$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/43f0c32a-4c18-3924-b3cc-013a54cd1812.roa File: 43f0c32a-4c18-3924-b3cc-013a54cd1812.roa (raw, json) Hash identifier: IfxSS/50KhqO3RSoJDJVCspiUVP9dHgqSf/7tA4TY6I= Subject key identifier: E4:8A:37:AE:22:A5:FE:7D:24:53:45:28:CA:AB:50:07:84:C4:C4:36 Certificate issuer: /CN=9b434aa6-b68f-41e7-8d4b-9c831255f11c Certificate serial: 010D0C9F4328584A2EEABA12314542AB37995C20 Authority key identifier: C4:4B:74:74:83:CC:98:7A:FF:B0:14:84:B3:D8:7A:74:6D:1F:2C:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/43f0c32a-4c18-3924-b3cc-013a54cd1812.roa Signing time: Sat 14 Jun 2025 01:00:49 +0000 ROA not before: Sat 14 Jun 2025 01:00:49 +0000 ROA not after: Fri 12 Sep 2025 01:00:49 +0000 asID: 396982 IP address blocks: 108.174.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/9b434aa6-b68f-41e7-8d4b-9c831255f11c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/9b434aa6-b68f-41e7-8d4b-9c831255f11c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2e:ea:ba:12:31:45:42:ab:37:99:5c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b434aa6-b68f-41e7-8d4b-9c831255f11c Validity Not Before: Jun 14 01:00:49 2025 GMT Not After : Sep 12 01:00:49 2025 GMT Subject: CN=2706f304-a259-493a-b885-8532384f8c0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:c8:a5:19:8b:44:44:c1:0d:ff:c5:e2:b4:5b: 5c:bb:2a:8b:78:9a:f2:57:02:c6:2d:00:de:29:e6: cf:4f:a7:56:2b:38:b3:ee:12:82:43:8a:b8:50:b6: 70:7c:9f:31:94:8f:07:b5:5a:fb:48:1d:63:41:35: e3:9c:da:5c:f9:7f:50:48:21:df:0c:f6:13:9b:97: 91:57:98:ee:fb:f5:d8:6c:aa:e5:1c:6d:9b:9c:07: 17:1d:5f:af:ff:bc:72:29:fc:6f:5f:1e:b2:7d:47: f5:9a:71:17:19:74:47:63:67:5c:e4:58:21:25:ba: 3c:68:63:97:46:f1:f1:20:ac:ba:66:cd:8d:b6:63: 33:a0:cf:ce:00:1e:57:f4:85:5b:b6:c6:fa:b3:7a: 3b:d3:0a:63:50:bc:92:80:8c:6c:b7:bc:e5:23:a7: 9a:3b:d2:38:52:01:fd:73:d7:c0:23:76:32:d4:8d: dd:b9:66:fb:09:b8:81:e2:4d:8e:05:f8:6f:36:52: a1:cc:75:1f:b9:27:79:f9:82:b6:12:22:26:0f:f8: 4b:d9:4a:cd:1f:ae:74:3f:85:76:42:64:40:a3:4b: 07:ad:64:97:20:fe:e1:13:9e:9c:4a:03:56:9b:3d: c2:0e:bb:7d:b7:ab:a8:f9:0b:38:fc:76:54:e0:ca: 0e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:8A:37:AE:22:A5:FE:7D:24:53:45:28:CA:AB:50:07:84:C4:C4:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/43f0c32a-4c18-3924-b3cc-013a54cd1812.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/9b434aa6-b68f-41e7-8d4b-9c831255f11c.crl X509v3 Authority Key Identifier: keyid:C4:4B:74:74:83:CC:98:7A:FF:B0:14:84:B3:D8:7A:74:6D:1F:2C:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c.cer sbgp-ipAddrBlock: critical IPv4: 108.174.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:b8:97:47:30:69:dd:ee:87:e2:02:31:95:d2:a3:fd:f4:08: 1e:66:c6:34:fa:93:fd:51:7f:5e:19:e7:0c:95:b4:dc:ef:d8: 7a:62:38:b7:27:05:fd:b6:dd:40:a5:85:10:0b:f9:cb:4f:77: b4:73:a2:0d:c6:36:65:0f:77:d2:5f:95:69:23:08:32:11:50: 82:70:9f:3d:f3:a9:d5:0d:01:86:5f:55:82:02:73:5d:a7:eb: 8e:dc:f2:c4:3f:2b:64:ba:6d:5e:79:a3:8b:b8:4a:39:e9:eb: 4a:a6:41:d5:12:8d:35:ee:1f:87:6c:ee:cf:62:75:40:79:b5: 3d:64:94:7c:8f:29:59:32:b1:4d:ec:10:f0:cd:af:b8:a5:bb: 5b:af:1c:2f:11:db:65:bc:bb:10:a9:1d:1f:39:5c:6f:10:95: d7:8b:90:1c:01:76:6e:2d:76:e1:09:a5:8f:32:ae:d3:d8:61: 2e:8b:49:62:a6:57:39:34:d5:a6:0c:e2:7c:28:6e:d5:57:29: 00:7b:a5:a4:25:e2:36:ce:de:1f:83:c7:95:56:f8:76:3c:c9: 9a:b0:73:3f:c7:4c:9b:e6:66:33:fc:68:53:fc:79:6c:e1:af: 1e:fa:e3:f2:9c:e4:32:1a:bc:6d:13:a9:3c:f0:a1:de:90:b5: 43:45:fd:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEou6roSMUVCqzeZXCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWI0MzRhYTYtYjY4Zi00MWU3LThkNGItOWM4MzEyNTVm MTFjMB4XDTI1MDYxNDAxMDA0OVoXDTI1MDkxMjAxMDA0OVowLzEtMCsGA1UEAxMk MjcwNmYzMDQtYTI1OS00OTNhLWI4ODUtODUzMjM4NGY4YzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+silGYtERMEN/8XitFtcuyqLeJryVwLGLQDe KebPT6dWKziz7hKCQ4q4ULZwfJ8xlI8HtVr7SB1jQTXjnNpc+X9QSCHfDPYTm5eR V5ju+/XYbKrlHG2bnAcXHV+v/7xyKfxvXx6yfUf1mnEXGXRHY2dc5FghJbo8aGOX RvHxIKy6Zs2NtmMzoM/OAB5X9IVbtsb6s3o70wpjULySgIxst7zlI6eaO9I4UgH9 c9fAI3Yy1I3duWb7CbiB4k2OBfhvNlKhzHUfuSd5+YK2EiImD/hL2UrNH650P4V2 QmRAo0sHrWSXIP7hE56cSgNWmz3CDrt9t6uo+Qs4/HZU4MoOXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSKN64ipf59JFNFKMqrUAeExMQ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85YjQz NGFhNi1iNjhmLTQxZTctOGQ0Yi05YzgzMTI1NWYxMWMvNDNmMGMzMmEtNGMxOC0z OTI0LWIzY2MtMDEzYTU0Y2QxODEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWI0MzRhYTYtYjY4Zi00MWU3LThk NGItOWM4MzEyNTVmMTFjLzliNDM0YWE2LWI2OGYtNDFlNy04ZDRiLTljODMxMjU1 ZjExYy5jcmwwHwYDVR0jBBgwFoAUxEt0dIPMmHr/sBSEs9h6dG0fLGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85YjQzNGFhNi1iNjhmLTQxZTctOGQ0Yi05Yzgz MTI1NWYxMWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbK7/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHe4l0cwad3uh+ICMZXSo/30CB5mxjT6k/1Rf14Z5wyVtNzv2HpiOLcn Bf223UClhRAL+ctPd7Rzog3GNmUPd9JflWkjCDIRUIJwnz3zqdUNAYZfVYICc12n 647c8sQ/K2S6bV55o4u4Sjnp60qmQdUSjTXuH4ds7s9idUB5tT1klHyPKVkysU3s EPDNr7ilu1uvHC8R22W8uxCpHR85XG8QldeLkBwBdm4tduEJpY8yrtPYYS6LSWKm Vzk01aYM4nwobtVXKQB7paQl4jbO3h+Dx5VW+HY8yZqwcz/HTJvmZjP8aFP8eWzh rx764/Kc5DIavG0TqTzwod6QtUNF/aE= -----END CERTIFICATE-----Generated at Mon Jun 16 04:40:55 2025 by rpki-client