$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/591b0f21-2c8e-3f78-a0ef-71d5e6a827c0.roa File: 591b0f21-2c8e-3f78-a0ef-71d5e6a827c0.roa (raw, json) Hash identifier: +F9UtOGc4ZFoEpvreUux2w0Pqqjd+/Sgtx0Pbrq6h0U= Subject key identifier: 44:3A:1A:8B:29:C4:D7:F7:84:BE:B3:9A:18:05:31:EE:B5:31:9F:05 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858499F24B78E8D66D6196FEDE700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/591b0f21-2c8e-3f78-a0ef-71d5e6a827c0.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 108.177.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:b7:8e:8d:66:d6:19:6f:ed:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=18f3895b-e5ba-468c-a58a-32d031ad0403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7b:ec:41:31:da:e1:93:15:65:58:ac:c0:c2: f9:81:a9:88:55:c9:1c:74:f3:a3:81:aa:c1:ee:72: 02:d0:1a:02:fd:52:23:22:f5:b7:e1:ae:04:9a:a7: 25:40:c8:94:c9:6c:4e:20:b4:18:41:f6:1e:ae:f6: c4:51:8a:56:62:8d:f1:bf:52:fd:0d:d4:67:82:10: e5:c8:50:bc:71:5d:c7:e3:86:aa:aa:4c:e5:6c:1e: 64:1b:72:bb:52:e8:a4:4a:dc:d5:11:f2:6e:8e:54: 9b:57:86:3f:bc:5e:68:50:31:5c:5e:46:b8:1f:0a: d7:bd:50:d0:2c:e8:ee:54:c3:e7:eb:7e:a2:96:ad: 85:6c:31:36:91:bc:85:b7:fe:fc:0c:95:67:bf:bb: 66:fd:fb:c4:4b:b0:c5:44:7d:e4:00:41:63:91:70: c4:7d:21:f6:dd:40:9c:be:59:bf:59:39:78:0d:6c: 7f:8e:9e:f9:b0:da:79:58:c2:92:60:1a:de:a1:8e: 0b:06:8d:40:dd:2d:cf:4b:7f:24:e0:a7:1f:f0:be: 28:21:4b:c5:81:bf:9e:da:10:1a:4e:f6:ad:d9:25: 9e:8f:2a:a8:a9:9c:2c:92:03:35:55:00:6a:63:3e: 60:58:46:62:5d:03:67:f7:70:14:95:65:88:e1:4f: 49:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3A:1A:8B:29:C4:D7:F7:84:BE:B3:9A:18:05:31:EE:B5:31:9F:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/591b0f21-2c8e-3f78-a0ef-71d5e6a827c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:17:52:8e:c3:32:bf:d0:96:6f:51:90:47:af:68:28:40:0e: d4:c0:f4:10:c4:48:21:47:46:ca:e2:59:f1:3c:d8:7c:7c:8f: 86:64:47:78:dd:54:47:78:46:0a:03:d2:ab:ea:25:93:c2:06: e7:ab:a8:a2:61:5b:b2:33:c6:ac:14:3b:38:87:a2:a4:17:e0: 73:86:c0:46:15:70:0a:46:24:6d:8c:b5:1b:17:3a:d6:0f:8b: 8a:a6:45:15:e6:73:22:39:eb:ff:f9:a7:70:4c:a7:0c:57:3f: d0:dc:38:00:3e:c1:fe:9f:e4:9c:b5:b5:84:5a:ac:87:89:3b: 61:a1:2d:8c:34:7e:03:85:ca:f7:d8:6f:34:40:16:15:38:45: 79:05:d0:fe:17:c6:50:c7:c4:e3:70:26:41:3f:52:9d:ca:d8: 80:c4:5e:25:04:91:3a:18:98:fa:c0:e4:38:1b:2f:e6:e4:0e: 49:11:2a:b3:ba:61:e1:5e:96:70:97:67:c0:28:f3:c6:b5:8b: bf:77:db:f8:72:bd:b6:ba:81:09:58:ba:c7:d5:e9:66:34:78: 06:51:aa:b2:31:a0:a6:be:94:9e:da:25:ca:20:ab:c4:f3:d6: d6:8f:6d:06:10:cf:58:76:7b:2b:e2:18:7c:ed:47:ee:e4:f9: 69:c5:cb:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJLeOjWbWGW/t5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk MThmMzg5NWItZTViYS00NjhjLWE1OGEtMzJkMDMxYWQwNDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3vsQTHa4ZMVZViswML5gamIVckcdPOjgarB 7nIC0BoC/VIjIvW34a4EmqclQMiUyWxOILQYQfYervbEUYpWYo3xv1L9DdRnghDl yFC8cV3H44aqqkzlbB5kG3K7UuikStzVEfJujlSbV4Y/vF5oUDFcXka4HwrXvVDQ LOjuVMPn636ilq2FbDE2kbyFt/78DJVnv7tm/fvES7DFRH3kAEFjkXDEfSH23UCc vlm/WTl4DWx/jp75sNp5WMKSYBreoY4LBo1A3S3PS38k4Kcf8L4oIUvFgb+e2hAa Tvat2SWejyqoqZwskgM1VQBqYz5gWEZiXQNn93AUlWWI4U9JEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQ6GospxNf3hL6zmhgFMe61MZ8FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTkxYjBmMjEtMmM4ZS0z Zjc4LWEwZWYtNzFkNWU2YTgyN2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHbLEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoXUo7DMr/Qlm9RkEevaChADtTA9BDESCFHRsriWfE82Hx8j4ZkR3jd VEd4RgoD0qvqJZPCBuerqKJhW7IzxqwUOziHoqQX4HOGwEYVcApGJG2MtRsXOtYP i4qmRRXmcyI56//5p3BMpwxXP9DcOAA+wf6f5Jy1tYRarIeJO2GhLYw0fgOFyvfY bzRAFhU4RXkF0P4XxlDHxONwJkE/Up3K2IDEXiUEkToYmPrA5DgbL+bkDkkRKrO6 YeFelnCXZ8Ao88a1i7932/hyvba6gQlYusfV6WY0eAZRqrIxoKa+lJ7aJcogq8Tz 1taPbQYQz1h2eyviGHztR+7k+WnFy8Y= -----END CERTIFICATE-----Generated at Sun Apr 27 12:10:08 2025 by rpki-client