$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/88e1ccb0-1b3b-3ba4-8658-22678fea3fb9.roa File: 88e1ccb0-1b3b-3ba4-8658-22678fea3fb9.roa (raw, json) Hash identifier: GW9nT/dP+JhnbeE8Ln9jg5RyETIBK6Y3FF1R0pKJGAU= Subject key identifier: 98:58:E6:00:36:21:D5:9B:BD:68:7B:9B:2B:FD:BA:23:38:0C:88:CA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858499F24A0C6A6855EC6DC5FF180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/88e1ccb0-1b3b-3ba4-8658-22678fea3fb9.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 108.59.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:a0:c6:a6:85:5e:c6:dc:5f:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=38ee375e-428b-4fef-8d2d-5fb33053d8ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2b:5d:a8:14:89:37:70:af:b1:19:2c:b7:8c: 36:38:af:2c:90:ec:52:3b:21:e2:cd:52:21:97:a3: c0:09:8d:a1:f4:9f:69:6c:96:7c:e5:b9:16:3c:a3: af:82:c7:dc:7a:80:80:78:16:e5:6f:a1:0f:ea:0c: c0:0f:a0:a7:d2:3d:6f:3b:67:e1:42:3e:29:d6:d7: f5:d1:ef:45:43:74:2c:1a:0a:f0:62:a2:2d:42:04: a4:24:f9:56:dc:32:95:a8:95:0b:09:8a:95:e3:8d: 1f:14:f4:5a:71:95:57:70:16:9b:e7:c2:f2:1f:2c: 80:a3:c2:84:8b:04:e5:e5:37:88:21:14:57:6b:a1: eb:49:a2:34:4e:5b:5e:1e:83:82:e4:b1:fb:d6:f4: 68:ab:1a:4d:f7:28:f2:e1:fe:14:cd:ef:42:d3:c9: 4e:24:85:50:3c:a6:0f:24:e9:2c:5d:9e:66:4d:e5: ff:45:16:f9:0b:09:58:02:64:4d:26:34:4c:92:19: c4:e3:bb:b5:f4:eb:c0:6f:6d:4c:8d:6a:ec:92:62: c9:a4:e5:fe:fc:4c:bc:29:ea:69:75:65:5e:51:4b: 25:40:c3:69:13:72:7e:23:61:b6:4b:dc:4e:eb:13: 46:68:bd:27:f5:a5:4e:3d:3c:4d:84:de:df:42:e3: b4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:58:E6:00:36:21:D5:9B:BD:68:7B:9B:2B:FD:BA:23:38:0C:88:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/88e1ccb0-1b3b-3ba4-8658-22678fea3fb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 108.59.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:dd:78:fe:d1:c9:13:ab:6a:dd:8f:25:7f:c8:20:74:1a:87: 00:f2:e3:2b:09:71:cb:43:ac:b8:ae:79:23:98:99:66:fc:f3: f3:c0:4e:2a:bc:94:24:af:de:88:ed:9d:23:ee:e0:84:34:89: be:77:6f:35:b9:d8:1c:c8:dd:e1:54:21:dc:7c:19:40:d5:26: 06:4d:a3:ba:35:f3:0a:93:ba:fa:24:e4:d8:ae:0a:ea:c4:9d: 3f:ea:6a:9d:e7:3a:53:68:2e:8a:75:58:a4:ad:ec:18:bc:9a: c9:5e:44:8d:73:95:02:77:ae:5f:93:95:4b:a2:20:18:3d:99: de:3d:e2:f2:9d:4b:76:93:f8:01:d7:08:44:0d:d1:29:38:0e: 96:84:b5:11:13:82:56:45:00:30:0d:1b:b2:2a:47:44:36:ec: e4:c1:d5:12:fe:eb:a5:10:90:d6:e6:86:46:6c:c7:b8:d3:da: 9a:68:0e:c3:bb:c1:87:98:e2:4e:6e:fa:67:33:46:22:7d:56: 80:4f:e1:0b:f8:02:7d:7d:75:fe:83:ec:d9:c7:4c:c0:36:23: df:1f:e4:4a:1a:f2:2c:68:48:0d:00:06:76:7f:8e:21:4f:6e: 08:34:60:fd:e0:ce:30:e9:8d:e0:58:d8:bd:8e:d9:28:fd:a3: 44:35:f7:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKDGpoVextxf8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk MzhlZTM3NWUtNDI4Yi00ZmVmLThkMmQtNWZiMzMwNTNkOGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCtdqBSJN3CvsRkst4w2OK8skOxSOyHizVIh l6PACY2h9J9pbJZ85bkWPKOvgsfceoCAeBblb6EP6gzAD6Cn0j1vO2fhQj4p1tf1 0e9FQ3QsGgrwYqItQgSkJPlW3DKVqJULCYqV440fFPRacZVXcBab58LyHyyAo8KE iwTl5TeIIRRXa6HrSaI0TlteHoOC5LH71vRoqxpN9yjy4f4Uze9C08lOJIVQPKYP JOksXZ5mTeX/RRb5CwlYAmRNJjRMkhnE47u19OvAb21MjWrskmLJpOX+/Ey8Kepp dWVeUUslQMNpE3J+I2G2S9xO6xNGaL0n9aVOPTxNhN7fQuO04wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhY5gA2IdWbvWh7myv9uiM4DIjKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODhlMWNjYjAtMWIzYi0z YmE0LTg2NTgtMjI2NzhmZWEzZmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDteMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABndeP7RyROrat2PJX/IIHQahwDy4ysJcctDrLiueSOYmWb88/PATiq8 lCSv3ojtnSPu4IQ0ib53bzW52BzI3eFUIdx8GUDVJgZNo7o18wqTuvok5NiuCurE nT/qap3nOlNoLop1WKSt7Bi8msleRI1zlQJ3rl+TlUuiIBg9md494vKdS3aT+AHX CEQN0Sk4DpaEtRETglZFADANG7IqR0Q27OTB1RL+66UQkNbmhkZsx7jT2ppoDsO7 wYeY4k5u+mczRiJ9VoBP4Qv4An19df6D7NnHTMA2I98f5Eoa8ixoSA0ABnZ/jiFP bgg0YP3gzjDpjeBY2L2O2Sj9o0Q19zM= -----END CERTIFICATE-----Generated at Sat Apr 26 14:53:40 2025 by rpki-client