$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/cd93a255-e514-3611-be7c-946b8830ac3e.roa File: cd93a255-e514-3611-be7c-946b8830ac3e.roa (raw, json) Hash identifier: 6UYZCCR+OuR7Sxeoy1L1x7/Td8iaNKulfE5n1MC9Pxo= Subject key identifier: E3:E4:6D:30:18:B5:7E:53:CC:CC:A3:01:0E:52:15:9D:14:1C:F5:28 Certificate issuer: /CN=f04bc7fd-5334-45ee-9a48-3ffb117ad4f3 Certificate serial: 010D0C9F4328584902EC0DDC127D484BB9484BF0 Authority key identifier: 7B:60:16:FD:22:79:AD:EC:4E:D4:A0:E7:DB:DC:8D:E3:85:73:A7:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/cd93a255-e514-3611-be7c-946b8830ac3e.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 62827 IP address blocks: 209.209.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:0d:dc:12:7d:48:4b:b9:48:4b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04bc7fd-5334-45ee-9a48-3ffb117ad4f3 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=da0a0606-e51d-4970-918e-dfe20bd82e41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ce:f0:8d:7a:6b:86:2a:9c:23:aa:9c:f1:5c: b1:9f:ce:5e:94:b2:23:e6:4d:aa:7e:f6:31:09:d4: d6:58:b9:05:d4:e8:3b:2f:da:e0:b2:47:44:ed:c5: 51:0a:5c:a8:66:53:63:e7:74:a4:41:97:69:3d:8f: ef:f2:90:fa:42:64:50:4f:63:20:e1:91:8a:a6:49: 5e:34:5b:97:8d:03:c9:35:b1:88:36:ab:53:71:c0: 85:2a:51:af:8a:45:c3:ca:57:cb:e0:b9:37:2f:f4: a8:e1:3d:83:c3:40:a2:42:b2:69:54:5e:1a:78:b7: 55:7e:f6:16:03:85:21:47:7b:3d:63:78:8e:af:f2: 60:f2:c1:03:ad:69:48:7a:84:85:3a:67:fb:75:99: 29:dd:84:3e:a0:06:cc:f1:7a:02:3f:dd:95:21:69: 80:b4:a3:15:dc:ef:ea:0f:b6:3d:dd:fa:12:3f:51: 92:63:4b:65:ee:c8:cf:e2:78:b2:72:ac:18:09:4e: 64:a7:75:a5:22:03:10:ff:42:35:1b:c5:99:94:2e: 49:b5:aa:e6:c2:61:36:91:0e:a8:0e:b5:8c:a6:e2: 2e:14:5c:e0:ff:33:85:09:4e:9c:7d:96:54:4f:3a: b6:9a:84:80:da:cc:fc:8d:80:79:07:09:fe:65:f5: 06:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E4:6D:30:18:B5:7E:53:CC:CC:A3:01:0E:52:15:9D:14:1C:F5:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/cd93a255-e514-3611-be7c-946b8830ac3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.crl X509v3 Authority Key Identifier: keyid:7B:60:16:FD:22:79:AD:EC:4E:D4:A0:E7:DB:DC:8D:E3:85:73:A7:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer sbgp-ipAddrBlock: critical IPv4: 209.209.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:52:3b:dd:12:7f:78:6d:0e:88:ed:1d:50:93:84:87:e2:f2: 99:16:e3:18:19:ac:69:5e:f6:1a:bf:60:38:f6:2d:5a:f5:89: 89:e5:27:07:4d:0d:b7:74:ad:c5:df:e9:d9:34:24:c0:02:29: 4c:db:d3:51:6e:c4:23:c3:a4:1c:f7:73:0d:be:44:bd:0f:e4: dc:c8:83:ec:25:90:00:07:4f:c7:52:ed:a8:37:75:72:ab:05: 32:54:7c:25:43:90:9a:44:f6:95:db:73:f6:13:2c:db:8c:9b: 6c:63:c6:e5:ac:40:c9:b5:19:da:11:78:3c:f4:f4:8d:1f:0c: e4:40:9c:b7:14:f9:7f:cc:f9:2e:e2:0d:0a:56:a0:a1:ef:e0: 4c:56:bf:ff:62:24:97:8e:7c:2d:e0:5b:2a:a7:d2:ec:fb:19: a4:de:65:6a:de:7f:38:06:c2:fe:8e:69:2c:2f:df:cf:b0:98: c2:d3:3c:43:2b:82:ce:6e:6b:b2:dc:cd:0f:58:75:cc:e0:d2: e6:a9:1c:8a:18:4b:62:f8:00:2e:a2:a5:fc:b2:1e:5d:1a:bb: 6b:b6:9d:f0:cb:23:c3:92:b6:75:90:cd:80:8a:1f:f6:ae:e3: 2f:c6:cb:c5:6b:9d:ca:a3:55:f7:9b:44:ed:e8:cd:b3:ef:20: 5a:97:09:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7A3cEn1IS7lIS/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA0YmM3ZmQtNTMzNC00NWVlLTlhNDgtM2ZmYjExN2Fk NGYzMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk ZGEwYTA2MDYtZTUxZC00OTcwLTkxOGUtZGZlMjBiZDgyZTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAws7wjXprhiqcI6qc8Vyxn85elLIj5k2qfvYx CdTWWLkF1Og7L9rgskdE7cVRClyoZlNj53SkQZdpPY/v8pD6QmRQT2Mg4ZGKpkle NFuXjQPJNbGINqtTccCFKlGvikXDylfL4Lk3L/So4T2Dw0CiQrJpVF4aeLdVfvYW A4UhR3s9Y3iOr/Jg8sEDrWlIeoSFOmf7dZkp3YQ+oAbM8XoCP92VIWmAtKMV3O/q D7Y93foSP1GSY0tl7sjP4niycqwYCU5kp3WlIgMQ/0I1G8WZlC5JtarmwmE2kQ6o DrWMpuIuFFzg/zOFCU6cfZZUTzq2moSA2sz8jYB5Bwn+ZfUGBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPkbTAYtX5TzMyjAQ5SFZ0UHPUoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mMDRi YzdmZC01MzM0LTQ1ZWUtOWE0OC0zZmZiMTE3YWQ0ZjMvY2Q5M2EyNTUtZTUxNC0z NjExLWJlN2MtOTQ2Yjg4MzBhYzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjA0YmM3ZmQtNTMzNC00NWVlLTlh NDgtM2ZmYjExN2FkNGYzL2YwNGJjN2ZkLTUzMzQtNDVlZS05YTQ4LTNmZmIxMTdh ZDRmMy5jcmwwHwYDVR0jBBgwFoAUe2AW/SJ5rexO1KDn29yN44VzpwYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mMDRiYzdmZC01MzM0LTQ1ZWUtOWE0OC0zZmZi MTE3YWQ0ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0dFsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRSO90Sf3htDojtHVCThIfi8pkW4xgZrGle9hq/YDj2LVr1iYnlJwdN Dbd0rcXf6dk0JMACKUzb01FuxCPDpBz3cw2+RL0P5NzIg+wlkAAHT8dS7ag3dXKr BTJUfCVDkJpE9pXbc/YTLNuMm2xjxuWsQMm1GdoReDz09I0fDORAnLcU+X/M+S7i DQpWoKHv4ExWv/9iJJeOfC3gWyqn0uz7GaTeZWrefzgGwv6OaSwv38+wmMLTPEMr gs5ua7LczQ9Ydczg0uapHIoYS2L4AC6ipfyyHl0au2u2nfDLI8OStnWQzYCKH/au 4y/Gy8VrncqjVfebRO3ozbPvIFqXCSI= -----END CERTIFICATE-----Generated at Tue Apr 29 01:42:59 2025 by rpki-client