$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4d5fb234-4b0d-375b-8830-f6a550ba1a38.roa File: 4d5fb234-4b0d-375b-8830-f6a550ba1a38.roa (raw, json) Hash identifier: ogZCaaHtufEOydzYmtOGL0uYJflEYM09ZRcY3N33XyM= Subject key identifier: 75:BD:5B:3A:A6:49:BA:25:34:19:2F:B7:C7:06:04:AD:7D:17:52:66 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858499F24C85B096D4A5AB3B01840 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4d5fb234-4b0d-375b-8830-f6a550ba1a38.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 108.170.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:c8:5b:09:6d:4a:5a:b3:b0:18:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=c12ade20-af77-49d9-87d5-56e341b43dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2c:4d:df:9f:e3:44:69:ab:89:b9:78:2f:25: 38:65:18:64:72:75:8d:76:04:ef:53:35:80:31:b4: 78:a2:6d:fa:99:2d:3b:7b:98:0d:10:72:1a:e4:82: c7:dc:79:ca:5f:8c:b1:e1:43:d7:ea:d7:4a:66:c5: b2:c1:13:a6:ca:25:ce:bb:d0:96:c3:ac:bc:88:0c: 7d:8f:0b:f3:70:fd:f6:9d:aa:3b:2b:4a:19:72:09: b7:ba:25:52:0b:5a:e8:15:5d:64:b7:45:db:76:e1: 21:6e:21:68:83:f1:6c:e2:eb:29:58:b8:01:09:00: 26:8e:aa:b5:dd:3f:1a:e9:b2:d5:5a:7a:89:e5:25: b0:91:89:74:5a:bb:eb:3a:22:65:35:6c:fc:33:6f: 02:2f:ee:40:0e:44:46:5b:7e:8c:08:55:31:aa:d0: 37:2d:ef:b7:45:b1:c0:d4:b4:8f:ab:b2:d9:29:ec: 28:e9:3b:9e:27:b3:64:a9:bc:8e:fe:65:32:91:cf: 10:a7:19:70:5b:be:f2:d0:3e:1f:3c:6f:a6:c4:7d: 6e:41:b6:51:43:76:94:5b:6e:2d:2d:b4:4d:95:0f: 43:fe:a0:d0:53:c7:9c:dc:32:77:d0:54:aa:4a:36: 74:3e:a4:e2:7c:3c:a5:b0:d9:23:7d:7c:46:3e:f9: 19:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:BD:5B:3A:A6:49:BA:25:34:19:2F:B7:C7:06:04:AD:7D:17:52:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4d5fb234-4b0d-375b-8830-f6a550ba1a38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:be:97:b2:9a:b1:6c:16:38:26:e7:a1:50:45:48:6a:f3:24: fd:2f:0d:5e:5f:8f:86:54:2b:f6:33:53:77:f4:d0:6c:e7:32: d6:09:1a:11:d8:39:af:03:e4:95:4a:82:e4:e3:45:60:5c:f0: 99:9c:ba:5d:dc:bc:46:d1:82:25:12:20:25:7c:2c:7c:68:d2: e3:82:2c:96:a6:8a:84:59:d8:1c:ab:56:d2:ce:70:e5:3e:5a: aa:e7:56:dc:1b:e2:6e:9f:cd:dc:7c:e9:96:cf:45:1d:17:6b: 72:a2:ea:4e:7e:f5:b1:c2:b8:02:b4:a8:00:32:a2:a7:7c:94: 7e:57:9c:18:a2:af:cf:f3:ae:cd:3a:61:a5:0b:ba:ca:d0:08: 8e:1c:c4:28:d2:7e:10:53:87:e6:8e:72:7f:43:e5:fa:26:79: 99:e5:68:7d:e8:94:e0:9d:b8:a4:76:f7:a6:29:5b:88:85:f5: 06:1f:07:a1:a2:48:11:84:ca:b1:12:cf:51:7b:ec:86:ff:10: 62:cd:33:70:4c:42:da:fa:4a:1a:ff:c1:96:ed:61:b8:bb:58: bc:9d:c6:65:ce:fd:99:94:b8:0f:9c:30:47:35:e1:8a:50:81: cd:b7:74:38:97:24:10:af:21:e5:1a:f1:52:13:9a:19:04:9c: d9:cb:2c:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJMhbCW1KWrOwGEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk YzEyYWRlMjAtYWY3Ny00OWQ5LTg3ZDUtNTZlMzQxYjQzZGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtixN35/jRGmribl4LyU4ZRhkcnWNdgTvUzWA MbR4om36mS07e5gNEHIa5ILH3HnKX4yx4UPX6tdKZsWywROmyiXOu9CWw6y8iAx9 jwvzcP32nao7K0oZcgm3uiVSC1roFV1kt0XbduEhbiFog/Fs4uspWLgBCQAmjqq1 3T8a6bLVWnqJ5SWwkYl0WrvrOiJlNWz8M28CL+5ADkRGW36MCFUxqtA3Le+3RbHA 1LSPq7LZKewo6TueJ7NkqbyO/mUykc8QpxlwW77y0D4fPG+mxH1uQbZRQ3aUW24t LbRNlQ9D/qDQU8ec3DJ30FSqSjZ0PqTifDylsNkjfXxGPvkZ3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHW9WzqmSbolNBkvt8cGBK19F1JmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGQ1ZmIyMzQtNGIwZC0z NzViLTg4MzAtZjZhNTUwYmExYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJe+l7KasWwWOCbnoVBFSGrzJP0vDV5fj4ZUK/YzU3f00GznMtYJGhHY Oa8D5JVKguTjRWBc8Jmcul3cvEbRgiUSICV8LHxo0uOCLJamioRZ2ByrVtLOcOU+ WqrnVtwb4m6fzdx86ZbPRR0Xa3Ki6k5+9bHCuAK0qAAyoqd8lH5XnBiir8/zrs06 YaULusrQCI4cxCjSfhBTh+aOcn9D5fomeZnlaH3olOCduKR296YpW4iF9QYfB6Gi SBGEyrESz1F77Ib/EGLNM3BMQtr6Shr/wZbtYbi7WLydxmXO/ZmUuA+cMEc14YpQ gc23dDiXJBCvIeUa8VITmhkEnNnLLAc= -----END CERTIFICATE-----Generated at Sat Apr 26 19:11:21 2025 by rpki-client