$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a864864-8b89-3c24-892f-a08a1af18543.roa File: 9a864864-8b89-3c24-892f-a08a1af18543.roa (raw, json) Hash identifier: 1n7Hsj5iZNL6tE3CKfsD0oLVVOzZkldQGrR3noxS9PM= Subject key identifier: F9:EC:58:9B:54:43:DA:A2:04:D0:B1:D0:46:50:FC:28:15:7A:3F:BD Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB5B2190B1DAC90625F760 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a864864-8b89-3c24-892f-a08a1af18543.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 208.68.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:5b:21:90:b1:da:c9:06:25:f7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=c5185f7b-4394-4f65-b910-e408f9f82177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:61:3a:c8:11:ca:d7:b8:6f:52:9a:9e:d0:89: 29:a0:06:28:cd:c7:40:d4:49:8b:d7:2c:d9:b3:3f: 5a:11:63:07:a3:6a:1e:19:57:68:9b:28:fb:a9:89: 18:21:1d:fe:3c:a2:55:de:39:33:a0:07:0b:c9:58: 51:69:d9:fc:7e:00:7e:96:54:95:58:57:17:15:92: b3:ef:4c:93:db:e2:05:92:43:fd:11:74:cc:83:6f: 95:7b:37:a1:16:f7:ce:6a:31:ce:2b:87:af:a8:12: 42:1d:0d:05:e8:1e:b2:08:39:c2:06:3c:a3:f9:e4: 23:3a:61:2c:60:27:c4:0b:05:95:73:3e:43:bc:a9: e6:ff:ee:b6:e4:9e:7c:57:f7:f4:bf:08:0b:f8:b9: ec:22:b3:b5:7f:e4:9e:87:64:09:e8:4b:86:4b:96: 0e:49:29:51:b0:8e:89:1b:bc:81:15:68:a9:73:c5: 9f:62:17:b0:94:11:2d:85:54:46:01:92:2e:35:50: 69:08:47:20:0d:d5:bc:f9:c7:31:c3:4a:f9:57:21: 72:7f:ef:15:88:ec:6a:ef:5b:79:64:81:d0:32:5e: 74:fa:ee:58:7b:f8:dd:1d:17:90:f4:92:7c:40:e5: 13:28:d7:a1:11:1b:62:6e:fb:c9:6f:8e:ef:6e:ce: e5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:EC:58:9B:54:43:DA:A2:04:D0:B1:D0:46:50:FC:28:15:7A:3F:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a864864-8b89-3c24-892f-a08a1af18543.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.68.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:88:6c:06:30:30:68:0b:3b:40:6c:59:5a:d7:28:8b:3b:ce: 2f:2a:31:ac:3b:ad:c3:1c:6a:b3:eb:86:3d:56:85:85:13:cd: a4:97:4b:bf:f0:35:aa:db:7e:ff:2c:ad:e1:a2:af:9e:36:e7: de:05:d7:ea:b8:13:0d:21:85:0e:61:d3:51:1f:77:c0:03:26: 68:69:80:01:60:ad:ba:26:9c:c0:bd:f2:b1:a3:7d:64:a1:68: 70:04:08:ab:0f:71:74:17:8f:39:94:24:75:df:75:71:66:0e: d5:09:80:e5:d1:b9:ec:22:5c:cd:91:67:c7:47:13:c3:80:dc: 28:fe:6d:18:cb:1a:3e:e6:75:1f:24:87:03:ec:56:0e:ac:81: e0:6a:e1:80:35:c3:6c:d5:b8:e3:b3:1b:82:d7:1a:63:2d:08: a1:7b:82:b9:9a:d3:71:19:1a:28:74:eb:3b:03:b6:d7:99:f4: 73:3a:83:c0:c3:85:ac:a1:3c:16:36:f7:8e:ea:4c:e8:ef:d2: df:83:b7:8e:7c:2e:6a:44:8c:35:b2:b8:23:8f:c5:99:87:b0: e7:f6:b8:5e:14:56:04:a2:84:36:f3:6d:5a:cc:99:a2:0e:d6: ae:4e:b0:0f:a0:ad:b7:6b:20:c7:d2:b2:95:68:7c:ab:51:4c: 01:fd:80:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku1shkLHayQYl92AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YzUxODVmN2ItNDM5NC00ZjY1LWI5MTAtZTQwOGY5ZjgyMTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmE6yBHK17hvUpqe0IkpoAYozcdA1EmL1yzZ sz9aEWMHo2oeGVdomyj7qYkYIR3+PKJV3jkzoAcLyVhRadn8fgB+llSVWFcXFZKz 70yT2+IFkkP9EXTMg2+VezehFvfOajHOK4evqBJCHQ0F6B6yCDnCBjyj+eQjOmEs YCfECwWVcz5DvKnm/+625J58V/f0vwgL+LnsIrO1f+Seh2QJ6EuGS5YOSSlRsI6J G7yBFWipc8WfYhewlBEthVRGAZIuNVBpCEcgDdW8+ccxw0r5VyFyf+8ViOxq71t5 ZIHQMl50+u5Ye/jdHReQ9JJ8QOUTKNehERtibvvJb47vbs7l/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnsWJtUQ9qiBNCx0EZQ/CgVej+9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWE4NjQ4NjQtOGI4OS0z YzI0LTg5MmYtYTA4YTFhZjE4NTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ERsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6IbAYwMGgLO0BsWVrXKIs7zi8qMaw7rcMcarPrhj1WhYUTzaSXS7/w Narbfv8sreGir542594F1+q4Ew0hhQ5h01Efd8ADJmhpgAFgrbomnMC98rGjfWSh aHAECKsPcXQXjzmUJHXfdXFmDtUJgOXRuewiXM2RZ8dHE8OA3Cj+bRjLGj7mdR8k hwPsVg6sgeBq4YA1w2zVuOOzG4LXGmMtCKF7grma03EZGih06zsDtteZ9HM6g8DD hayhPBY2947qTOjv0t+Dt458LmpEjDWyuCOPxZmHsOf2uF4UVgSihDbzbVrMmaIO 1q5OsA+grbdrIMfSspVofKtRTAH9gGg= -----END CERTIFICATE-----Generated at Sat Apr 26 20:57:22 2025 by rpki-client