$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/04fdc374-f321-3ae7-aa89-9dc3d41faf06.roa File: 04fdc374-f321-3ae7-aa89-9dc3d41faf06.roa (raw, json) Hash identifier: eV2hCtGTBTVn+dLFfiPr9jBcf3e6+wehtYrvK04g4JI= Subject key identifier: 7F:6F:9D:A8:7E:3B:CE:FD:5E:92:95:C0:6F:33:83:A7:75:AE:2E:37 Certificate issuer: /CN=51772dd7-991f-47b2-b40b-d92a8497234e Certificate serial: 010D0C9F43285849ABB4980BC4FA47CA36F4DCC0 Authority key identifier: D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/04fdc374-f321-3ae7-aa89-9dc3d41faf06.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 16509 IP address blocks: 209.54.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:98:0b:c4:fa:47:ca:36:f4:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51772dd7-991f-47b2-b40b-d92a8497234e Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=5de5688d-fb8b-42f2-bed8-a66ba2f3775e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:eb:09:1d:71:b0:d0:d5:6a:db:31:c2:09:c0: 15:c0:9e:b1:48:50:93:ff:7b:6f:76:72:0d:19:40: b9:d1:6d:b7:55:66:25:c8:69:34:1f:ba:f0:dd:85: 35:a7:e7:8f:69:0e:12:04:e4:62:64:6b:30:f6:13: 90:e5:1a:b2:ec:d0:07:72:11:4d:41:ed:83:82:a2: 75:f2:4f:e1:32:a9:cd:a4:b2:60:05:28:56:3d:44: 98:27:d4:82:c8:81:20:42:95:85:4b:6d:b2:ed:cb: 97:13:b7:97:cb:d7:d0:28:93:81:62:b9:70:95:fc: 2a:d6:6c:0f:5b:47:cf:e6:09:f2:11:48:95:8d:ed: d5:3e:5e:80:a9:a3:0d:46:9c:bd:60:e4:a6:77:d0: 3f:2d:ab:08:e2:fc:6e:78:c4:ca:c6:80:21:59:9f: 63:d9:e4:06:25:85:08:9d:03:84:67:c4:bc:75:4a: b6:2c:2a:98:51:be:96:69:73:de:6c:54:94:75:67: db:6b:31:fb:8e:4a:db:d9:c5:a0:1b:68:52:61:18: 1e:13:09:30:0c:ca:ce:31:f4:0a:4e:07:6e:84:c3: 5c:5d:23:5f:7c:15:d9:57:3f:db:5b:e6:0e:91:df: 5d:96:60:d3:d4:7e:86:42:74:0c:b4:0e:ed:a4:2e: 40:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:6F:9D:A8:7E:3B:CE:FD:5E:92:95:C0:6F:33:83:A7:75:AE:2E:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/04fdc374-f321-3ae7-aa89-9dc3d41faf06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl X509v3 Authority Key Identifier: keyid:D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer sbgp-ipAddrBlock: critical IPv4: 209.54.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:c8:a9:18:50:45:75:73:8a:83:c6:fe:2f:53:2e:74:2b:e4: 70:fc:51:96:a8:40:c2:9b:55:09:76:25:96:02:96:07:79:7c: 05:23:95:7d:90:c0:e3:20:4e:55:b0:e9:59:7f:17:d8:af:79: 8c:a7:82:03:fb:53:3a:72:0d:2d:71:2d:9d:0b:3f:e1:07:1e: e3:ec:b4:89:d9:0f:c4:4f:f9:54:7d:1e:e7:1b:72:52:e2:c2: fe:50:d5:3e:3a:f3:7f:81:f8:e8:df:1c:74:40:ea:cb:ed:7f: 9c:c3:3b:d6:cb:33:8a:27:3b:c7:50:4a:1f:54:ac:a0:81:81: f6:d5:0f:d2:de:fd:14:6a:90:72:3a:f4:ed:e7:1d:00:72:33: 25:ce:ca:7a:76:6c:6b:1d:dd:e3:6a:4f:6d:6f:c6:45:47:aa: 9f:e3:6d:85:9e:c6:38:85:55:ee:d4:f9:66:f0:5f:9d:dd:7a: d5:7c:c1:da:64:8a:d5:90:67:ee:1e:26:53:db:6b:3f:82:71: ea:e3:52:21:f6:41:8e:5a:ef:45:b7:92:c4:e1:46:b0:0d:43: 01:af:1f:b3:2f:d2:96:52:4d:26:4f:0c:f6:5d:0d:b9:f6:44: 64:9f:12:ff:c0:4c:13:78:f9:18:89:e1:1f:99:ee:fe:60:50: b4:29:38:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtJgLxPpHyjb03MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3NzJkZDctOTkxZi00N2IyLWI0MGItZDkyYTg0OTcy MzRlMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk NWRlNTY4OGQtZmI4Yi00MmYyLWJlZDgtYTY2YmEyZjM3NzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+sJHXGw0NVq2zHCCcAVwJ6xSFCT/3tvdnIN GUC50W23VWYlyGk0H7rw3YU1p+ePaQ4SBORiZGsw9hOQ5Rqy7NAHchFNQe2DgqJ1 8k/hMqnNpLJgBShWPUSYJ9SCyIEgQpWFS22y7cuXE7eXy9fQKJOBYrlwlfwq1mwP W0fP5gnyEUiVje3VPl6AqaMNRpy9YOSmd9A/LasI4vxueMTKxoAhWZ9j2eQGJYUI nQOEZ8S8dUq2LCqYUb6WaXPebFSUdWfbazH7jkrb2cWgG2hSYRgeEwkwDMrOMfQK TgduhMNcXSNffBXZVz/bW+YOkd9dlmDT1H6GQnQMtA7tpC5ArQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9vnah+O879XpKVwG8zg6d1ri43MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3 MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJhODQ5NzIzNGUvMDRmZGMzNzQtZjMyMS0z YWU3LWFhODktOWRjM2Q0MWZhZjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTE3NzJkZDctOTkxZi00N2IyLWI0 MGItZDkyYTg0OTcyMzRlLzUxNzcyZGQ3LTk5MWYtNDdiMi1iNDBiLWQ5MmE4NDk3 MjM0ZS5jcmwwHwYDVR0jBBgwFoAU17ypcT0ujL6ovHcuMMM9YAkEAo4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJh ODQ5NzIzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0TZsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnIqRhQRXVzioPG/i9TLnQr5HD8UZaoQMKbVQl2JZYClgd5fAUjlX2Q wOMgTlWw6Vl/F9iveYynggP7UzpyDS1xLZ0LP+EHHuPstInZD8RP+VR9HucbclLi wv5Q1T4683+B+OjfHHRA6svtf5zDO9bLM4onO8dQSh9UrKCBgfbVD9Le/RRqkHI6 9O3nHQByMyXOynp2bGsd3eNqT21vxkVHqp/jbYWexjiFVe7U+WbwX53detV8wdpk itWQZ+4eJlPbaz+CcerjUiH2QY5a70W3ksThRrANQwGvH7Mv0pZSTSZPDPZdDbn2 RGSfEv/ATBN4+RiJ4R+Z7v5gULQpOOQ= -----END CERTIFICATE-----Generated at Sun May 11 15:15:07 2025 by rpki-client