$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df0f12d4-87c9-3563-b9bd-ebecf732394b.roa File: df0f12d4-87c9-3563-b9bd-ebecf732394b.roa (raw, json) Hash identifier: 82eNmRZAmWIMfEimMkTVwBt97zalGZW5enz4KQUuIPA= Subject key identifier: E3:CB:F7:CC:F5:D8:C3:CC:97:C3:E1:9D:F7:A2:64:4A:45:B0:D3:9F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858499F24CCAFA5F6FF646B06E400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df0f12d4-87c9-3563-b9bd-ebecf732394b.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 108.177.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:cc:af:a5:f6:ff:64:6b:06:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=57f01c7f-b753-4b90-ab47-3538bf3b34c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ce:a2:cf:ce:79:1e:4b:7c:0d:6f:fe:40:52: e6:5f:b0:67:c2:f5:16:80:52:e1:95:e0:ee:0a:34: b8:e4:cb:ee:bc:b6:f4:ce:26:5f:7a:c0:01:02:2c: e6:7a:b2:8d:33:0a:2e:db:fe:ab:f7:90:49:1d:15: b1:de:fd:e6:5f:ad:12:2e:e9:e0:58:e6:48:0d:7a: fa:ae:27:7f:9b:74:6b:d5:8f:c0:30:6f:8e:d4:19: 5d:19:1b:9c:c3:93:36:87:ff:25:3a:89:84:c5:9c: 13:1a:6c:f0:ab:75:b0:14:2d:be:f9:c2:fa:78:ae: 6c:e9:91:03:3d:f1:c3:d5:9b:6f:d4:b5:22:f3:06: 68:98:31:d0:ba:c4:1c:01:a4:6d:95:98:c3:05:6b: 5e:b5:85:c1:d5:c9:cd:53:a9:18:24:05:66:13:c0: ba:bd:db:fb:91:dc:75:4e:ab:dd:a3:f6:ff:95:17: 49:ac:7b:6d:51:45:31:b9:b2:6d:f4:d1:76:96:ee: 13:84:c3:ae:0a:99:2a:37:0e:fd:77:4c:71:85:97: 3d:e6:32:6a:20:dc:34:c2:52:e4:bd:c4:29:03:4a: 1c:2d:ad:06:72:83:94:36:95:57:f2:4e:7a:bb:0e: 3e:bb:b1:74:1c:16:67:b3:b1:fa:73:df:87:14:7e: 30:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:CB:F7:CC:F5:D8:C3:CC:97:C3:E1:9D:F7:A2:64:4A:45:B0:D3:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df0f12d4-87c9-3563-b9bd-ebecf732394b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:5f:54:7b:bc:e2:4b:c8:ef:73:37:2a:d3:09:cd:4d:b8:f6: c2:51:0d:b8:6b:bc:4d:05:80:b0:93:60:e6:c4:6b:fc:5d:c2: 89:89:95:c8:0a:59:0b:8d:40:82:f0:82:93:3b:be:4e:6c:3c: 37:95:0d:c0:8c:05:20:57:94:40:c8:8d:71:34:3f:52:92:65: ad:7c:e4:b6:f0:96:e6:f2:58:06:a7:a1:a2:43:8c:e3:08:0b: 8d:90:24:92:8a:7f:1b:d0:4a:9c:ef:fc:02:e9:86:af:96:6f: 02:10:3a:6a:6c:d6:0d:85:ad:d0:11:0d:80:ac:22:90:a3:63: a8:af:5d:b0:54:2a:9d:fb:c2:68:92:c3:90:5b:5e:d7:aa:5f: e9:82:4b:d2:da:a1:80:55:b7:e0:73:e0:fc:bb:e5:c1:d8:4d: 07:61:c9:5e:e3:a2:32:66:47:c6:d1:09:e6:65:6d:af:6c:c8: 5b:99:11:20:74:e0:be:31:d2:22:49:67:da:4f:cb:39:47:89: c4:40:2d:67:1e:16:a2:62:b2:ad:79:3a:dd:21:d7:73:e8:79: 9e:16:20:64:f4:be:99:28:3d:b8:f4:35:52:32:e3:c1:13:f0: 50:49:88:a9:d4:ca:ef:21:ba:f7:5f:1c:bf:78:d5:48:ff:00: e7:51:b4:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJMyvpfb/ZGsG5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NTdmMDFjN2YtYjc1My00YjkwLWFiNDctMzUzOGJmM2IzNGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs6iz855Hkt8DW/+QFLmX7BnwvUWgFLhleDu CjS45MvuvLb0ziZfesABAizmerKNMwou2/6r95BJHRWx3v3mX60SLungWOZIDXr6 rid/m3Rr1Y/AMG+O1BldGRucw5M2h/8lOomExZwTGmzwq3WwFC2++cL6eK5s6ZED PfHD1Ztv1LUi8wZomDHQusQcAaRtlZjDBWtetYXB1cnNU6kYJAVmE8C6vdv7kdx1 Tqvdo/b/lRdJrHttUUUxubJt9NF2lu4ThMOuCpkqNw79d0xxhZc95jJqINw0wlLk vcQpA0ocLa0GcoOUNpVX8k56uw4+u7F0HBZns7H6c9+HFH4wvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPL98z12MPMl8PhnfeiZEpFsNOfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGYwZjEyZDQtODdjOS0z NTYzLWI5YmQtZWJlY2Y3MzIzOTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLEWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpfVHu84kvI73M3KtMJzU249sJRDbhrvE0FgLCTYObEa/xdwomJlcgK WQuNQILwgpM7vk5sPDeVDcCMBSBXlEDIjXE0P1KSZa185LbwlubyWAanoaJDjOMI C42QJJKKfxvQSpzv/ALphq+WbwIQOmps1g2FrdARDYCsIpCjY6ivXbBUKp37wmiS w5BbXteqX+mCS9LaoYBVt+Bz4Py75cHYTQdhyV7jojJmR8bRCeZlba9syFuZESB0 4L4x0iJJZ9pPyzlHicRALWceFqJisq15Ot0h13PoeZ4WIGT0vpkoPbj0NVIy48ET 8FBJiKnUyu8huvdfHL941Uj/AOdRtDQ= -----END CERTIFICATE-----Generated at Sat Apr 26 22:08:22 2025 by rpki-client