$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ec6f085-b2e5-3605-baa2-4f1c4fc3dea4.roa File: 4ec6f085-b2e5-3605-baa2-4f1c4fc3dea4.roa (raw, json) Hash identifier: 92022KXkhGbzLGI5fJfI9uIdbyPq9J/+IG1TDjHbOWs= Subject key identifier: 21:B4:F2:32:EA:8F:72:1E:D8:D6:63:D5:4F:BF:71:F7:09:9B:B4:6C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858499F24A582373A738F2577A580 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ec6f085-b2e5-3605-baa2-4f1c4fc3dea4.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 108.177.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:a5:82:37:3a:73:8f:25:77:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=4327ff52-6d63-401c-9f8b-73c0ad7aeba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b6:c1:8a:d2:e8:98:3f:cb:f6:68:cb:c6:f4: ed:cd:8a:e9:46:f6:e0:f9:38:e8:fe:c2:34:de:91: 10:14:41:f2:4e:ec:e0:69:c3:f9:c6:bf:69:b3:b5: 97:45:a7:21:38:1e:e0:b6:ad:e4:3a:99:59:dd:0a: 8b:16:43:66:aa:08:f3:27:c6:ca:6f:63:f8:53:c4: ac:08:b0:16:d7:58:9b:24:85:99:d9:9a:20:82:10: 56:ba:f9:f3:ee:dc:10:44:2b:e6:36:a4:eb:ef:92: 1c:d8:f7:27:26:fb:b6:4a:b3:10:1e:e8:64:53:35: 8f:e9:bc:31:d2:c9:3e:e0:01:3c:62:f8:cc:03:49: 05:a9:1f:16:68:52:2b:c8:36:19:0e:9e:43:b6:3b: 72:eb:e1:36:27:23:84:6e:d4:65:8e:9c:32:6c:9f: ba:95:a8:73:79:cb:91:bc:44:26:ba:31:e7:10:23: 1d:f6:c0:39:96:a6:31:58:78:93:68:d9:22:48:1b: 66:7b:e2:2a:02:4e:93:ba:60:e6:68:6f:58:f3:be: 8d:ca:4c:40:a1:82:d3:8a:81:49:a3:d9:66:67:74: e7:80:94:83:18:46:76:9f:30:df:32:ab:f4:38:8e: 3b:ad:e4:29:7b:85:57:a0:c2:0b:67:f9:e2:fd:c2: 6c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B4:F2:32:EA:8F:72:1E:D8:D6:63:D5:4F:BF:71:F7:09:9B:B4:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ec6f085-b2e5-3605-baa2-4f1c4fc3dea4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:62:53:33:1b:6b:e7:53:1b:3b:92:f4:6b:f3:0f:b7:ec:7f: fa:97:16:18:0d:93:5b:3f:98:a7:b0:db:90:10:69:20:c9:b4: b3:d8:44:c6:e6:91:ce:fd:12:31:0f:c3:02:95:73:aa:e9:7d: 6b:1d:02:c7:82:2b:12:ea:3b:3f:33:7e:75:fa:14:0b:96:c3: 32:82:de:c7:ff:83:9c:f3:a2:64:54:c6:5f:ae:d6:7b:43:18: ee:ac:51:e9:bb:a4:d7:c6:14:8f:ae:fe:54:15:fa:02:1a:53: 8a:bf:16:79:65:00:50:d8:97:55:a5:f2:67:a9:e0:b9:bc:ac: c1:7a:5e:73:5b:3e:ba:21:73:7c:05:40:7b:4d:42:24:f3:4f: e5:37:5a:6a:9f:f2:e6:9b:c2:97:39:9e:3f:9f:8f:67:b9:d8: d8:c3:65:d7:85:88:d7:33:5c:bb:e1:1f:ab:3b:dd:45:8e:17: 33:db:eb:7e:41:6e:2f:e2:44:96:a1:85:38:67:fe:52:e1:30: 92:1e:16:1a:99:0f:35:5c:76:d6:1f:6d:6f:99:11:ec:6e:1a: 28:43:50:0b:d5:d5:a8:47:66:5e:d3:81:29:27:91:2d:b8:c7: 99:5d:25:ac:15:69:da:4f:fc:e1:3a:d0:52:36:16:21:14:22: 30:e4:e1:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKWCNzpzjyV3pYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NDMyN2ZmNTItNmQ2My00MDFjLTlmOGItNzNjMGFkN2FlYmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibbBitLomD/L9mjLxvTtzYrpRvbg+Tjo/sI0 3pEQFEHyTuzgacP5xr9ps7WXRachOB7gtq3kOplZ3QqLFkNmqgjzJ8bKb2P4U8Ss CLAW11ibJIWZ2ZogghBWuvnz7twQRCvmNqTr75Ic2PcnJvu2SrMQHuhkUzWP6bwx 0sk+4AE8YvjMA0kFqR8WaFIryDYZDp5Dtjty6+E2JyOEbtRljpwybJ+6lahzecuR vEQmujHnECMd9sA5lqYxWHiTaNkiSBtme+IqAk6TumDmaG9Y876NykxAoYLTioFJ o9lmZ3TngJSDGEZ2nzDfMqv0OI47reQpe4VXoMILZ/ni/cJs/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCG08jLqj3Ie2NZj1U+/cfcJm7RsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGVjNmYwODUtYjJlNS0z NjA1LWJhYTItNGYxYzRmYzNkZWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRiUzMba+dTGzuS9GvzD7fsf/qXFhgNk1s/mKew25AQaSDJtLPYRMbm kc79EjEPwwKVc6rpfWsdAseCKxLqOz8zfnX6FAuWwzKC3sf/g5zzomRUxl+u1ntD GO6sUem7pNfGFI+u/lQV+gIaU4q/FnllAFDYl1Wl8mep4Lm8rMF6XnNbProhc3wF QHtNQiTzT+U3Wmqf8uabwpc5nj+fj2e52NjDZdeFiNczXLvhH6s73UWOFzPb635B bi/iRJahhThn/lLhMJIeFhqZDzVcdtYfbW+ZEexuGihDUAvV1ahHZl7TgSknkS24 x5ldJawVadpP/OE60FI2FiEUIjDk4cY= -----END CERTIFICATE-----Generated at Mon Apr 28 02:16:57 2025 by rpki-client