$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d40a89a2-1671-3a29-af96-9af8f9a4518d.roa File: d40a89a2-1671-3a29-af96-9af8f9a4518d.roa (raw, json) Hash identifier: Z1X0n1mkNYcIYU5Knr8vxL8TqUxcIHAL4mRorGNGvx8= Subject key identifier: 3F:77:13:C5:24:D3:99:8D:4D:A2:13:FA:44:FF:B9:63:10:A6:1B:4D Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849E2250C6569ACA55D557BD380 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d40a89a2-1671-3a29-af96-9af8f9a4518d.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 30036 IP address blocks: 107.167.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:0c:65:69:ac:a5:5d:55:7b:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=2ea6afbb-7b28-4e5a-9cbc-9bd7f856ac10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fc:fd:16:84:cb:6f:fb:40:73:13:b8:4f:7f: 3a:5a:db:12:8a:b1:90:ae:ed:df:42:9c:37:c0:de: 11:84:56:1f:3b:41:e7:05:2e:d2:5c:45:b9:db:0e: dd:d7:e7:7c:d4:40:0b:03:61:8f:49:be:da:b5:9b: 2c:a5:6e:65:dd:f0:26:4b:88:63:73:07:2d:76:d3: 22:f9:4e:a7:2d:cf:1f:32:62:c7:2b:9d:34:1a:30: 13:73:84:b7:0b:65:28:00:69:39:45:de:92:8e:a9: ed:8c:cf:31:fa:4b:80:8a:21:6c:59:c5:e6:27:6d: 19:fe:d5:d8:b7:5d:57:2e:d0:58:f8:dd:4c:c9:20: 57:fa:a0:27:6a:9f:53:32:eb:1c:01:4d:25:e9:41: e6:2d:82:5c:c9:35:3f:b4:8a:99:21:4b:01:af:67: b3:e8:d9:68:83:69:2f:a0:2f:18:cd:8a:5e:42:3f: fa:16:86:10:f8:b8:be:90:85:2d:44:fb:91:3a:15: f0:e6:e9:7e:70:9a:5e:29:2f:dd:f6:43:3c:00:72: 54:44:98:ef:a7:e9:f4:8b:31:ab:c0:fd:bd:1f:d7: c9:ce:c4:17:36:d0:a7:59:2e:47:92:9a:af:52:47: 24:f3:00:36:5f:e3:8a:64:a7:ab:52:67:9f:73:3c: c5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:77:13:C5:24:D3:99:8D:4D:A2:13:FA:44:FF:B9:63:10:A6:1B:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d40a89a2-1671-3a29-af96-9af8f9a4518d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 107.167.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:46:2b:52:2b:e3:07:45:f5:ff:4b:47:a9:87:eb:0f:c4:8c: a0:40:7d:47:4f:bf:80:dc:5f:d5:23:4b:36:ff:cb:f7:bb:c7: 01:6c:88:93:da:54:67:8b:63:eb:00:73:30:87:cd:6f:bc:1d: 82:4d:c2:d6:8c:7f:b9:67:db:fc:70:f5:a9:52:3a:d6:3e:f2: 55:55:7d:39:a9:0a:67:fb:b1:ca:b7:77:8e:d9:8f:c5:e6:cd: d1:71:c6:57:a5:aa:0b:c7:76:6b:12:7a:12:b9:b4:99:f2:cf: 5c:7c:7d:33:2f:27:ac:b5:39:8a:7e:35:92:ec:59:be:91:71: 58:39:58:4f:9d:59:27:00:3e:40:c2:1f:f8:8c:63:32:d3:09: 16:79:6a:dc:76:95:46:6d:f1:b2:3b:84:71:3b:8b:25:11:75: 05:0e:9e:29:e1:e2:4d:c0:f5:74:49:cb:85:09:aa:c2:1e:23: 33:ac:55:6f:7b:fc:4c:f0:22:70:bf:b6:2b:47:e6:02:a0:0e: 94:79:88:58:c3:6f:d8:0e:81:9b:b5:2c:1c:cc:9d:e6:e8:2b: 17:f2:a0:19:66:49:f0:29:7c:b9:ad:4c:b5:9d:7f:c6:79:04: e6:11:67:14:ca:ca:f9:06:2b:29:9b:39:1f:f1:b0:bf:78:99: f7:31:bd:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJQxlaaylXVV704AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk MmVhNmFmYmItN2IyOC00ZTVhLTljYmMtOWJkN2Y4NTZhYzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/z9FoTLb/tAcxO4T386WtsSirGQru3fQpw3 wN4RhFYfO0HnBS7SXEW52w7d1+d81EALA2GPSb7atZsspW5l3fAmS4hjcwctdtMi +U6nLc8fMmLHK500GjATc4S3C2UoAGk5Rd6SjqntjM8x+kuAiiFsWcXmJ20Z/tXY t11XLtBY+N1MySBX+qAnap9TMuscAU0l6UHmLYJcyTU/tIqZIUsBr2ez6Nlog2kv oC8YzYpeQj/6FoYQ+Li+kIUtRPuROhXw5ul+cJpeKS/d9kM8AHJURJjvp+n0izGr wP29H9fJzsQXNtCnWS5HkpqvUkck8wA2X+OKZKerUmefczzFnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD93E8Uk05mNTaIT+kT/uWMQphtNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDQwYTg5YTItMTY3MS0z YTI5LWFmOTYtOWFmOGY5YTQ1MThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa6fVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClGK1Ir4wdF9f9LR6mH6w/EjKBAfUdPv4DcX9UjSzb/y/e7xwFsiJPa VGeLY+sAczCHzW+8HYJNwtaMf7ln2/xw9alSOtY+8lVVfTmpCmf7scq3d47Zj8Xm zdFxxlelqgvHdmsSehK5tJnyz1x8fTMvJ6y1OYp+NZLsWb6RcVg5WE+dWScAPkDC H/iMYzLTCRZ5atx2lUZt8bI7hHE7iyURdQUOninh4k3A9XRJy4UJqsIeIzOsVW97 /EzwInC/titH5gKgDpR5iFjDb9gOgZu1LBzMneboKxfyoBlmSfApfLmtTLWdf8Z5 BOYRZxTKyvkGKymbOR/xsL94mfcxvXM= -----END CERTIFICATE-----Generated at Mon Jun 30 13:40:49 2025 by rpki-client