$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48e52871-1ad8-3c20-84eb-f90a383a24be.roa File: 48e52871-1ad8-3c20-84eb-f90a383a24be.roa (raw, json) Hash identifier: W9NyJqGroOCpVTh7eavhSJq9XCMxixThclO4JJAS2U8= Subject key identifier: D8:EB:A7:84:AC:60:1D:52:7D:53:5B:9D:93:7A:87:42:C1:13:B3:AC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858499F24ABD00D11A16B070B3940 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48e52871-1ad8-3c20-84eb-f90a383a24be.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 108.177.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:ab:d0:0d:11:a1:6b:07:0b:39:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=dbf9bdc7-c3db-4e85-b50a-58755d6ef2bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:aa:2c:4b:08:c7:c9:0a:8e:0e:6d:0a:c8:fb: d6:8e:a1:93:42:95:56:53:d8:eb:db:00:c6:4e:1d: e9:9d:94:49:50:2d:6f:c1:8d:a3:f2:b5:bd:aa:cd: ac:1b:50:81:2a:61:2c:95:f9:58:19:cf:ef:61:2b: 0b:96:f0:5f:2d:18:9c:d2:fc:c1:67:3b:7d:be:8d: 71:0d:a2:1c:3f:8d:c1:73:22:f4:5a:8f:5c:01:6a: c8:e1:68:8a:b8:87:fa:a0:55:76:52:5f:d9:a9:c3: ea:ff:63:33:c5:00:66:fb:47:04:69:45:85:90:68: 72:b1:70:0a:19:72:bc:64:67:a1:a0:ba:e3:0a:db: 4a:97:39:7a:00:05:b1:7e:ae:6d:79:50:d1:cf:91: 4c:cb:fc:3d:cd:8f:3d:22:6a:3d:7a:39:a3:e5:76: 69:96:6b:9b:1e:21:77:6f:86:d5:e6:95:3f:b4:41: 1d:91:d5:fc:06:23:c3:6d:a5:2e:8c:ec:6f:62:44: 99:20:52:04:7d:93:7d:14:e6:85:0f:57:c6:be:ba: ea:7e:22:6a:c8:80:e6:52:da:3d:0d:ff:b3:2b:4a: 28:ea:dc:a2:68:71:fc:c1:4c:70:45:01:d3:86:e2: 85:14:73:7c:29:6e:db:d1:c1:0c:92:f2:a9:b2:39: df:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:EB:A7:84:AC:60:1D:52:7D:53:5B:9D:93:7A:87:42:C1:13:B3:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48e52871-1ad8-3c20-84eb-f90a383a24be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:0e:dc:4e:1d:86:a0:e7:65:51:fe:cc:1a:f9:9e:e3:8a:e6: fb:8f:36:6f:a8:63:f5:f7:3e:48:2d:e9:aa:f1:7c:0e:63:3b: d7:92:a8:75:91:b0:cc:90:9c:75:28:35:06:f4:b8:01:54:31: f4:07:1e:e0:1f:97:6d:b0:4f:54:11:08:fe:7a:25:48:2f:bb: 22:97:1c:bc:fd:95:0d:5e:f6:6b:9a:a4:fa:ce:39:e7:47:99: 33:b5:82:c5:04:74:a9:1c:dd:dd:fe:57:3d:7f:c5:b7:44:3b: bd:a9:c3:06:7a:a5:19:84:b4:12:43:5a:3c:fd:38:bd:42:11: 48:7c:30:7d:50:30:46:61:69:58:42:0e:35:a8:4e:c6:82:b8: a5:5d:aa:52:08:f8:a7:b6:1f:9b:04:9d:09:23:9c:1e:30:b6: 14:8d:77:83:a7:24:72:78:d4:3b:49:94:9e:dd:86:fc:04:12: ae:ba:a6:33:c3:d2:c7:a0:3e:e6:59:4a:08:66:a6:43:fe:e7: 1b:69:05:1e:96:05:51:b5:00:67:91:30:78:ab:83:9d:7f:a2: a1:32:92:4d:7e:12:0b:14:14:14:ea:72:98:d4:1f:0a:98:1b: c8:9a:21:8d:71:c7:85:fe:0a:1e:64:9c:b6:3f:f2:47:91:04: 0c:45:48:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKvQDRGhawcLOUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ZGJmOWJkYzctYzNkYi00ZTg1LWI1MGEtNTg3NTVkNmVmMmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6osSwjHyQqODm0KyPvWjqGTQpVWU9jr2wDG Th3pnZRJUC1vwY2j8rW9qs2sG1CBKmEslflYGc/vYSsLlvBfLRic0vzBZzt9vo1x DaIcP43BcyL0Wo9cAWrI4WiKuIf6oFV2Ul/ZqcPq/2MzxQBm+0cEaUWFkGhysXAK GXK8ZGehoLrjCttKlzl6AAWxfq5teVDRz5FMy/w9zY89Imo9ejmj5XZplmubHiF3 b4bV5pU/tEEdkdX8BiPDbaUujOxvYkSZIFIEfZN9FOaFD1fGvrrqfiJqyIDmUto9 Df+zK0oo6tyiaHH8wUxwRQHThuKFFHN8KW7b0cEMkvKpsjnfOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjrp4SsYB1SfVNbnZN6h0LBE7OsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDhlNTI4NzEtMWFkOC0z YzIwLTg0ZWItZjkwYTM4M2EyNGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLFiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsO3E4dhqDnZVH+zBr5nuOK5vuPNm+oY/X3Pkgt6arxfA5jO9eSqHWR sMyQnHUoNQb0uAFUMfQHHuAfl22wT1QRCP56JUgvuyKXHLz9lQ1e9muapPrOOedH mTO1gsUEdKkc3d3+Vz1/xbdEO72pwwZ6pRmEtBJDWjz9OL1CEUh8MH1QMEZhaVhC DjWoTsaCuKVdqlII+Ke2H5sEnQkjnB4wthSNd4OnJHJ41DtJlJ7dhvwEEq66pjPD 0segPuZZSghmpkP+5xtpBR6WBVG1AGeRMHirg51/oqEykk1+EgsUFBTqcpjUHwqY G8iaIY1xx4X+Ch5knLY/8keRBAxFSGI= -----END CERTIFICATE-----Generated at Sat Apr 26 20:49:45 2025 by rpki-client