$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8a7a8245-8209-3c9b-b475-e880a8a009a3.roa File: 8a7a8245-8209-3c9b-b475-e880a8a009a3.roa (raw, json) Hash identifier: Ecpek9EeKTcbqxmDZfAu1Gtcb1zzysMQkfC2R0WGg5A= Subject key identifier: 63:C1:A8:28:09:47:9E:C5:B7:C3:01:19:08:1A:06:57:0F:75:99:56 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499AF4780B3A231800FC46C540 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8a7a8245-8209-3c9b-b475-e880a8a009a3.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 108.180.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:78:0b:3a:23:18:00:fc:46:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=d30b9b0d-cece-4133-877f-7a2ea345262b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a2:64:56:1f:ff:c1:c0:95:cd:fc:d8:f0:6d: d1:d6:50:60:c6:b7:0c:59:1b:27:8a:68:66:f9:f0: d0:ba:ad:6c:7d:d6:22:54:7f:14:b1:b9:7d:96:b2: 53:6a:6b:82:23:d7:da:8f:09:d2:a2:21:08:7e:cf: 23:f9:b7:d0:f6:13:22:dd:24:83:08:88:3a:4b:2b: a2:fa:c5:30:2f:78:8f:cf:e4:ce:a2:15:6d:f1:79: a4:90:1e:7a:11:8d:39:53:5a:6e:03:ed:96:44:3a: 5f:72:0e:ec:3e:18:50:60:cd:66:60:91:54:a6:f5: 14:f4:73:91:22:29:4c:a5:d6:45:34:48:87:ac:f1: 79:b3:d2:f7:17:2d:2d:8e:b8:60:03:72:21:a5:0a: 80:0a:fe:4c:74:39:a7:15:27:84:42:d5:11:99:ef: a7:d9:de:b6:c5:bb:49:51:e5:04:5b:1d:53:af:04: 4c:f9:a3:e6:70:67:78:d8:d9:26:9a:8d:e7:3f:57: 49:76:1a:69:bf:cd:45:f3:0c:31:21:6a:95:e1:50: a0:84:83:91:53:c1:39:72:54:cd:99:a7:65:6b:b0: 09:16:ee:67:7b:c2:50:20:02:81:c4:39:43:38:07: be:d1:f4:c7:f9:f2:76:93:e1:d7:ab:df:e0:2f:51: 76:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C1:A8:28:09:47:9E:C5:B7:C3:01:19:08:1A:06:57:0F:75:99:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8a7a8245-8209-3c9b-b475-e880a8a009a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 108.180.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e2:c7:4e:3a:1c:3e:84:62:f7:39:11:0d:f6:ca:d7:54:bb:56: 2c:d4:c1:a6:0e:74:2f:13:e9:a9:1d:79:a0:ac:5a:24:a6:b5: 6a:ec:78:9d:f0:3d:30:c0:b8:74:6b:eb:2c:7c:df:a7:27:4f: b1:3b:df:27:a3:f6:11:3a:4b:b7:e5:95:ee:bc:fd:4b:fc:31: 7e:ff:ae:23:6e:38:3a:24:3b:7e:6d:27:0e:b0:72:75:01:ad: 52:10:1f:69:cc:2f:03:62:a8:d2:f6:20:a6:c0:f6:b0:ff:18: 01:bf:27:b1:27:07:8d:51:30:54:22:42:d4:1a:22:05:23:67: 8f:26:91:c7:79:45:b7:c6:23:1d:ce:c5:07:5f:bb:f2:b2:ec: 06:ea:56:a6:95:4f:5f:62:76:e6:da:da:56:2d:73:cf:49:2f: 60:be:0f:dc:b7:9a:d2:e4:3a:13:e9:bf:55:c4:03:69:30:ba: 15:82:73:64:95:97:3a:9e:2d:21:e9:d0:99:d2:d4:02:2b:38: 02:3f:78:30:7f:50:a2:ba:6b:60:61:3e:90:8e:7d:d2:a6:bc: d1:4b:c4:0a:91:a7:72:71:36:12:3b:39:6c:c5:34:4c:29:42: 62:03:20:7d:22:76:99:b4:29:54:a0:17:ce:9e:ea:90:a1:0f: ee:44:30:f3 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEma9HgLOiMYAPxGxUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ZDMwYjliMGQtY2VjZS00MTMzLTg3N2YtN2EyZWEzNDUyNjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaJkVh//wcCVzfzY8G3R1lBgxrcMWRsnimhm +fDQuq1sfdYiVH8Usbl9lrJTamuCI9fajwnSoiEIfs8j+bfQ9hMi3SSDCIg6Syui +sUwL3iPz+TOohVt8XmkkB56EY05U1puA+2WRDpfcg7sPhhQYM1mYJFUpvUU9HOR IilMpdZFNEiHrPF5s9L3Fy0tjrhgA3IhpQqACv5MdDmnFSeEQtURme+n2d62xbtJ UeUEWx1TrwRM+aPmcGd42Nkmmo3nP1dJdhppv81F8wwxIWqV4VCghIORU8E5clTN madla7AJFu5ne8JQIAKBxDlDOAe+0fTH+fJ2k+HXq9/gL1F2owIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGPBqCgJR57Ft8MBGQgaBlcPdZlWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOGE3YTgyNDUtODIwOS0z YzliLWI0NzUtZTg4MGE4YTAwOWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAbLQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEA4sdOOhw+hGL3OREN9srXVLtWLNTBpg50LxPpqR15oKxaJKa1aux4nfA9 MMC4dGvrLHzfpydPsTvfJ6P2ETpLt+WV7rz9S/wxfv+uI244OiQ7fm0nDrBydQGt UhAfacwvA2Ko0vYgpsD2sP8YAb8nsScHjVEwVCJC1BoiBSNnjyaRx3lFt8YjHc7F B1+78rLsBupWppVPX2J25traVi1zz0kvYL4P3Lea0uQ6E+m/VcQDaTC6FYJzZJWX Op4tIenQmdLUAis4Aj94MH9QorprYGE+kI590qa80UvECpGncnE2Ejs5bMU0TClC YgMgfSJ2mbQpVKAXzp7qkKEP7kQw8w== -----END CERTIFICATE-----Generated at Sat Apr 26 23:06:55 2025 by rpki-client