$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ecfb5c54-bcda-3f13-a79f-f3128d2c146b.roa File: ecfb5c54-bcda-3f13-a79f-f3128d2c146b.roa (raw, json) Hash identifier: ku1RiqQ/Z16lnGwCb38hC/0l1jCXoxeuGrwkQb2AGz4= Subject key identifier: 85:D6:01:45:CC:B5:28:54:C0:D2:61:67:BF:52:18:4E:A2:EA:DE:23 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858499F24CD195F1ECB07D8747480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ecfb5c54-bcda-3f13-a79f-f3128d2c146b.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 108.177.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:cd:19:5f:1e:cb:07:d8:74:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=c1117c14-96f2-4aa7-9a3a-c3138e5e293f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:16:35:df:e7:77:80:d4:c2:6b:06:ea:ce:ca: c0:c0:ad:68:ae:39:12:46:94:10:b4:f2:a5:02:e7: 6e:4c:ce:a4:96:da:89:4c:af:d3:47:c6:1e:b7:fa: 19:0b:34:7e:bf:fa:80:1e:6d:dc:12:b5:20:96:a5: a7:90:32:f3:bf:1a:23:36:b0:ff:e6:09:8f:9e:f0: 99:d8:36:44:d3:c7:77:bc:77:d0:81:d5:50:8d:11: d8:1e:12:f4:cb:79:bc:61:73:1b:e9:3f:59:56:b5: 84:62:ce:12:b1:6e:8d:4d:d5:6f:ab:aa:91:7f:e9: 1e:6d:90:a0:da:60:a3:fa:04:12:1f:43:3b:e3:b8: 17:55:c2:8d:44:be:1d:03:a0:ef:df:7a:14:ca:47: 40:6d:2f:34:d3:df:41:8b:e1:fe:2a:35:65:9c:f8: e4:d0:31:6f:aa:21:01:8d:6e:0d:3b:a8:49:6c:cc: 0a:63:76:71:0c:78:df:f4:03:ea:48:8d:d3:f0:90: 3c:be:51:40:40:85:45:5a:3b:57:3a:87:a8:34:41: c0:b4:46:90:e9:22:e4:4f:99:ef:ef:db:48:fa:c1: 7a:5e:c2:91:f3:c5:5b:7c:52:ed:22:e2:17:93:49: da:a9:3a:bd:38:76:2e:db:ef:e4:2f:28:c0:87:4b: 34:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D6:01:45:CC:B5:28:54:C0:D2:61:67:BF:52:18:4E:A2:EA:DE:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ecfb5c54-bcda-3f13-a79f-f3128d2c146b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:1d:8b:65:a4:49:2a:07:0e:0e:99:d3:37:15:94:bd:35:19: a8:ac:59:1c:e1:14:6a:8f:54:21:d7:f9:d1:30:ec:f9:da:c2: 8c:0f:f4:3a:4d:6f:7a:25:5a:8e:9e:34:03:a7:24:20:40:f7: 1d:a7:77:dd:83:57:99:3e:b4:28:24:cd:2d:12:61:05:f5:a1: 54:0e:b1:26:a4:ae:ef:4d:5a:10:0a:f3:3f:84:6f:92:a4:3d: be:39:8f:ce:b3:04:3b:4b:ea:7e:01:aa:e8:7b:b2:f5:0d:98: 85:ec:04:9c:1a:e8:a1:96:92:45:6e:01:a1:c7:ff:cb:55:25: 69:e8:61:36:2e:db:98:7e:69:1e:0e:80:88:fd:f0:e9:7c:7f: 74:cd:47:28:3f:c8:7e:43:4c:c4:01:82:5f:9c:5d:cb:cd:6a: 7f:24:ab:7f:37:f0:9d:b0:e9:50:2f:c8:f5:4b:b0:35:cd:f6: 7e:4d:d9:5e:c7:18:73:f7:71:4b:3a:25:e4:c6:f2:49:48:89: b2:58:84:7a:37:31:85:74:af:a5:81:70:51:3e:06:41:f1:1a: 80:49:c1:af:6b:08:85:5d:b1:54:f4:b1:2d:1f:1c:0a:d6:6e: db:e3:70:0c:41:cb:4a:ed:96:87:80:37:3c:52:8b:e5:65:fe: 85:f4:37:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJM0ZXx7LB9h0dIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk YzExMTdjMTQtOTZmMi00YWE3LTlhM2EtYzMxMzhlNWUyOTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhY13+d3gNTCawbqzsrAwK1orjkSRpQQtPKl AuduTM6kltqJTK/TR8Yet/oZCzR+v/qAHm3cErUglqWnkDLzvxojNrD/5gmPnvCZ 2DZE08d3vHfQgdVQjRHYHhL0y3m8YXMb6T9ZVrWEYs4SsW6NTdVvq6qRf+kebZCg 2mCj+gQSH0M747gXVcKNRL4dA6Dv33oUykdAbS80099Bi+H+KjVlnPjk0DFvqiEB jW4NO6hJbMwKY3ZxDHjf9APqSI3T8JA8vlFAQIVFWjtXOoeoNEHAtEaQ6SLkT5nv 79tI+sF6XsKR88VbfFLtIuIXk0naqTq9OHYu2+/kLyjAh0s0mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXWAUXMtShUwNJhZ79SGE6i6t4jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZWNmYjVjNTQtYmNkYS0z ZjEzLWE3OWYtZjMxMjhkMmMxNDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLFwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEdi2WkSSoHDg6Z0zcVlL01GaisWRzhFGqPVCHX+dEw7PnawowP9DpN b3olWo6eNAOnJCBA9x2nd92DV5k+tCgkzS0SYQX1oVQOsSakru9NWhAK8z+Eb5Kk Pb45j86zBDtL6n4Bquh7svUNmIXsBJwa6KGWkkVuAaHH/8tVJWnoYTYu25h+aR4O gIj98Ol8f3TNRyg/yH5DTMQBgl+cXcvNan8kq3838J2w6VAvyPVLsDXN9n5N2V7H GHP3cUs6JeTG8klIibJYhHo3MYV0r6WBcFE+BkHxGoBJwa9rCIVdsVT0sS0fHArW btvjcAxBy0rtloeANzxSi+Vl/oX0NzI= -----END CERTIFICATE-----Generated at Sat Apr 26 20:49:58 2025 by rpki-client