$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ff10c9f8-253b-366e-8b3d-704c95217ffe.roa File: ff10c9f8-253b-366e-8b3d-704c95217ffe.roa (raw, json) Hash identifier: Cb2RtAtMeyIV/NazxQuqqxI93EonzBC98CWMG7EjEDo= Subject key identifier: 5F:1B:B5:82:E2:E7:61:FE:B4:EA:B5:7B:53:72:65:C3:52:6A:A7:22 Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Certificate serial: 010D0C9F43285849A4BB7435205FD5A4A53EE9E0 Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ff10c9f8-253b-366e-8b3d-704c95217ffe.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 36492 IP address blocks: 209.107.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:74:35:20:5f:d5:a4:a5:3e:e9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=58ca2d3f-da45-4942-b2b0-45956eea516b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2f:7d:4e:5b:e1:a7:e3:20:53:00:4c:3d:fb: 10:7d:81:96:db:b8:69:c2:69:6f:29:78:21:3c:7f: 6b:05:36:92:cf:1c:91:be:e9:e2:aa:3d:d6:4b:96: 3f:41:5a:2d:cf:da:99:00:ed:ef:48:88:d9:cf:d8: b6:53:09:ab:1e:38:35:62:96:b2:aa:80:8c:fb:d0: c1:89:85:81:ef:91:09:ef:73:64:56:f9:c8:ca:cf: 87:4b:fd:8c:58:14:f5:1d:e3:3f:ca:d3:3f:62:f2: a0:1c:72:b4:92:af:fa:c0:c1:23:2a:da:48:ba:d8: 7e:d8:33:28:86:fd:1d:b1:6c:ba:56:91:64:0d:b0: 13:7a:d8:e8:6f:5e:29:dd:f0:00:10:fe:1e:2f:a5: 51:39:7a:3e:58:f4:06:c2:b3:72:41:1e:db:e2:02: fb:98:38:c7:39:49:de:88:4d:79:fb:47:2e:f4:da: 8c:ed:c0:37:28:c3:2b:41:e7:6d:04:2f:6a:a5:9c: 99:54:36:87:06:8d:aa:9e:22:95:22:4b:2e:40:02: 2e:91:3c:33:b9:18:62:02:0e:39:57:06:43:93:38: 6d:34:04:26:ab:b1:46:7d:03:17:29:36:57:9d:12: c4:90:ba:2f:00:a3:f7:7c:0a:ec:7b:ad:f0:51:59: 3a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1B:B5:82:E2:E7:61:FE:B4:EA:B5:7B:53:72:65:C3:52:6A:A7:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ff10c9f8-253b-366e-8b3d-704c95217ffe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl X509v3 Authority Key Identifier: keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer sbgp-ipAddrBlock: critical IPv4: 209.107.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:0f:5f:fb:8b:37:4a:70:e9:dc:ad:8d:d9:88:87:5c:a5:55: 5b:86:07:81:63:36:71:58:50:85:41:f3:03:c5:dd:7b:66:26: a1:47:c6:b2:7c:23:3a:7d:99:56:cf:e5:10:c7:04:99:98:c2: be:67:dd:89:33:60:86:ac:bd:7f:1a:ed:c3:03:35:74:3d:fc: b2:bd:da:fd:9e:e0:be:c2:42:d2:cc:db:e1:f1:4d:22:00:c2: 3a:5f:90:fe:ed:fa:9b:fa:f0:b1:5f:56:00:dd:55:f8:57:01: e0:c9:de:d8:2f:76:22:68:47:8c:ce:c2:9a:51:60:03:56:a6: 2c:e2:9b:e9:89:39:22:0d:06:5e:a7:3b:22:09:77:1a:7c:03: 31:5c:eb:c1:f0:9d:93:ea:ad:34:8b:87:f7:5d:f7:55:2d:d8: 47:e8:4c:e2:5d:14:32:4d:0f:cb:5f:b8:5b:49:74:df:2a:d7: de:63:45:f7:4e:5d:bc:4c:33:aa:2f:05:41:80:cb:44:32:d8: 61:62:00:5d:1e:47:55:0d:46:19:78:8f:f2:5e:e3:b8:49:7d: fc:54:f2:63:31:14:45:17:b9:d9:71:7a:6e:0d:b1:4c:58:d0: b3:94:2c:31:6f:bc:9a:25:3b:27:cb:9e:c1:24:74:38:6f:d1: b9:e4:08:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku3Q1IF/VpKU+6eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5 ZTJkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NThjYTJkM2YtZGE0NS00OTQyLWIyYjAtNDU5NTZlZWE1MTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3C99Tlvhp+MgUwBMPfsQfYGW27hpwmlvKXgh PH9rBTaSzxyRvuniqj3WS5Y/QVotz9qZAO3vSIjZz9i2UwmrHjg1YpayqoCM+9DB iYWB75EJ73NkVvnIys+HS/2MWBT1HeM/ytM/YvKgHHK0kq/6wMEjKtpIuth+2DMo hv0dsWy6VpFkDbATetjob14p3fAAEP4eL6VROXo+WPQGwrNyQR7b4gL7mDjHOUne iE15+0cu9NqM7cA3KMMrQedtBC9qpZyZVDaHBo2qniKVIksuQAIukTwzuRhiAg45 VwZDkzhtNAQmq7FGfQMXKTZXnRLEkLovAKP3fArse63wUVk6twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8btYLi52H+tOq1e1NyZcNSaqciMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvZmYxMGM5ZjgtMjUzYi0z NjZlLThiM2QtNzA0Yzk1MjE3ZmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2 OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Wu6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkPX/uLN0pw6dytjdmIh1ylVVuGB4FjNnFYUIVB8wPF3XtmJqFHxrJ8 Izp9mVbP5RDHBJmYwr5n3YkzYIasvX8a7cMDNXQ9/LK92v2e4L7CQtLM2+HxTSIA wjpfkP7t+pv68LFfVgDdVfhXAeDJ3tgvdiJoR4zOwppRYANWpizim+mJOSINBl6n OyIJdxp8AzFc68HwnZPqrTSLh/dd91Ut2EfoTOJdFDJND8tfuFtJdN8q195jRfdO XbxMM6ovBUGAy0Qy2GFiAF0eR1UNRhl4j/Je47hJffxU8mMxFEUXudlxem4NsUxY 0LOULDFvvJolOyfLnsEkdDhv0bnkCNM= -----END CERTIFICATE-----Generated at Sun Apr 27 21:05:11 2025 by rpki-client