$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3b182a4-aab3-36b7-a30f-0a80d11ebbe5.roa File: d3b182a4-aab3-36b7-a30f-0a80d11ebbe5.roa (raw, json) Hash identifier: 5DU+mjPcSsdX5ZtxR/vCV0a/kSXE4cRrUKRzGx2lkbg= Subject key identifier: BD:FF:F1:B5:F6:8D:72:E2:C3:CE:E1:58:09:24:29:F7:42:92:1A:04 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858499F24B5D7FB789142B3E18180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3b182a4-aab3-36b7-a30f-0a80d11ebbe5.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 108.59.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:b5:d7:fb:78:91:42:b3:e1:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=d7579375-52af-44c4-96ac-f5aef63ad9c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c8:3f:f5:75:7f:9f:30:24:d3:20:35:7c:d6: c7:dd:d6:99:29:18:22:dc:24:91:81:76:50:2e:5f: 31:59:4d:92:3d:a5:1c:99:82:11:04:f7:9e:80:0d: bc:02:77:34:1c:61:4e:ca:ae:45:04:a3:69:53:13: d8:0a:97:0e:72:4b:6e:18:50:c1:ee:d2:af:21:d1: e3:44:7e:7e:bc:87:e5:c5:8a:e6:ae:09:b0:a6:9f: f6:c8:25:d4:ff:8b:15:14:77:fb:19:dc:bf:9d:88: 31:71:a8:5d:b3:b3:80:67:34:66:c5:1c:ff:9c:81: f8:4c:87:a7:64:27:d3:30:05:15:29:c9:0d:8d:1b: 3f:3d:7e:c4:61:46:ee:01:de:89:a7:73:6e:16:b6: be:c0:c1:7e:74:6c:e7:51:b6:33:e2:03:52:ee:d1: 55:c7:10:f0:9a:93:17:a3:92:1a:71:23:4d:12:71: ff:90:16:dc:24:90:9a:07:30:60:ad:b3:60:a9:da: 9d:43:34:d9:80:b0:06:21:41:2c:c9:0c:7f:85:c1: 0d:df:17:04:ec:9b:22:76:20:61:f2:cf:f6:c9:48: 8a:2b:de:66:8c:e8:8c:fe:7f:10:89:00:c5:4e:07: 7d:8f:a0:b5:dc:17:f5:eb:73:53:40:44:6c:da:2d: 34:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:FF:F1:B5:F6:8D:72:E2:C3:CE:E1:58:09:24:29:F7:42:92:1A:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3b182a4-aab3-36b7-a30f-0a80d11ebbe5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 108.59.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:e7:8d:0e:0e:fe:97:ef:da:da:c3:f5:31:e6:5f:1c:13:96: ad:ff:2e:26:a3:d6:52:31:a2:a8:c4:56:4e:ff:12:19:95:21: 9a:8c:77:9c:86:b4:37:ae:7f:74:ba:f3:dc:d2:89:8c:f7:23: bd:9f:70:d7:62:d9:4c:98:a3:90:4a:19:2f:6c:b7:b0:bf:3b: 7b:6d:e0:71:8d:59:c5:e8:c5:77:2c:c3:39:c3:4c:38:90:ed: 90:f9:35:c5:1d:ea:c5:a5:3d:70:20:72:dc:4d:92:11:c5:b0: 83:0b:58:ac:79:e8:2e:68:55:88:31:40:73:17:57:67:dc:66: 51:37:09:08:49:83:74:4d:a6:ee:11:d4:a0:96:28:8b:f8:3a: 4c:43:1c:11:9e:4a:be:26:84:37:ea:4e:97:a1:86:82:b9:ee: a0:52:ba:37:1e:66:6d:05:73:e6:2c:46:00:b9:df:b4:d1:75: 97:4d:7d:d2:d7:67:be:2d:ff:58:f3:26:e7:14:c9:65:1d:76: cf:0a:3a:26:f9:9d:5c:3e:4b:e9:42:7f:b7:73:8e:ca:6f:62: f7:bd:b1:b8:dc:30:cd:03:a7:38:00:61:9d:bd:49:3d:ac:42: 27:c8:4f:d7:82:25:71:ff:5b:90:c2:1d:b1:b8:13:6a:5c:8f: da:88:3d:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJLXX+3iRQrPhgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ZDc1NzkzNzUtNTJhZi00NGM0LTk2YWMtZjVhZWY2M2FkOWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMg/9XV/nzAk0yA1fNbH3daZKRgi3CSRgXZQ Ll8xWU2SPaUcmYIRBPeegA28Anc0HGFOyq5FBKNpUxPYCpcOcktuGFDB7tKvIdHj RH5+vIflxYrmrgmwpp/2yCXU/4sVFHf7Gdy/nYgxcahds7OAZzRmxRz/nIH4TIen ZCfTMAUVKckNjRs/PX7EYUbuAd6Jp3NuFra+wMF+dGznUbYz4gNS7tFVxxDwmpMX o5IacSNNEnH/kBbcJJCaBzBgrbNgqdqdQzTZgLAGIUEsyQx/hcEN3xcE7JsidiBh 8s/2yUiKK95mjOiM/n8QiQDFTgd9j6C13Bf163NTQERs2i00JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3/8bX2jXLiw87hWAkkKfdCkhoEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDNiMTgyYTQtYWFiMy0z NmI3LWEzMGYtMGE4MGQxMWViYmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDtTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTnjQ4O/pfv2trD9THmXxwTlq3/Liaj1lIxoqjEVk7/EhmVIZqMd5yG tDeuf3S689zSiYz3I72fcNdi2UyYo5BKGS9st7C/O3tt4HGNWcXoxXcswznDTDiQ 7ZD5NcUd6sWlPXAgctxNkhHFsIMLWKx56C5oVYgxQHMXV2fcZlE3CQhJg3RNpu4R 1KCWKIv4OkxDHBGeSr4mhDfqTpehhoK57qBSujceZm0Fc+YsRgC537TRdZdNfdLX Z74t/1jzJucUyWUdds8KOib5nVw+S+lCf7dzjspvYve9sbjcMM0DpzgAYZ29ST2s QifIT9eCJXH/W5DCHbG4E2pcj9qIPVM= -----END CERTIFICATE-----Generated at Sat Apr 26 15:55:38 2025 by rpki-client