$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/31f66624-a6b9-3acd-938b-89b2386f5b28.roa File: 31f66624-a6b9-3acd-938b-89b2386f5b28.roa (raw, json) Hash identifier: knYGDpDOAzU3fDh/TrQM+YC4EkNyLfNyrHLrhWcMLzc= Subject key identifier: DA:01:AB:62:80:E3:12:6D:8C:FE:79:9C:56:24:2F:55:10:03:7C:52 Certificate issuer: /CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Certificate serial: 010D0C9F4328584A3A15855C4AB3BC585AE435A4 Authority key identifier: B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/31f66624-a6b9-3acd-938b-89b2386f5b28.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 40788 IP address blocks: 108.168.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:85:5c:4a:b3:bc:58:5a:e4:35:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=46c5f14c-e2fa-44a5-a285-4dc45fcdf318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bd:b0:06:bc:a9:81:1e:21:f8:e8:2d:cc:b0: ab:2b:6b:8b:61:6b:e8:ac:5f:93:23:84:80:0f:d6: 71:a5:c5:e3:89:93:16:b3:77:b4:b1:0c:d7:b6:31: 71:76:e0:33:c3:32:9a:8d:6b:56:f0:63:9f:9f:ab: 27:f5:33:b4:6b:ac:e1:ce:00:b2:d4:58:7c:bf:62: 56:ef:bd:ae:d6:4e:9a:c4:7b:e4:e3:89:f3:10:29: fb:f1:c4:3d:09:7d:46:f3:6e:db:d0:32:c1:83:37: 4d:72:9e:da:18:4d:e2:31:65:29:25:ec:b3:2d:41: 58:37:cc:4f:0e:eb:be:81:62:85:83:ba:68:04:b5: 5d:17:e8:ab:81:be:e2:83:13:67:7e:76:c0:10:ce: 7f:65:cd:78:73:fe:56:d3:8a:e8:3e:ba:c4:11:fb: ce:bd:4f:a2:67:7a:66:fc:38:8a:41:54:50:f3:10: c7:8a:18:7f:ea:18:9f:05:e4:f9:69:9a:ab:d0:37: d3:35:07:dc:f8:15:8f:37:ff:08:0e:3f:fa:7a:6b: ee:0c:ef:7e:f6:af:50:f6:9a:89:70:7b:24:84:15: 74:25:c6:e5:51:51:de:d0:5e:95:66:13:c5:3a:0a: 55:27:e1:97:66:f4:13:b6:4b:1c:47:51:94:f2:5f: e3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:01:AB:62:80:E3:12:6D:8C:FE:79:9C:56:24:2F:55:10:03:7C:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/31f66624-a6b9-3acd-938b-89b2386f5b28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl X509v3 Authority Key Identifier: keyid:B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer sbgp-ipAddrBlock: critical IPv4: 108.168.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:bd:ae:55:88:34:e2:01:ce:8f:98:c2:f5:f7:fe:03:c1:ef: ba:ca:16:a8:52:6f:0b:b4:87:22:83:8e:5a:df:51:20:19:b6: 9f:c2:c4:a3:df:2c:7c:4b:a3:47:d2:5f:d1:02:75:97:e3:ce: f2:12:2c:a8:76:a1:7f:54:0d:0b:65:b4:9c:fd:94:8f:f7:51: c2:50:ba:f1:aa:ee:20:b3:b1:cc:20:fe:67:92:d8:6f:6d:e1: 1c:95:38:c9:3d:0b:26:b9:7e:8f:8b:43:8e:2b:fe:74:38:3f: 9c:f6:e7:0d:0a:50:05:b7:6e:8a:fb:32:48:95:82:a8:5b:e4: 44:b7:0d:72:05:f6:aa:58:f0:6f:36:6f:8c:12:16:34:d0:58: a7:87:97:fb:a6:bf:b6:d4:23:7b:42:8b:67:a1:1d:e1:d0:cb: 18:9e:01:22:57:90:37:4d:6e:8c:7b:0e:a7:0b:b7:b5:80:d6: 4d:74:a1:19:84:51:1c:59:f1:fb:92:05:eb:9e:61:e3:cd:70: 17:e3:2b:91:be:fc:38:e6:f7:d3:f0:a9:1e:c9:f9:49:c4:f3: ca:e4:76:b2:48:a5:c4:63:8d:70:ad:37:36:d5:cb:bd:d7:76: 8b:9b:e2:8d:10:14:e1:ff:44:6a:a2:4f:9f:10:66:b2:81:a6: de:5e:0b:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FYVcSrO8WFrkNaQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWMyOWEwYmUtNzJhOC00ODk0LThjMGMtZjRkMjZlM2Fl MDU5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk NDZjNWYxNGMtZTJmYS00NGE1LWEyODUtNGRjNDVmY2RmMzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL2wBrypgR4h+OgtzLCrK2uLYWvorF+TI4SA D9ZxpcXjiZMWs3e0sQzXtjFxduAzwzKajWtW8GOfn6sn9TO0a6zhzgCy1Fh8v2JW 772u1k6axHvk44nzECn78cQ9CX1G827b0DLBgzdNcp7aGE3iMWUpJeyzLUFYN8xP Duu+gWKFg7poBLVdF+irgb7igxNnfnbAEM5/Zc14c/5W04roPrrEEfvOvU+iZ3pm /DiKQVRQ8xDHihh/6hifBeT5aZqr0DfTNQfc+BWPN/8IDj/6emvuDO9+9q9Q9pqJ cHskhBV0JcblUVHe0F6VZhPFOgpVJ+GXZvQTtkscR1GU8l/jeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNoBq2KA4xJtjP55nFYkL1UQA3xSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5 YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQyNmUzYWUwNTkvMzFmNjY2MjQtYTZiOS0z YWNkLTkzOGItODliMjM4NmY1YjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWMyOWEwYmUtNzJhOC00ODk0LThj MGMtZjRkMjZlM2FlMDU5LzFjMjlhMGJlLTcyYTgtNDg5NC04YzBjLWY0ZDI2ZTNh ZTA1OS5jcmwwHwYDVR0jBBgwFoAUt+lHh3Pe7UatcsY/Em0QrrFWmR4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQy NmUzYWUwNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHbKgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAW9rlWINOIBzo+YwvX3/gPB77rKFqhSbwu0hyKDjlrfUSAZtp/CxKPf LHxLo0fSX9ECdZfjzvISLKh2oX9UDQtltJz9lI/3UcJQuvGq7iCzscwg/meS2G9t 4RyVOMk9Cya5fo+LQ44r/nQ4P5z25w0KUAW3bor7MkiVgqhb5ES3DXIF9qpY8G82 b4wSFjTQWKeHl/umv7bUI3tCi2ehHeHQyxieASJXkDdNbox7DqcLt7WA1k10oRmE URxZ8fuSBeueYePNcBfjK5G+/Djm99PwqR7J+UnE88rkdrJIpcRjjXCtNzbVy73X doub4o0QFOH/RGqiT58QZrKBpt5eC0s= -----END CERTIFICATE-----Generated at Mon Jun 30 10:22:13 2025 by rpki-client