$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ec87e182-1298-3a9f-b8ca-3428281070d9.roa File: ec87e182-1298-3a9f-b8ca-3428281070d9.roa (raw, json) Hash identifier: X8VRR+RwvpSDUPZeHNpKhPJqivrMoWJ0k57phPGUAWw= Subject key identifier: 9A:60:FD:96:04:8D:7F:80:67:08:C2:45:23:FF:1B:4F:79:4A:CB:EF Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F43285849D1650CE50ED21FA26254CC80 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ec87e182-1298-3a9f-b8ca-3428281070d9.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 62651 IP address blocks: 108.171.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:0c:e5:0e:d2:1f:a2:62:54:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=aa3005db-8b1e-40bd-8777-ace194566526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bf:0c:3d:2a:0f:26:da:e6:22:99:96:b2:76: 2d:5c:66:77:2a:91:ec:1b:3b:78:a2:82:25:cf:2f: f2:31:4b:04:00:5a:8d:90:b8:3a:84:17:9c:73:33: 4d:ac:30:5b:be:fe:37:74:36:80:67:52:ca:1d:a2: 8a:a1:93:6f:dc:17:40:10:04:18:3b:32:a9:b5:3b: 4f:87:56:8a:de:e6:51:b3:c3:08:a7:8d:e9:b2:8d: dd:98:f8:bc:f4:5b:e9:b4:86:30:6f:10:8a:36:ce: 0c:f7:e7:93:9a:1c:75:a1:4c:e5:77:63:7d:9f:79: 16:da:70:f8:3b:53:ee:92:08:3a:85:eb:20:9f:f5: 51:b2:bb:1b:48:4e:06:5c:34:f8:6a:61:f2:d6:f9: 87:8b:de:ac:cf:4d:d6:f7:94:2d:0c:ca:92:b2:33: e5:4b:a3:1b:c5:5a:d4:0b:9b:c3:f8:52:40:a1:46: 39:45:03:8b:a7:07:9b:4b:43:96:53:e6:d8:2c:9b: 1a:7f:3d:d6:39:5c:5f:e4:50:82:6d:81:32:38:0a: 36:66:97:83:25:e1:0c:02:4a:a9:99:0f:1a:d6:6c: cb:38:87:b0:36:bf:c5:87:b3:0b:54:44:f5:d3:26: 1c:32:f6:d8:a4:5e:06:fb:c2:e2:a2:b9:b0:88:39: 24:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:60:FD:96:04:8D:7F:80:67:08:C2:45:23:FF:1B:4F:79:4A:CB:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ec87e182-1298-3a9f-b8ca-3428281070d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 108.171.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:ad:9d:ce:4b:1e:75:bb:66:f0:d5:d4:69:8a:30:85:39:e3: 4c:86:7b:76:f4:aa:58:df:77:4f:e1:9b:5c:c5:6a:bf:78:1b: 02:c1:dd:b9:83:9a:32:e4:13:45:ea:dc:7e:2a:27:99:d2:23: e1:e6:df:da:d9:e0:c7:79:e5:2c:60:5b:b1:4f:28:5c:75:8b: 8e:ab:07:71:b3:ff:99:29:43:39:1d:7b:39:07:77:9c:bb:99: 2c:90:36:ac:ff:ac:fc:b8:2f:00:9b:c8:a0:78:6f:25:e7:d2: 26:97:0b:75:1c:23:be:08:83:f2:6a:68:6c:74:32:25:a0:50: a5:0d:0a:90:da:eb:f0:5a:12:c6:ee:05:26:08:4c:5e:31:d2: 6e:0a:e4:e9:9b:a0:fb:70:26:64:1c:07:22:f1:e2:0a:d9:05: 1e:cf:af:77:2e:c3:ad:14:83:a2:5d:2d:bc:82:67:40:de:52: 66:38:fc:76:07:e7:93:79:92:88:73:6d:b3:3e:e1:b9:9d:d3: 44:9f:f8:a6:fa:ef:46:8d:6d:a0:18:66:12:6b:dd:0a:d7:cc: cc:b3:df:9f:19:84:9a:c9:71:ca:71:0c:ff:4d:f8:64:2c:4a: 41:c3:4d:c3:ea:f0:cc:2c:88:f7:17:43:ac:95:a3:9d:6c:b1: fa:79:35:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZQzlDtIfomJUzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk YWEzMDA1ZGItOGIxZS00MGJkLTg3NzctYWNlMTk0NTY2NTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL8MPSoPJtrmIpmWsnYtXGZ3KpHsGzt4ooIl zy/yMUsEAFqNkLg6hBecczNNrDBbvv43dDaAZ1LKHaKKoZNv3BdAEAQYOzKptTtP h1aK3uZRs8MIp43pso3dmPi89FvptIYwbxCKNs4M9+eTmhx1oUzld2N9n3kW2nD4 O1Pukgg6hesgn/VRsrsbSE4GXDT4amHy1vmHi96sz03W95QtDMqSsjPlS6MbxVrU C5vD+FJAoUY5RQOLpwebS0OWU+bYLJsafz3WOVxf5FCCbYEyOAo2ZpeDJeEMAkqp mQ8a1mzLOIewNr/Fh7MLVET10yYcMvbYpF4G+8LiormwiDkk/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpg/ZYEjX+AZwjCRSP/G095SsvvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZWM4N2UxODItMTI5OC0z YTlmLWI4Y2EtMzQyODI4MTA3MGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKtmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWtnc5LHnW7ZvDV1GmKMIU540yGe3b0qljfd0/hm1zFar94GwLB3bmD mjLkE0Xq3H4qJ5nSI+Hm39rZ4Md55SxgW7FPKFx1i46rB3Gz/5kpQzkdezkHd5y7 mSyQNqz/rPy4LwCbyKB4byXn0iaXC3UcI74Ig/JqaGx0MiWgUKUNCpDa6/BaEsbu BSYITF4x0m4K5OmboPtwJmQcByLx4grZBR7Pr3cuw60Ug6JdLbyCZ0DeUmY4/HYH 55N5kohzbbM+4bmd00Sf+Kb670aNbaAYZhJr3QrXzMyz358ZhJrJccpxDP9N+GQs SkHDTcPq8MwsiPcXQ6yVo51ssfp5NYs= -----END CERTIFICATE-----Generated at Mon May 12 18:57:22 2025 by rpki-client