$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/4168211f-81ee-3a06-a39d-59f42a3495b8.roa File: 4168211f-81ee-3a06-a39d-59f42a3495b8.roa (raw, json) Hash identifier: ci5x9I0AUr4yIb9MhXPJ3fi+4oORjZJyoi9IrtP/PWk= Subject key identifier: 1F:01:76:96:AE:26:27:B1:32:62:04:26:8F:05:E2:DF:16:06:E2:88 Certificate issuer: /CN=84052649-3401-4ba6-ad82-6f310741b104 Certificate serial: 010D0C9F43285849CBCF98D5DFCA7889D940B1C8 Authority key identifier: C5:7E:94:BF:F8:88:D8:AD:FC:2A:56:CE:FC:62:CA:F7:50:07:B3:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/4168211f-81ee-3a06-a39d-59f42a3495b8.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 395129 IP address blocks: 108.59.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/84052649-3401-4ba6-ad82-6f310741b104.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/84052649-3401-4ba6-ad82-6f310741b104.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:98:d5:df:ca:78:89:d9:40:b1:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84052649-3401-4ba6-ad82-6f310741b104 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=b46b55c6-caa1-47ce-9b24-2efe368db19b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:37:e1:74:58:e9:9a:0a:82:ac:51:45:a2:55: 74:12:50:dc:e0:14:ec:23:26:97:22:96:20:99:69: 40:34:9e:a1:64:39:c9:f5:f4:b2:09:74:29:3d:e7: e1:56:23:a6:5b:fd:b9:09:43:e0:e5:99:56:b5:83: 2a:c8:49:43:a3:11:94:91:48:97:f9:2b:8f:ee:00: 49:0c:d7:c1:0d:03:ff:49:96:af:eb:b9:e7:87:3e: da:fd:2d:8b:dd:8d:0e:d9:22:0b:b1:f9:3a:11:7a: e2:0d:4d:0f:27:f0:8a:27:be:74:1a:2d:f9:b3:a5: b0:6e:a7:17:b9:32:8a:9e:32:e2:8c:f8:53:0c:59: f9:ad:73:ab:4b:77:dd:a6:32:14:10:5f:6c:cf:20: a4:23:ac:5e:80:de:73:34:e0:68:93:16:ec:fa:06: d4:08:70:44:68:6e:56:f5:b3:90:ec:00:15:58:37: ab:3b:4c:66:5a:33:ce:60:d6:2c:c3:33:a3:db:de: f3:16:24:44:b6:03:48:6b:d6:6a:6d:e5:e2:ef:db: f2:be:09:4c:7d:c3:bb:99:30:b3:5f:d1:e4:a0:fe: 5e:c3:91:90:97:7a:4c:e9:da:e0:67:ad:15:82:b5: 41:d2:c5:cb:87:27:32:7c:85:d3:b5:e2:fd:92:db: 6d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:01:76:96:AE:26:27:B1:32:62:04:26:8F:05:E2:DF:16:06:E2:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/4168211f-81ee-3a06-a39d-59f42a3495b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/84052649-3401-4ba6-ad82-6f310741b104.crl X509v3 Authority Key Identifier: keyid:C5:7E:94:BF:F8:88:D8:AD:FC:2A:56:CE:FC:62:CA:F7:50:07:B3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104.cer sbgp-ipAddrBlock: critical IPv4: 108.59.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:93:73:72:37:13:b7:95:76:32:84:cd:a7:f8:36:8d:94:55: e5:44:d3:75:4d:19:12:7a:2b:d6:3b:13:ee:67:0f:e1:ca:b4: 15:02:d1:7d:32:7b:55:4b:39:ed:2d:ef:96:c7:0b:28:a3:1e: 1b:7a:cb:d0:14:dd:ed:ad:06:17:96:3c:69:c6:29:e6:cc:32: 1a:9f:5d:d8:22:52:85:b7:e4:1e:98:10:d7:0e:47:ed:50:45: 36:b0:e1:4c:fd:eb:f7:12:fa:8b:a7:a1:81:45:52:9f:64:3d: 8a:ab:2d:c0:64:a1:97:5a:14:80:e9:aa:82:a9:7c:10:4e:0c: f6:b0:87:b5:8c:11:1a:8a:b6:d8:3c:bd:44:3f:97:5c:ef:b2: 3a:06:06:12:5f:97:1b:50:7f:6e:58:ef:52:d3:f0:29:96:48: 7f:99:24:37:13:f6:28:aa:14:f9:aa:c2:9d:ae:99:1f:8d:5d: a2:f9:59:e2:8c:48:80:6e:0b:9c:fc:7e:bd:9c:95:bc:cf:aa: 20:6c:f3:56:e6:bc:5e:3a:f4:47:57:d7:38:44:d7:33:4d:63: 68:65:19:fa:39:0b:e0:b9:eb:81:5a:bf:d9:26:ce:06:71:ce: e8:b9:07:43:bc:26:bf:e6:1a:fe:3d:52:e5:a8:c8:fa:69:c8: 29:8d:78:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz5jV38p4idlAscgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQwNTI2NDktMzQwMS00YmE2LWFkODItNmYzMTA3NDFi MTA0MB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk YjQ2YjU1YzYtY2FhMS00N2NlLTliMjQtMmVmZTM2OGRiMTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zfhdFjpmgqCrFFFolV0ElDc4BTsIyaXIpYg mWlANJ6hZDnJ9fSyCXQpPefhViOmW/25CUPg5ZlWtYMqyElDoxGUkUiX+SuP7gBJ DNfBDQP/SZav67nnhz7a/S2L3Y0O2SILsfk6EXriDU0PJ/CKJ750Gi35s6WwbqcX uTKKnjLijPhTDFn5rXOrS3fdpjIUEF9szyCkI6xegN5zNOBokxbs+gbUCHBEaG5W 9bOQ7AAVWDerO0xmWjPOYNYswzOj297zFiREtgNIa9ZqbeXi79vyvglMfcO7mTCz X9HkoP5ew5GQl3pM6drgZ60VgrVB0sXLhycyfIXTteL9ktttPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8BdpauJiexMmIEJo8F4t8WBuKIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NDA1 MjY0OS0zNDAxLTRiYTYtYWQ4Mi02ZjMxMDc0MWIxMDQvNDE2ODIxMWYtODFlZS0z YTA2LWEzOWQtNTlmNDJhMzQ5NWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODQwNTI2NDktMzQwMS00YmE2LWFk ODItNmYzMTA3NDFiMTA0Lzg0MDUyNjQ5LTM0MDEtNGJhNi1hZDgyLTZmMzEwNzQx YjEwNC5jcmwwHwYDVR0jBBgwFoAUxX6Uv/iI2K38KlbO/GLK91AHs6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84NDA1MjY0OS0zNDAxLTRiYTYtYWQ4Mi02ZjMx MDc0MWIxMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbDvMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuTc3I3E7eVdjKEzaf4No2UVeVE03VNGRJ6K9Y7E+5nD+HKtBUC0X0y e1VLOe0t75bHCyijHht6y9AU3e2tBheWPGnGKebMMhqfXdgiUoW35B6YENcOR+1Q RTaw4Uz96/cS+ounoYFFUp9kPYqrLcBkoZdaFIDpqoKpfBBODPawh7WMERqKttg8 vUQ/l1zvsjoGBhJflxtQf25Y71LT8CmWSH+ZJDcT9iiqFPmqwp2umR+NXaL5WeKM SIBuC5z8fr2clbzPqiBs81bmvF469EdX1zhE1zNNY2hlGfo5C+C564Fav9kmzgZx zui5B0O8Jr/mGv49UuWoyPppyCmNeIo= -----END CERTIFICATE-----Generated at Mon May 12 00:10:39 2025 by rpki-client