$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/98c31ea4-8faa-34b7-823a-a3cd9c7e6b30.roa File: 98c31ea4-8faa-34b7-823a-a3cd9c7e6b30.roa (raw, json) Hash identifier: vSaWdqqSX1aDmxmeTE3jW7vfEh50ukoxXWzoZ/rTemQ= Subject key identifier: E5:62:EB:87:AD:4B:5A:59:AB:A6:73:2B:0D:C8:CD:63:1B:75:9E:A2 Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F43285849B9AA07682047D114D47C8340 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/98c31ea4-8faa-34b7-823a-a3cd9c7e6b30.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 5645 IP address blocks: 107.179.128.0/17 maxlen: 17 107.179.179.0/24 maxlen: 24 107.179.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:07:68:20:47:d1:14:d4:7c:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=893ee924-362f-4908-8dec-f959098dd9f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fc:b0:fc:dc:4f:e4:e3:e8:d8:b5:8b:8a:08: e8:3a:fd:4b:5d:a6:39:17:25:e9:af:3d:86:e5:ee: e9:9b:e4:16:a3:14:5d:a8:1a:08:a0:38:fc:b8:fc: 49:0e:f0:68:55:92:a3:0f:96:7c:17:e9:dd:8f:1a: a6:08:25:0d:04:9d:eb:7b:ab:a2:50:e6:19:9f:4b: 37:3e:0c:64:fd:a6:4b:cc:d1:ca:ad:1c:dd:48:11: 77:f3:7e:60:7d:7a:54:28:d7:cf:e8:71:dc:20:48: 48:d4:68:58:33:98:9c:ac:5e:54:b2:d6:84:43:5c: 80:b7:62:9a:2f:eb:2c:ee:1f:ef:fc:b0:a3:f8:34: 61:c3:6e:95:a1:b3:fd:fb:3e:89:e9:cc:be:12:e5: 9e:6c:be:82:45:59:7d:70:0e:94:f9:12:27:9f:57: cd:1a:73:60:2f:5f:f4:4e:f8:26:b1:7f:1d:e4:16: 41:03:22:13:46:7c:16:f6:59:7c:bb:b7:0d:9d:af: 59:f7:b4:0b:c3:a8:18:57:0d:94:cb:5d:22:e3:78: f2:be:24:7c:06:a0:b7:d3:5e:ce:f9:70:28:5f:37: 45:81:be:4f:bf:94:75:f4:35:78:e2:07:3c:e2:b8: 01:b5:14:f4:96:f4:bb:8b:18:b8:24:4a:bf:7c:66: b7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:62:EB:87:AD:4B:5A:59:AB:A6:73:2B:0D:C8:CD:63:1B:75:9E:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/98c31ea4-8faa-34b7-823a-a3cd9c7e6b30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 107.179.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:b3:7d:1d:74:9d:83:55:a1:11:97:7c:fa:7b:53:5b:25:1c: 7c:49:43:87:90:47:a4:26:66:82:2e:75:8c:e7:70:e3:5f:c3: d6:00:7a:5a:b9:ba:d1:58:8a:a3:82:e7:26:1b:69:fa:de:5a: f5:ed:c0:43:9d:57:65:58:f0:23:8b:2e:01:90:50:e3:7c:53: e9:71:81:80:04:d9:a1:51:aa:7f:28:da:be:d0:b8:33:16:59: 68:ba:da:07:12:ea:c6:8d:1d:5c:df:ce:8f:11:bb:06:d4:55: c9:b6:4c:0e:68:39:86:78:84:71:91:34:79:91:28:ef:71:55: 2d:68:0d:c1:69:12:0f:73:9f:7f:90:4a:e4:f3:f2:8d:bb:10: 51:d9:b7:cb:d1:2d:96:1d:71:58:c5:4b:5d:9f:ae:50:ca:91: cb:61:7b:11:30:e1:bf:c1:e3:27:d0:e4:ef:2c:71:39:6b:96: 57:59:83:52:81:8f:45:03:02:d4:c6:45:76:d6:9a:6d:bb:ab: 15:ef:7a:55:31:fd:8e:65:c4:83:03:ac:c4:5e:c9:d6:ea:5f: 0b:de:3b:92:49:9e:e1:a9:d9:00:76:1a:ca:3c:60:2b:1a:b5: 99:02:26:fe:81:13:6f:8a:fe:d8:41:cd:34:8c:3a:97:23:24: 0d:20:93:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qgdoIEfRFNR8g0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk ODkzZWU5MjQtMzYyZi00OTA4LThkZWMtZjk1OTA5OGRkOWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/yw/NxP5OPo2LWLigjoOv1LXaY5FyXprz2G 5e7pm+QWoxRdqBoIoDj8uPxJDvBoVZKjD5Z8F+ndjxqmCCUNBJ3re6uiUOYZn0s3 Pgxk/aZLzNHKrRzdSBF3835gfXpUKNfP6HHcIEhI1GhYM5icrF5UstaEQ1yAt2Ka L+ss7h/v/LCj+DRhw26VobP9+z6J6cy+EuWebL6CRVl9cA6U+RInn1fNGnNgL1/0 TvgmsX8d5BZBAyITRnwW9ll8u7cNna9Z97QLw6gYVw2Uy10i43jyviR8BqC3017O +XAoXzdFgb5Pv5R19DV44gc84rgBtRT0lvS7ixi4JEq/fGa36QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVi64etS1pZq6ZzKw3IzWMbdZ6iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvOThjMzFlYTQtOGZhYS0z NGI3LTgyM2EtYTNjZDljN2U2YjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHa7OAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABezfR10nYNVoRGXfPp7U1slHHxJQ4eQR6QmZoIudYzncONfw9YAelq5 utFYiqOC5yYbafreWvXtwEOdV2VY8COLLgGQUON8U+lxgYAE2aFRqn8o2r7QuDMW WWi62gcS6saNHVzfzo8RuwbUVcm2TA5oOYZ4hHGRNHmRKO9xVS1oDcFpEg9zn3+Q SuTz8o27EFHZt8vRLZYdcVjFS12frlDKkcthexEw4b/B4yfQ5O8scTlrlldZg1KB j0UDAtTGRXbWmm27qxXvelUx/Y5lxIMDrMReydbqXwveO5JJnuGp2QB2Gso8YCsa tZkCJv6BE2+K/thBzTSMOpcjJA0gk78= -----END CERTIFICATE-----Generated at Tue May 6 00:54:22 2025 by rpki-client