$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8acef3d-fb29-33d5-b657-56e7f8e32298.roa File: d8acef3d-fb29-33d5-b657-56e7f8e32298.roa (raw, json) Hash identifier: DMaLVzKLGXym1MflYXlP4xGazJN+7heBbpuXllbS2MM= Subject key identifier: 1E:86:29:67:97:8D:30:A2:71:9B:A4:A5:38:10:CE:8F:08:2C:25:1D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858499F24DA4B29C8A21431A7FFE0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8acef3d-fb29-33d5-b657-56e7f8e32298.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 108.177.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:da:4b:29:c8:a2:14:31:a7:ff:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=77f4d17a-864a-4f8f-858d-453cd1d2fc90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1c:1e:17:a4:22:e8:c5:cd:63:83:e5:74:75: a9:a0:3e:c0:6a:df:6c:0b:c6:f1:b0:ec:46:cb:e8: f7:8f:98:95:57:5f:b0:76:0d:52:d6:c2:f9:5a:38: 77:59:bc:5b:8d:2a:97:88:87:b3:bf:75:10:c3:14: 77:fd:48:fe:c8:e0:7e:c6:be:71:9f:43:29:eb:44: ae:8f:4b:1f:f4:09:98:1b:0b:48:1b:bb:2a:80:1c: 13:47:de:73:48:4b:ea:59:5a:7f:b2:6e:ac:e4:98: 2b:9a:78:42:22:3f:4a:7b:f8:34:26:e3:74:85:c5: 36:29:89:e1:37:f0:bb:33:10:cf:a5:b3:f6:7c:14: da:2f:a3:01:8b:4f:0e:8d:30:1d:cb:1b:fc:4d:96: 94:d4:58:72:12:8a:d2:7c:16:bc:f7:02:7d:c3:05: f1:eb:6e:ce:68:85:49:7e:c9:66:83:2c:1e:dd:8f: 08:fd:6d:53:62:17:8d:39:67:98:58:9a:5c:3b:06: 08:a7:5d:fb:c8:a5:38:0f:a6:8b:c7:2f:3a:50:96: 96:ac:c7:47:90:d7:fd:dd:cd:51:cb:86:5c:f7:ec: c7:e7:b3:71:2c:91:64:06:b0:35:81:72:f6:68:e1: 14:a3:1b:7f:dc:d6:ef:04:f2:43:6d:9b:e7:26:25: 03:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:86:29:67:97:8D:30:A2:71:9B:A4:A5:38:10:CE:8F:08:2C:25:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8acef3d-fb29-33d5-b657-56e7f8e32298.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:c8:bd:56:c7:01:6e:80:a9:ed:47:10:63:43:39:a2:b2:f5: b1:fb:a2:55:c8:53:c8:e2:ba:aa:03:38:db:62:71:d4:65:f7: 74:f7:93:95:95:cc:e9:f5:d1:74:88:76:eb:41:64:51:ab:75: 16:0e:7f:fc:7f:57:9e:7a:c2:4c:c9:52:48:2b:ea:62:7f:e0: 15:50:00:f2:c6:e7:0a:97:43:60:24:92:25:0d:3c:04:32:2d: 29:c9:fb:36:fe:a3:19:e3:dd:f9:8d:c6:23:4d:63:cd:fa:fb: 09:e9:84:c8:b2:83:f7:eb:e5:5d:19:85:89:39:ca:13:04:a5: d5:44:14:67:5c:a0:66:62:7a:70:20:96:a7:e8:68:8a:7f:2a: 83:cc:71:62:22:ea:ed:22:61:2d:8a:c4:0a:8d:56:6b:2a:2c: a5:d3:cc:35:33:30:ee:d7:b6:8c:b8:fc:1a:fb:11:9b:fa:5c: b9:b4:06:26:4c:5a:b1:28:31:62:ae:0e:35:60:ad:64:31:39: d7:68:fc:28:45:ec:5a:ff:76:cc:04:13:f7:c6:5c:80:ad:62: 38:6a:55:be:f2:42:f2:c8:63:05:0a:1a:ce:70:a2:74:fe:d6: b2:9e:67:70:f0:22:c8:5e:d2:40:5b:da:0d:e0:6f:8b:94:03: 7a:8e:87:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNpLKciiFDGn/+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NzdmNGQxN2EtODY0YS00ZjhmLTg1OGQtNDUzY2QxZDJmYzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRweF6Qi6MXNY4PldHWpoD7Aat9sC8bxsOxG y+j3j5iVV1+wdg1S1sL5Wjh3WbxbjSqXiIezv3UQwxR3/Uj+yOB+xr5xn0Mp60Su j0sf9AmYGwtIG7sqgBwTR95zSEvqWVp/sm6s5JgrmnhCIj9Ke/g0JuN0hcU2KYnh N/C7MxDPpbP2fBTaL6MBi08OjTAdyxv8TZaU1FhyEorSfBa89wJ9wwXx627OaIVJ fslmgywe3Y8I/W1TYheNOWeYWJpcOwYIp137yKU4D6aLxy86UJaWrMdHkNf93c1R y4Zc9+zH57NxLJFkBrA1gXL2aOEUoxt/3NbvBPJDbZvnJiUDtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6GKWeXjTCicZukpTgQzo8ILCUdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDhhY2VmM2QtZmIyOS0z M2Q1LWI2NTctNTZlN2Y4ZTMyMjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLEVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfIvVbHAW6Aqe1HEGNDOaKy9bH7olXIU8jiuqoDONticdRl93T3k5WV zOn10XSIdutBZFGrdRYOf/x/V556wkzJUkgr6mJ/4BVQAPLG5wqXQ2AkkiUNPAQy LSnJ+zb+oxnj3fmNxiNNY836+wnphMiyg/fr5V0ZhYk5yhMEpdVEFGdcoGZienAg lqfoaIp/KoPMcWIi6u0iYS2KxAqNVmsqLKXTzDUzMO7Xtoy4/Br7EZv6XLm0BiZM WrEoMWKuDjVgrWQxOddo/ChF7Fr/dswEE/fGXICtYjhqVb7yQvLIYwUKGs5wonT+ 1rKeZ3DwIshe0kBb2g3gb4uUA3qOh68= -----END CERTIFICATE-----Generated at Sun Apr 27 11:25:04 2025 by rpki-client