$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/1348434c-463e-3ac1-8c3a-7e7078ad9333.roa File: 1348434c-463e-3ac1-8c3a-7e7078ad9333.roa (raw, json) Hash identifier: +u1xpko7dB4Yzd7ANPrgzk14n8OjRU7CCCLpOPaJixI= Subject key identifier: 3C:D7:25:7D:78:84:96:C2:6A:FB:0E:AF:8A:B8:36:6E:6A:BF:7D:57 Certificate issuer: /CN=51772dd7-991f-47b2-b40b-d92a8497234e Certificate serial: 010D0C9F43285849ABB497FC0A344236EF2BFF00 Authority key identifier: D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/1348434c-463e-3ac1-8c3a-7e7078ad9333.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 14618 IP address blocks: 209.54.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:97:fc:0a:34:42:36:ef:2b:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51772dd7-991f-47b2-b40b-d92a8497234e Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=96ee5bb3-8544-4883-abac-bfcfeacf0a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6b:d4:37:a9:13:57:53:7d:23:e0:b7:a5:91: 1d:a6:90:fb:21:7b:53:2c:38:22:95:02:50:da:d8: 53:89:d9:e3:2b:8f:74:d9:15:6b:af:1b:e6:40:58: f0:f2:ea:0f:8b:b0:7c:c9:82:54:b3:1b:17:ff:f1: 3d:0e:05:d9:18:08:d8:32:9e:d3:45:14:58:cd:9d: df:5c:c9:95:26:90:b0:de:ca:a3:04:cc:ba:8d:a4: 51:32:de:74:88:53:8b:e5:f3:fa:6d:42:7f:7d:c9: c5:4e:d5:d5:19:a4:5f:30:d2:53:aa:13:6f:cf:41: 1d:bc:85:32:a2:6e:5a:ef:94:b2:be:2a:84:a6:98: 0b:e0:1e:a1:98:bf:52:86:19:4d:93:a3:66:10:e8: 96:3f:2e:f7:8e:69:76:da:64:5c:f3:cb:2c:65:e1: 63:b0:a1:dd:be:d3:24:55:b0:29:1b:fd:69:b4:8c: a2:c3:bc:26:41:93:1f:88:82:d3:f4:f3:9d:77:76: 24:52:98:44:b8:86:8c:fa:29:80:d4:7a:99:8f:b9: 07:25:93:5f:ce:4a:fe:36:2c:78:a1:af:7b:bd:9b: 10:7b:60:f1:dd:f9:2e:2d:3f:fa:c3:6f:15:06:45: 89:37:7e:e5:76:4c:3e:ed:bf:cf:88:19:1f:e3:0a: 5d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D7:25:7D:78:84:96:C2:6A:FB:0E:AF:8A:B8:36:6E:6A:BF:7D:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/1348434c-463e-3ac1-8c3a-7e7078ad9333.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl X509v3 Authority Key Identifier: keyid:D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer sbgp-ipAddrBlock: critical IPv4: 209.54.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:66:73:2a:ba:79:8e:46:40:fb:e4:96:63:00:99:da:7c:67: b2:3d:b9:4c:15:ff:15:40:be:11:30:be:f9:4b:f7:62:65:20: 24:cd:95:32:ce:56:b0:c6:74:23:5d:51:7f:00:09:71:e3:02: 98:3e:8b:bf:00:b5:a8:8f:a1:ef:7e:6e:73:6a:7d:e7:de:16: e8:6b:d9:8c:07:dd:7a:5f:ce:ea:f1:ab:83:2d:59:c1:a6:07: 98:ae:fc:66:91:a1:a6:94:bf:90:fe:5b:a3:91:48:ff:03:df: 4f:ff:73:38:e1:29:b4:50:52:48:e2:c4:b6:e4:bd:3c:bc:52: f3:d1:9d:95:a2:2c:ed:ec:ef:da:72:81:ed:6b:8b:7a:bc:f8: e7:49:fb:ee:21:03:cd:82:66:46:76:95:79:09:43:f0:9b:18: 49:e4:7a:5f:f5:e2:07:ee:29:9a:69:ca:78:bc:a2:46:3b:8f: 0f:d3:49:cf:9c:79:47:20:43:e1:7d:f0:21:68:d6:ee:c4:b3: 9f:ad:bf:c6:4e:f0:0e:c4:9e:68:d6:3b:7a:88:c9:a9:db:61: 09:cf:38:32:fe:d6:29:f7:1e:d0:44:11:40:22:7e:4c:3b:98: 34:64:5f:19:b0:d3:5b:cb:48:df:ff:b0:53:34:99:9c:8d:1c: 53:d9:d8:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtJf8CjRCNu8r/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3NzJkZDctOTkxZi00N2IyLWI0MGItZDkyYTg0OTcy MzRlMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk OTZlZTViYjMtODU0NC00ODgzLWFiYWMtYmZjZmVhY2YwYThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWvUN6kTV1N9I+C3pZEdppD7IXtTLDgilQJQ 2thTidnjK4902RVrrxvmQFjw8uoPi7B8yYJUsxsX//E9DgXZGAjYMp7TRRRYzZ3f XMmVJpCw3sqjBMy6jaRRMt50iFOL5fP6bUJ/fcnFTtXVGaRfMNJTqhNvz0EdvIUy om5a75SyviqEppgL4B6hmL9ShhlNk6NmEOiWPy73jml22mRc88ssZeFjsKHdvtMk VbApG/1ptIyiw7wmQZMfiILT9POdd3YkUphEuIaM+imA1HqZj7kHJZNfzkr+Nix4 oa97vZsQe2Dx3fkuLT/6w28VBkWJN37ldkw+7b/PiBkf4wpdSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzXJX14hJbCavsOr4q4Nm5qv31XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3 MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJhODQ5NzIzNGUvMTM0ODQzNGMtNDYzZS0z YWMxLThjM2EtN2U3MDc4YWQ5MzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTE3NzJkZDctOTkxZi00N2IyLWI0 MGItZDkyYTg0OTcyMzRlLzUxNzcyZGQ3LTk5MWYtNDdiMi1iNDBiLWQ5MmE4NDk3 MjM0ZS5jcmwwHwYDVR0jBBgwFoAU17ypcT0ujL6ovHcuMMM9YAkEAo4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJh ODQ5NzIzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0TZsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhmcyq6eY5GQPvklmMAmdp8Z7I9uUwV/xVAvhEwvvlL92JlICTNlTLO VrDGdCNdUX8ACXHjApg+i78AtaiPoe9+bnNqfefeFuhr2YwH3Xpfzurxq4MtWcGm B5iu/GaRoaaUv5D+W6ORSP8D30//czjhKbRQUkjixLbkvTy8UvPRnZWiLO3s79py ge1ri3q8+OdJ++4hA82CZkZ2lXkJQ/CbGEnkel/14gfuKZppyni8okY7jw/TSc+c eUcgQ+F98CFo1u7Es5+tv8ZO8A7EnmjWO3qIyanbYQnPODL+1in3HtBEEUAifkw7 mDRkXxmw01vLSN//sFM0mZyNHFPZ2Fg= -----END CERTIFICATE-----Generated at Sun May 11 13:32:05 2025 by rpki-client