$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c59f4222-5684-3766-ad99-c3dde30ed32e.roa File: c59f4222-5684-3766-ad99-c3dde30ed32e.roa (raw, json) Hash identifier: uvXFBFlBiOXP1KnClzxFZD59VrAFrT3i0HeGPNYiU1g= Subject key identifier: 59:EB:43:B1:79:52:C0:63:14:FD:58:F4:FB:C2:06:BF:1C:93:ED:83 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849AF772B211A10CE3B8DBA7F80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c59f4222-5684-3766-ad99-c3dde30ed32e.roa Signing time: Tue 29 Apr 2025 09:20:24 +0000 ROA not before: Tue 29 Apr 2025 09:20:24 +0000 ROA not after: Mon 28 Jul 2025 09:20:24 +0000 asID: 30036 IP address blocks: 108.178.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:77:2b:21:1a:10:ce:3b:8d:ba:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 29 09:20:24 2025 GMT Not After : Jul 28 09:20:24 2025 GMT Subject: CN=c20ceb3e-1701-4833-9b37-da8fdccd31d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:21:c9:bd:6a:69:48:00:ce:eb:18:1a:f9:b4: d1:76:44:a7:3b:07:98:1a:38:d6:40:77:ec:6a:28: 71:2b:19:8d:91:75:64:85:50:e6:12:4a:7d:f3:0c: 0c:e4:8e:05:2b:35:1e:25:3f:9f:9b:16:34:c8:f5: 11:51:09:58:14:21:cc:d5:f0:f7:30:7f:04:94:a4: e6:e4:df:8e:09:c7:91:9a:c2:fa:3f:9a:de:5a:7c: fe:4c:73:67:69:22:40:41:3c:bd:e2:c5:dc:ca:ed: 8a:04:e3:c3:5c:3b:f5:15:ab:ed:7d:4a:b1:8f:ad: 88:73:9e:33:79:04:ba:18:62:71:72:f2:79:6d:88: 3f:25:92:ce:d5:39:e7:c3:9f:fa:71:19:b4:32:f4: cc:4f:a5:81:6b:05:99:4b:2a:2a:75:4d:b1:4e:34: 7d:04:88:69:65:bf:7e:22:9b:22:6a:de:79:c7:f7: cf:08:e8:15:d0:6e:26:1f:59:92:bf:d3:9c:37:ca: e2:26:1e:f1:70:aa:e8:09:70:13:89:a7:7d:4f:64: ce:c1:89:c9:05:8f:ad:8b:a5:68:99:2b:55:3e:fc: c9:b9:ad:b1:8b:12:f1:40:0d:83:3c:74:48:97:a4: 84:1b:93:da:cc:8b:77:48:0e:c7:ca:cf:ee:0b:ab: 56:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:EB:43:B1:79:52:C0:63:14:FD:58:F4:FB:C2:06:BF:1C:93:ED:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c59f4222-5684-3766-ad99-c3dde30ed32e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.178.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:a9:9c:97:5f:20:cf:f3:9a:43:35:91:05:9f:5a:10:2f:79: c4:0f:e5:b8:fc:ff:06:75:7b:dd:49:b9:9d:57:b2:d7:8f:9f: 6c:2e:e2:80:b5:6f:f5:ba:ed:23:45:91:ac:79:0c:7e:63:d0: 1d:1e:19:38:77:c6:74:1a:bf:16:1d:5b:ee:b7:c0:81:a0:23: 4c:fc:d7:a7:6a:88:66:c4:d7:a1:98:ca:5e:2c:a3:ec:c4:0b: 2f:2c:c8:1e:89:e2:c3:03:b8:0f:45:a1:d7:c7:27:3a:27:1e: 7d:2b:82:d1:97:08:78:21:32:46:0a:95:d5:dc:bb:9e:ba:5c: 59:68:90:d1:5a:a2:f2:02:54:9d:b5:7a:28:aa:af:59:ae:c8: 47:21:07:35:01:75:0e:d0:8d:74:e3:3a:7c:1c:c3:5b:4a:b1: 25:3d:1b:0e:13:42:33:f5:c4:53:22:d2:78:15:35:ef:c8:21: 6c:5e:08:29:f4:6b:25:b6:ad:a8:de:e6:22:01:fd:67:3d:a7: 1f:dc:22:42:17:35:1f:f7:8c:24:ba:99:75:f5:68:a7:59:69: cb:8a:5e:8f:1f:cc:5c:8f:b1:8c:35:ef:8e:75:26:cc:16:ba: cc:47:62:0a:3d:7a:5a:c6:a8:20:84:ce:24:1e:83:52:68:80: 3b:ed:e6:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmvdyshGhDOO426f4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyOTA5MjAyNFoXDTI1MDcyODA5MjAyNFowLzEtMCsGA1UEAxMk YzIwY2ViM2UtMTcwMS00ODMzLTliMzctZGE4ZmRjY2QzMWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSHJvWppSADO6xga+bTRdkSnOweYGjjWQHfs aihxKxmNkXVkhVDmEkp98wwM5I4FKzUeJT+fmxY0yPURUQlYFCHM1fD3MH8ElKTm 5N+OCceRmsL6P5reWnz+THNnaSJAQTy94sXcyu2KBOPDXDv1FavtfUqxj62Ic54z eQS6GGJxcvJ5bYg/JZLO1Tnnw5/6cRm0MvTMT6WBawWZSyoqdU2xTjR9BIhpZb9+ Ipsiat55x/fPCOgV0G4mH1mSv9OcN8riJh7xcKroCXATiad9T2TOwYnJBY+ti6Vo mStVPvzJua2xixLxQA2DPHRIl6SEG5PazIt3SA7Hys/uC6tWRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnrQ7F5UsBjFP1Y9PvCBr8ck+2DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYzU5ZjQyMjItNTY4NC0z NzY2LWFkOTktYzNkZGUzMGVkMzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGbLLAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEepnJdfIM/zmkM1kQWfWhAvecQP5bj8/wZ1e91JuZ1XstePn2wu4oC1 b/W67SNFkax5DH5j0B0eGTh3xnQavxYdW+63wIGgI0z816dqiGbE16GYyl4so+zE Cy8syB6J4sMDuA9FodfHJzonHn0rgtGXCHghMkYKldXcu566XFlokNFaovICVJ21 eiiqr1muyEchBzUBdQ7QjXTjOnwcw1tKsSU9Gw4TQjP1xFMi0ngVNe/IIWxeCCn0 ayW2raje5iIB/Wc9px/cIkIXNR/3jCS6mXX1aKdZacuKXo8fzFyPsYw17451JswW usxHYgo9elrGqCCEziQeg1JogDvt5ms= -----END CERTIFICATE-----Generated at Thu May 15 01:59:49 2025 by rpki-client