$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/cf12e658-9dd5-39f2-bf70-c0a48375d8a6.roa File: cf12e658-9dd5-39f2-bf70-c0a48375d8a6.roa (raw, json) Hash identifier: +0+0doOb5zEb7FBXGpihziw998UR3dfUm2gxYgIOD0Q= Subject key identifier: 7C:65:45:86:26:2A:C0:6A:E6:9A:94:59:5D:3B:C9:54:7D:F7:D1:C8 Certificate issuer: /CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Certificate serial: 010D0C9F432858499829C65F105ECDC18FA76100 Authority key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/cf12e658-9dd5-39f2-bf70-c0a48375d8a6.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 21581 IP address blocks: 108.161.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:c6:5f:10:5e:cd:c1:8f:a7:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=4fea1d3d-f1dc-4245-bef2-a5100b47175d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d4:40:e9:2a:c1:eb:fe:8d:25:09:8e:9c:2f: a7:f5:a2:cd:1d:b3:cf:24:7a:49:b8:6a:8d:71:57: 82:07:75:16:9c:ff:31:b7:f3:b9:fa:8b:b5:27:05: de:a1:a0:f2:2d:dc:de:cd:a2:c8:28:65:17:4f:2c: 95:cc:76:f7:49:58:44:38:45:98:39:c0:f1:06:95: fe:c1:68:81:05:f3:a7:0c:9c:73:6e:a4:7c:12:9b: ba:93:a0:d2:df:3f:96:4f:c2:6a:8c:19:1f:79:c3: 1c:c2:91:4c:bd:d8:ea:0f:fa:15:1f:0e:80:e1:76: 88:89:6f:7b:12:ab:87:c1:23:d9:14:b8:7f:e0:79: 94:d4:f2:79:73:da:80:de:16:92:64:7d:73:ba:17: b0:79:2c:21:cb:54:75:8a:73:88:c7:7c:84:5a:f7: 92:16:f0:7d:fd:54:7f:17:5b:66:7c:a2:49:70:e5: 9f:9e:f3:f2:57:84:01:bc:fb:89:58:5e:9a:a2:3e: 35:8b:ca:97:b9:50:f8:95:1a:c1:14:4b:70:08:f1: d0:33:dc:a7:99:b5:0c:96:d4:28:1d:61:16:45:c3: 77:cc:38:fd:26:08:24:a2:63:16:db:c4:8e:c8:d3: 1b:24:9b:ac:08:cc:c3:ae:c7:7f:9a:ed:97:e8:87: d3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:65:45:86:26:2A:C0:6A:E6:9A:94:59:5D:3B:C9:54:7D:F7:D1:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/cf12e658-9dd5-39f2-bf70-c0a48375d8a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl X509v3 Authority Key Identifier: keyid:AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer sbgp-ipAddrBlock: critical IPv4: 108.161.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:f6:9d:0c:0b:70:30:19:75:89:4a:83:ba:41:31:bc:b9:01: bf:79:fe:5d:01:db:0c:93:ce:64:a7:c1:0f:fd:ca:e1:a7:86: 82:35:ae:4c:80:9d:1b:5f:cc:da:8c:b1:02:ab:17:99:94:b4: ae:5a:68:cb:95:d6:33:9b:8f:07:23:00:b6:a3:cb:a7:fb:3f: a4:59:c5:3d:a3:c9:33:62:b2:a2:79:b7:2d:72:34:5a:d4:be: 39:16:8f:00:9e:53:eb:39:45:c4:eb:10:48:ed:b2:42:82:47: 70:62:84:cd:bb:4a:3e:d2:36:13:75:0a:75:aa:bb:8a:a4:58: 78:99:a9:0e:b3:d2:c9:e1:ff:ae:15:c0:77:cd:15:13:57:38: 03:dc:3d:6a:be:4e:8d:78:6b:cd:a1:be:86:33:2f:e9:92:5d: de:d3:06:5c:07:eb:d3:3a:c9:17:8b:55:97:c9:38:25:07:6c: 72:c7:50:c5:69:7f:de:75:64:2e:37:e9:3d:27:1b:a3:7c:fb: 78:72:fd:8f:34:b3:d8:0c:eb:56:3f:6b:9f:9f:83:ca:2a:a1: 1c:41:3a:88:79:7e:ac:95:d3:ca:02:dc:b9:23:e1:f0:0f:78: 32:36:b3:f1:6a:9d:c7:0d:29:0a:36:d6:d7:e8:c1:55:9f:67: 2a:4a:ef:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKcZfEF7NwY+nYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY5ZTYwYTYtNTFjNC00YTNlLTgyMWEtMmQ3ZDQzOGJh ZDRjMB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk NGZlYTFkM2QtZjFkYy00MjQ1LWJlZjItYTUxMDBiNDcxNzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdRA6SrB6/6NJQmOnC+n9aLNHbPPJHpJuGqN cVeCB3UWnP8xt/O5+ou1JwXeoaDyLdzezaLIKGUXTyyVzHb3SVhEOEWYOcDxBpX+ wWiBBfOnDJxzbqR8Epu6k6DS3z+WT8JqjBkfecMcwpFMvdjqD/oVHw6A4XaIiW97 EquHwSPZFLh/4HmU1PJ5c9qA3haSZH1zuheweSwhy1R1inOIx3yEWveSFvB9/VR/ F1tmfKJJcOWfnvPyV4QBvPuJWF6aoj41i8qXuVD4lRrBFEtwCPHQM9ynmbUMltQo HWEWRcN3zDj9JggkomMW28SOyNMbJJusCMzDrsd/mu2X6IfTBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHxlRYYmKsBq5pqUWV07yVR999HIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNjll NjBhNi01MWM0LTRhM2UtODIxYS0yZDdkNDM4YmFkNGMvY2YxMmU2NTgtOWRkNS0z OWYyLWJmNzAtYzBhNDgzNzVkOGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjY5ZTYwYTYtNTFjNC00YTNlLTgy MWEtMmQ3ZDQzOGJhZDRjL2Y2OWU2MGE2LTUxYzQtNGEzZS04MjFhLTJkN2Q0Mzhi YWQ0Yy5jcmwwHwYDVR0jBBgwFoAUreo9MXSqvMcug0IvZpaHEFYYkwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNjllNjBhNi01MWM0LTRhM2UtODIxYS0yZDdk NDM4YmFkNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKGeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJX2nQwLcDAZdYlKg7pBMby5Ab95/l0B2wyTzmSnwQ/9yuGnhoI1rkyA nRtfzNqMsQKrF5mUtK5aaMuV1jObjwcjALajy6f7P6RZxT2jyTNisqJ5ty1yNFrU vjkWjwCeU+s5RcTrEEjtskKCR3BihM27Sj7SNhN1CnWqu4qkWHiZqQ6z0snh/64V wHfNFRNXOAPcPWq+To14a82hvoYzL+mSXd7TBlwH69M6yReLVZfJOCUHbHLHUMVp f951ZC436T0nG6N8+3hy/Y80s9gM61Y/a5+fg8oqoRxBOoh5fqyV08oC3Lkj4fAP eDI2s/FqnccNKQo21tfowVWfZypK7xg= -----END CERTIFICATE-----Generated at Thu May 8 20:40:08 2025 by rpki-client