$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6c14cdf0-c63e-3fe5-aafb-4cbd1cdc49da.roa File: 6c14cdf0-c63e-3fe5-aafb-4cbd1cdc49da.roa (raw, json) Hash identifier: YVubDAnW9jbzk/i1WoYDT7zCqNJADxYip0hXm6X1abE= Subject key identifier: BD:54:EA:42:3F:2C:96:49:70:D9:DA:B9:93:86:40:14:B7:2E:49:DE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858499F24A98C8DFB91F9C9967C00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6c14cdf0-c63e-3fe5-aafb-4cbd1cdc49da.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 108.170.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:a9:8c:8d:fb:91:f9:c9:96:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=6df4444e-32dd-4c2a-a90c-7e5e25a6837f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1a:18:65:43:91:33:8b:09:ca:c9:2c:b3:43: fe:a2:c9:75:6e:c9:6d:72:54:db:8d:9f:15:b0:5f: e3:d8:31:6f:59:0e:47:ce:a8:b2:ef:ae:91:6f:1d: 70:10:ff:bd:9f:df:d1:a2:f2:9a:99:bd:0a:a5:38: 08:e1:d8:0b:f7:7f:ac:f7:be:29:43:93:b6:11:6c: a0:39:dd:19:30:2a:5d:3e:ec:d8:9b:c5:6e:f7:f1: 8d:3f:f0:c3:89:37:0d:60:b7:71:83:f9:f6:04:e4: 25:a4:50:c0:2d:ac:1d:1c:24:a4:1e:3d:45:ae:70: 67:06:4f:01:58:d2:b4:30:e4:df:6a:01:4e:1f:04: 91:ec:4a:64:42:17:9c:a4:d8:65:e7:aa:29:bf:ca: f9:88:d7:92:a2:83:f7:5b:a4:3d:95:b8:07:61:7c: 3e:74:fe:59:f9:d0:10:3e:b5:f9:52:19:62:0a:17: bd:59:7f:7f:5f:76:e4:f5:bc:4a:56:68:7e:dc:f0: bc:e0:f5:cb:3d:7a:a2:64:d4:73:f1:96:3c:f0:92: 2f:61:5f:6d:31:46:5a:7a:ff:87:f7:75:0a:d1:b4: 03:75:00:46:cc:17:34:fd:8b:41:92:1b:83:c1:ca: a9:79:b4:6e:56:cd:d5:8f:07:f4:39:63:5a:99:d1: 89:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:54:EA:42:3F:2C:96:49:70:D9:DA:B9:93:86:40:14:B7:2E:49:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6c14cdf0-c63e-3fe5-aafb-4cbd1cdc49da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:3e:ed:ff:26:6a:ac:b5:2e:96:80:0d:7b:a5:cc:91:27:21: 97:b2:aa:b3:45:1e:4b:99:ad:df:23:52:8c:1e:2c:72:69:97: 00:c5:f3:ab:0c:cd:57:96:28:b0:6f:d9:75:dc:ea:7a:6a:e5: 21:a4:95:c3:0a:7a:85:e3:96:64:5e:89:b2:e6:1c:1a:58:35: 5a:0a:47:d7:c5:c6:7b:1e:60:c5:2c:af:f0:31:5a:44:aa:c2: 71:39:f7:7f:29:7a:bb:82:14:95:ac:93:4d:cc:d2:e2:11:c6: 7f:f3:28:15:c3:ba:e7:02:97:d9:ee:37:29:6e:72:ef:ab:66: 6b:ea:25:c6:f6:a9:82:4d:5d:82:75:fa:89:ff:fc:db:1e:02: a1:43:60:88:17:55:ca:28:84:04:5c:54:1f:d8:1b:fb:11:09: 7b:20:fb:cd:c2:13:a7:ca:e2:e9:e8:c0:41:66:e9:f9:ed:99: 84:ab:23:f1:e8:95:ef:51:41:b2:17:a1:0b:d7:39:e9:11:65: 82:6b:be:3a:e0:fa:32:30:cd:e4:e7:19:4a:32:4b:45:7f:60: b6:d8:f6:d1:ff:de:f0:3c:8a:dc:9a:a2:7c:f9:8f:69:f5:d8: a2:13:ec:7e:7f:0b:0d:83:89:9b:28:a8:84:ef:db:a7:93:57: 30:a6:c2:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKmMjfuR+cmWfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NmRmNDQ0NGUtMzJkZC00YzJhLWE5MGMtN2U1ZTI1YTY4MzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixoYZUORM4sJyskss0P+osl1bsltclTbjZ8V sF/j2DFvWQ5Hzqiy766Rbx1wEP+9n9/RovKamb0KpTgI4dgL93+s974pQ5O2EWyg Od0ZMCpdPuzYm8Vu9/GNP/DDiTcNYLdxg/n2BOQlpFDALawdHCSkHj1FrnBnBk8B WNK0MOTfagFOHwSR7EpkQhecpNhl56opv8r5iNeSooP3W6Q9lbgHYXw+dP5Z+dAQ PrX5UhliChe9WX9/X3bk9bxKVmh+3PC84PXLPXqiZNRz8ZY88JIvYV9tMUZaev+H 93UK0bQDdQBGzBc0/YtBkhuDwcqpebRuVs3Vjwf0OWNamdGJMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1U6kI/LJZJcNnauZOGQBS3LkneMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNmMxNGNkZjAtYzYzZS0z ZmU1LWFhZmItNGNiZDFjZGM0OWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEI+7f8maqy1LpaADXulzJEnIZeyqrNFHkuZrd8jUoweLHJplwDF86sM zVeWKLBv2XXc6npq5SGklcMKeoXjlmReibLmHBpYNVoKR9fFxnseYMUsr/AxWkSq wnE5938peruCFJWsk03M0uIRxn/zKBXDuucCl9nuNylucu+rZmvqJcb2qYJNXYJ1 +on//NseAqFDYIgXVcoohARcVB/YG/sRCXsg+83CE6fK4unowEFm6fntmYSrI/Ho le9RQbIXoQvXOekRZYJrvjrg+jIwzeTnGUoyS0V/YLbY9tH/3vA8ityaonz5j2n1 2KIT7H5/Cw2DiZsoqITv26eTVzCmwrw= -----END CERTIFICATE-----Generated at Sun May 4 16:14:01 2025 by rpki-client