$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c07c714a-fc86-3d71-ab93-aa4412ec1db0.roa File: c07c714a-fc86-3d71-ab93-aa4412ec1db0.roa (raw, json) Hash identifier: DOwPhWH+ciBNrdx+jcvPLKXBFvVflicLX3WDvbuIxpU= Subject key identifier: 15:2A:26:D9:A7:EF:7F:3C:1C:00:6D:71:7C:9E:2B:8D:0F:D6:8A:F4 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849EA851D7A20127F1B974D3600 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c07c714a-fc86-3d71-ab93-aa4412ec1db0.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 20454 IP address blocks: 108.170.43.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:1d:7a:20:12:7f:1b:97:4d:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=e8840fe7-be0d-488a-8c90-a8becd263998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:29:7d:49:b1:90:c8:ae:0c:a2:57:6c:3d:ac: 9f:ca:79:a1:96:5a:f4:e0:1e:45:5a:cf:dd:e5:12: 8d:26:93:89:6d:fb:37:99:f5:03:b1:47:78:3f:bb: 74:85:07:76:80:d4:b8:5d:c4:ae:96:c3:55:93:96: 12:e7:14:6c:47:86:ef:3c:50:19:0f:d2:34:d2:08: 8d:d9:14:2e:1d:a9:cc:ec:06:67:57:ce:d2:a2:50: 47:81:0b:9d:82:be:ab:1d:57:1c:de:00:7c:3f:71: a0:37:8c:7a:c6:93:0f:2c:2a:75:a9:3a:00:47:2f: 49:6b:2c:77:c0:c6:1b:f1:e9:5b:ae:73:1c:15:5a: 6b:04:98:b6:98:96:f1:b0:6f:6b:50:a9:db:e4:a1: c1:9c:d1:06:9f:85:a4:7e:9f:45:b2:b3:05:43:00: e7:10:0c:52:8b:2b:5d:ef:1d:62:b8:82:77:7c:b4: 5b:e8:a4:ba:13:45:cf:c8:6a:79:53:10:08:ad:57: 25:46:e7:a1:f4:29:dd:27:cb:ba:88:06:29:dc:83: 74:ec:7c:f3:e3:85:1a:3a:ac:f7:e8:75:c1:0a:be: d7:95:21:58:de:b8:b4:9e:0d:93:6b:8d:0f:f0:1f: 17:48:f2:32:ce:b2:3b:50:55:f7:fc:ac:58:91:70: 2b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:2A:26:D9:A7:EF:7F:3C:1C:00:6D:71:7C:9E:2B:8D:0F:D6:8A:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c07c714a-fc86-3d71-ab93-aa4412ec1db0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:cc:c0:b0:c9:81:a9:63:f4:56:a2:c6:b6:46:a8:fa:16:09: 8b:06:a4:6e:9d:46:f3:66:32:69:ba:25:9d:65:ca:dd:47:9d: 49:4c:2b:ed:2e:76:dc:f6:ea:c5:7f:86:0f:e4:e0:ee:6e:dd: 2d:f1:48:7d:1c:51:98:c5:53:7e:f1:2e:0f:5e:7f:41:97:71: 9d:11:3f:d6:6d:ea:cd:52:39:21:43:61:da:0d:69:40:e5:7d: 7b:0c:d5:3b:b1:6d:a2:f5:2d:c1:d3:25:7a:46:70:65:01:b1: af:b7:cc:cd:0c:e8:3e:60:b3:fa:ed:9b:dc:2a:2a:41:c8:30: 4c:fe:fa:e0:8c:4c:c0:7f:d2:97:04:49:62:c1:00:ab:82:f1: f0:87:1c:6d:fe:1f:e5:50:1d:02:6a:17:6c:35:2a:49:a5:1c: 67:c0:c5:15:66:c6:d2:90:36:b7:6b:bd:de:68:e7:ca:02:53: 87:e6:2d:f0:35:18:68:67:11:52:9c:42:48:e3:cd:fb:cd:1f: 2e:a4:dc:8d:25:0b:c9:72:da:c5:6a:59:37:0c:08:55:0a:9f: 7c:d7:9e:de:f7:15:35:9e:29:f3:a8:de:84:b2:37:54:44:23: 6d:b7:27:47:f6:03:cf:64:61:58:78:33:09:ef:de:f3:b7:22: 75:6a:eb:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhR16IBJ/G5dNNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk ZTg4NDBmZTctYmUwZC00ODhhLThjOTAtYThiZWNkMjYzOTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSl9SbGQyK4MoldsPayfynmhllr04B5FWs/d 5RKNJpOJbfs3mfUDsUd4P7t0hQd2gNS4XcSulsNVk5YS5xRsR4bvPFAZD9I00giN 2RQuHanM7AZnV87SolBHgQudgr6rHVcc3gB8P3GgN4x6xpMPLCp1qToARy9Jayx3 wMYb8elbrnMcFVprBJi2mJbxsG9rUKnb5KHBnNEGn4Wkfp9FsrMFQwDnEAxSiytd 7x1iuIJ3fLRb6KS6E0XPyGp5UxAIrVclRueh9CndJ8u6iAYp3IN07Hzz44UaOqz3 6HXBCr7XlSFY3ri0ng2Ta40P8B8XSPIyzrI7UFX3/KxYkXArdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUqJtmn7388HABtcXyeK40P1or0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYzA3YzcxNGEtZmM4Ni0z ZDcxLWFiOTMtYWE0NDEyZWMxZGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKorMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbMwLDJgalj9FaixrZGqPoWCYsGpG6dRvNmMmm6JZ1lyt1HnUlMK+0u dtz26sV/hg/k4O5u3S3xSH0cUZjFU37xLg9ef0GXcZ0RP9Zt6s1SOSFDYdoNaUDl fXsM1TuxbaL1LcHTJXpGcGUBsa+3zM0M6D5gs/rtm9wqKkHIMEz++uCMTMB/0pcE SWLBAKuC8fCHHG3+H+VQHQJqF2w1KkmlHGfAxRVmxtKQNrdrvd5o58oCU4fmLfA1 GGhnEVKcQkjjzfvNHy6k3I0lC8ly2sVqWTcMCFUKn3zXnt73FTWeKfOo3oSyN1RE I223J0f2A89kYVh4Mwnv3vO3InVq6x0= -----END CERTIFICATE-----Generated at Sun Jun 15 23:14:32 2025 by rpki-client