$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4a5e9c1-d838-365f-9553-97009a7b5512.roa File: d4a5e9c1-d838-365f-9553-97009a7b5512.roa (raw, json) Hash identifier: eZtHkwQ5QbY7dW+LnPBlLznmYFscxGtJI9nZhdYsl+s= Subject key identifier: FC:FF:D8:37:0C:67:51:CE:25:EE:42:39:F3:95:59:BB:A3:52:B5:98 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858499F24DC7534BD1959CC653CC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4a5e9c1-d838-365f-9553-97009a7b5512.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 108.59.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:dc:75:34:bd:19:59:cc:65:3c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=1e9b6dd2-e09d-48e1-87b9-78f29561558b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4c:c3:b0:24:5b:83:e6:7c:e5:4a:6d:4d:fc: a3:ec:84:fe:31:4f:07:00:80:95:41:00:c2:81:74: d6:f2:a5:5c:f3:59:85:aa:21:9f:3c:af:e2:b4:d4: 70:2e:8d:1e:46:63:fa:47:10:64:cd:97:f0:d2:00: 5c:de:89:9f:74:e8:68:f9:62:65:59:0c:99:c9:6b: ca:07:fa:6b:c6:f9:a1:79:5a:88:dd:bc:a2:a3:05: f2:b6:2e:39:e2:ef:c1:09:8a:1b:72:af:52:fc:90: 9e:3f:6b:6a:cc:37:bf:1e:3b:2b:29:b6:f9:e1:dd: f1:73:d5:3c:bf:a3:d0:f9:2b:3c:4c:21:4c:d4:96: 51:7a:8b:32:e5:40:80:9c:17:c7:91:6a:67:d7:28: 50:c7:8f:b4:73:77:51:44:37:38:b4:6b:9b:a9:51: 4b:5a:60:5c:4a:66:c9:49:14:43:03:27:ce:e2:83: 7c:1f:fd:55:73:72:c7:e4:2a:a3:5e:f2:c2:18:7a: f5:c8:e9:a1:39:52:cb:85:00:30:9e:58:bf:ea:c1: 91:7d:98:fb:a3:b9:36:70:22:af:af:a9:89:9f:53: 33:9a:12:fc:e1:52:fb:e5:1f:ac:18:e1:fa:8e:e7: cf:6c:4d:96:a3:c9:3c:54:b0:ca:05:71:c1:22:4f: 03:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:FF:D8:37:0C:67:51:CE:25:EE:42:39:F3:95:59:BB:A3:52:B5:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4a5e9c1-d838-365f-9553-97009a7b5512.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 108.59.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:6a:ac:74:5d:63:61:8d:86:3d:5a:6f:3c:99:e4:4e:e8:1d: 10:12:d0:d6:90:2e:e3:82:24:87:77:21:0a:9b:8c:ff:bf:c5: 6d:5f:1c:a9:eb:1d:93:89:ae:7d:05:ab:fd:4e:96:9e:a7:2e: 8a:02:7b:68:21:f0:55:35:a9:9c:b9:8e:76:0b:6b:cd:ee:d4: d2:9c:ff:5f:78:17:0c:81:05:5a:57:de:1e:f9:38:61:56:42: 34:d7:fb:37:13:e3:7d:f8:ab:f6:0b:a3:61:e1:aa:ba:2b:9c: 6c:08:c2:72:22:9b:42:58:0a:c2:ad:85:9a:68:9f:66:77:82: 50:f7:cf:f5:ad:4f:7a:89:60:c4:ff:8b:5b:9d:ac:c5:fc:fe: 96:35:16:38:eb:c4:e0:4f:e5:98:a3:93:fc:b0:ee:20:41:26: d4:15:c5:7a:2a:35:05:7c:ef:6a:1b:f6:25:93:82:87:be:d8: 57:62:f9:bf:2f:eb:ef:a0:59:b4:35:5f:15:80:eb:c1:61:3d: 3f:4d:a8:d5:e1:04:98:42:98:78:55:9c:38:62:e5:b5:30:50: 3f:73:ab:be:d7:ba:94:28:7e:59:05:27:88:06:9f:c3:94:e0: c4:6c:7e:e8:c8:19:03:18:af:6e:01:bb:ea:c1:c9:51:c3:86: a8:44:13:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNx1NL0ZWcxlPMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk MWU5YjZkZDItZTA5ZC00OGUxLTg3YjktNzhmMjk1NjE1NThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEzDsCRbg+Z85UptTfyj7IT+MU8HAICVQQDC gXTW8qVc81mFqiGfPK/itNRwLo0eRmP6RxBkzZfw0gBc3omfdOho+WJlWQyZyWvK B/prxvmheVqI3byiowXyti454u/BCYobcq9S/JCeP2tqzDe/HjsrKbb54d3xc9U8 v6PQ+Ss8TCFM1JZReosy5UCAnBfHkWpn1yhQx4+0c3dRRDc4tGubqVFLWmBcSmbJ SRRDAyfO4oN8H/1Vc3LH5CqjXvLCGHr1yOmhOVLLhQAwnli/6sGRfZj7o7k2cCKv r6mJn1MzmhL84VL75R+sGOH6jufPbE2Wo8k8VLDKBXHBIk8DzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPz/2DcMZ1HOJe5COfOVWbujUrWYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDRhNWU5YzEtZDgzOC0z NjVmLTk1NTMtOTcwMDlhN2I1NTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDtRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5qrHRdY2GNhj1abzyZ5E7oHRAS0NaQLuOCJId3IQqbjP+/xW1fHKnr HZOJrn0Fq/1Olp6nLooCe2gh8FU1qZy5jnYLa83u1NKc/194FwyBBVpX3h75OGFW QjTX+zcT4334q/YLo2HhqrornGwIwnIim0JYCsKthZpon2Z3glD3z/WtT3qJYMT/ i1udrMX8/pY1FjjrxOBP5Zijk/yw7iBBJtQVxXoqNQV872ob9iWTgoe+2Fdi+b8v 6++gWbQ1XxWA68FhPT9NqNXhBJhCmHhVnDhi5bUwUD9zq77XupQoflkFJ4gGn8OU 4MRsfujIGQMYr24Bu+rByVHDhqhEE5Y= -----END CERTIFICATE-----Generated at Sat Apr 26 14:53:33 2025 by rpki-client