$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d488156d-5259-3d2e-acf9-b0aff7f7f2ce.roa File: d488156d-5259-3d2e-acf9-b0aff7f7f2ce.roa (raw, json) Hash identifier: UA9nv1jWcAR3qCnTIuh0TbgNR+j1+vwA/y7kvW1pHyI= Subject key identifier: 0D:BB:98:6D:3F:58:04:21:DB:56:54:53:71:CB:35:C5:CC:45:FD:43 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858499F24AE7F725A82CC67C73300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d488156d-5259-3d2e-acf9-b0aff7f7f2ce.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 108.59.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:ae:7f:72:5a:82:cc:67:c7:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=fe612c83-92a5-44c2-9498-40c9477d079a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:43:15:42:a4:dd:af:2f:b5:6c:e2:b7:7e:56: f0:4c:bd:69:4d:cf:88:e5:d1:4b:73:2a:f4:8d:e1: 52:7a:11:25:d6:f0:5f:8c:4c:ae:f8:84:46:b5:e6: 75:7f:2b:57:5c:cd:fc:bb:1e:f2:6c:bd:32:12:1e: ce:9d:13:9a:fc:0f:2c:4b:e7:5f:35:e1:13:af:4f: b5:af:14:16:9d:fe:12:87:b4:3f:a2:61:7e:9d:5f: 9f:82:af:b9:00:29:c4:38:1f:aa:c3:4e:12:8c:8d: 91:67:3b:e7:b0:16:6d:46:f0:61:b3:12:cb:e8:d1: 3d:a9:43:54:20:a3:94:9c:d9:92:b4:87:cb:d1:48: e3:04:9c:7a:44:30:25:93:26:87:a3:1d:4b:bc:89: 7e:4d:07:96:81:4e:30:be:87:d7:0f:91:a3:5b:f4: 86:0a:55:a5:f4:06:0c:a8:9c:91:db:95:d3:bf:f0: 2a:e9:b7:56:4d:5e:9d:bc:07:ec:85:68:ba:05:75: 83:5a:ed:02:8c:70:5f:c3:fd:42:e6:43:98:82:24: 77:3a:75:79:88:0e:ae:5e:52:57:0d:98:59:79:0a: 3c:c6:d7:5f:20:3c:41:f3:cf:13:f2:05:a1:24:d7: 0c:fb:df:57:c7:3e:8b:18:e9:19:00:9c:ee:b8:58: 50:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:BB:98:6D:3F:58:04:21:DB:56:54:53:71:CB:35:C5:CC:45:FD:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d488156d-5259-3d2e-acf9-b0aff7f7f2ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 108.59.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:de:de:45:75:b7:e6:c9:19:58:65:21:9e:3f:ac:6f:b7:a9: 83:fa:dc:97:27:ab:62:13:ef:dc:09:bd:8a:73:9f:22:22:66: 26:cc:30:24:16:8a:b8:3c:dc:cd:1e:36:8e:6b:e8:73:b6:7f: 2d:d3:5f:79:32:92:d1:00:48:ae:f0:0d:e2:49:f6:59:9b:46: 0b:6a:68:26:2e:f3:3d:83:72:ce:4a:ef:82:2b:c4:3d:d4:01: 77:c4:3c:51:25:7f:12:f7:bd:87:ee:16:0f:ca:16:88:08:bb: a4:3c:cb:d9:ac:6a:5f:0d:b1:69:3c:7b:8e:9a:3f:cd:d6:fc: 4d:a1:b5:e2:cb:5a:00:b0:74:f8:1d:f5:99:fe:0c:d2:e4:c5: f6:e3:77:61:f3:11:3e:4d:d8:87:51:bb:86:87:c0:92:21:92: e8:eb:83:90:12:02:f1:b2:ee:af:67:d8:29:a0:99:ff:5f:89: 6e:4e:bb:56:dc:a9:d2:91:bf:5a:91:08:0e:0b:8a:6b:de:27: 71:4d:01:f3:e2:80:71:97:42:0c:fe:cc:25:4f:d9:06:e2:4c: a1:a0:d9:9f:ec:d4:d6:36:63:aa:d0:84:10:93:49:46:20:c8: 8a:26:4f:28:0f:06:c1:fe:f1:9f:ea:66:d5:88:c6:ca:5b:5a: a5:aa:0b:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJK5/clqCzGfHMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ZmU2MTJjODMtOTJhNS00NGMyLTk0OTgtNDBjOTQ3N2QwNzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0MVQqTdry+1bOK3flbwTL1pTc+I5dFLcyr0 jeFSehEl1vBfjEyu+IRGteZ1fytXXM38ux7ybL0yEh7OnROa/A8sS+dfNeETr0+1 rxQWnf4Sh7Q/omF+nV+fgq+5ACnEOB+qw04SjI2RZzvnsBZtRvBhsxLL6NE9qUNU IKOUnNmStIfL0UjjBJx6RDAlkyaHox1LvIl+TQeWgU4wvofXD5GjW/SGClWl9AYM qJyR25XTv/Aq6bdWTV6dvAfshWi6BXWDWu0CjHBfw/1C5kOYgiR3OnV5iA6uXlJX DZhZeQo8xtdfIDxB888T8gWhJNcM+99Xxz6LGOkZAJzuuFhQtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA27mG0/WAQh21ZUU3HLNcXMRf1DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDQ4ODE1NmQtNTI1OS0z ZDJlLWFjZjktYjBhZmY3ZjdmMmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDtSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKne3kV1t+bJGVhlIZ4/rG+3qYP63Jcnq2IT79wJvYpznyIiZibMMCQW irg83M0eNo5r6HO2fy3TX3kyktEASK7wDeJJ9lmbRgtqaCYu8z2Dcs5K74IrxD3U AXfEPFElfxL3vYfuFg/KFogIu6Q8y9msal8NsWk8e46aP83W/E2hteLLWgCwdPgd 9Zn+DNLkxfbjd2HzET5N2IdRu4aHwJIhkujrg5ASAvGy7q9n2Cmgmf9fiW5Ou1bc qdKRv1qRCA4LimveJ3FNAfPigHGXQgz+zCVP2QbiTKGg2Z/s1NY2Y6rQhBCTSUYg yIomTygPBsH+8Z/qZtWIxspbWqWqCwE= -----END CERTIFICATE-----Generated at Sat Apr 26 16:08:10 2025 by rpki-client