$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f4147287-cce9-3a3f-9251-9b92391a0868.roa File: f4147287-cce9-3a3f-9251-9b92391a0868.roa (raw, json) Hash identifier: +xiRiYZu2zuVcQvivy+LiWUQXfqH/VPSyUUBUThovLA= Subject key identifier: 87:3E:C2:99:E6:2C:77:4F:E9:75:71:C4:E1:28:D1:08:7D:E0:66:93 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BDDA37EDEC7CD888F0C5D980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f4147287-cce9-3a3f-9251-9b92391a0868.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 15169 IP address blocks: 108.177.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:37:ed:ec:7c:d8:88:f0:c5:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=fe10071e-3774-44b5-b16c-d0cf37991350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:98:85:91:4f:d3:40:d9:47:37:4c:af:0c:87: bf:30:c4:33:db:08:50:42:f1:e6:6e:c9:e6:9e:ae: 93:71:43:42:b9:fc:72:ea:be:6e:86:db:63:64:9f: 20:f9:d7:ab:8e:d4:73:b8:b0:af:ef:52:0d:a2:d3: ca:57:d8:10:d5:2f:60:ac:ba:1d:23:f8:cb:8d:04: 77:88:98:eb:ca:12:bc:fd:f0:20:e4:7b:f2:a3:2e: 38:90:60:ff:83:4d:c3:8c:8c:77:e7:53:2f:24:0e: aa:1b:c6:d2:66:e3:4f:67:d4:d5:bf:10:2d:28:7d: e8:64:a8:4e:91:33:12:38:f7:54:7e:8a:ec:aa:59: bb:f8:92:82:0e:1e:a7:c7:49:1c:a3:10:87:59:9b: f6:67:40:08:79:77:9f:60:4a:45:4f:5c:4c:0c:5f: c7:71:4b:e2:6f:d8:47:dc:fa:c8:8d:8c:71:ca:4e: 89:45:00:2f:c7:21:b1:f3:57:12:54:07:ec:bc:a2: d8:61:8e:4c:a9:49:f9:3f:2e:c5:ab:2f:84:c5:9f: 85:2e:0e:a8:6e:5b:ac:83:be:4a:94:ab:5d:72:3d: ff:e5:d2:2d:1e:7f:c1:07:dc:b9:fd:cf:c0:0f:24: 43:53:aa:6a:b7:17:3d:82:bb:4c:58:c2:5a:ad:ee: 00:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:3E:C2:99:E6:2C:77:4F:E9:75:71:C4:E1:28:D1:08:7D:E0:66:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f4147287-cce9-3a3f-9251-9b92391a0868.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:93:6c:91:34:9f:20:2b:8e:f6:f0:db:9b:17:9a:0a:ee:59: d7:77:3d:e6:f3:85:65:f3:28:30:f2:a4:46:2f:cd:47:6f:d5: b3:13:0b:f6:b5:bd:ad:8f:2e:45:65:05:70:7d:92:a6:20:be: 5d:c7:ab:b4:c4:38:af:53:a5:36:fa:1f:9c:76:80:e7:ad:b3: fb:4e:07:be:32:55:49:9b:64:44:08:ff:61:1d:f7:a2:cb:52: 0c:81:26:ce:88:e8:87:9e:d8:bf:64:ef:b2:f7:2d:32:a9:a4: cd:52:36:38:2a:71:78:62:3a:bf:63:11:e6:b4:4c:aa:1f:18: c7:13:2e:18:ad:84:37:37:80:fa:22:2a:c5:9e:97:04:e7:a3: dd:58:5e:3d:fe:90:d6:30:12:28:4b:8b:24:48:ba:6a:52:32: cd:99:b8:39:dd:16:ee:23:80:c7:fb:31:68:ca:2c:29:2b:d2: cf:96:d1:43:12:ad:3e:ad:bb:d1:c9:9d:17:74:49:ed:45:c7: 48:e0:08:34:de:df:25:73:46:d5:c9:85:23:c0:7a:e0:b8:00: 67:7f:d4:40:45:26:66:45:e2:22:ce:b1:c5:d8:77:db:1a:53: 02:ec:20:58:27:c5:d1:06:7d:96:e8:bf:3b:24:e5:af:cc:2c: a5:db:19:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jft7HzYiPDF2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk ZmUxMDA3MWUtMzc3NC00NGI1LWIxNmMtZDBjZjM3OTkxMzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpiFkU/TQNlHN0yvDIe/MMQz2whQQvHmbsnm nq6TcUNCufxy6r5uhttjZJ8g+derjtRzuLCv71INotPKV9gQ1S9grLodI/jLjQR3 iJjryhK8/fAg5Hvyoy44kGD/g03DjIx351MvJA6qG8bSZuNPZ9TVvxAtKH3oZKhO kTMSOPdUforsqlm7+JKCDh6nx0kcoxCHWZv2Z0AIeXefYEpFT1xMDF/HcUvib9hH 3PrIjYxxyk6JRQAvxyGx81cSVAfsvKLYYY5MqUn5Py7Fqy+ExZ+FLg6oblusg75K lKtdcj3/5dItHn/BB9y5/c/ADyRDU6pqtxc9grtMWMJare4AwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIc+wpnmLHdP6XVxxOEo0Qh94GaTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjQxNDcyODctY2NlOS0z YTNmLTkyNTEtOWI5MjM5MWEwODY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLFlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSTbJE0nyArjvbw25sXmgruWdd3PebzhWXzKDDypEYvzUdv1bMTC/a1 va2PLkVlBXB9kqYgvl3Hq7TEOK9TpTb6H5x2gOets/tOB74yVUmbZEQI/2Ed96LL UgyBJs6I6Iee2L9k77L3LTKppM1SNjgqcXhiOr9jEea0TKofGMcTLhithDc3gPoi KsWelwTno91YXj3+kNYwEihLiyRIumpSMs2ZuDndFu4jgMf7MWjKLCkr0s+W0UMS rT6tu9HJnRd0Se1Fx0jgCDTe3yVzRtXJhSPAeuC4AGd/1EBFJmZF4iLOscXYd9sa UwLsIFgnxdEGfZbovzsk5a/MLKXbGck= -----END CERTIFICATE-----Generated at Sun Jun 15 16:01:49 2025 by rpki-client