$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa7a9168-d9b5-3e3a-a2b1-ce2a7051cc43.roa File: aa7a9168-d9b5-3e3a-a2b1-ce2a7051cc43.roa (raw, json) Hash identifier: 3m9t7C3IUAvb1hpyAGUT7McdLhVgam95enYM7Sz8vXA= Subject key identifier: F2:04:23:04:9B:21:B4:BB:CB:46:A5:04:BE:E5:56:05:F7:47:CB:51 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858499F24D89D4BF4C5DEAE826000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa7a9168-d9b5-3e3a-a2b1-ce2a7051cc43.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 108.177.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:d8:9d:4b:f4:c5:de:ae:82:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=26c55c6b-8159-4795-a46c-189d34a45619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4b:d2:7d:a1:de:22:69:fe:a9:a1:9c:0c:6f: 40:e2:d7:91:a5:54:67:3b:78:c3:eb:7a:c2:86:21: 43:14:dd:ea:a2:3f:62:13:64:3a:fb:a1:46:9c:31: fb:0f:d9:c4:1e:0b:3d:52:be:c0:ba:3f:fc:08:79: 7f:42:9e:fb:dd:01:a2:91:04:0c:9f:5e:3a:5c:f0: 09:3f:8c:d4:0d:f2:88:3b:c1:ea:71:1f:f9:3c:b3: 46:11:8a:f6:c1:16:0d:fc:cd:ce:ad:f1:46:14:6a: 6f:b4:e8:78:6c:16:0e:dd:7b:35:56:97:15:1f:3b: 57:65:58:93:63:a6:a0:4f:0f:37:44:53:30:b0:e0: 6f:89:db:4e:af:4c:0e:13:6e:5b:c6:fd:90:a7:45: 33:c0:01:34:07:96:df:c9:f0:87:aa:87:e2:6a:8c: 7c:6f:a4:db:de:a4:05:b7:67:ab:5b:e3:a5:3b:dd: 4e:0b:77:ea:02:d4:4c:6b:cb:c4:9e:1e:84:0f:c5: 67:7f:83:8c:7d:03:b0:3b:78:6b:de:bc:fe:ce:83: 5a:33:30:4e:6f:56:ee:e6:f5:f8:40:6b:2c:c2:04: 54:37:e0:a2:aa:eb:b3:15:6d:a7:53:e7:cb:12:3a: 1b:a6:b9:22:42:ae:5c:90:6e:7e:0a:2f:09:29:84: 41:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:04:23:04:9B:21:B4:BB:CB:46:A5:04:BE:E5:56:05:F7:47:CB:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa7a9168-d9b5-3e3a-a2b1-ce2a7051cc43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:bb:51:a1:88:5f:63:29:0c:eb:c5:8e:1b:b7:1a:c4:fc:08: 38:4a:63:2f:00:86:77:ae:80:c8:39:0b:0f:1e:99:f3:5d:a7: 2a:e3:0c:3c:77:41:e3:5f:b7:a8:85:20:73:5c:37:c2:26:42: f9:96:01:98:27:71:ab:fb:42:79:89:83:5a:4f:b4:6b:63:91: 1f:fb:28:7a:0d:5b:0f:70:23:8f:07:34:3e:fc:f3:6c:bd:0d: 67:3f:88:67:be:b2:c8:21:ff:3b:96:e4:69:17:c9:cf:1a:72: 49:23:df:c1:29:d2:78:7c:1e:59:f9:4a:09:16:da:5c:c8:89: 49:7c:f2:40:e4:5e:73:75:bd:04:bb:84:8f:d0:8f:30:56:61: d1:c3:17:19:ea:c8:95:f6:22:94:a8:c3:bb:2d:51:81:62:57: 2e:dc:30:63:06:05:ce:9d:75:70:6f:22:1c:37:05:76:9b:39: 40:dc:74:5f:af:7b:69:a2:26:b1:9d:32:a4:0b:94:0d:a6:b4: a1:57:06:c9:92:3e:f2:f5:c6:49:42:f3:98:d1:04:19:57:d7: 2a:af:24:82:62:c5:0f:4a:0d:58:df:9e:c0:e9:51:16:a6:f9: c4:49:5d:96:c8:88:a5:27:82:a8:68:48:f0:d6:18:a9:4b:53: 59:cd:1c:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNidS/TF3q6CYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk MjZjNTVjNmItODE1OS00Nzk1LWE0NmMtMTg5ZDM0YTQ1NjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUvSfaHeImn+qaGcDG9A4teRpVRnO3jD63rC hiFDFN3qoj9iE2Q6+6FGnDH7D9nEHgs9Ur7Auj/8CHl/Qp773QGikQQMn146XPAJ P4zUDfKIO8HqcR/5PLNGEYr2wRYN/M3OrfFGFGpvtOh4bBYO3Xs1VpcVHztXZViT Y6agTw83RFMwsOBvidtOr0wOE25bxv2Qp0UzwAE0B5bfyfCHqofiaox8b6Tb3qQF t2erW+OlO91OC3fqAtRMa8vEnh6ED8Vnf4OMfQOwO3hr3rz+zoNaMzBOb1bu5vX4 QGsswgRUN+CiquuzFW2nU+fLEjobprkiQq5ckG5+Ci8JKYRBUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIEIwSbIbS7y0alBL7lVgX3R8tRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWE3YTkxNjgtZDliNS0z ZTNhLWEyYjEtY2UyYTcwNTFjYzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLEXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKu7UaGIX2MpDOvFjhu3GsT8CDhKYy8AhneugMg5Cw8emfNdpyrjDDx3 QeNft6iFIHNcN8ImQvmWAZgncav7QnmJg1pPtGtjkR/7KHoNWw9wI48HND7882y9 DWc/iGe+ssgh/zuW5GkXyc8ackkj38Ep0nh8Hln5SgkW2lzIiUl88kDkXnN1vQS7 hI/QjzBWYdHDFxnqyJX2IpSow7stUYFiVy7cMGMGBc6ddXBvIhw3BXabOUDcdF+v e2miJrGdMqQLlA2mtKFXBsmSPvL1xklC85jRBBlX1yqvJIJixQ9KDVjfnsDpURam +cRJXZbIiKUngqhoSPDWGKlLU1nNHDc= -----END CERTIFICATE-----Generated at Sun Apr 27 22:21:08 2025 by rpki-client