$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2671e19e-be91-3e20-b41a-4a59d6d80866.roa File: 2671e19e-be91-3e20-b41a-4a59d6d80866.roa (raw, json) Hash identifier: qrzH4BFYtXPUXmwxNDdykUsNNIZgPU2pgYQkFGpXmU8= Subject key identifier: C4:4A:30:06:23:35:08:CF:E1:66:73:12:70:BD:5E:31:AE:13:07:EC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BDDA31224E4169500D4B4CC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2671e19e-be91-3e20-b41a-4a59d6d80866.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 15169 IP address blocks: 108.177.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:31:22:4e:41:69:50:0d:4b:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=a7991cdd-ce45-49a9-a26b-6c7d951d3158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d3:42:ab:76:8a:66:09:c1:8a:06:d6:af:f0: e5:91:ae:a0:79:b5:54:d5:81:5e:5a:2a:79:0e:32: 66:bd:ab:a8:97:a9:77:53:d3:cc:16:2e:c6:3b:9f: 99:8f:88:ef:cc:8e:05:51:c1:9d:8f:67:31:d6:29: 7f:ed:b6:03:a2:46:79:d3:5e:5d:a2:92:90:a0:71: a6:8a:39:00:54:30:00:b1:4b:90:50:f5:33:7d:30: 09:3e:1c:ea:e2:a8:b9:66:a6:da:9f:3b:e3:83:8c: 98:4a:12:14:66:a1:a1:d7:56:67:5e:84:77:0b:31: 6a:3e:5e:9e:10:9b:fe:53:af:09:00:1b:7f:57:fe: 98:62:e8:d2:92:3d:b1:3a:c1:e2:38:31:3c:05:78: 47:0a:91:5d:86:23:cf:6d:8d:39:f5:7b:64:0d:ad: b1:a0:4a:9d:86:78:5d:94:3b:01:21:73:ce:8a:d3: 73:1a:1a:52:b7:ba:4f:d5:64:66:72:f7:fa:b7:7a: 40:e0:c6:02:19:74:a7:8d:40:fd:b0:58:9c:c8:13: 2e:1c:34:b3:df:f9:8c:c2:2e:42:19:77:dd:41:4f: 29:48:07:f8:3d:5e:16:29:e8:b6:39:73:47:6b:96: 39:ac:be:e0:e3:93:2f:09:7b:c1:95:ed:9b:28:ba: f2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:4A:30:06:23:35:08:CF:E1:66:73:12:70:BD:5E:31:AE:13:07:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2671e19e-be91-3e20-b41a-4a59d6d80866.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:cc:16:c1:ad:32:54:54:a0:9d:49:5a:16:a3:7c:21:35:fe: 9c:d9:00:bc:2a:94:d1:f3:35:8c:92:ff:84:82:25:2b:54:b0: eb:75:ba:05:10:f6:6d:23:77:60:ba:14:39:0b:cb:c6:23:12: dd:72:d0:62:84:ec:64:4f:37:93:f8:6f:0e:5a:e7:91:ed:83: a7:2b:fe:17:73:8f:a1:59:6c:7f:22:5a:55:a8:7e:28:db:f1: ea:6e:8c:84:35:06:54:63:a6:78:82:4b:85:8e:45:4e:97:fa: a8:45:a3:78:e3:9e:0c:02:74:b2:0d:5e:e1:0b:c9:f1:81:bb: 70:0f:f8:8f:dc:7d:90:b6:80:50:05:15:59:17:78:49:2a:61: 57:44:ca:c1:76:e8:64:a8:ed:4f:01:5b:ac:fe:24:b3:ee:93: 46:dc:1b:80:a0:50:89:f9:07:29:8a:9d:63:d7:38:8c:97:91: 64:80:69:50:56:f9:c9:59:14:d9:84:74:6c:4c:d0:07:54:54: 08:0a:c7:61:7c:b5:88:6e:12:85:ef:44:06:6c:b2:25:b9:bb: d0:f9:82:02:0c:79:21:32:b8:63:64:e4:98:10:b6:0e:ba:59: 4a:4a:98:36:6f:57:f2:b4:55:b3:1f:eb:9a:fd:fe:fa:74:93: 9a:09:8b:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jEiTkFpUA1LTMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk YTc5OTFjZGQtY2U0NS00OWE5LWEyNmItNmM3ZDk1MWQzMTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtNCq3aKZgnBigbWr/Dlka6gebVU1YFeWip5 DjJmvauol6l3U9PMFi7GO5+Zj4jvzI4FUcGdj2cx1il/7bYDokZ5015dopKQoHGm ijkAVDAAsUuQUPUzfTAJPhzq4qi5Zqbanzvjg4yYShIUZqGh11ZnXoR3CzFqPl6e EJv+U68JABt/V/6YYujSkj2xOsHiODE8BXhHCpFdhiPPbY059XtkDa2xoEqdhnhd lDsBIXPOitNzGhpSt7pP1WRmcvf6t3pA4MYCGXSnjUD9sFicyBMuHDSz3/mMwi5C GXfdQU8pSAf4PV4WKei2OXNHa5Y5rL7g45MvCXvBle2bKLryeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRKMAYjNQjP4WZzEnC9XjGuEwfsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjY3MWUxOWUtYmU5MS0z ZTIwLWI0MWEtNGE1OWQ2ZDgwODY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLFxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLMFsGtMlRUoJ1JWhajfCE1/pzZALwqlNHzNYyS/4SCJStUsOt1ugUQ 9m0jd2C6FDkLy8YjEt1y0GKE7GRPN5P4bw5a55Htg6cr/hdzj6FZbH8iWlWofijb 8epujIQ1BlRjpniCS4WORU6X+qhFo3jjngwCdLINXuELyfGBu3AP+I/cfZC2gFAF FVkXeEkqYVdEysF26GSo7U8BW6z+JLPuk0bcG4CgUIn5BymKnWPXOIyXkWSAaVBW +clZFNmEdGxM0AdUVAgKx2F8tYhuEoXvRAZssiW5u9D5ggIMeSEyuGNk5JgQtg66 WUpKmDZvV/K0VbMf65r9/vp0k5oJi5w= -----END CERTIFICATE-----Generated at Sun Jun 15 15:07:57 2025 by rpki-client