$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7e5d6e5-8bcf-305a-88fd-3ad4a3683502.roa File: e7e5d6e5-8bcf-305a-88fd-3ad4a3683502.roa (raw, json) Hash identifier: 8+T4sHp25Ft/kKgcJP8iVTi9byk1VE7OF3JrkwPn+wU= Subject key identifier: 3C:89:FF:3F:AC:B6:A8:EA:B3:A8:60:87:95:D1:94:DB:89:DE:CE:7F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858499F24D9513F7A02BBC09B65E0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7e5d6e5-8bcf-305a-88fd-3ad4a3683502.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 108.177.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:d9:51:3f:7a:02:bb:c0:9b:65:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=bbf84fe6-109c-4b16-879b-5d37ca8cbea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:96:4b:a7:a3:cd:1b:75:f8:3a:07:65:7b:40: e1:2d:c5:8b:07:a5:ec:88:51:40:bf:88:87:5b:b9: 47:da:ae:88:d2:27:84:11:8d:22:0e:04:bc:2b:99: cd:1f:bf:45:9b:20:30:7a:dd:3e:c2:38:61:68:eb: 0e:20:04:a3:8b:e7:8b:51:b9:d2:c9:ba:48:e2:39: 20:a9:c7:73:d5:f9:94:08:d6:dd:5c:00:52:6c:d4: 19:7b:ae:0f:9c:16:10:6b:d9:9f:b4:ca:5c:06:07: ca:de:d9:cc:94:11:14:05:7d:9a:cb:1f:bd:e5:bb: 2f:59:1f:e1:81:fb:50:d1:eb:7f:f2:bc:e8:f9:61: 5b:74:77:fb:7b:f7:15:0b:8d:e6:64:27:31:ae:c4: 32:0e:84:7d:93:87:4c:cb:a2:47:2c:72:5b:75:8f: fa:29:b6:26:6d:e2:d6:ec:4b:10:cf:f4:73:7c:73: ec:de:8e:01:36:8b:2c:7e:cf:cc:d6:ab:36:9a:69: 94:9d:1d:a2:ff:8c:a4:cd:49:5c:34:1e:e2:72:ac: c8:40:84:19:93:e2:54:f4:54:ec:d2:05:c2:f7:fb: fe:9c:27:41:5c:61:9e:67:43:26:63:67:38:c8:69: 37:a3:66:7b:72:f1:d0:43:f1:0e:e6:f3:d5:7c:de: fd:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:89:FF:3F:AC:B6:A8:EA:B3:A8:60:87:95:D1:94:DB:89:DE:CE:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7e5d6e5-8bcf-305a-88fd-3ad4a3683502.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:b1:8d:86:e0:1d:a3:02:83:33:e7:2a:71:17:7a:73:35:90: a6:18:28:0a:04:f6:40:d5:4b:59:75:79:b2:9d:32:63:36:23: dc:41:3c:01:7f:4e:61:5e:b9:7d:57:cd:bd:55:38:94:52:90: ce:45:d5:b3:bb:c3:b2:60:c9:13:bf:e7:d6:e9:37:20:96:51: 66:03:11:0b:82:ff:16:67:a6:dc:7c:8e:8f:8a:93:38:b7:df: d5:07:a9:b5:24:01:6f:8b:89:d8:f1:2d:c5:09:17:c2:af:62: 6e:22:55:e4:61:07:91:53:f8:65:36:4e:0f:4b:c1:fe:14:99: 9c:5c:4e:94:23:2d:5e:1f:f8:e4:44:bb:5e:c3:25:6d:a1:7a: 07:cf:47:a7:25:89:4e:19:f0:91:80:d3:fb:a6:36:09:33:0a: f4:6d:80:62:51:14:c7:1d:97:be:ea:5c:79:34:c5:70:ad:db: 21:f2:28:df:de:a8:9c:4d:19:e8:f5:4e:da:c0:4d:76:b9:c3: 14:9e:f5:9b:d8:04:e0:9c:ed:49:2d:4c:fe:50:3d:1c:74:18: 85:be:0a:bc:80:f7:75:81:b8:f4:e9:98:c0:69:94:64:08:c8: 04:cf:36:97:1d:ea:7b:a1:32:21:0a:b2:72:e0:db:60:09:3c: 3b:86:92:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNlRP3oCu8CbZeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk YmJmODRmZTYtMTA5Yy00YjE2LTg3OWItNWQzN2NhOGNiZWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJZLp6PNG3X4Ogdle0DhLcWLB6XsiFFAv4iH W7lH2q6I0ieEEY0iDgS8K5nNH79FmyAwet0+wjhhaOsOIASji+eLUbnSybpI4jkg qcdz1fmUCNbdXABSbNQZe64PnBYQa9mftMpcBgfK3tnMlBEUBX2ayx+95bsvWR/h gftQ0et/8rzo+WFbdHf7e/cVC43mZCcxrsQyDoR9k4dMy6JHLHJbdY/6KbYmbeLW 7EsQz/RzfHPs3o4BNossfs/M1qs2mmmUnR2i/4ykzUlcNB7icqzIQIQZk+JU9FTs 0gXC9/v+nCdBXGGeZ0MmY2c4yGk3o2Z7cvHQQ/EO5vPVfN79LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyJ/z+stqjqs6hgh5XRlNuJ3s5/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTdlNWQ2ZTUtOGJjZi0z MDVhLTg4ZmQtM2FkNGEzNjgzNTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbLEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSxjYbgHaMCgzPnKnEXenM1kKYYKAoE9kDVS1l1ebKdMmM2I9xBPAF/ TmFeuX1Xzb1VOJRSkM5F1bO7w7JgyRO/59bpNyCWUWYDEQuC/xZnptx8jo+Kkzi3 39UHqbUkAW+LidjxLcUJF8KvYm4iVeRhB5FT+GU2Tg9Lwf4UmZxcTpQjLV4f+ORE u17DJW2hegfPR6cliU4Z8JGA0/umNgkzCvRtgGJRFMcdl77qXHk0xXCt2yHyKN/e qJxNGej1TtrATXa5wxSe9ZvYBOCc7UktTP5QPRx0GIW+CryA93WBuPTpmMBplGQI yATPNpcd6nuhMiEKsnLg22AJPDuGkig= -----END CERTIFICATE-----Generated at Sun May 4 10:38:31 2025 by rpki-client