$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/43f0c32a-4c18-3924-b3cc-013a54cd1812.roa File: 43f0c32a-4c18-3924-b3cc-013a54cd1812.roa (raw, json) Hash identifier: vy7ZcZRG3kTQ+QJpWCyVyuG/xF8l13LyW5/bukTGSCI= Subject key identifier: 1F:72:FE:01:56:6F:21:FD:C5:A0:F7:5C:C3:13:35:CD:5E:A3:BF:F5 Certificate issuer: /CN=9b434aa6-b68f-41e7-8d4b-9c831255f11c Certificate serial: 010D0C9F432858494EFA291095E3BCB46951D700 Authority key identifier: C4:4B:74:74:83:CC:98:7A:FF:B0:14:84:B3:D8:7A:74:6D:1F:2C:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/43f0c32a-4c18-3924-b3cc-013a54cd1812.roa Signing time: Tue 25 Mar 2025 19:50:55 +0000 ROA not before: Tue 25 Mar 2025 19:50:55 +0000 ROA not after: Mon 23 Jun 2025 19:50:55 +0000 asID: 396982 IP address blocks: 108.174.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/9b434aa6-b68f-41e7-8d4b-9c831255f11c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/9b434aa6-b68f-41e7-8d4b-9c831255f11c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:fa:29:10:95:e3:bc:b4:69:51:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b434aa6-b68f-41e7-8d4b-9c831255f11c Validity Not Before: Mar 25 19:50:55 2025 GMT Not After : Jun 23 19:50:55 2025 GMT Subject: CN=daf08591-1f57-44c6-823a-00bdb6c01f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c0:80:15:ae:1f:56:f6:df:85:de:41:b6:37: 50:dc:69:70:f8:f9:81:32:a5:be:33:5d:a0:b4:c6: 99:92:f5:40:9e:f1:ba:93:c4:2f:45:61:b7:28:db: c7:b1:d9:32:47:99:94:87:2e:70:49:47:c1:33:27: 87:13:2c:2e:d1:a6:30:e7:ac:57:8b:08:b9:c1:c2: 5c:a3:8a:70:30:54:e3:6a:80:45:7b:35:dc:07:72: da:31:3e:36:87:8c:0a:48:ec:bd:7a:c4:a6:c2:8c: f0:de:86:80:fb:c1:1b:b1:66:5d:d3:1d:f6:e3:11: 71:6a:8b:16:c4:52:91:9c:ab:d5:0d:58:9d:a6:cc: db:ab:fb:4e:1c:2d:ea:9f:26:56:86:a2:10:ae:75: 2a:03:64:1f:7a:1f:3a:1f:6d:64:6a:2a:be:c9:42: 5a:1c:78:44:1f:e2:83:88:fe:13:40:59:8b:b6:9a: 66:0b:1d:f8:47:91:c7:1a:54:89:8f:ec:88:5c:bc: 85:f9:73:0e:5c:4e:53:f9:56:e1:22:8b:55:30:74: 7c:20:21:b7:98:2b:47:a4:d3:93:4c:49:24:f8:10: 45:6e:a7:03:b2:41:56:c1:c8:f0:65:6a:91:c0:2f: d0:08:60:a8:e4:fe:f1:07:49:52:a8:0c:be:03:aa: e8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:72:FE:01:56:6F:21:FD:C5:A0:F7:5C:C3:13:35:CD:5E:A3:BF:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/43f0c32a-4c18-3924-b3cc-013a54cd1812.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/9b434aa6-b68f-41e7-8d4b-9c831255f11c.crl X509v3 Authority Key Identifier: keyid:C4:4B:74:74:83:CC:98:7A:FF:B0:14:84:B3:D8:7A:74:6D:1F:2C:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c.cer sbgp-ipAddrBlock: critical IPv4: 108.174.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:8f:d8:35:a7:88:3f:ed:ed:82:29:e9:63:b4:a1:b2:14:5e: bd:78:5b:47:7f:cd:13:6d:68:81:59:eb:14:d1:19:fe:0c:9a: 33:ca:ff:27:68:74:fb:77:a7:3b:4a:8d:1f:2b:a9:c2:88:73: a6:c3:58:01:e7:bc:f0:bd:c4:d8:f7:21:f3:d0:ad:59:6a:34: c2:af:6e:41:a1:4f:08:34:9e:e4:c4:f2:f1:fc:08:8d:90:6a: 56:d5:b6:c6:93:bf:fa:d3:4b:a3:c8:42:79:25:dd:ff:43:44: a8:7b:40:c6:1e:31:3d:21:38:6c:07:7b:ac:86:c2:f4:5e:b5: 2b:a9:15:31:db:57:10:1d:78:5d:d9:d1:78:12:a7:9a:74:6d: ef:e2:7e:10:53:ab:70:f8:c0:10:40:58:2e:2a:9d:13:4e:55: 7e:e9:6b:42:e1:59:d0:d1:5b:98:a9:27:7f:48:fb:f7:53:db: 64:21:92:44:43:e3:33:da:94:84:36:b9:54:39:7e:3f:e3:6f: 73:da:b6:5e:de:82:7e:52:de:78:fd:50:48:a4:96:42:d8:83: 19:94:d6:50:7f:dd:42:27:d3:43:b2:bb:0f:92:a0:eb:cc:a7: 70:83:3f:43:e0:c9:0f:0b:c8:3a:b5:ab:f4:4e:66:ab:07:93: ed:61:6c:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElO+ikQleO8tGlR1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWI0MzRhYTYtYjY4Zi00MWU3LThkNGItOWM4MzEyNTVm MTFjMB4XDTI1MDMyNTE5NTA1NVoXDTI1MDYyMzE5NTA1NVowLzEtMCsGA1UEAxMk ZGFmMDg1OTEtMWY1Ny00NGM2LTgyM2EtMDBiZGI2YzAxZjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38CAFa4fVvbfhd5BtjdQ3Glw+PmBMqW+M12g tMaZkvVAnvG6k8QvRWG3KNvHsdkyR5mUhy5wSUfBMyeHEywu0aYw56xXiwi5wcJc o4pwMFTjaoBFezXcB3LaMT42h4wKSOy9esSmwozw3oaA+8EbsWZd0x324xFxaosW xFKRnKvVDVidpszbq/tOHC3qnyZWhqIQrnUqA2Qfeh86H21kaiq+yUJaHHhEH+KD iP4TQFmLtppmCx34R5HHGlSJj+yIXLyF+XMOXE5T+VbhIotVMHR8ICG3mCtHpNOT TEkk+BBFbqcDskFWwcjwZWqRwC/QCGCo5P7xB0lSqAy+A6roWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9y/gFWbyH9xaD3XMMTNc1eo7/1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85YjQz NGFhNi1iNjhmLTQxZTctOGQ0Yi05YzgzMTI1NWYxMWMvNDNmMGMzMmEtNGMxOC0z OTI0LWIzY2MtMDEzYTU0Y2QxODEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWI0MzRhYTYtYjY4Zi00MWU3LThk NGItOWM4MzEyNTVmMTFjLzliNDM0YWE2LWI2OGYtNDFlNy04ZDRiLTljODMxMjU1 ZjExYy5jcmwwHwYDVR0jBBgwFoAUxEt0dIPMmHr/sBSEs9h6dG0fLGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85YjQzNGFhNi1iNjhmLTQxZTctOGQ0Yi05Yzgz MTI1NWYxMWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbK7/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6P2DWniD/t7YIp6WO0obIUXr14W0d/zRNtaIFZ6xTRGf4MmjPK/ydo dPt3pztKjR8rqcKIc6bDWAHnvPC9xNj3IfPQrVlqNMKvbkGhTwg0nuTE8vH8CI2Q albVtsaTv/rTS6PIQnkl3f9DRKh7QMYeMT0hOGwHe6yGwvRetSupFTHbVxAdeF3Z 0XgSp5p0be/ifhBTq3D4wBBAWC4qnRNOVX7pa0LhWdDRW5ipJ39I+/dT22QhkkRD 4zPalIQ2uVQ5fj/jb3Patl7egn5S3nj9UEiklkLYgxmU1lB/3UIn00Oyuw+SoOvM p3CDP0PgyQ8LyDq1q/ROZqsHk+1hbMM= -----END CERTIFICATE-----Generated at Sat Apr 26 18:31:57 2025 by rpki-client