$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a42880a1-b447-3c0e-acb2-9877d9ca7371.roa File: a42880a1-b447-3c0e-acb2-9877d9ca7371.roa (raw, json) Hash identifier: KLlR78CArGspG+RM0LYzKgQ8Ys/WCsPO/riOVzCQEaI= Subject key identifier: 33:80:C1:04:5A:0D:C2:0F:7D:90:46:CF:A6:30:4A:1E:DB:78:58:23 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858499F24A3BD02AB17935BD7F5A0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a42880a1-b447-3c0e-acb2-9877d9ca7371.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 108.170.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:a3:bd:02:ab:17:93:5b:d7:f5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=3f98657d-eb3d-4d31-8a02-c614e7865e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:92:11:6a:74:57:0c:38:99:95:bf:53:71:9d: b6:3d:57:6d:3d:8e:c5:9c:c4:e0:2f:b2:5e:be:1d: 0e:fa:0b:7a:8c:77:59:72:8b:38:cd:32:3c:46:ec: 87:cc:52:a2:80:dc:ad:c3:f7:27:9e:9b:bd:4a:cd: 90:67:b2:d5:1a:00:51:86:6a:04:fd:9c:3a:b5:04: 8e:7a:aa:80:ef:27:da:d7:42:bd:66:16:c8:df:33: 33:bf:ff:07:83:a1:5d:a0:db:77:05:d0:9b:26:82: e2:c3:0e:97:d5:c2:20:5d:95:eb:4f:f1:63:20:50: bb:3f:89:8c:94:d0:0d:29:b5:75:ce:2c:5e:97:af: e2:f5:3c:df:d8:c8:7a:9e:95:bb:18:2c:82:ae:48: ef:11:68:33:61:cb:97:2e:e6:b0:6d:34:53:32:4f: 52:c7:cf:13:8b:36:cf:ea:27:37:2a:74:23:a7:79: d9:53:cc:ea:5c:65:e1:1c:67:43:6e:95:75:6a:3b: 87:99:8f:2d:ec:6f:18:02:30:62:ed:45:f7:46:dd: 10:86:c3:2f:f5:63:70:ea:0b:5f:0d:0c:10:a3:52: e0:6e:81:eb:34:7f:a3:18:e2:72:ca:3d:c3:33:b6: 97:89:20:6c:39:be:ca:bd:0f:bb:6f:23:f8:3d:21: d9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:80:C1:04:5A:0D:C2:0F:7D:90:46:CF:A6:30:4A:1E:DB:78:58:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a42880a1-b447-3c0e-acb2-9877d9ca7371.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:7d:b5:c9:7f:3f:d4:21:95:1e:c7:f9:fe:6c:5a:85:b4:7f: f7:3d:78:7a:75:05:52:96:f9:7b:d4:1c:37:f1:38:64:28:d7: 84:b6:3b:38:ef:27:d8:05:49:0a:92:8f:fa:8d:3b:ca:00:25: 3c:44:1b:93:d4:17:76:f4:54:58:c1:57:7e:50:c9:02:9d:14: 31:09:e3:61:f4:ab:ee:ba:d7:f1:91:5c:bb:26:30:f7:27:f4: 3f:a2:df:51:e8:60:de:48:9c:c3:5a:ea:6f:aa:ad:d9:59:20: 6e:ca:e1:74:c3:5a:d0:92:40:64:3e:ed:49:00:19:1b:bd:49: d8:39:b5:58:a6:4b:4e:15:67:8a:47:55:07:ef:75:68:5c:62: ff:72:d6:d0:92:34:69:6d:28:48:b5:42:fb:de:66:40:14:f4: 67:d9:1b:fc:00:a1:08:3e:c1:c6:66:05:77:61:e2:e0:45:24: de:14:ec:34:86:e0:64:fc:60:a2:45:20:99:96:d7:7d:52:23: 6a:75:fb:68:5b:ff:1f:21:e2:af:d6:fd:4f:96:1a:56:50:6e: 41:98:e4:42:24:c5:d7:07:48:b6:1a:51:78:fb:c6:b4:4a:cb: 9d:40:f1:85:96:81:3d:ab:bb:e6:ed:45:a1:5d:dc:4d:0c:9f: 3f:5a:bf:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKO9AqsXk1vX9aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk M2Y5ODY1N2QtZWIzZC00ZDMxLThhMDItYzYxNGU3ODY1ZTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppIRanRXDDiZlb9TcZ22PVdtPY7FnMTgL7Je vh0O+gt6jHdZcos4zTI8RuyHzFKigNytw/cnnpu9Ss2QZ7LVGgBRhmoE/Zw6tQSO eqqA7yfa10K9ZhbI3zMzv/8Hg6FdoNt3BdCbJoLiww6X1cIgXZXrT/FjIFC7P4mM lNANKbV1zixel6/i9Tzf2Mh6npW7GCyCrkjvEWgzYcuXLuawbTRTMk9Sx88TizbP 6ic3KnQjp3nZU8zqXGXhHGdDbpV1ajuHmY8t7G8YAjBi7UX3Rt0QhsMv9WNw6gtf DQwQo1LgboHrNH+jGOJyyj3DM7aXiSBsOb7KvQ+7byP4PSHZxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOAwQRaDcIPfZBGz6YwSh7beFgjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTQyODgwYTEtYjQ0Ny0z YzBlLWFjYjItOTg3N2Q5Y2E3MzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGbKrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC19tcl/P9QhlR7H+f5sWoW0f/c9eHp1BVKW+XvUHDfxOGQo14S2Ozjv J9gFSQqSj/qNO8oAJTxEG5PUF3b0VFjBV35QyQKdFDEJ42H0q+661/GRXLsmMPcn 9D+i31HoYN5InMNa6m+qrdlZIG7K4XTDWtCSQGQ+7UkAGRu9Sdg5tVimS04VZ4pH VQfvdWhcYv9y1tCSNGltKEi1QvveZkAU9GfZG/wAoQg+wcZmBXdh4uBFJN4U7DSG 4GT8YKJFIJmW131SI2p1+2hb/x8h4q/W/U+WGlZQbkGY5EIkxdcHSLYaUXj7xrRK y51A8YWWgT2ru+btRaFd3E0Mnz9avz8= -----END CERTIFICATE-----Generated at Sun May 4 10:33:32 2025 by rpki-client