$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3d9dce88-7e22-329a-b1ce-ca85c3b7aabc.roa File: 3d9dce88-7e22-329a-b1ce-ca85c3b7aabc.roa (raw, json) Hash identifier: qKBHVhoilCKAtBZVaJRng0h2e2SZ20zwKQ07i2ptYe8= Subject key identifier: 89:91:42:D3:ED:99:D3:F8:A8:D3:C7:4E:A6:48:9E:52:9B:44:B2:F2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858499F24D180E8F071DC792AE740 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3d9dce88-7e22-329a-b1ce-ca85c3b7aabc.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 108.177.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:d1:80:e8:f0:71:dc:79:2a:e7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=e7adb0f3-7c9b-4ab5-8585-5d669b97b2ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:73:55:29:13:e8:ca:37:83:0b:97:ca:81:07: c1:b0:e5:2b:6c:09:85:a2:c0:34:ad:93:1d:67:2f: 6d:87:bd:14:95:73:3f:35:e5:5a:19:47:c6:5c:dd: b8:51:88:21:33:0c:08:4c:7a:0d:a5:b4:93:b4:23: 3d:4d:0b:6c:1a:4d:16:77:0c:d0:5e:34:03:43:47: 0b:32:37:78:60:99:b6:4e:5c:87:25:8a:ba:36:29: 7b:5b:22:82:a8:1b:27:d4:f4:c5:bf:1a:0f:89:be: f6:9c:04:0d:b4:92:eb:bc:32:aa:81:43:54:7f:61: 2b:8f:a8:98:17:e8:2b:3d:92:35:2a:64:2f:71:f9: ce:f4:bd:da:e6:73:a5:e3:48:72:15:57:01:8c:4f: 62:ef:58:d8:a1:40:95:7c:cf:34:4d:c2:a1:7b:ef: 51:b0:fc:be:c3:56:e5:77:32:05:cc:28:b4:b4:06: 4e:88:a2:51:0f:58:36:4c:38:25:28:56:01:d8:42: de:23:43:97:e6:fd:cd:a7:14:26:64:8e:da:8a:33: 34:53:cd:68:fa:f0:84:e2:fb:3a:bf:19:d2:1c:29: f3:16:d2:a9:bb:db:00:70:51:da:2d:84:93:38:f7: 04:37:82:c9:63:20:ba:ed:0e:49:17:5f:39:b2:a8: 9d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:91:42:D3:ED:99:D3:F8:A8:D3:C7:4E:A6:48:9E:52:9B:44:B2:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3d9dce88-7e22-329a-b1ce-ca85c3b7aabc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:6f:61:80:ab:81:ba:e9:77:83:e7:06:d3:6f:52:87:71:55: db:7c:e4:6d:77:9d:71:0e:a5:ae:82:08:1d:3b:c5:0c:b3:ce: b2:9d:18:34:48:ea:a0:46:38:b2:d4:fb:90:56:ec:97:bb:f6: 37:c4:7c:51:87:99:6f:94:84:34:7d:29:d8:bb:5f:6c:b9:69: 26:2f:f3:4c:58:96:ff:ac:b4:06:d2:2e:86:69:7b:b3:15:21: ad:a6:07:c4:0a:77:9c:49:67:42:51:fc:3b:23:f4:b1:d7:76: 33:9c:4e:4a:83:7f:b7:8e:b1:fa:0b:e7:80:3a:d9:54:5d:d8: a8:7c:fe:ed:bb:d8:df:ed:b3:c0:ea:85:d8:40:c8:ff:b4:9f: 92:38:f6:69:f9:6f:7f:73:31:cd:a3:0f:c8:2a:54:eb:bd:c4: 51:b6:56:d1:06:b3:c7:12:62:cf:1b:a4:34:6d:34:1f:f4:c7: 35:4d:2e:74:a5:15:cd:a1:9b:ea:14:47:d7:f0:21:07:08:09: 5e:2b:d0:3e:de:3d:9b:ee:bc:44:28:1e:77:21:69:84:05:63: d2:85:85:82:7c:2b:0d:5d:ac:65:e2:50:f0:e3:0b:3d:6e:2f: 76:6e:14:51:e5:02:98:f9:ab:52:ac:65:7d:f3:86:86:17:86: 68:c8:e5:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNGA6PBx3Hkq50AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ZTdhZGIwZjMtN2M5Yi00YWI1LTg1ODUtNWQ2NjliOTdiMmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXNVKRPoyjeDC5fKgQfBsOUrbAmFosA0rZMd Zy9th70UlXM/NeVaGUfGXN24UYghMwwITHoNpbSTtCM9TQtsGk0WdwzQXjQDQ0cL Mjd4YJm2TlyHJYq6Nil7WyKCqBsn1PTFvxoPib72nAQNtJLrvDKqgUNUf2Erj6iY F+grPZI1KmQvcfnO9L3a5nOl40hyFVcBjE9i71jYoUCVfM80TcKhe+9RsPy+w1bl dzIFzCi0tAZOiKJRD1g2TDglKFYB2ELeI0OX5v3NpxQmZI7aijM0U81o+vCE4vs6 vxnSHCnzFtKpu9sAcFHaLYSTOPcEN4LJYyC67Q5JF185sqidRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImRQtPtmdP4qNPHTqZInlKbRLLyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2Q5ZGNlODgtN2UyMi0z MjlhLWIxY2UtY2E4NWMzYjdhYWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLEPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALFvYYCrgbrpd4PnBtNvUodxVdt85G13nXEOpa6CCB07xQyzzrKdGDRI 6qBGOLLU+5BW7Je79jfEfFGHmW+UhDR9Kdi7X2y5aSYv80xYlv+stAbSLoZpe7MV Ia2mB8QKd5xJZ0JR/Dsj9LHXdjOcTkqDf7eOsfoL54A62VRd2Kh8/u272N/ts8Dq hdhAyP+0n5I49mn5b39zMc2jD8gqVOu9xFG2VtEGs8cSYs8bpDRtNB/0xzVNLnSl Fc2hm+oUR9fwIQcICV4r0D7ePZvuvEQoHnchaYQFY9KFhYJ8Kw1drGXiUPDjCz1u L3ZuFFHlApj5q1KsZX3zhoYXhmjI5WE= -----END CERTIFICATE-----Generated at Sun Apr 27 00:50:57 2025 by rpki-client