$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b0673677-8528-3fc7-a042-34879b29eed4.roa File: b0673677-8528-3fc7-a042-34879b29eed4.roa (raw, json) Hash identifier: Yb1GQlwOiPAX6UHLQLZ95TpC/zi74nFOVreNJSiug6M= Subject key identifier: D4:3D:64:1A:18:AF:50:F7:47:38:4D:8F:28:7E:BB:9E:A9:4E:CA:80 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858499F24A4E138411E39D14D1240 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b0673677-8528-3fc7-a042-34879b29eed4.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 108.177.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:a4:e1:38:41:1e:39:d1:4d:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=c135f71d-a40c-41f7-ba96-ae9ad0cd28e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:db:b0:f9:83:6b:53:c4:24:e8:9d:36:32:24: f8:10:43:77:30:44:5f:dc:1f:72:44:9d:90:17:35: b5:41:80:ea:e0:0e:1d:db:a6:18:28:ed:71:83:a9: c4:35:b7:79:22:36:d0:b4:01:a5:22:b5:60:c6:90: d3:dd:7a:e6:74:4b:7d:3c:f0:82:78:1b:a1:e0:ba: d3:c1:98:8d:8d:44:09:dd:10:b8:6a:0c:6f:b1:fc: e9:80:64:0b:6b:25:bc:f1:b2:ea:60:55:24:ed:43: be:93:69:eb:49:a7:12:67:f0:60:8a:e7:e2:66:ab: 0a:b7:0e:8e:08:87:ca:31:18:cf:8a:df:91:29:b9: f3:4d:74:1a:4a:e3:68:5a:79:aa:b8:27:c1:c2:3d: 95:db:96:80:b4:77:40:3d:98:68:da:8c:ca:04:e5: 97:bf:f5:07:d5:cb:e5:51:e3:ed:1a:6c:e3:65:62: 83:53:48:ef:4d:87:2d:1a:5a:dc:a8:5b:1c:34:41: 71:df:08:ec:f7:45:eb:00:f9:f2:9a:5f:c6:2c:7d: bd:6e:56:08:26:15:09:97:c1:82:38:ce:67:3d:1b: e6:6a:50:84:4e:bf:75:16:9d:d7:e5:81:db:d8:ff: 35:a9:a9:54:28:cc:bc:b0:41:e1:0e:64:6c:60:35: 01:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:3D:64:1A:18:AF:50:F7:47:38:4D:8F:28:7E:BB:9E:A9:4E:CA:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b0673677-8528-3fc7-a042-34879b29eed4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:00:4c:eb:90:b9:1e:1e:92:0d:1d:4b:74:b3:78:b9:e4:03: f0:83:59:b5:e7:c1:5d:19:d5:47:91:9f:7b:2c:90:20:ad:65: 07:af:77:b9:ed:b7:5e:b5:b2:06:19:d6:24:74:ac:17:f2:2c: 25:b2:85:81:16:a2:07:77:b5:c9:61:d0:de:1d:60:d6:7e:33: d3:79:eb:a0:8a:9f:3f:59:27:fa:43:b3:6c:8b:ee:99:78:c0: d5:c9:aa:13:f9:d6:b8:36:9a:40:31:2d:53:04:19:36:17:84: ce:42:ba:5a:ba:71:41:73:3a:75:2a:76:46:46:62:a0:43:66: 48:09:14:09:58:2c:24:52:fc:49:aa:ac:61:a7:a5:79:0d:49: ab:7d:04:9d:e6:54:0d:6b:a6:5d:8d:78:ce:ab:52:fd:ce:cf: b4:c3:eb:17:a7:bd:bc:55:b7:23:62:02:6a:60:e1:9f:2a:10: fb:f3:4f:ff:d3:ad:79:5f:d8:7c:9e:47:7e:2f:24:af:40:fb: 17:f8:30:ac:56:9b:d2:8e:fb:59:90:b2:6a:66:45:75:31:8c: de:58:22:b9:4c:95:64:5b:2d:19:c4:ec:82:d5:70:fc:8d:0a: 3f:9a:a8:be:11:f1:9e:ff:66:91:5c:a8:e2:12:a7:ae:c2:9d: f8:ed:c7:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKThOEEeOdFNEkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk YzEzNWY3MWQtYTQwYy00MWY3LWJhOTYtYWU5YWQwY2QyOGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNuw+YNrU8Qk6J02MiT4EEN3MERf3B9yRJ2Q FzW1QYDq4A4d26YYKO1xg6nENbd5IjbQtAGlIrVgxpDT3XrmdEt9PPCCeBuh4LrT wZiNjUQJ3RC4agxvsfzpgGQLayW88bLqYFUk7UO+k2nrSacSZ/BgiufiZqsKtw6O CIfKMRjPit+RKbnzTXQaSuNoWnmquCfBwj2V25aAtHdAPZho2ozKBOWXv/UH1cvl UePtGmzjZWKDU0jvTYctGlrcqFscNEFx3wjs90XrAPnyml/GLH29blYIJhUJl8GC OM5nPRvmalCETr91Fp3X5YHb2P81qalUKMy8sEHhDmRsYDUBRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQ9ZBoYr1D3RzhNjyh+u56pTsqAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjA2NzM2NzctODUyOC0z ZmM3LWEwNDItMzQ4NzliMjllZWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLF4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKsATOuQuR4ekg0dS3SzeLnkA/CDWbXnwV0Z1UeRn3sskCCtZQevd7nt t161sgYZ1iR0rBfyLCWyhYEWogd3tclh0N4dYNZ+M9N566CKnz9ZJ/pDs2yL7pl4 wNXJqhP51rg2mkAxLVMEGTYXhM5Culq6cUFzOnUqdkZGYqBDZkgJFAlYLCRS/Emq rGGnpXkNSat9BJ3mVA1rpl2NeM6rUv3Oz7TD6xenvbxVtyNiAmpg4Z8qEPvzT//T rXlf2HyeR34vJK9A+xf4MKxWm9KO+1mQsmpmRXUxjN5YIrlMlWRbLRnE7ILVcPyN Cj+aqL4R8Z7/ZpFcqOISp67Cnfjtx6A= -----END CERTIFICATE-----Generated at Sun May 4 10:41:37 2025 by rpki-client