$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10b9f552-b9a4-3676-bead-6e1a7bef29bc.roa File: 10b9f552-b9a4-3676-bead-6e1a7bef29bc.roa (raw, json) Hash identifier: BIQUxyL29GjPsPqHx6eenTMpnx9XUu8FpxBRO+KfNWM= Subject key identifier: BF:AD:63:C4:D4:33:FA:76:C4:93:1A:34:A9:06:63:D0:7A:0C:5D:E1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858499F24AEE66F06838FDCB65900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10b9f552-b9a4-3676-bead-6e1a7bef29bc.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 108.170.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:ae:e6:6f:06:83:8f:dc:b6:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=7e387162-8bde-4c96-a6c1-b780ba5f702e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:02:3b:13:ad:5a:e0:b1:f8:8e:cf:9f:36:d8: 1f:54:56:fc:73:48:45:37:df:37:44:cc:97:01:92: 7c:3e:1f:20:5a:ca:cc:7a:e3:e7:b4:94:df:1e:e6: 05:cd:c7:62:09:07:2d:d3:06:28:4d:2e:67:81:46: 37:50:d5:64:37:ae:88:a1:eb:43:cb:c9:44:d3:be: c9:c5:86:3f:dc:77:96:e7:d5:c3:14:ee:ee:78:57: df:89:29:15:49:8a:34:1f:9f:a2:fc:d7:89:e3:b8: 0d:96:0d:a3:5f:7a:c1:76:8c:e4:0e:97:49:1b:82: ef:56:50:c7:ca:74:02:83:49:3d:63:8a:a4:3f:eb: 42:c5:f1:f2:f0:75:bf:5e:3b:f0:94:ad:16:3d:69: c2:b4:89:6e:f6:5c:32:44:ac:ef:b9:0e:e6:70:99: b6:1d:e3:d2:30:b7:cd:36:4f:49:48:a6:ad:ff:99: 68:55:31:34:71:9d:15:69:64:3f:b2:38:2e:c9:5a: 71:d2:5b:88:7c:36:6e:d7:f0:91:8a:f9:d3:56:b3: c3:7c:a2:bf:8f:2c:73:a3:23:5e:90:41:13:33:02: d8:9f:b3:84:d8:2a:a5:87:39:c8:2a:d3:29:53:47: bf:d3:49:bd:4d:4a:53:e7:74:f6:c9:4b:10:27:a8: b1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:AD:63:C4:D4:33:FA:76:C4:93:1A:34:A9:06:63:D0:7A:0C:5D:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10b9f552-b9a4-3676-bead-6e1a7bef29bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:7f:d5:a0:5c:b2:f9:ad:72:bf:26:64:e6:66:c8:1e:b5:76: 95:91:3f:29:98:38:14:87:42:08:03:36:0c:47:e6:ab:93:ad: 15:3c:ac:f7:1f:9b:a5:0a:b2:3c:b5:f4:0e:5f:81:17:4d:80: ff:56:b8:9f:fa:76:3f:21:8c:6a:61:58:32:2a:ca:a7:2b:1f: de:45:f7:5c:fd:a2:13:cc:c4:74:b7:98:b5:d4:02:71:3c:52: b6:35:93:96:cf:5a:fa:07:65:6a:62:29:0b:3c:52:c9:27:84: a9:1a:15:ed:c2:d9:14:55:9f:ae:b2:93:3d:d3:74:b5:61:ab: 82:83:26:87:66:f2:bb:9f:97:29:95:7e:87:e2:f2:9f:d9:65: de:9d:49:38:f4:60:da:9a:4e:b6:32:18:de:69:7c:c2:a3:bd: 94:3c:9f:04:5b:e7:41:80:28:1d:73:d2:f3:61:84:c9:eb:b4: f9:97:11:d1:e6:bc:0a:a6:cb:7e:5f:c9:c6:f0:3f:90:03:40: fe:26:6d:e7:ec:3a:c1:18:52:a2:4f:ec:aa:77:c6:51:f3:60: 51:48:62:5e:7d:93:54:23:f9:2d:4c:2f:76:a7:14:88:a7:94: 39:68:ae:1e:2a:72:e2:e6:8d:10:e2:7f:26:4d:3b:67:96:9d: b1:49:63:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJK7mbwaDj9y2WQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk N2UzODcxNjItOGJkZS00Yzk2LWE2YzEtYjc4MGJhNWY3MDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQI7E61a4LH4js+fNtgfVFb8c0hFN983RMyX AZJ8Ph8gWsrMeuPntJTfHuYFzcdiCQct0wYoTS5ngUY3UNVkN66IoetDy8lE077J xYY/3HeW59XDFO7ueFffiSkVSYo0H5+i/NeJ47gNlg2jX3rBdozkDpdJG4LvVlDH ynQCg0k9Y4qkP+tCxfHy8HW/XjvwlK0WPWnCtIlu9lwyRKzvuQ7mcJm2HePSMLfN Nk9JSKat/5loVTE0cZ0VaWQ/sjguyVpx0luIfDZu1/CRivnTVrPDfKK/jyxzoyNe kEETMwLYn7OE2CqlhznIKtMpU0e/00m9TUpT53T2yUsQJ6ixOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+tY8TUM/p2xJMaNKkGY9B6DF3hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTBiOWY1NTItYjlhNC0z Njc2LWJlYWQtNmUxYTdiZWYyOWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJR/1aBcsvmtcr8mZOZmyB61dpWRPymYOBSHQggDNgxH5quTrRU8rPcf m6UKsjy19A5fgRdNgP9WuJ/6dj8hjGphWDIqyqcrH95F91z9ohPMxHS3mLXUAnE8 UrY1k5bPWvoHZWpiKQs8UsknhKkaFe3C2RRVn66ykz3TdLVhq4KDJodm8ruflymV fofi8p/ZZd6dSTj0YNqaTrYyGN5pfMKjvZQ8nwRb50GAKB1z0vNhhMnrtPmXEdHm vAqmy35fycbwP5ADQP4mbefsOsEYUqJP7Kp3xlHzYFFIYl59k1Qj+S1ML3anFIin lDlorh4qcuLmjRDifyZNO2eWnbFJY98= -----END CERTIFICATE-----Generated at Sun May 4 16:39:15 2025 by rpki-client