$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/aed93bfa-9682-377b-b2b6-d73c1d09f1c8.roa File: aed93bfa-9682-377b-b2b6-d73c1d09f1c8.roa (raw, json) Hash identifier: A855o3A+RhAgTwU3vL2HU+I+uOI3HhX49YfBilaXSkQ= Subject key identifier: DD:9E:1D:24:CD:83:FD:10:02:62:03:7E:CC:1A:6B:3A:45:AD:28:17 Certificate issuer: /CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Certificate serial: 010D0C9F432858499829C64ED27256B110CB5500 Authority key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/aed93bfa-9682-377b-b2b6-d73c1d09f1c8.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 21581 IP address blocks: 108.161.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:c6:4e:d2:72:56:b1:10:cb:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=3f67bcc3-ec18-4277-9f59-53c86307a1ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1c:53:cd:a2:8f:02:d9:ac:c9:57:d7:ef:37: ea:11:7d:14:ad:db:da:62:f2:82:cf:d7:31:25:4e: 53:c6:07:7f:76:45:8a:e1:40:e9:82:6e:95:54:8e: 4c:f0:c1:62:6d:fc:1c:28:fc:e0:36:b2:3b:4d:b0: 85:13:36:c2:ef:e8:12:3d:84:e6:57:f8:8e:41:e3: ae:bc:5b:73:28:67:69:9c:1e:0e:0d:6b:90:85:6b: 31:44:70:32:de:ea:ac:93:bb:cf:bc:85:7c:46:ce: 0b:c8:22:16:ac:20:3c:f5:55:c1:bf:05:09:3a:39: 43:e6:83:ac:79:10:b8:09:30:b0:94:c7:8d:ae:f9: 68:0e:32:a9:7f:8e:d7:13:54:5f:83:9f:ec:a9:1b: b0:1e:79:83:fd:62:b6:55:9c:05:d7:ac:73:fd:d4: 07:2e:bc:69:17:8d:74:ee:ac:ae:6c:0e:5a:64:21: 80:92:74:f9:53:3f:c1:4f:7d:8c:25:cf:e7:ca:83: 44:68:fc:da:d0:0a:0e:21:6b:04:f4:fc:a4:32:e6: ff:f5:c9:5f:58:d9:34:38:f2:cb:20:47:77:07:81: 81:57:6f:af:8f:77:dc:8f:76:d9:1a:8a:a9:73:e2: ea:de:84:3e:fe:80:e7:6f:4a:fa:f0:aa:c1:7d:62: f2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9E:1D:24:CD:83:FD:10:02:62:03:7E:CC:1A:6B:3A:45:AD:28:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/aed93bfa-9682-377b-b2b6-d73c1d09f1c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl X509v3 Authority Key Identifier: keyid:AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer sbgp-ipAddrBlock: critical IPv4: 108.161.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:ad:d4:be:43:79:07:c1:b4:db:2e:80:ad:9f:d2:62:58:45: 02:10:18:29:f1:e9:0d:61:40:b5:d9:e4:2d:fa:70:89:45:ab: 6c:7b:b4:3a:76:45:1d:a7:f7:19:af:82:e0:ac:4a:c1:71:69: e8:28:dd:89:7a:8b:a7:53:48:f7:49:14:b4:d1:f9:e9:75:3d: d5:7a:ad:18:db:63:47:f4:03:57:80:4b:aa:8a:66:5c:f4:27: 4f:37:ad:61:85:4e:f1:36:30:24:ce:73:f5:aa:85:c6:77:88: 89:06:33:41:5a:25:fd:1a:dc:e7:0f:84:7b:77:3c:32:5f:66: 3a:e1:99:7b:e4:82:0b:c9:9f:1f:b6:a4:51:46:48:26:16:ee: 26:00:e8:3a:42:34:57:27:f8:9e:1f:da:5e:36:1e:0d:a3:ca: 04:81:78:65:42:a4:6d:0c:bd:17:93:84:87:e0:da:5c:86:68: e9:37:8d:53:79:df:5a:7d:e8:6d:2d:56:6a:e9:b4:b7:de:c2: 6f:13:b7:4f:d9:de:2a:a0:c2:24:e5:f0:c2:b9:fc:63:64:8f: 16:9e:3d:ee:4e:0e:8d:73:4f:e6:c6:85:09:d9:4c:21:50:27: 84:81:8e:c4:03:8d:1d:2c:a7:be:88:d1:62:17:27:97:db:96: df:b1:54:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKcZO0nJWsRDLVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY5ZTYwYTYtNTFjNC00YTNlLTgyMWEtMmQ3ZDQzOGJh ZDRjMB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk M2Y2N2JjYzMtZWMxOC00Mjc3LTlmNTktNTNjODYzMDdhMWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhxTzaKPAtmsyVfX7zfqEX0UrdvaYvKCz9cx JU5Txgd/dkWK4UDpgm6VVI5M8MFibfwcKPzgNrI7TbCFEzbC7+gSPYTmV/iOQeOu vFtzKGdpnB4ODWuQhWsxRHAy3uqsk7vPvIV8Rs4LyCIWrCA89VXBvwUJOjlD5oOs eRC4CTCwlMeNrvloDjKpf47XE1Rfg5/sqRuwHnmD/WK2VZwF16xz/dQHLrxpF410 7qyubA5aZCGAknT5Uz/BT32MJc/nyoNEaPza0AoOIWsE9PykMub/9clfWNk0OPLL IEd3B4GBV2+vj3fcj3bZGoqpc+Lq3oQ+/oDnb0r68KrBfWLybQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2eHSTNg/0QAmIDfswaazpFrSgXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNjll NjBhNi01MWM0LTRhM2UtODIxYS0yZDdkNDM4YmFkNGMvYWVkOTNiZmEtOTY4Mi0z NzdiLWIyYjYtZDczYzFkMDlmMWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjY5ZTYwYTYtNTFjNC00YTNlLTgy MWEtMmQ3ZDQzOGJhZDRjL2Y2OWU2MGE2LTUxYzQtNGEzZS04MjFhLTJkN2Q0Mzhi YWQ0Yy5jcmwwHwYDVR0jBBgwFoAUreo9MXSqvMcug0IvZpaHEFYYkwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNjllNjBhNi01MWM0LTRhM2UtODIxYS0yZDdk NDM4YmFkNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbKGcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOt1L5DeQfBtNsugK2f0mJYRQIQGCnx6Q1hQLXZ5C36cIlFq2x7tDp2 RR2n9xmvguCsSsFxaego3Yl6i6dTSPdJFLTR+el1PdV6rRjbY0f0A1eAS6qKZlz0 J083rWGFTvE2MCTOc/WqhcZ3iIkGM0FaJf0a3OcPhHt3PDJfZjrhmXvkggvJnx+2 pFFGSCYW7iYA6DpCNFcn+J4f2l42Hg2jygSBeGVCpG0MvReThIfg2lyGaOk3jVN5 31p96G0tVmrptLfewm8Tt0/Z3iqgwiTl8MK5/GNkjxaePe5ODo1zT+bGhQnZTCFQ J4SBjsQDjR0sp76I0WIXJ5fblt+xVCU= -----END CERTIFICATE-----Generated at Mon Jun 16 03:23:50 2025 by rpki-client