$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/31f66624-a6b9-3acd-938b-89b2386f5b28.roa File: 31f66624-a6b9-3acd-938b-89b2386f5b28.roa (raw, json) Hash identifier: 6QSF2xNQiry9EstNrnOP4d5jwlrRQg3UuS/Ld5w2hek= Subject key identifier: 36:E8:7E:4C:14:FF:88:B6:69:1E:E7:5E:37:99:11:28:B7:15:9F:FF Certificate issuer: /CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Certificate serial: 010D0C9F432858495ABEDEB35F7D113491097AC0 Authority key identifier: B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/31f66624-a6b9-3acd-938b-89b2386f5b28.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 40788 IP address blocks: 108.168.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:de:b3:5f:7d:11:34:91:09:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=d7242245-27ab-41a7-a9d2-651586ceff7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5b:06:e5:15:03:7f:7c:3a:e8:af:f6:3c:3e: 55:e2:c4:02:d9:9f:53:30:c5:08:eb:d4:ab:5e:eb: 8b:46:e6:b0:3e:7e:2a:6b:60:b4:5f:17:1e:9d:f8: fa:87:ed:2b:dd:ec:3f:ae:5a:e5:05:fb:65:b8:d1: 0a:9d:f9:c3:81:7f:03:0c:d7:1f:67:ab:d3:92:6a: 5a:fa:6e:9d:1b:1f:61:b0:ec:92:ca:97:21:cd:16: d0:a3:b7:95:3a:88:db:ef:0a:ad:fa:6f:f1:40:ba: 3e:ab:5a:4d:d2:17:c4:cd:25:84:3f:5d:01:b9:75: 20:fd:2d:c5:7a:30:55:ed:9f:b7:0d:91:d4:f1:2f: 86:71:5a:d6:74:9e:0a:55:61:2b:f4:9e:61:52:14: 1a:b2:0b:92:66:cb:d8:6d:2d:35:ce:fd:e2:60:8a: 81:d4:82:77:77:0b:46:45:d7:8c:26:00:e7:12:1e: a7:f5:47:4f:9c:b1:41:43:7c:14:48:15:ef:40:63: d3:b3:57:8c:b0:20:ad:15:de:df:c8:ac:31:df:39: 70:2a:56:82:eb:7b:14:cc:d7:82:40:3c:3e:68:5b: 94:ef:e7:6f:8b:74:c6:8b:79:1e:67:e9:62:af:59: 5e:9f:65:18:70:bc:de:b4:0c:76:c9:f7:11:4f:72: f6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E8:7E:4C:14:FF:88:B6:69:1E:E7:5E:37:99:11:28:B7:15:9F:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/31f66624-a6b9-3acd-938b-89b2386f5b28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl X509v3 Authority Key Identifier: keyid:B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer sbgp-ipAddrBlock: critical IPv4: 108.168.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:01:94:65:05:7a:03:e5:ee:bc:40:47:c9:0a:0f:22:69:b3: 01:06:88:a0:ed:f6:85:53:d1:a7:a3:6d:ca:d5:8f:cf:13:91: 25:38:e8:a1:37:cc:85:13:aa:71:0c:1e:91:5d:ad:2d:c1:50: 84:f9:49:ff:de:a7:ac:74:7b:54:71:ba:2f:2a:fd:07:39:68: 53:38:88:0b:e0:2d:4b:55:ab:be:33:55:94:23:bf:60:c4:d2: 4f:c9:30:fb:cc:8f:12:9f:56:7c:24:b3:3b:92:d0:0d:8d:64: 4b:44:53:ec:40:47:2e:b9:9a:af:1d:1b:34:28:d2:2e:4d:af: b0:53:4f:77:fa:05:79:9e:87:c8:01:91:da:97:82:18:33:1a: e1:bc:c8:0e:30:95:64:f4:92:57:10:1b:03:b8:7c:a7:2c:91: a5:5c:dc:fa:a4:11:1e:bb:82:ec:42:32:25:63:e6:b1:9f:49: 4c:56:1e:dc:d8:46:2c:15:ee:e6:d3:26:4d:0b:74:dd:5d:15: 87:50:8a:be:cc:15:e7:9c:38:65:00:64:f8:48:1a:c5:4a:c0: 54:fb:5a:be:90:35:52:90:38:4b:6e:b8:72:f2:86:6d:e3:38: e2:e4:ea:20:ba:8d:47:f0:5a:66:b0:86:52:a6:ec:2e:fb:e4: eb:8c:ec:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavt6zX30RNJEJesAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWMyOWEwYmUtNzJhOC00ODk0LThjMGMtZjRkMjZlM2Fl MDU5MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk ZDcyNDIyNDUtMjdhYi00MWE3LWE5ZDItNjUxNTg2Y2VmZjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlsG5RUDf3w66K/2PD5V4sQC2Z9TMMUI69Sr XuuLRuawPn4qa2C0Xxcenfj6h+0r3ew/rlrlBftluNEKnfnDgX8DDNcfZ6vTkmpa +m6dGx9hsOySypchzRbQo7eVOojb7wqt+m/xQLo+q1pN0hfEzSWEP10BuXUg/S3F ejBV7Z+3DZHU8S+GcVrWdJ4KVWEr9J5hUhQasguSZsvYbS01zv3iYIqB1IJ3dwtG RdeMJgDnEh6n9UdPnLFBQ3wUSBXvQGPTs1eMsCCtFd7fyKwx3zlwKlaC63sUzNeC QDw+aFuU7+dvi3TGi3keZ+lir1len2UYcLzetAx2yfcRT3L2zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbofkwU/4i2aR7nXjeZESi3FZ//MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5 YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQyNmUzYWUwNTkvMzFmNjY2MjQtYTZiOS0z YWNkLTkzOGItODliMjM4NmY1YjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWMyOWEwYmUtNzJhOC00ODk0LThj MGMtZjRkMjZlM2FlMDU5LzFjMjlhMGJlLTcyYTgtNDg5NC04YzBjLWY0ZDI2ZTNh ZTA1OS5jcmwwHwYDVR0jBBgwFoAUt+lHh3Pe7UatcsY/Em0QrrFWmR4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQy NmUzYWUwNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHbKgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJABlGUFegPl7rxAR8kKDyJpswEGiKDt9oVT0aejbcrVj88TkSU46KE3 zIUTqnEMHpFdrS3BUIT5Sf/ep6x0e1Rxui8q/Qc5aFM4iAvgLUtVq74zVZQjv2DE 0k/JMPvMjxKfVnwkszuS0A2NZEtEU+xARy65mq8dGzQo0i5Nr7BTT3f6BXmeh8gB kdqXghgzGuG8yA4wlWT0klcQGwO4fKcskaVc3PqkER67guxCMiVj5rGfSUxWHtzY RiwV7ubTJk0LdN1dFYdQir7MFeecOGUAZPhIGsVKwFT7Wr6QNVKQOEtuuHLyhm3j OOLk6iC6jUfwWmawhlKm7C775OuM7OU= -----END CERTIFICATE-----Generated at Thu May 1 09:31:26 2025 by rpki-client