$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4fd9a91-edb2-3025-bc74-1a054d6c617d.roa File: d4fd9a91-edb2-3025-bc74-1a054d6c617d.roa (raw, json) Hash identifier: KZW5EmlQRkkpCDSNYBXEr+xlvo6dg9a8VLBRGc8Vpvs= Subject key identifier: 5A:D0:3A:3D:1F:8B:C8:53:74:BE:EA:62:F5:3E:3D:C6:95:90:00:E3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858499F24B5355B96B27BE25DC8C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4fd9a91-edb2-3025-bc74-1a054d6c617d.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 108.170.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:b5:35:5b:96:b2:7b:e2:5d:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=179146db-3e6a-4328-bd8b-066f700a86c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6f:43:f8:51:49:26:27:aa:74:54:c8:52:a9: 66:36:53:89:a5:44:dd:ed:7b:5c:68:fd:63:e4:bf: 80:3e:7a:55:d7:64:e5:a3:77:ee:d6:83:a4:4b:09: dd:d5:a4:35:df:84:0b:f8:94:f5:bf:93:af:ff:ad: 8c:d3:16:d0:69:2f:36:d0:f0:23:f1:16:f2:75:98: 08:ac:d6:f3:c4:6d:e9:d0:fd:f8:f7:85:49:d7:52: 1d:1f:59:e3:9a:3b:9d:9a:e6:c6:48:4d:b8:77:09: 87:9c:cd:bd:04:17:21:9f:82:51:3a:fb:5e:73:71: 77:9c:ac:44:a7:83:c1:76:04:c3:6b:fd:09:ce:ca: df:a8:87:f7:dd:f5:24:63:57:a6:a9:62:c1:fa:85: 41:cd:7b:f1:3b:cb:c5:a6:2c:d7:ce:af:db:d0:80: 86:3f:cf:5a:f8:f4:89:2b:c5:f1:5d:5f:24:96:d6: 58:a0:9d:6a:fe:f4:5f:c9:3d:09:c9:8f:f8:c1:b7: 43:8d:40:68:b6:68:18:f8:d2:b2:ea:20:43:fd:d6: 22:ea:ef:96:8a:5f:fa:a6:e9:96:5b:99:d5:b0:c1: ec:4a:70:ae:f7:3e:d3:27:f2:53:c2:cd:48:f7:d6: a5:ba:be:a4:1c:93:ad:a3:64:52:1f:5f:a2:c1:3b: 23:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D0:3A:3D:1F:8B:C8:53:74:BE:EA:62:F5:3E:3D:C6:95:90:00:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4fd9a91-edb2-3025-bc74-1a054d6c617d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:1c:80:41:3b:a8:f6:92:f1:f0:1a:17:08:07:e2:6e:d4:bb: 3e:a8:84:ab:d4:01:9c:cf:6a:8b:dd:e7:ad:64:20:d2:82:dd: a0:2b:a5:43:01:db:43:57:f3:ab:28:df:f5:e9:ba:3d:8c:5e: 0d:97:3e:e8:8a:65:38:83:91:62:bd:f6:ef:f2:47:73:58:b2: 9c:58:84:ab:55:91:f4:76:98:6e:b5:e7:12:c1:02:37:72:14: fb:f8:42:fa:77:f3:a2:3b:7a:5a:9a:51:6c:c6:61:fa:9a:31: 45:da:17:68:82:87:58:86:48:c6:0b:82:a2:c8:2d:ea:cc:c9: a1:5c:2c:f2:e6:e0:5b:b6:26:ea:22:00:aa:22:b6:78:5e:95: 25:61:30:7b:44:8a:d3:ba:73:a3:3a:8e:d2:c1:d9:07:1a:06: 06:b6:73:05:e5:e3:46:ff:96:55:23:9e:bc:3c:49:d2:94:6e: 5b:44:04:4d:52:24:47:18:a8:1b:f4:86:fa:c1:17:fa:95:47: 89:c4:f9:ed:9a:4b:4d:ae:69:6b:6c:f2:4b:f7:b8:0e:aa:d6: da:1c:2e:bf:b8:2b:39:7b:c6:b3:46:ad:c9:d7:9d:92:e4:4a: 9c:54:8a:13:72:9a:e9:48:a9:c9:e4:7d:c5:fc:42:47:54:e8: ad:1a:20:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJLU1W5aye+JdyMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk MTc5MTQ2ZGItM2U2YS00MzI4LWJkOGItMDY2ZjcwMGE4NmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW9D+FFJJieqdFTIUqlmNlOJpUTd7XtcaP1j 5L+APnpV12Tlo3fu1oOkSwnd1aQ134QL+JT1v5Ov/62M0xbQaS820PAj8RbydZgI rNbzxG3p0P3494VJ11IdH1njmjudmubGSE24dwmHnM29BBchn4JROvtec3F3nKxE p4PBdgTDa/0JzsrfqIf33fUkY1emqWLB+oVBzXvxO8vFpizXzq/b0ICGP89a+PSJ K8XxXV8kltZYoJ1q/vRfyT0JyY/4wbdDjUBotmgY+NKy6iBD/dYi6u+Wil/6pumW W5nVsMHsSnCu9z7TJ/JTws1I99alur6kHJOto2RSH1+iwTsjowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrQOj0fi8hTdL7qYvU+PcaVkADjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDRmZDlhOTEtZWRiMi0z MDI1LWJjNzQtMWEwNTRkNmM2MTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIcgEE7qPaS8fAaFwgH4m7Uuz6ohKvUAZzPaovd561kINKC3aArpUMB 20NX86so3/Xpuj2MXg2XPuiKZTiDkWK99u/yR3NYspxYhKtVkfR2mG615xLBAjdy FPv4Qvp386I7elqaUWzGYfqaMUXaF2iCh1iGSMYLgqLILerMyaFcLPLm4Fu2Juoi AKoitnhelSVhMHtEitO6c6M6jtLB2QcaBga2cwXl40b/llUjnrw8SdKUbltEBE1S JEcYqBv0hvrBF/qVR4nE+e2aS02uaWts8kv3uA6q1tocLr+4Kzl7xrNGrcnXnZLk SpxUihNymulIqcnkfcX8QkdU6K0aIIg= -----END CERTIFICATE-----Generated at Sat Apr 26 17:44:18 2025 by rpki-client