$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0aecbdeb-e27a-37bf-9e7a-7f5d4b922298.roa File: 0aecbdeb-e27a-37bf-9e7a-7f5d4b922298.roa (raw, json) Hash identifier: RHZ8YgrHWQPL2AZlHmzd9CTXXb5FmBw15DSNtKJow2o= Subject key identifier: 94:D5:D0:DB:14:17:88:B2:96:06:3F:7D:C7:30:11:C8:13:B6:22:94 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849631ECB5D0921B9476C5F2B00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0aecbdeb-e27a-37bf-9e7a-7f5d4b922298.roa Signing time: Wed 02 Apr 2025 01:00:46 +0000 ROA not before: Wed 02 Apr 2025 01:00:46 +0000 ROA not after: Tue 01 Jul 2025 01:00:46 +0000 asID: 15169 IP address blocks: 108.177.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:63:1e:cb:5d:09:21:b9:47:6c:5f:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 2 01:00:46 2025 GMT Not After : Jul 1 01:00:46 2025 GMT Subject: CN=bc879077-a7a6-4364-801e-f27f1c8732c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fb:74:26:4a:30:11:f3:dd:31:c7:10:d6:25: d4:5e:f7:8c:f1:8a:7c:67:0f:87:69:94:ff:95:3f: 23:ae:3a:05:5a:9d:ec:d2:f0:91:b5:f7:58:b5:ed: 4d:df:20:5f:8a:bd:74:05:79:3b:0d:80:43:56:dc: 3c:b2:db:a7:81:3b:42:3f:50:e1:2e:1a:49:5f:35: e6:6f:8a:3f:44:89:f8:8d:e3:f8:f4:fa:b9:ef:ea: f7:f6:9f:28:a8:b9:a8:0b:21:62:3d:59:28:c6:f8: ae:49:2a:ed:0f:cb:73:a0:94:a2:b0:0d:bf:50:cc: 83:a3:08:cd:8a:72:ab:1c:d7:45:5d:88:29:2e:8c: 14:19:aa:cc:ed:62:54:93:7c:11:b5:87:fc:6e:df: 80:70:68:81:69:79:ca:36:ed:47:6f:32:c7:54:91: 91:2c:c3:b8:41:56:47:7b:38:c8:5f:df:2c:90:c6: cd:b3:ad:4a:80:81:de:f4:a1:88:f0:d2:17:68:95: a4:14:53:1b:3c:8a:79:63:fc:1c:38:47:29:47:0b: 60:35:fe:01:60:69:c3:04:38:41:d2:f6:cd:52:2c: 59:3a:1a:b9:c7:4f:b2:2a:96:cf:23:17:77:c9:c0: a5:35:10:22:86:b5:62:aa:59:7e:e0:d9:91:79:c1: ed:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D5:D0:DB:14:17:88:B2:96:06:3F:7D:C7:30:11:C8:13:B6:22:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0aecbdeb-e27a-37bf-9e7a-7f5d4b922298.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:a2:4f:f0:47:1d:54:86:ca:c0:8e:24:a1:37:02:c7:98:d8: 65:6a:ed:02:f9:ac:cb:f9:2f:e9:05:fc:d6:88:27:83:6b:36: 5a:44:ed:cf:d0:5a:87:51:bb:a1:36:01:5e:7d:46:67:44:4b: 2f:fc:e2:70:74:4c:2e:60:02:58:8e:ab:bb:d5:7a:01:16:2d: e2:c1:39:f0:01:bc:5b:f8:58:52:84:c8:3f:cd:17:ce:25:e2: fa:ca:66:c1:7b:c0:d0:36:df:f9:51:26:7f:ae:b3:ca:45:b4: 3e:5d:39:08:56:20:09:70:c2:09:05:0a:08:88:a8:47:eb:02: d0:b1:23:e6:c6:34:63:0b:77:15:9e:8b:50:e5:27:63:c0:7e: 6f:57:18:54:00:af:89:05:1c:cd:96:f4:45:80:21:e5:50:b0: f2:f2:47:b3:82:c6:73:b2:c7:c4:ea:bd:ef:99:c0:e9:ad:7b: 47:8d:b4:3d:17:b5:57:73:93:3a:f5:bf:c6:b0:4a:5a:a0:6a: 2d:75:1c:54:00:a9:d9:c0:e0:d4:00:0d:86:6c:be:51:ad:36: e3:6a:85:e9:80:65:35:c3:8c:8f:cd:db:35:d7:14:9b:a7:8c: bc:97:bf:12:1e:bd:96:f5:a2:72:9c:9d:7d:b5:e3:27:ac:7f: 9b:be:b9:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHstdCSG5R2xfKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk YmM4NzkwNzctYTdhNi00MzY0LTgwMWUtZjI3ZjFjODczMmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivt0JkowEfPdMccQ1iXUXveM8Yp8Zw+HaZT/ lT8jrjoFWp3s0vCRtfdYte1N3yBfir10BXk7DYBDVtw8stungTtCP1DhLhpJXzXm b4o/RIn4jeP49Pq57+r39p8oqLmoCyFiPVkoxviuSSrtD8tzoJSisA2/UMyDowjN inKrHNdFXYgpLowUGarM7WJUk3wRtYf8bt+AcGiBaXnKNu1HbzLHVJGRLMO4QVZH ezjIX98skMbNs61KgIHe9KGI8NIXaJWkFFMbPIp5Y/wcOEcpRwtgNf4BYGnDBDhB 0vbNUixZOhq5x0+yKpbPIxd3ycClNRAihrViqll+4NmRecHtUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJTV0NsUF4iylgY/fccwEcgTtiKUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGFlY2JkZWItZTI3YS0z N2JmLTllN2EtN2Y1ZDRiOTIyMjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLFqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSiT/BHHVSGysCOJKE3AseY2GVq7QL5rMv5L+kF/NaIJ4NrNlpE7c/Q WodRu6E2AV59RmdESy/84nB0TC5gAliOq7vVegEWLeLBOfABvFv4WFKEyD/NF84l 4vrKZsF7wNA23/lRJn+us8pFtD5dOQhWIAlwwgkFCgiIqEfrAtCxI+bGNGMLdxWe i1DlJ2PAfm9XGFQAr4kFHM2W9EWAIeVQsPLyR7OCxnOyx8Tqve+ZwOmte0eNtD0X tVdzkzr1v8awSlqgai11HFQAqdnA4NQADYZsvlGtNuNqhemAZTXDjI/N2zXXFJun jLyXvxIevZb1onKcnX214yesf5u+ubw= -----END CERTIFICATE-----Generated at Sun Apr 27 01:35:05 2025 by rpki-client