$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af9062fc-c2de-328a-89b2-ae470ad5b211.roa File: af9062fc-c2de-328a-89b2-ae470ad5b211.roa (raw, json) Hash identifier: 0h6ngAgqVmxGQMW8FiNuetLYsmuzkRCWqFJccxEopPI= Subject key identifier: E6:7A:AE:FF:99:2F:71:DE:A1:09:BE:2E:9B:DE:D9:F0:A8:81:71:A2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858499F24A89C6376140ACDCAB2A0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af9062fc-c2de-328a-89b2-ae470ad5b211.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 108.177.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:a8:9c:63:76:14:0a:cd:ca:b2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=8ba5f37a-aa1b-4ed7-878b-d0e918801a8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:41:83:7e:44:12:a5:e8:60:93:d5:6b:a9:85: 49:95:ca:91:55:ec:a3:98:f1:e1:c6:e3:a6:ac:18: 29:aa:6d:8c:26:9b:0a:c5:d7:33:17:9d:76:3e:c5: c1:25:34:b9:50:61:99:08:e5:4c:7a:f4:6d:73:59: 45:31:0d:b0:78:fd:8f:67:74:09:cb:66:c8:e9:d2: 56:a2:64:c6:79:46:67:56:24:ff:f5:03:9a:53:85: 14:e2:e7:99:2f:b3:de:13:2d:d6:99:76:14:c2:7c: 23:77:49:ff:7b:a3:b7:9b:f1:b7:57:98:66:aa:a6: db:2e:38:1d:e0:2d:57:8c:9a:09:b1:d9:72:03:66: ad:11:00:38:ca:ce:6f:30:55:89:77:33:8f:3b:98: a8:9d:38:41:1e:7d:8e:04:cb:34:89:f2:0a:dc:df: ac:38:e7:f0:88:0b:f6:e1:1a:73:57:99:29:99:b1: 95:e6:09:bc:e0:84:7e:4e:57:76:84:17:2b:0c:6e: d7:c1:c4:f4:c2:ef:32:01:af:ee:50:ce:58:96:38: 12:5b:35:13:43:b9:d8:93:4a:54:60:f2:00:25:b5: 8a:3c:d8:d6:96:c2:16:cd:0a:95:36:b7:8a:16:9f: 5d:00:c2:b8:95:3e:75:a2:c2:c7:42:4f:38:ed:21: 5f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:7A:AE:FF:99:2F:71:DE:A1:09:BE:2E:9B:DE:D9:F0:A8:81:71:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af9062fc-c2de-328a-89b2-ae470ad5b211.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:29:28:75:71:c8:b1:ee:5f:8e:51:da:3e:67:3c:ea:ec:3f: e1:3d:a9:27:9d:45:e6:05:b7:1f:0a:de:d0:b5:d5:75:de:f3: d3:f2:f1:35:86:4b:10:3b:9a:7e:42:83:86:40:97:31:aa:bf: e8:0b:de:db:8b:73:79:81:34:92:67:89:3e:d6:6a:10:29:d7: 64:04:86:90:9d:f9:c6:17:4d:4f:cf:6c:f9:00:da:21:c0:0f: 0a:f5:12:6e:80:ea:85:d6:6e:38:65:7c:ca:94:27:cf:6b:24: 4e:b5:2e:b5:f7:95:d9:9e:16:45:d1:55:11:df:02:35:8a:26: 96:77:61:e3:06:2a:79:f7:31:8a:1b:16:ff:3b:eb:93:64:ff: 99:98:93:7f:66:68:ec:6e:ae:d5:cc:6b:b7:60:b9:e9:96:ee: 51:e4:8d:0b:0d:05:7e:f0:2e:7a:33:22:c4:f0:3f:7c:75:09: 11:27:c7:39:09:a6:a3:c7:3e:6f:82:8f:fd:d6:d1:51:9b:93: 44:d8:24:02:b1:98:06:61:d9:5a:87:53:19:0f:50:1a:a7:fb: d1:12:cb:20:ca:df:c2:44:c7:4f:e9:29:9b:61:36:f9:53:e8: f9:ac:4f:d4:7f:a4:4f:79:be:9d:5a:19:99:37:e3:b6:b6:3d: 98:84:ca:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKicY3YUCs3KsqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk OGJhNWYzN2EtYWExYi00ZWQ3LTg3OGItZDBlOTE4ODAxYThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUGDfkQSpehgk9VrqYVJlcqRVeyjmPHhxuOm rBgpqm2MJpsKxdczF512PsXBJTS5UGGZCOVMevRtc1lFMQ2weP2PZ3QJy2bI6dJW omTGeUZnViT/9QOaU4UU4ueZL7PeEy3WmXYUwnwjd0n/e6O3m/G3V5hmqqbbLjgd 4C1XjJoJsdlyA2atEQA4ys5vMFWJdzOPO5ionThBHn2OBMs0ifIK3N+sOOfwiAv2 4RpzV5kpmbGV5gm84IR+Tld2hBcrDG7XwcT0wu8yAa/uUM5YljgSWzUTQ7nYk0pU YPIAJbWKPNjWlsIWzQqVNreKFp9dAMK4lT51osLHQk847SFfkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZ6rv+ZL3HeoQm+Lpve2fCogXGiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWY5MDYyZmMtYzJkZS0z MjhhLTg5YjItYWU0NzBhZDViMjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbLEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKYpKHVxyLHuX45R2j5nPOrsP+E9qSedReYFtx8K3tC11XXe89Py8TWG SxA7mn5Cg4ZAlzGqv+gL3tuLc3mBNJJniT7WahAp12QEhpCd+cYXTU/PbPkA2iHA Dwr1Em6A6oXWbjhlfMqUJ89rJE61LrX3ldmeFkXRVRHfAjWKJpZ3YeMGKnn3MYob Fv8765Nk/5mYk39maOxurtXMa7dguemW7lHkjQsNBX7wLnozIsTwP3x1CREnxzkJ pqPHPm+Cj/3W0VGbk0TYJAKxmAZh2VqHUxkPUBqn+9ESyyDK38JEx0/pKZthNvlT 6PmsT9R/pE95vp1aGZk347a2PZiEyu8= -----END CERTIFICATE-----Generated at Sat Apr 26 19:55:42 2025 by rpki-client