$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/32bc9adc-0c3d-3d0e-85c9-cd1f9bdab998.roa File: 32bc9adc-0c3d-3d0e-85c9-cd1f9bdab998.roa (raw, json) Hash identifier: dCigNqxP/CNw5+T0yt9O/eEcHAUAi41f+nZMfoQjRmw= Subject key identifier: F2:BC:EA:35:61:1A:FB:62:E5:B8:B8:3F:9D:6F:BC:9E:2C:8D:69:3E Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858490B4C1DA61F381B0CD32B5B10 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/32bc9adc-0c3d-3d0e-85c9-cd1f9bdab998.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 20454 IP address blocks: 108.170.0.0/18 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:1d:a6:1f:38:1b:0c:d3:2b:5b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=02991904-2463-4bbc-8294-fba8527834d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a6:04:ef:75:ce:53:13:3e:dd:9d:69:24:ed: d3:6a:08:f8:e3:2e:f8:4e:18:1b:1d:cd:49:34:c6: f6:ad:0f:b8:5f:d6:fa:7e:13:4e:4c:08:aa:0b:e2: cc:cd:80:82:57:e9:e2:1e:25:a0:07:be:16:93:0b: 46:d5:cd:cc:bc:38:2c:49:05:9d:b9:cc:22:07:d1: 3a:93:98:9b:a4:be:8e:46:44:ff:c6:8f:24:e4:7c: c2:55:2f:3d:f8:68:0f:dd:03:3a:75:a0:60:82:d1: 1b:1d:fd:8c:a6:11:38:17:b9:85:ed:a8:d7:cb:5e: 7b:b2:80:b5:c8:e5:01:18:db:76:db:7e:6f:d0:a7: af:23:1c:e3:1d:0e:a2:2b:81:15:ec:09:c0:a8:ec: 70:c1:fa:1f:6b:01:96:2d:bf:c7:ac:dd:05:23:95: 7a:bc:69:84:be:8d:54:17:78:34:72:f9:2f:82:fe: 4b:9c:11:8a:5c:95:35:e2:11:2d:fe:76:6f:50:e0: e1:5d:8e:5c:1e:3d:41:82:77:19:e6:87:d5:fc:dd: 1f:4c:7c:af:83:2e:ae:02:ac:71:d6:a4:73:41:55: aa:99:90:a6:60:3f:9a:bb:d2:fe:4a:b8:ca:5e:5b: 24:bf:46:42:d5:66:e5:4b:c3:92:f9:fe:00:b0:c7: c8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:BC:EA:35:61:1A:FB:62:E5:B8:B8:3F:9D:6F:BC:9E:2C:8D:69:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/32bc9adc-0c3d-3d0e-85c9-cd1f9bdab998.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:56:d2:c3:83:55:ea:aa:53:60:26:73:19:6d:06:7e:97:7c: 8a:83:5d:de:0c:9a:8c:58:01:a4:da:80:13:70:54:a0:dd:7c: d2:c4:19:ed:eb:48:b8:fa:20:10:e5:b9:dc:22:d5:4c:e1:24: 8a:5d:a1:d0:16:24:9c:a2:b3:40:75:f1:5b:28:85:46:6d:59: 8e:32:90:93:74:ce:00:74:29:dc:60:36:87:64:0b:0c:2e:55: bb:14:10:e9:77:2c:63:f9:6e:89:ab:87:32:3a:b0:ee:67:60: a3:b4:07:96:8a:3e:0b:0e:bb:c3:b8:8f:b2:a8:81:89:78:cc: 84:e6:f6:05:1d:dc:5b:b6:00:c5:9c:85:39:10:24:38:92:87: c3:b0:a5:6b:31:5b:f1:28:a0:40:3d:e5:70:3d:ee:4f:54:75: 40:ff:46:3c:85:08:26:2f:b1:97:2e:f7:09:ec:e2:f1:cc:8e: 30:d4:6b:5a:86:c1:cf:a0:0a:d8:d1:c1:6f:be:01:ea:0b:ae: 01:ff:f9:f8:a7:ef:3d:3c:b0:e2:4b:db:b7:ba:e2:1a:64:10: c0:9d:19:6d:40:d3:f8:0c:8f:ef:d1:d6:f4:3a:ca:62:0c:18: c0:26:b5:f0:8f:b0:4f:d0:79:ed:9e:cf:73:45:e8:c5:f2:16: 32:91:9e:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTB2mHzgbDNMrWxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk MDI5OTE5MDQtMjQ2My00YmJjLTgyOTQtZmJhODUyNzgzNGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6YE73XOUxM+3Z1pJO3Tagj44y74ThgbHc1J NMb2rQ+4X9b6fhNOTAiqC+LMzYCCV+niHiWgB74WkwtG1c3MvDgsSQWducwiB9E6 k5ibpL6ORkT/xo8k5HzCVS89+GgP3QM6daBggtEbHf2MphE4F7mF7ajXy157soC1 yOUBGNt2235v0KevIxzjHQ6iK4EV7AnAqOxwwfofawGWLb/HrN0FI5V6vGmEvo1U F3g0cvkvgv5LnBGKXJU14hEt/nZvUODhXY5cHj1BgncZ5ofV/N0fTHyvgy6uAqxx 1qRzQVWqmZCmYD+au9L+SrjKXlskv0ZC1WblS8OS+f4AsMfIiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPK86jVhGvti5bi4P51vvJ4sjWk+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMzJiYzlhZGMtMGMzZC0z ZDBlLTg1YzktY2QxZjliZGFiOTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGbKoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFW0sODVeqqU2AmcxltBn6XfIqDXd4MmoxYAaTagBNwVKDdfNLEGe3r SLj6IBDludwi1UzhJIpdodAWJJyis0B18VsohUZtWY4ykJN0zgB0KdxgNodkCwwu VbsUEOl3LGP5bomrhzI6sO5nYKO0B5aKPgsOu8O4j7KogYl4zITm9gUd3Fu2AMWc hTkQJDiSh8OwpWsxW/EooEA95XA97k9UdUD/RjyFCCYvsZcu9wns4vHMjjDUa1qG wc+gCtjRwW++AeoLrgH/+fin7z08sOJL27e64hpkEMCdGW1A0/gMj+/R1vQ6ymIM GMAmtfCPsE/Qee2ez3NF6MXyFjKRno4= -----END CERTIFICATE-----Generated at Sat Apr 5 07:26:15 2025 by rpki-client