$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c1eefeec-aa54-309b-90a2-332c01d93050.roa File: c1eefeec-aa54-309b-90a2-332c01d93050.roa (raw, json) Hash identifier: JM1QFTSHLZ4oAdfwkNbi1b3L9zJArNo8pVqwKB6Rmjo= Subject key identifier: 19:8B:CB:F0:9A:13:96:58:BA:6A:22:61:E9:C8:43:76:D8:D0:EA:2C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858499F24CA85A1564911E5534980 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c1eefeec-aa54-309b-90a2-332c01d93050.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 108.59.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:ca:85:a1:56:49:11:e5:53:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=6170b7f9-29a0-45ea-9023-fc2e8c652996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:19:d3:2b:32:fe:85:c2:fe:8b:5d:12:41:3c: a2:d2:2a:44:04:a4:de:8d:8e:1d:88:57:f5:5c:4f: 85:80:d5:1e:58:0a:ed:fb:6e:b9:a5:e3:eb:95:2a: 47:5d:36:f2:62:db:8f:a6:3f:97:09:0f:a7:29:94: 3b:45:40:a3:2b:2b:47:50:b3:9c:4b:47:21:3f:ab: 66:d3:5a:e9:c3:d6:7a:4d:77:15:63:b8:4b:c9:db: 98:e9:bc:c3:0b:b4:8a:fa:4c:10:e7:09:ad:cf:3c: 36:7f:29:c1:f6:ee:18:5d:53:16:c4:11:b2:52:2c: 1a:17:fc:87:aa:11:f0:e7:ed:8c:64:69:c1:95:ca: 6f:a7:1f:aa:0c:ce:0b:ea:40:b7:63:d9:7d:b8:03: 1f:b4:38:a5:c3:ea:c3:5b:c7:58:dc:1d:dc:22:04: 4a:26:ff:35:24:e8:75:82:18:8c:be:e2:a5:ab:70: 7e:1b:31:26:10:28:18:f8:38:a2:cd:ec:cc:6c:5e: 23:c8:ac:87:2e:16:8d:e8:cf:e3:46:9a:32:db:7c: 06:c8:b2:90:41:4a:32:52:53:eb:8d:6c:98:62:86: f8:ce:ed:34:12:7a:df:c9:17:c7:2f:fb:e1:ac:59: 7c:c0:44:f4:e8:69:ad:2b:39:04:ae:e8:a3:13:de: 8d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:8B:CB:F0:9A:13:96:58:BA:6A:22:61:E9:C8:43:76:D8:D0:EA:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c1eefeec-aa54-309b-90a2-332c01d93050.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 108.59.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:0e:73:6a:b5:92:92:1d:6a:be:d2:3b:28:e1:79:d2:73:30: 56:48:e0:10:2b:96:74:53:af:44:c9:02:50:a4:16:a9:d7:9d: 8f:66:d5:47:f9:cf:93:e5:05:78:ec:d2:13:ad:71:6d:51:73: b4:69:ef:e5:2f:8a:68:ec:b3:6d:fd:c6:1e:94:bf:7b:22:71: da:86:4a:e1:a0:11:e8:8e:de:0b:0f:a7:5c:a2:9b:a2:ee:43: e3:bf:6d:5c:4e:df:5f:ae:66:19:8f:d5:91:a8:7b:ce:8b:d9: a1:86:9b:d1:4d:94:d2:a8:19:38:e5:5b:7b:a9:ba:57:f8:4f: 33:5b:65:09:f8:d6:6d:f9:83:a0:d0:aa:e7:fe:95:a1:49:64: fd:59:70:f0:5a:cd:3f:ca:fb:a6:86:54:9d:26:25:43:c2:65: e4:b8:b9:fb:4b:60:dc:cd:c8:ef:c3:ee:8e:b0:48:0b:2d:da: 60:79:eb:94:f3:84:84:85:f0:e9:dc:26:2f:ec:26:09:4f:02: b3:fb:9f:a0:25:39:a1:7a:4f:ab:4c:bd:83:43:8c:7f:16:28: ec:dd:f8:63:97:9f:5e:ac:a3:18:f9:74:f8:d1:91:42:1f:d0: 7c:1e:53:02:82:2a:63:8e:20:9e:64:b2:6c:b3:f1:8c:12:48: e8:95:d6:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJMqFoVZJEeVTSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NjE3MGI3ZjktMjlhMC00NWVhLTkwMjMtZmMyZThjNjUyOTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhnTKzL+hcL+i10SQTyi0ipEBKTejY4diFf1 XE+FgNUeWArt+265pePrlSpHXTbyYtuPpj+XCQ+nKZQ7RUCjKytHULOcS0chP6tm 01rpw9Z6TXcVY7hLyduY6bzDC7SK+kwQ5wmtzzw2fynB9u4YXVMWxBGyUiwaF/yH qhHw5+2MZGnBlcpvpx+qDM4L6kC3Y9l9uAMftDilw+rDW8dY3B3cIgRKJv81JOh1 ghiMvuKlq3B+GzEmECgY+DiizezMbF4jyKyHLhaN6M/jRpoy23wGyLKQQUoyUlPr jWyYYob4zu00EnrfyRfHL/vhrFl8wET06GmtKzkEruijE96NLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmLy/CaE5ZYumoiYenIQ3bY0OosMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzFlZWZlZWMtYWE1NC0z MDliLTkwYTItMzMyYzAxZDkzMDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDtVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIOc2q1kpIdar7SOyjhedJzMFZI4BArlnRTr0TJAlCkFqnXnY9m1Uf5 z5PlBXjs0hOtcW1Rc7Rp7+Uvimjss239xh6Uv3sicdqGSuGgEeiO3gsPp1yim6Lu Q+O/bVxO31+uZhmP1ZGoe86L2aGGm9FNlNKoGTjlW3upulf4TzNbZQn41m35g6DQ quf+laFJZP1ZcPBazT/K+6aGVJ0mJUPCZeS4uftLYNzNyO/D7o6wSAst2mB565Tz hISF8OncJi/sJglPArP7n6AlOaF6T6tMvYNDjH8WKOzd+GOXn16soxj5dPjRkUIf 0HweUwKCKmOOIJ5ksmyz8YwSSOiV1nw= -----END CERTIFICATE-----Generated at Sat Apr 26 14:57:48 2025 by rpki-client