$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5c4ded55-53f6-3745-860c-522c2e4b7fc2.roa File: 5c4ded55-53f6-3745-860c-522c2e4b7fc2.roa (raw, json) Hash identifier: A/thwC56DUU0TbLrrmPpVj9FIBe4Q2R2yy8VTInl5uQ= Subject key identifier: 1C:68:04:A4:A7:B6:1D:DA:35:15:F1:D6:48:BE:82:D1:71:4A:A4:AC Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F43285849B9AA07C5ED72354B2461E000 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5c4ded55-53f6-3745-860c-522c2e4b7fc2.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 5645 IP address blocks: 108.162.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:07:c5:ed:72:35:4b:24:61:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=f7dd7a01-b3c3-49fc-8421-c69e8cd463e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fa:85:ed:3c:30:80:ac:01:a5:65:49:42:81: 92:21:89:d9:20:fa:83:3c:e1:ea:72:0b:b4:d1:7b: a6:68:4d:ff:ba:e6:96:e0:97:2a:05:20:e4:42:c0: 0e:3b:a7:be:ea:0d:f3:e4:e0:4d:36:b3:10:ce:fa: 36:50:4a:3e:3e:c6:03:0a:9c:f5:72:e6:2d:f2:02: fc:e0:5e:b0:82:1c:01:cd:1f:db:08:43:05:f2:56: cc:46:08:6e:97:72:8a:aa:f8:40:bc:fc:61:78:84: f0:b3:60:45:22:8c:53:5f:cc:08:53:3d:ab:0f:67: 72:6b:72:3e:e1:51:52:6d:19:27:6a:44:35:67:b6: 2d:bf:a0:c3:38:d1:b4:a3:41:75:86:80:6c:00:04: 6c:c8:d7:99:cf:41:67:8f:71:01:1f:8a:40:9e:1b: 3a:70:d9:24:dd:26:70:bc:bc:40:b9:c9:c1:43:92: 74:3f:5b:9c:59:c5:bb:72:24:72:48:cb:71:87:d3: 7b:0c:3f:ee:ee:6a:2d:af:ed:19:79:7a:a6:87:df: 27:70:83:ab:4c:c6:1e:0b:79:a9:89:5d:2a:92:03: 08:6f:90:d1:09:70:2e:e5:54:14:30:b8:21:a2:ef: cc:59:df:b8:d9:8c:3b:a7:74:67:e7:31:a1:64:3b: 98:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:68:04:A4:A7:B6:1D:DA:35:15:F1:D6:48:BE:82:D1:71:4A:A4:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5c4ded55-53f6-3745-860c-522c2e4b7fc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 108.162.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:1a:12:34:aa:57:20:05:1b:13:72:f1:9b:f7:31:a9:ab:42: b5:13:ca:b2:d8:e4:66:42:38:b2:fe:bd:50:28:a0:6f:05:96: c6:77:a4:49:e1:54:34:94:7c:32:02:bc:6e:64:f2:2a:84:3e: b6:f2:20:5f:96:bc:58:05:e9:74:38:75:a2:e9:c0:84:c6:91: d8:e2:e1:0e:db:4b:c0:a8:7b:85:1b:32:ad:4b:cf:fc:5d:7e: 84:3c:87:05:d9:ac:82:35:75:79:ec:eb:54:ad:da:1e:5b:ac: 13:26:88:0f:fe:9e:51:f3:e4:bc:0a:50:75:c6:4d:a4:90:d3: d1:7f:9c:4c:5e:c1:d2:21:9f:2b:97:e7:7f:e2:6e:34:30:74: 40:a6:19:ae:d7:ed:be:b0:55:2a:97:4d:02:02:79:60:ee:39: a5:83:2c:4c:3e:20:27:62:f8:c9:2f:08:3b:19:9c:97:e1:83: 41:e0:14:81:53:8f:42:5f:ea:30:6c:0b:7a:9e:5f:99:22:2d: b7:51:bb:23:d7:9b:e9:1a:ec:48:be:e8:36:32:09:92:6d:9b: b1:2d:74:64:02:cc:1b:7a:b1:53:38:4e:78:3c:bf:8b:01:cd: 49:10:d2:de:5c:47:bc:43:e5:b8:67:bd:63:7e:65:b2:50:e7: c3:cd:18:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qgfF7XI1SyRh4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk ZjdkZDdhMDEtYjNjMy00OWZjLTg0MjEtYzY5ZThjZDQ2M2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/qF7TwwgKwBpWVJQoGSIYnZIPqDPOHqcgu0 0XumaE3/uuaW4JcqBSDkQsAOO6e+6g3z5OBNNrMQzvo2UEo+PsYDCpz1cuYt8gL8 4F6wghwBzR/bCEMF8lbMRghul3KKqvhAvPxheITws2BFIoxTX8wIUz2rD2dya3I+ 4VFSbRknakQ1Z7Ytv6DDONG0o0F1hoBsAARsyNeZz0Fnj3EBH4pAnhs6cNkk3SZw vLxAucnBQ5J0P1ucWcW7ciRySMtxh9N7DD/u7motr+0ZeXqmh98ncIOrTMYeC3mp iV0qkgMIb5DRCXAu5VQUMLghou/MWd+42Yw7p3Rn5zGhZDuYgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxoBKSnth3aNRXx1ki+gtFxSqSsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvNWM0ZGVkNTUtNTNmNi0z NzQ1LTg2MGMtNTIyYzJlNGI3ZmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGbKKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALQaEjSqVyAFGxNy8Zv3MamrQrUTyrLY5GZCOLL+vVAooG8FlsZ3pEnh VDSUfDICvG5k8iqEPrbyIF+WvFgF6XQ4daLpwITGkdji4Q7bS8Coe4UbMq1Lz/xd foQ8hwXZrII1dXns61St2h5brBMmiA/+nlHz5LwKUHXGTaSQ09F/nExewdIhnyuX 53/ibjQwdECmGa7X7b6wVSqXTQICeWDuOaWDLEw+ICdi+MkvCDsZnJfhg0HgFIFT j0Jf6jBsC3qeX5kiLbdRuyPXm+ka7Ei+6DYyCZJtm7EtdGQCzBt6sVM4Tng8v4sB zUkQ0t5cR7xD5bhnvWN+ZbJQ58PNGGw= -----END CERTIFICATE-----Generated at Fri May 9 18:44:56 2025 by rpki-client