$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3907a4c1-2aab-3ab9-b3ae-9d1f704ee593.roa File: 3907a4c1-2aab-3ab9-b3ae-9d1f704ee593.roa (raw, json) Hash identifier: TPda7FH+lO4N0H86seC3SdAR5756PJ23PgHE0h1Ki64= Subject key identifier: 4F:11:FC:D8:64:CB:F8:AE:31:3A:41:C2:D0:D3:AD:41:02:A7:FE:AF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858499F24A541B42129C7A3821AE0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3907a4c1-2aab-3ab9-b3ae-9d1f704ee593.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 108.177.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:a5:41:b4:21:29:c7:a3:82:1a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=0c9c4f39-0f64-4bec-bffb-c9f3624def6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d3:1d:2c:db:cd:96:8e:5e:2e:11:d6:28:de: 01:65:da:23:1f:65:df:a1:39:08:0c:d7:43:51:98: c6:8e:04:73:62:d0:f1:2f:4e:bc:36:fe:0f:52:cd: 89:97:73:25:bb:21:88:26:d8:5c:dd:da:bc:b2:52: 18:44:b9:28:23:19:d4:74:a3:1b:f4:3d:b0:66:d0: 8e:a4:2c:a1:29:39:db:2e:09:32:a9:60:7d:b8:9f: f0:1b:a9:56:54:06:61:83:89:f8:71:b1:82:02:1b: 19:50:79:c1:4f:a8:d6:02:84:a9:1d:eb:6d:de:ae: fe:55:a6:c6:8d:81:d7:32:a5:2b:6f:c9:aa:8c:e5: 13:33:11:fa:3c:fb:0c:ee:c9:92:7f:c2:f5:b0:b4: 4f:61:36:f0:25:92:3a:03:8f:68:28:0b:b7:f5:fa: db:71:49:1e:41:67:28:c7:34:7e:71:9c:8b:65:1b: 91:0b:08:a3:66:a0:1e:58:67:e6:ae:55:c4:26:cb: d8:92:29:7b:49:56:0a:fd:9c:bb:14:20:63:88:8d: 8d:7c:da:83:81:d2:e2:72:47:20:a5:5c:6f:57:55: 73:81:b7:12:14:d9:f6:51:d4:0a:4e:71:2b:e3:71: aa:ac:ac:b9:5a:e3:23:07:69:d6:56:3d:b4:61:12: f2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:11:FC:D8:64:CB:F8:AE:31:3A:41:C2:D0:D3:AD:41:02:A7:FE:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3907a4c1-2aab-3ab9-b3ae-9d1f704ee593.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:bc:d2:0b:f0:be:ba:14:a7:1e:f6:fb:b3:b2:27:7c:8a:34: f8:66:59:b5:3f:8e:85:a8:c7:f2:a1:de:a3:e0:40:8e:04:05: 3c:a4:d7:8b:66:92:4a:f6:52:12:d4:56:3b:9f:50:be:bf:de: 42:34:24:0c:df:6c:3a:82:94:19:7b:d4:9c:67:77:9e:2b:d9: 8a:57:88:d6:a1:86:59:8b:ad:41:97:03:53:84:ea:20:70:1e: 71:5a:78:9e:99:26:e6:ff:8a:70:9e:ea:ea:50:ce:a5:2f:bd: 81:47:f3:c1:d9:7f:68:6a:e6:1b:f7:56:c9:47:f6:06:d5:21: 78:45:74:5a:b0:a7:9a:d0:7c:18:31:84:95:67:be:2f:7b:88: 71:94:24:20:5f:ac:a1:95:03:4e:b2:59:d4:f5:2e:af:f2:16: 60:ad:bc:25:46:95:5c:32:a2:b7:48:7b:8d:44:b0:65:2d:af: 1c:58:e2:97:56:ac:61:4a:18:1f:35:60:07:69:94:84:84:be: 3a:ca:d7:77:28:0c:e2:ca:e2:36:32:ee:98:3e:37:37:39:ec: f5:ea:0a:b9:42:ba:d3:3f:99:70:9f:47:3e:47:31:4a:78:d8: 8e:47:ce:d4:e3:a7:11:19:82:d8:ec:f5:e5:e6:14:3f:f5:2e: 82:37:e7:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKVBtCEpx6OCGuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk MGM5YzRmMzktMGY2NC00YmVjLWJmZmItYzlmMzYyNGRlZjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNMdLNvNlo5eLhHWKN4BZdojH2XfoTkIDNdD UZjGjgRzYtDxL068Nv4PUs2Jl3MluyGIJthc3dq8slIYRLkoIxnUdKMb9D2wZtCO pCyhKTnbLgkyqWB9uJ/wG6lWVAZhg4n4cbGCAhsZUHnBT6jWAoSpHett3q7+VabG jYHXMqUrb8mqjOUTMxH6PPsM7smSf8L1sLRPYTbwJZI6A49oKAu39frbcUkeQWco xzR+cZyLZRuRCwijZqAeWGfmrlXEJsvYkil7SVYK/Zy7FCBjiI2NfNqDgdLickcg pVxvV1VzgbcSFNn2UdQKTnEr43GqrKy5WuMjB2nWVj20YRLyZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8R/Nhky/iuMTpBwtDTrUECp/6vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzkwN2E0YzEtMmFhYi0z YWI5LWIzYWUtOWQxZjcwNGVlNTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbLEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAi80gvwvroUpx72+7OyJ3yKNPhmWbU/joWox/Kh3qPgQI4EBTyk14tm kkr2UhLUVjufUL6/3kI0JAzfbDqClBl71Jxnd54r2YpXiNahhlmLrUGXA1OE6iBw HnFaeJ6ZJub/inCe6upQzqUvvYFH88HZf2hq5hv3VslH9gbVIXhFdFqwp5rQfBgx hJVnvi97iHGUJCBfrKGVA06yWdT1Lq/yFmCtvCVGlVwyordIe41EsGUtrxxY4pdW rGFKGB81YAdplISEvjrK13coDOLK4jYy7pg+Nzc57PXqCrlCutM/mXCfRz5HMUp4 2I5HztTjpxEZgtjs9eXmFD/1LoI3508= -----END CERTIFICATE-----Generated at Sun May 4 14:45:26 2025 by rpki-client