$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7f0cb031-dcee-3d44-8d27-f094f67636b1.roa File: 7f0cb031-dcee-3d44-8d27-f094f67636b1.roa (raw, json) Hash identifier: ixXhoEk8xmaK2KDwU3lQovEHOG1mj/y+Q3RCJGKw0cA= Subject key identifier: A2:42:FA:57:BC:E6:B7:36:39:8C:54:B7:A9:D1:E2:63:35:97:72:B8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858499F24A3DD03BA2C676E59BB00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7f0cb031-dcee-3d44-8d27-f094f67636b1.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 108.170.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:a3:dd:03:ba:2c:67:6e:59:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=c52ba830-ff11-4789-8d86-fb9278afafd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:68:5d:6e:78:a2:24:32:7d:38:68:0e:89:a8: ba:be:af:b4:1d:ab:c1:eb:12:24:eb:5d:61:67:fe: 4d:23:5c:c9:71:4f:5a:1b:e2:9d:82:b3:09:41:19: 4a:13:ab:07:41:0d:ea:69:26:2b:35:35:01:c0:e5: e6:0b:32:78:c8:f7:b4:e7:31:3a:1d:3d:e7:ec:72: a6:e0:10:4b:de:8b:17:c7:9d:2f:fa:18:7d:4a:52: af:d2:9e:f1:64:7a:4c:bb:df:49:5b:73:77:0b:0e: 49:92:12:e5:ce:6a:81:2d:3a:35:f1:7c:f9:70:9e: 04:45:6b:34:02:5f:c6:9e:03:2f:96:84:1e:38:29: 73:14:d3:f8:25:57:7c:c4:1f:2c:e1:7a:b7:5f:18: 17:8e:5f:fb:6e:1d:aa:3c:af:00:4f:1d:f6:a4:e5: 0c:65:18:df:c6:c6:a9:f2:24:89:b1:e1:33:df:74: ac:13:61:11:a7:68:82:2e:1f:af:6c:a4:3a:3f:3c: 61:14:2c:22:9e:30:8e:f4:1b:e7:dd:57:e1:d1:91: 18:73:77:b5:19:79:84:af:d1:ec:f3:0c:1c:9e:f4: 1f:8b:96:87:57:e3:2a:04:ad:2c:33:ba:5d:a4:1b: 3b:7e:53:05:c4:75:75:02:72:e4:72:97:1b:ce:cb: 86:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:42:FA:57:BC:E6:B7:36:39:8C:54:B7:A9:D1:E2:63:35:97:72:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7f0cb031-dcee-3d44-8d27-f094f67636b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:d2:5f:ee:d8:81:e1:f0:60:04:be:6e:52:60:c5:23:15:5b: e7:b2:9e:55:34:62:7b:2f:4c:f8:69:f9:a2:ba:4e:10:1f:84: ea:e2:32:40:ec:f7:94:34:0f:0c:21:bf:70:f0:4d:74:e4:8d: 6b:fd:2b:5f:9f:20:f8:9a:24:73:a3:7d:02:27:e7:95:3a:44: 0a:70:a3:47:42:d9:3d:7c:09:e6:01:02:5c:f0:fc:eb:8f:8e: ac:b0:38:b0:19:26:40:d3:ca:4f:b4:3d:5e:c3:f8:af:7a:e4: b7:e4:5c:ac:11:e2:a8:07:a3:d0:3a:c5:aa:a7:e5:5c:f0:84: 0e:e2:ce:18:8c:6e:48:75:ba:89:da:21:92:00:55:2b:37:d8: b2:06:9a:f3:2a:bc:f1:28:1b:04:d0:80:05:55:ab:77:3a:9f: 3b:b2:62:aa:cf:78:ff:38:f9:61:bd:02:0a:b3:8b:68:4f:67: 56:b6:bd:29:88:4a:41:e7:98:20:fc:87:8c:7f:ff:a1:da:fe: 97:3c:52:18:e4:b2:05:ed:6f:25:2d:ab:30:a8:ce:e3:a7:78: 22:93:7f:3f:55:da:70:58:cc:57:67:09:1d:d4:c6:f3:74:ab: 16:0c:08:f9:5c:2b:3f:ce:45:48:56:09:fc:3f:19:14:65:75: fb:23:bf:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKPdA7osZ25ZuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk YzUyYmE4MzAtZmYxMS00Nzg5LThkODYtZmI5Mjc4YWZhZmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42hdbniiJDJ9OGgOiai6vq+0HavB6xIk611h Z/5NI1zJcU9aG+KdgrMJQRlKE6sHQQ3qaSYrNTUBwOXmCzJ4yPe05zE6HT3n7HKm 4BBL3osXx50v+hh9SlKv0p7xZHpMu99JW3N3Cw5JkhLlzmqBLTo18Xz5cJ4ERWs0 Al/GngMvloQeOClzFNP4JVd8xB8s4Xq3XxgXjl/7bh2qPK8ATx32pOUMZRjfxsap 8iSJseEz33SsE2ERp2iCLh+vbKQ6PzxhFCwinjCO9Bvn3Vfh0ZEYc3e1GXmEr9Hs 8wwcnvQfi5aHV+MqBK0sM7pdpBs7flMFxHV1AnLkcpcbzsuGSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJC+le85rc2OYxUt6nR4mM1l3K4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2YwY2IwMzEtZGNlZS0z ZDQ0LThkMjctZjA5NGY2NzYzNmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHSX+7YgeHwYAS+blJgxSMVW+eynlU0YnsvTPhp+aK6ThAfhOriMkDs 95Q0Dwwhv3DwTXTkjWv9K1+fIPiaJHOjfQIn55U6RApwo0dC2T18CeYBAlzw/OuP jqywOLAZJkDTyk+0PV7D+K965LfkXKwR4qgHo9A6xaqn5VzwhA7izhiMbkh1uona IZIAVSs32LIGmvMqvPEoGwTQgAVVq3c6nzuyYqrPeP84+WG9Agqzi2hPZ1a2vSmI SkHnmCD8h4x//6Ha/pc8UhjksgXtbyUtqzCozuOneCKTfz9V2nBYzFdnCR3UxvN0 qxYMCPlcKz/ORUhWCfw/GRRldfsjv9s= -----END CERTIFICATE-----Generated at Sat Apr 26 17:44:15 2025 by rpki-client