$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/21ab033e-43b4-38f5-92bd-9cc6081b6c22.roa File: 21ab033e-43b4-38f5-92bd-9cc6081b6c22.roa (raw, json) Hash identifier: /b/CcJAKYz+pki7/tbnIVAnoUCfuv0nVxx/5l5S6C+g= Subject key identifier: FD:92:7F:87:7E:75:BC:E5:FD:31:F8:97:47:AA:86:EB:95:CD:B2:AC Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F43285848EC96A5C8F2107C500C7EBA80 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/21ab033e-43b4-38f5-92bd-9cc6081b6c22.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 62240 IP address blocks: 209.107.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:a5:c8:f2:10:7c:50:0c:7e:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=e341a246-3f4e-426b-8951-4c950a93ad8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:02:dc:18:22:25:2c:42:36:b3:d1:95:7f:d3: 76:5f:43:45:f2:4a:a8:60:ac:fb:ec:a7:5d:7d:45: 46:d6:a2:bc:0c:3d:b0:71:69:43:a0:7b:08:88:1f: f7:88:23:fa:9f:da:9b:ca:ce:29:49:c1:34:b0:17: 40:bb:e2:b3:54:84:07:5d:18:a7:ba:12:b6:83:a1: 57:ac:e8:ed:2b:2b:34:db:50:7e:2b:87:1e:d2:d0: 24:24:a0:28:84:0a:9d:9b:49:af:ed:0a:a4:95:c8: 07:43:fe:af:db:49:6c:07:0c:57:88:dd:e6:24:2d: b9:e1:ca:fb:5b:db:b5:ad:b3:c4:c3:0d:4f:94:c4: c0:91:3b:43:d7:10:71:88:fd:94:00:35:6d:02:69: 84:2a:e1:75:ab:81:1f:bd:ab:b8:49:09:7c:78:b9: 21:67:f5:d7:7c:2e:53:4e:35:28:c0:9c:7c:aa:05: 6c:23:64:3b:bc:b7:13:ed:5f:5a:34:ca:95:db:7f: 4c:3a:9d:57:0b:94:ee:38:6f:db:63:57:61:93:bf: f1:4b:3e:27:6c:48:6a:62:72:06:9a:6e:95:f5:47: f0:9b:6d:15:b7:96:08:c3:22:b8:aa:d7:30:3e:23: db:d2:4a:c8:1c:2a:cc:85:60:6d:da:06:17:95:49: b8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:92:7F:87:7E:75:BC:E5:FD:31:F8:97:47:AA:86:EB:95:CD:B2:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/21ab033e-43b4-38f5-92bd-9cc6081b6c22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 209.107.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:ce:3d:25:4e:4f:68:cc:07:b6:24:d3:3a:85:21:80:ba:c2: 2d:b3:a4:e9:f6:24:8c:73:37:e2:29:33:22:11:ce:de:d7:5d: c2:1d:e5:99:7b:01:e2:b2:96:aa:f5:a9:9a:f4:d1:71:e7:4a: 68:15:cb:62:7f:48:1f:d2:4d:f2:14:62:a0:67:54:d4:42:31: c1:d4:d0:f8:60:4d:d2:39:e8:bc:9f:58:49:9b:56:20:61:0f: 24:96:b2:ca:0f:53:40:b0:2a:84:52:89:b9:dd:ed:43:ec:1c: 29:06:c6:9b:02:f0:3c:c5:5e:3e:a0:53:1e:e2:eb:5d:59:53: 19:d0:c2:f9:0b:59:a2:c9:67:45:25:51:ba:bc:ce:0e:18:49: 8c:43:22:16:19:7b:0b:eb:1f:f2:79:9a:7c:bd:c1:85:55:4b: 9e:cb:4a:6b:57:a6:c8:15:03:00:7f:3a:df:a8:d6:eb:d1:78: 34:70:a7:ef:71:cb:09:e4:21:1d:e7:9b:34:11:88:e1:06:40: bf:bd:d7:b2:5f:46:16:e4:b2:61:3e:11:fb:7b:69:5a:66:b4: 7d:f4:a8:e0:59:ed:08:c8:cb:4c:a9:64:9b:12:fb:db:7a:4a: 31:de:a2:18:77:35:e2:1a:9d:fd:3b:b7:46:9b:6b:df:86:eb: 48:d4:6c:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslqXI8hB8UAx+uoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk ZTM0MWEyNDYtM2Y0ZS00MjZiLTg5NTEtNGM5NTBhOTNhZDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsALcGCIlLEI2s9GVf9N2X0NF8kqoYKz77Kdd fUVG1qK8DD2wcWlDoHsIiB/3iCP6n9qbys4pScE0sBdAu+KzVIQHXRinuhK2g6FX rOjtKys021B+K4ce0tAkJKAohAqdm0mv7QqklcgHQ/6v20lsBwxXiN3mJC254cr7 W9u1rbPEww1PlMTAkTtD1xBxiP2UADVtAmmEKuF1q4Efvau4SQl8eLkhZ/XXfC5T TjUowJx8qgVsI2Q7vLcT7V9aNMqV239MOp1XC5TuOG/bY1dhk7/xSz4nbEhqYnIG mm6V9Ufwm20Vt5YIwyK4qtcwPiPb0krIHCrMhWBt2gYXlUm4kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2Sf4d+dbzl/TH4l0eqhuuVzbKsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvMjFhYjAzM2UtNDNiNC0z OGY1LTkyYmQtOWNjNjA4MWI2YzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0WvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADOPSVOT2jMB7Yk0zqFIYC6wi2zpOn2JIxzN+IpMyIRzt7XXcId5Zl7 AeKylqr1qZr00XHnSmgVy2J/SB/STfIUYqBnVNRCMcHU0PhgTdI56LyfWEmbViBh DySWssoPU0CwKoRSibnd7UPsHCkGxpsC8DzFXj6gUx7i611ZUxnQwvkLWaLJZ0Ul Ubq8zg4YSYxDIhYZewvrH/J5mny9wYVVS57LSmtXpsgVAwB/Ot+o1uvReDRwp+9x ywnkIR3nmzQRiOEGQL+917JfRhbksmE+Eft7aVpmtH30qOBZ7QjIy0ypZJsS+9t6 SjHeohh3NeIanf07t0aba9+G60jUbFc= -----END CERTIFICATE-----Generated at Thu May 8 14:43:38 2025 by rpki-client