e8:16:99: 18:56:d2:9f:57:cd:a2:cb:4a:73:c7:3d:89:33:30: 5a:a0:79:7f:7e:91:94:99:76:27:73:21:39:06:e4: 5e:25:7d:39:01:11:68:12:d0:e0:19:66:4e:31:f0: f0:2e:52:4a:7b:b1:5c:7a:91:64:8e:13:f0:56:5c: 69:ff:85:cf:a8:c5:8d:00:53:2d:66:8c:9c:08:71: 1a:97:17:ea:58:d1:3e:61:b5:d6:a1:30:24:e1:b3: 15:17:d7:17:cf:b4:76:b4:c0:0e:90:d0:39:9a:fd: fe:9c:9e:4e:7c:7e:c3:c4:bd:66:07:46:2c:af:77: b9:24:6c:e8:e8:6b:b9:73:cd:0c:e6:d9:a2:18:fa: c3:f4:f9:70:88:6e:bb:fe:bc:13:2a:2f:fe:38:4a: b4:01:ea:62:6e:74:71:78:0a:ae:d9:31:db:f5:e8: 86:d9:5a:3c:04:c2:74:79:b9:a4:1b:f9:8b:37:82: 1f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E6:63:F4:46:A4:9C:9E:2D:95:FD:B8:BD:30:5B:CE:5D:61:32:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/b456e174-0477-3ac6-8337-55bc87b1ea88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl X509v3 Authority Key Identifier: keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer sbgp-ipAddrBlock: critical IPv4: 209.107.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:44:e3:3b:af:87:fd:8c:b5:6a:f9:4c:66:1e:59:09:eb:fa: f7:c4:94:e2:71:8d:5d:e0:2d:0a:3d:ce:75:39:78:fb:f6:22: fa:a1:74:e2:72:5b:74:97:aa:e2:5a:02:f4:e2:57:62:97:6d: 3d:6e:61:8a:3c:f7:66:28:02:00:93:1d:a6:b5:f1:5f:12:f6: 38:f8:b6:75:9a:20:39:b0:d1:00:1c:4c:18:1d:c9:1e:f1:c8: fb:9a:13:b3:dc:67:82:7b:12:40:15:68:cd:9a:c1:d7:66:cb: 4a:51:86:19:68:ef:bc:1e:ab:1a:e1:e8:2f:42:f5:c6:41:af: d3:61:b0:64:0c:d7:53:a9:ba:35:9a:75:ba:b9:66:dc:28:54: 81:37:bc:cd:bd:26:06:9c:1a:52:0f:57:06:fd:8b:00:d7:98: 2a:f9:f7:bc:9e:69:3d:4f:c6:9f:6e:46:42:95:0b:c2:af:5c: 63:bb:91:5e:5b:23:a0:59:e6:9d:e8:89:a1:01:7f:19:bc:34: c2:77:7e:06:c1:9c:ce:bf:6f:b3:3f:5f:da:36:0f:d1:a0:86: 71:03:4d:4d:33:18:d9:17:4b:8d:87:d5:9a:4a:40:0f:1e:72: 1e:11:ae:06:6d:f5:0b:38:d4:1f:1c:a3:24:86:6c:4c:a5:26: 93:7a:87:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku3LpYXvf3ce600AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5 ZTJkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZTkyMmE5N2QtYmViZC00NGI4LTk0M2ItZTQ5NDBlNjI0MTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsnykg+u8hJZM1top0ySapVt4o0/zF7wNoML P7DPXFl/Pf2HZWYsodC4R7XtK+3k5MrvLNbUWKPrz6A9nhrBPVGeCQ0Bf5ToFpkY VtKfV82iy0pzxz2JMzBaoHl/fpGUmXYncyE5BuReJX05ARFoEtDgGWZOMfDwLlJK e7FcepFkjhPwVlxp/4XPqMWNAFMtZoycCHEalxfqWNE+YbXWoTAk4bMVF9cXz7R2 tMAOkNA5mv3+nJ5OfH7DxL1mB0Ysr3e5JGzo6Gu5c80M5tmiGPrD9PlwiG67/rwT Ki/+OEq0AepibnRxeAqu2THb9eiG2Vo8BMJ0ebmkG/mLN4IfCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPvmY/RGpJyeLZX9uL0wW85dYTJlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvYjQ1NmUxNzQtMDQ3Ny0z YWM2LTgzMzctNTViYzg3YjFlYTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2 OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Wu4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtE4zuvh/2MtWr5TGYeWQnr+vfElOJxjV3gLQo9znU5ePv2IvqhdOJy W3SXquJaAvTiV2KXbT1uYYo892YoAgCTHaa18V8S9jj4tnWaIDmw0QAcTBgdyR7x yPuaE7PcZ4J7EkAVaM2awddmy0pRhhlo77weqxrh6C9C9cZBr9NhsGQM11OpujWa dbq5ZtwoVIE3vM29JgacGlIPVwb9iwDXmCr597yeaT1Pxp9uRkKVC8KvXGO7kV5b I6BZ5p3oiaEBfxm8NMJ3fgbBnM6/b7M/X9o2D9GghnEDTU0zGNkXS42H1ZpKQA8e ch4RrgZt9Qs41B8coySGbEylJpN6h0s= -----END CERTIFICATE-----Generated at Tue Apr 29 19:57:23 2025 by rpki-client