$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa48523e-152e-352b-93ab-2b9702c9a66c.roa File: aa48523e-152e-352b-93ab-2b9702c9a66c.roa (raw, json) Hash identifier: hyCM6J84cdz6tDZSe/BsuMvBEL4LEds5OTVrsRAP8Hc= Subject key identifier: 39:4D:D1:37:BC:00:56:AE:C3:3E:73:84:C8:20:09:C4:AF:00:FA:71 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858499F24A37C8B72A0A082CB3080 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa48523e-152e-352b-93ab-2b9702c9a66c.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 108.170.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:a3:7c:8b:72:a0:a0:82:cb:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=e92fa1a5-7263-4168-9a4d-39197dbbe0e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:94:a9:93:8f:56:ea:cb:77:5c:45:59:95:75: e6:37:f7:aa:ad:ac:06:90:08:50:c0:4b:01:76:cd: 7d:7e:df:28:a1:9a:11:ff:43:88:60:ef:d3:0b:03: 18:1e:79:e6:76:7b:f2:05:2b:a5:d6:1f:a0:8d:e8: a6:e7:c4:38:f8:91:57:23:e4:a5:6d:ec:e7:67:d5: 1d:20:e2:ab:8a:a0:54:17:41:dc:52:7e:45:94:10: ac:5a:9d:44:8e:12:3e:f7:61:01:c8:e9:a9:cb:68: cf:ea:b1:21:25:1e:db:be:50:7d:00:b0:bf:6e:87: 66:69:38:7f:0b:7f:41:75:b3:a0:27:f7:fe:77:fd: 23:4e:93:c9:29:a3:7e:5a:15:f7:00:ac:a1:7a:d2: 96:8d:0d:3d:5b:36:57:9d:c3:9b:e2:59:77:00:ca: b2:7e:7f:e8:de:a5:ec:16:e8:26:47:b8:98:ed:f0: 0f:f1:40:84:1b:62:c9:f1:68:a2:d1:9c:a6:a4:52: 96:8f:dd:9d:bb:2d:2b:07:e2:3e:79:1c:7b:29:9c: a4:b4:d4:22:1e:b8:f9:58:38:c2:a5:8f:27:d7:8f: 77:05:cd:e1:62:7c:76:fe:0f:06:c2:1f:2c:94:43: 9f:8d:3e:e6:88:2b:15:01:61:18:dc:01:b3:ac:2d: 49:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:4D:D1:37:BC:00:56:AE:C3:3E:73:84:C8:20:09:C4:AF:00:FA:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa48523e-152e-352b-93ab-2b9702c9a66c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:59:da:36:64:5c:cc:b4:b3:92:bb:a7:83:20:c4:fe:a3:c2: 51:e9:5f:49:55:6d:b5:26:4e:95:50:08:2c:b6:28:5d:1b:95: a2:ce:39:54:c8:3d:93:72:53:7a:24:6e:4e:c2:86:6d:88:dd: d0:f0:70:6c:ff:c8:d7:17:b6:af:ba:cc:6f:82:da:e1:f3:e9: 53:e9:9c:4c:10:6a:c3:cc:9c:5b:65:cf:77:09:a2:92:8a:87: 40:2f:7c:21:d4:ec:51:89:86:33:c2:bc:80:52:2f:06:0d:d2: c3:f9:a7:0e:96:35:af:08:22:5a:59:75:ee:5f:87:03:97:dd: 43:d2:e6:27:f8:94:a1:ad:ba:de:ce:6f:c1:12:07:b1:d0:a2: f9:74:4d:5c:d0:ae:e6:14:1f:ff:97:2e:0f:44:2c:cd:40:a2: 39:c3:48:74:c7:b4:b0:f3:c5:c3:64:d0:19:ff:e7:66:4b:28: a8:69:38:48:0f:60:e2:86:00:8c:36:66:c7:38:19:76:41:cc: 49:e0:c8:ce:89:ae:9f:b6:f8:87:45:c2:46:e0:8c:2c:f1:30: 86:03:e5:1a:be:8a:e4:e9:c5:50:04:b1:97:b5:9a:a3:18:16: dc:f6:fb:fa:e9:8d:ff:6d:3c:47:9b:b6:20:bf:49:5b:1e:77: 1e:e6:9c:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKN8i3KgoILLMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ZTkyZmExYTUtNzI2My00MTY4LTlhNGQtMzkxOTdkYmJlMGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpSpk49W6st3XEVZlXXmN/eqrawGkAhQwEsB ds19ft8ooZoR/0OIYO/TCwMYHnnmdnvyBSul1h+gjeim58Q4+JFXI+SlbeznZ9Ud IOKriqBUF0HcUn5FlBCsWp1EjhI+92EByOmpy2jP6rEhJR7bvlB9ALC/bodmaTh/ C39BdbOgJ/f+d/0jTpPJKaN+WhX3AKyhetKWjQ09WzZXncOb4ll3AMqyfn/o3qXs FugmR7iY7fAP8UCEG2LJ8Wii0ZympFKWj92duy0rB+I+eRx7KZyktNQiHrj5WDjC pY8n1493Bc3hYnx2/g8Gwh8slEOfjT7miCsVAWEY3AGzrC1JXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlN0Te8AFauwz5zhMggCcSvAPpxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWE0ODUyM2UtMTUyZS0z NTJiLTkzYWItMmI5NzAyYzlhNjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1Z2jZkXMy0s5K7p4MgxP6jwlHpX0lVbbUmTpVQCCy2KF0blaLOOVTI PZNyU3okbk7Chm2I3dDwcGz/yNcXtq+6zG+C2uHz6VPpnEwQasPMnFtlz3cJopKK h0AvfCHU7FGJhjPCvIBSLwYN0sP5pw6WNa8IIlpZde5fhwOX3UPS5if4lKGtut7O b8ESB7HQovl0TVzQruYUH/+XLg9ELM1AojnDSHTHtLDzxcNk0Bn/52ZLKKhpOEgP YOKGAIw2Zsc4GXZBzEngyM6Jrp+2+IdFwkbgjCzxMIYD5Rq+iuTpxVAEsZe1mqMY Ftz2+/rpjf9tPEebtiC/SVsedx7mnO0= -----END CERTIFICATE-----Generated at Sat Apr 26 14:47:59 2025 by rpki-client