$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/97424350-496c-3039-8021-28cda3631346.roa File: 97424350-496c-3039-8021-28cda3631346.roa (raw, json) Hash identifier: PH8qkgfDnzTXVCjN+Y0QMeJPXF9d76597pXacKk7hUY= Subject key identifier: 39:F7:75:61:72:FF:98:3C:0F:11:E7:E2:8D:22:28:47:82:F9:2B:16 Certificate issuer: /CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Certificate serial: 010D0C9F432858499829C6706F9A9CC0F6974980 Authority key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/97424350-496c-3039-8021-28cda3631346.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 21581 IP address blocks: 108.161.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:c6:70:6f:9a:9c:c0:f6:97:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=8b524470-f616-410c-8205-8052f6710a30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:15:ef:84:3e:17:71:3d:1c:08:1e:dc:3d:b6: 1b:b5:fb:da:4e:71:dc:dd:0b:b1:62:ac:2b:48:3c: d6:d5:8e:09:0e:2c:72:3e:cc:0f:f4:c1:40:b0:6c: e5:bd:fc:73:ed:55:64:c6:98:9a:ed:6f:1a:54:6f: 62:9b:65:4b:ca:31:3e:42:f7:3e:e8:df:d6:6e:ba: 6b:57:a5:a7:7c:a4:6c:0a:8b:75:39:48:85:d5:29: d1:65:5f:8d:92:b7:8f:c9:7a:97:c5:2d:3e:6e:06: 54:30:a1:08:d3:f6:88:29:df:1e:61:a0:cc:1e:dd: a5:c3:34:99:0c:05:e9:71:0e:ab:2b:8b:d6:ea:fe: b8:d7:18:b5:7a:c2:65:75:8c:b3:4d:66:a9:6c:16: 73:38:a0:20:88:64:d4:e3:3f:ae:78:a9:19:e8:45: 68:20:78:df:99:25:1c:57:e7:60:b2:00:44:73:98: 09:72:3c:6d:32:03:a3:2f:01:f7:51:9f:d7:29:ed: 42:32:3b:1d:a8:37:74:8f:62:c6:e6:26:44:df:1f: 13:fc:79:e7:b3:b1:af:f2:46:ad:f9:b6:db:8d:ba: 42:65:64:8b:21:80:fd:56:d6:6e:e5:f9:87:bc:7e: 6a:d7:41:ab:71:13:ed:fd:7e:c9:63:f1:66:a0:58: 31:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F7:75:61:72:FF:98:3C:0F:11:E7:E2:8D:22:28:47:82:F9:2B:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/97424350-496c-3039-8021-28cda3631346.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl X509v3 Authority Key Identifier: keyid:AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer sbgp-ipAddrBlock: critical IPv4: 108.161.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:4e:f1:88:54:af:66:ac:4a:97:f8:4d:62:2a:ae:a0:87:f5: 2e:45:70:28:10:78:7f:a8:39:03:dd:cd:52:cf:ac:1c:f2:0e: ad:d3:f5:85:f8:2b:43:2e:d0:e5:4e:4f:e8:b2:5f:b0:d4:98: 09:ae:bf:d4:0c:d0:77:c6:ab:82:d5:8b:f1:d8:81:8a:32:3e: 13:2b:b6:35:8a:24:46:3f:c2:18:c1:dc:7f:47:bf:a5:a8:e4: 05:5e:2c:6b:cd:f6:aa:fd:42:2c:9b:c5:18:19:8e:60:c7:dc: 5b:53:95:0b:e5:5e:c1:49:23:2b:7e:2e:4f:5a:9e:92:63:61: 56:3d:be:07:a5:02:ef:b8:80:b3:52:bd:bc:e1:11:8a:5e:43: 2c:9b:67:07:23:04:49:56:1e:23:b2:9e:5d:f6:c3:47:58:a4: 76:09:51:24:35:ef:5f:f1:4c:5d:17:b8:26:ac:1a:2b:b7:89: 62:d6:69:5b:21:f7:65:54:20:93:01:e7:04:27:6b:46:a1:93: ea:5d:e4:a1:a2:c2:24:f0:fe:7e:22:ed:a8:0c:b2:31:1e:74: 93:e4:d1:77:f5:16:b9:7c:bc:d8:8e:f1:ac:4f:5e:da:7a:18: 8d:52:a3:e0:8f:f4:ba:78:50:4d:8b:f0:98:dd:71:3c:02:85: 37:e4:c8:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKcZwb5qcwPaXSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY5ZTYwYTYtNTFjNC00YTNlLTgyMWEtMmQ3ZDQzOGJh ZDRjMB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk OGI1MjQ0NzAtZjYxNi00MTBjLTgyMDUtODA1MmY2NzEwYTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBXvhD4XcT0cCB7cPbYbtfvaTnHc3QuxYqwr SDzW1Y4JDixyPswP9MFAsGzlvfxz7VVkxpia7W8aVG9im2VLyjE+Qvc+6N/Wbrpr V6WnfKRsCot1OUiF1SnRZV+NkrePyXqXxS0+bgZUMKEI0/aIKd8eYaDMHt2lwzSZ DAXpcQ6rK4vW6v641xi1esJldYyzTWapbBZzOKAgiGTU4z+ueKkZ6EVoIHjfmSUc V+dgsgBEc5gJcjxtMgOjLwH3UZ/XKe1CMjsdqDd0j2LG5iZE3x8T/Hnns7Gv8kat +bbbjbpCZWSLIYD9VtZu5fmHvH5q10GrcRPt/X7JY/FmoFgxEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDn3dWFy/5g8DxHn4o0iKEeC+SsWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNjll NjBhNi01MWM0LTRhM2UtODIxYS0yZDdkNDM4YmFkNGMvOTc0MjQzNTAtNDk2Yy0z MDM5LTgwMjEtMjhjZGEzNjMxMzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjY5ZTYwYTYtNTFjNC00YTNlLTgy MWEtMmQ3ZDQzOGJhZDRjL2Y2OWU2MGE2LTUxYzQtNGEzZS04MjFhLTJkN2Q0Mzhi YWQ0Yy5jcmwwHwYDVR0jBBgwFoAUreo9MXSqvMcug0IvZpaHEFYYkwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNjllNjBhNi01MWM0LTRhM2UtODIxYS0yZDdk NDM4YmFkNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKGfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRO8YhUr2asSpf4TWIqrqCH9S5FcCgQeH+oOQPdzVLPrBzyDq3T9YX4 K0Mu0OVOT+iyX7DUmAmuv9QM0HfGq4LVi/HYgYoyPhMrtjWKJEY/whjB3H9Hv6Wo 5AVeLGvN9qr9QiybxRgZjmDH3FtTlQvlXsFJIyt+Lk9anpJjYVY9vgelAu+4gLNS vbzhEYpeQyybZwcjBElWHiOynl32w0dYpHYJUSQ171/xTF0XuCasGiu3iWLWaVsh 92VUIJMB5wQna0ahk+pd5KGiwiTw/n4i7agMsjEedJPk0Xf1Frl8vNiO8axPXtp6 GI1So+CP9Lp4UE2L8JjdcTwChTfkyPY= -----END CERTIFICATE-----Generated at Thu May 8 10:12:11 2025 by rpki-client