$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c48d4d16-2d2a-370f-b884-3cd54f0aa0c4.roa File: c48d4d16-2d2a-370f-b884-3cd54f0aa0c4.roa (raw, json) Hash identifier: bls++1U0/MWBOwfaNy1JHs5LXw1VVzN1W4uhK7g1sVY= Subject key identifier: 61:69:D0:43:31:95:D6:AA:B5:55:F0:DF:1C:DE:B8:DD:10:BA:22:7B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858499F24B1E726DA5A21987CBD00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c48d4d16-2d2a-370f-b884-3cd54f0aa0c4.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 108.170.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:b1:e7:26:da:5a:21:98:7c:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=eeac3b16-f303-44c3-86cb-db30447e53d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:34:51:eb:de:3a:db:5c:58:8b:14:a4:63:73: b3:53:58:69:e5:ad:dd:d6:10:be:42:99:9d:fb:72: e1:b0:1d:a9:88:e2:fe:e2:28:14:3c:43:f5:7e:c8: f8:55:b8:20:2d:0f:95:e1:16:f1:44:76:6b:bb:b6: bf:b4:a0:33:7a:21:ad:09:82:de:62:73:f1:72:1c: 12:06:15:77:47:87:70:b6:a0:40:cf:e9:f2:23:fb: f8:6c:c0:c3:55:2d:02:a1:2a:56:3e:f2:a6:2a:99: 09:9c:f6:09:69:c5:58:b3:17:16:52:71:e6:28:bb: 99:c4:1a:ca:18:17:c7:76:44:f1:e3:41:e0:1a:4f: 2e:33:f9:7a:f1:08:8b:0f:9e:be:2d:c8:ef:04:b8: d8:de:2c:2d:a0:0c:01:da:21:4f:a9:f6:ff:10:b3: 38:e8:47:4e:50:f6:f7:e6:3f:ec:e9:25:e4:33:aa: 57:5b:7f:0f:30:1e:7b:0f:ec:9d:bb:07:22:c4:af: 38:11:c5:b9:84:05:ec:a3:7e:96:d2:68:4d:0c:a4: 27:19:22:4b:e3:c4:71:2b:b6:88:78:f4:d4:a5:89: 6c:4a:4e:b1:94:d7:97:f6:fe:a3:b9:26:0e:f7:43: 7e:f5:c2:e2:9f:9d:15:78:72:26:0a:98:f1:b4:d0: 62:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:69:D0:43:31:95:D6:AA:B5:55:F0:DF:1C:DE:B8:DD:10:BA:22:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c48d4d16-2d2a-370f-b884-3cd54f0aa0c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:72:15:03:b9:8a:ed:e8:26:03:7e:42:c9:e4:0e:a5:bf:1a: a6:c6:e3:0f:4e:99:cc:1f:b9:4d:13:4d:a4:4c:ef:6b:c5:01: 9d:ea:a5:61:03:b4:ae:96:e3:af:d6:fa:84:d6:4d:48:11:08: 23:9a:9a:9e:d1:57:74:ee:a5:e4:c4:b9:4e:10:af:2a:82:96: 27:3c:e5:58:df:3f:cd:79:d5:93:ea:60:e7:a2:fa:00:3b:de: d8:8e:80:bf:86:84:c4:99:e7:2d:07:30:10:0a:27:68:37:9b: af:b3:3b:c6:c4:75:b9:09:de:b3:20:33:2f:ac:c6:b3:19:cf: e2:4a:0e:bd:d5:dc:9e:47:87:a5:70:d7:89:7c:fd:9f:f1:dd: 25:18:39:26:3c:57:29:ef:dc:e7:6e:c5:97:f3:9b:e8:24:e9: 03:01:d3:db:38:88:df:ea:17:e7:c8:70:a9:e8:45:b6:82:0e: a6:ed:ed:c6:c1:e5:9b:98:43:14:8f:3e:ce:e3:8f:3c:39:5a: 94:44:e4:67:9a:d6:a5:ec:19:ae:fb:0d:f6:ce:fb:e4:17:7d: b1:48:49:d7:72:9d:07:4d:99:0b:88:de:14:5c:5e:7d:28:fd: a9:eb:8c:13:b2:d4:3a:46:ae:98:1c:45:20:da:d4:e3:b6:8b: 18:94:aa:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJLHnJtpaIZh8vQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ZWVhYzNiMTYtZjMwMy00NGMzLTg2Y2ItZGIzMDQ0N2U1M2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjRR694621xYixSkY3OzU1hp5a3d1hC+Qpmd +3LhsB2piOL+4igUPEP1fsj4VbggLQ+V4RbxRHZru7a/tKAzeiGtCYLeYnPxchwS BhV3R4dwtqBAz+nyI/v4bMDDVS0CoSpWPvKmKpkJnPYJacVYsxcWUnHmKLuZxBrK GBfHdkTx40HgGk8uM/l68QiLD56+LcjvBLjY3iwtoAwB2iFPqfb/ELM46EdOUPb3 5j/s6SXkM6pXW38PMB57D+yduwcixK84EcW5hAXso36W0mhNDKQnGSJL48RxK7aI ePTUpYlsSk6xlNeX9v6juSYO90N+9cLin50VeHImCpjxtNBiUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFp0EMxldaqtVXw3xzeuN0QuiJ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzQ4ZDRkMTYtMmQyYS0z NzBmLWI4ODQtM2NkNTRmMGFhMGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlyFQO5iu3oJgN+QsnkDqW/GqbG4w9OmcwfuU0TTaRM72vFAZ3qpWED tK6W46/W+oTWTUgRCCOamp7RV3TupeTEuU4QryqClic85VjfP8151ZPqYOei+gA7 3tiOgL+GhMSZ5y0HMBAKJ2g3m6+zO8bEdbkJ3rMgMy+sxrMZz+JKDr3V3J5Hh6Vw 14l8/Z/x3SUYOSY8Vynv3OduxZfzm+gk6QMB09s4iN/qF+fIcKnoRbaCDqbt7cbB 5ZuYQxSPPs7jjzw5WpRE5Gea1qXsGa77DfbO++QXfbFISddynQdNmQuI3hRcXn0o /anrjBOy1DpGrpgcRSDa1OO2ixiUqs0= -----END CERTIFICATE-----Generated at Sat Apr 26 14:48:47 2025 by rpki-client