$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d513e5ac-bb80-3ec5-9118-78a41c20aaba.roa File: d513e5ac-bb80-3ec5-9118-78a41c20aaba.roa (raw, json) Hash identifier: P6xQj+e18yDbyxVY4O0bZqdbXjA4DDW962QlpgQGF6M= Subject key identifier: BD:24:F2:00:65:3E:CE:15:1A:1A:5B:B7:67:B7:0D:F4:B8:A8:62:43 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858499F24AB9010F372452775926E Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d513e5ac-bb80-3ec5-9118-78a41c20aaba.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 108.170.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:ab:90:10:f3:72:45:27:75:92:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=99e4bdd8-5993-46df-9ba6-4920501e895e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:36:07:26:cf:61:f2:22:d4:3b:0f:a3:6f:71: 38:ef:91:15:42:b3:36:4b:76:00:32:ef:46:63:36: ae:ed:6d:77:2f:39:c4:6a:95:fb:ac:63:ea:72:e4: b1:5f:ab:33:d0:ee:ec:a5:88:a8:00:97:81:32:d6: 42:54:85:a4:ae:dc:6f:28:f9:f1:e8:14:30:6b:11: 66:79:c3:7f:c8:dc:28:e8:b1:4b:3a:39:3f:a4:15: a4:76:57:e6:6a:a7:ac:a7:54:79:d7:4f:5f:84:89: 76:20:88:9a:06:48:70:48:ec:ed:48:4e:c0:5e:3f: f8:9d:f9:fe:1b:7b:65:b9:af:f9:6a:f6:d7:70:9a: 59:58:cc:a5:a6:5e:74:ec:67:d6:a2:dd:01:48:29: bc:4b:dd:41:8a:71:76:13:7a:10:d6:75:d9:de:85: 68:16:c3:64:e0:86:df:90:ee:ae:78:8a:9c:1d:58: b6:1c:c3:0f:c3:23:3b:2b:15:ec:c1:ac:6f:5f:38: c0:ab:aa:67:d8:89:bf:33:79:f3:d2:a8:fa:7f:fd: 16:a3:5a:2f:00:dc:fb:a5:bb:18:de:f6:7c:cc:7f: 27:1d:11:a2:a5:22:84:c3:40:51:75:b7:88:ce:71: d2:a2:50:b6:db:07:ae:65:61:1e:e2:c8:71:0c:82: 09:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:24:F2:00:65:3E:CE:15:1A:1A:5B:B7:67:B7:0D:F4:B8:A8:62:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d513e5ac-bb80-3ec5-9118-78a41c20aaba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:78:78:81:83:7f:38:ea:62:14:f8:ee:63:c8:68:f3:88:81: fe:15:04:c6:2b:35:1a:d5:34:16:93:08:51:17:0d:85:cb:0a: 27:2d:8b:b8:49:61:1f:9c:14:0e:b0:5c:64:75:e2:78:4e:bd: 2b:c1:67:24:7a:7a:5d:0c:54:2d:7c:92:10:97:69:99:95:4a: 33:56:f8:0e:e2:fa:d9:8e:20:c7:4a:90:ee:e7:9a:2e:77:f7: 11:56:9e:f2:a1:43:64:e3:1f:e0:e5:06:05:90:7f:33:98:c5: 9e:bd:38:28:f8:55:cd:08:64:6d:12:54:00:11:5b:b1:5f:4f: 9a:0a:be:72:06:96:da:a8:f7:9e:1c:fe:d6:7e:f4:62:c7:d0: 89:10:77:c9:0b:55:92:c4:a0:50:53:87:2f:a7:26:de:77:99: 07:f9:2d:96:9c:a9:8d:18:f5:a8:95:88:e8:ea:42:ec:7f:0c: 0c:1e:f1:96:86:7b:d0:1b:d2:b0:e3:a9:89:73:2c:0b:15:37: b5:01:8f:62:7c:46:ff:02:46:1e:54:5e:fc:2f:4f:5c:e0:e4: 0e:4e:39:7d:09:31:16:cd:d7:c1:e0:5a:1e:1d:f4:6c:5e:22: d0:b0:d1:a3:e3:82:cc:96:cd:3d:52:9c:e6:a2:a7:30:a2:78: 9f:4d:20:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKuQEPNyRSd1km4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk OTllNGJkZDgtNTk5My00NmRmLTliYTYtNDkyMDUwMWU4OTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjYHJs9h8iLUOw+jb3E475EVQrM2S3YAMu9G Yzau7W13LznEapX7rGPqcuSxX6sz0O7spYioAJeBMtZCVIWkrtxvKPnx6BQwaxFm ecN/yNwo6LFLOjk/pBWkdlfmaqesp1R5109fhIl2IIiaBkhwSOztSE7AXj/4nfn+ G3tlua/5avbXcJpZWMylpl507GfWot0BSCm8S91BinF2E3oQ1nXZ3oVoFsNk4Ibf kO6ueIqcHVi2HMMPwyM7KxXswaxvXzjAq6pn2Im/M3nz0qj6f/0Wo1ovANz7pbsY 3vZ8zH8nHRGipSKEw0BRdbeIznHSolC22weuZWEe4shxDIIJ6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0k8gBlPs4VGhpbt2e3DfS4qGJDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDUxM2U1YWMtYmI4MC0z ZWM1LTkxMTgtNzhhNDFjMjBhYWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH14eIGDfzjqYhT47mPIaPOIgf4VBMYrNRrVNBaTCFEXDYXLCicti7hJ YR+cFA6wXGR14nhOvSvBZyR6el0MVC18khCXaZmVSjNW+A7i+tmOIMdKkO7nmi53 9xFWnvKhQ2TjH+DlBgWQfzOYxZ69OCj4Vc0IZG0SVAARW7FfT5oKvnIGltqo954c /tZ+9GLH0IkQd8kLVZLEoFBThy+nJt53mQf5LZacqY0Y9aiViOjqQux/DAwe8ZaG e9Ab0rDjqYlzLAsVN7UBj2J8Rv8CRh5UXvwvT1zg5A5OOX0JMRbN18HgWh4d9Gxe ItCw0aPjgsyWzT1SnOaipzCieJ9NIF4= -----END CERTIFICATE-----Generated at Sun May 4 16:33:29 2025 by rpki-client