$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/90995505-edaf-32ba-8651-63e12781dc0e.roa File: 90995505-edaf-32ba-8651-63e12781dc0e.roa (raw, json) Hash identifier: 2Y8tySuKAFftzFQYG9gi7P0zzJk6rAxluNkrG4GpCe4= Subject key identifier: 28:8B:5F:88:64:D0:CA:99:6E:53:D4:F2:20:F5:8B:6B:94:A5:C3:94 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E655107DE6EE17010130BF00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/90995505-edaf-32ba-8651-63e12781dc0e.roa Signing time: Mon 19 May 2025 01:00:48 +0000 ROA not before: Mon 19 May 2025 01:00:48 +0000 ROA not after: Sun 17 Aug 2025 01:00:48 +0000 asID: 13335 IP address blocks: 108.162.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:55:10:7d:e6:ee:17:01:01:30:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 01:00:48 2025 GMT Not After : Aug 17 01:00:48 2025 GMT Subject: CN=1d91e70a-d4b9-436f-a022-868c65f796df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:72:e9:ac:1d:a4:23:6d:ce:62:32:07:8c:c8: 00:d3:c4:bd:3b:88:f4:c1:5a:ae:e0:5b:ca:d4:ca: f1:c0:04:ba:d9:92:3d:f4:ed:33:8c:5d:1a:93:01: a5:9a:28:e8:96:05:83:86:80:7e:47:8b:c9:2d:51: 2c:0d:26:bd:fa:9c:c7:c0:36:ae:2d:47:fb:50:fd: 8b:4d:d6:e9:fe:c3:61:4e:5b:62:83:5f:41:c5:1b: 83:33:48:22:a1:e1:88:25:ac:cd:ed:64:43:85:39: e5:19:5a:49:26:ca:83:a9:f5:b3:a2:16:bf:b9:91: 82:ad:ef:f9:c2:b8:85:42:a6:74:87:40:ad:61:46: 41:5c:b1:f7:76:0e:d7:63:a7:0f:e1:31:6d:b5:cc: 51:15:04:60:66:69:bd:d3:76:d1:30:47:80:00:31: 63:47:eb:11:50:55:2d:cb:7d:0b:7f:d7:ab:f0:2d: 56:d1:92:d1:8a:6d:67:f9:7b:51:5f:5b:7d:1b:23: 76:0a:11:4a:f1:d1:79:04:0e:16:f8:4b:8a:fb:6b: 86:41:0f:7b:58:1b:21:65:87:2f:10:d4:23:ad:35: e8:73:54:cc:5f:4f:e8:df:d6:6a:82:ef:fc:73:57: 8d:0e:79:e0:bd:dc:ad:c8:ef:77:91:10:f9:41:f4: 53:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:8B:5F:88:64:D0:CA:99:6E:53:D4:F2:20:F5:8B:6B:94:A5:C3:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/90995505-edaf-32ba-8651-63e12781dc0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 108.162.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:2f:e9:be:3b:75:03:04:66:f3:65:e9:63:6c:85:b9:fa:88: 7d:6e:4f:93:c1:8d:7f:39:27:f7:f6:4c:5d:0c:c7:1f:ae:0b: 3e:4e:9f:30:9a:e5:38:b6:3f:8f:c1:66:dc:f9:5d:bf:16:b8: a9:ca:ef:de:15:d4:8d:fd:f7:34:37:0c:06:92:30:97:74:38: 35:18:9b:28:5f:38:a5:b9:e4:73:78:d9:4b:f6:35:bf:f4:0d: c9:d7:68:c6:a6:4a:0d:76:9e:c0:11:b6:c2:f7:b9:21:71:92: 7f:31:64:f5:33:64:f9:7d:28:c8:bd:5c:60:11:8e:02:df:4c: 81:04:f0:f1:1c:7a:94:ed:9c:45:1a:9d:63:ba:d3:a6:4f:e0: 10:b8:8f:ef:19:1e:94:6e:7b:d5:dc:9c:ec:ed:2a:bf:f1:28: df:08:fc:4e:55:1b:87:01:d1:c4:06:48:f8:1e:bd:ac:e2:a6: ac:af:63:b2:03:58:e0:67:77:fb:ed:ac:19:fb:c0:0f:38:96: 2a:da:59:e2:1d:e5:24:ee:86:76:b2:53:38:3c:9b:b7:6d:af: 93:2a:1c:df:d4:0f:72:a5:29:d0:cf:29:ba:7f:38:77:c7:a1: c7:20:fe:7b:20:9d:35:ff:47:ee:52:24:4e:2a:44:22:61:ce: 1e:3b:1e:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVRB95u4XAQEwvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk MWQ5MWU3MGEtZDRiOS00MzZmLWEwMjItODY4YzY1Zjc5NmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXLprB2kI23OYjIHjMgA08S9O4j0wVqu4FvK 1MrxwAS62ZI99O0zjF0akwGlmijolgWDhoB+R4vJLVEsDSa9+pzHwDauLUf7UP2L Tdbp/sNhTltig19BxRuDM0gioeGIJazN7WRDhTnlGVpJJsqDqfWzoha/uZGCre/5 wriFQqZ0h0CtYUZBXLH3dg7XY6cP4TFttcxRFQRgZmm903bRMEeAADFjR+sRUFUt y30Lf9er8C1W0ZLRim1n+XtRX1t9GyN2ChFK8dF5BA4W+EuK+2uGQQ97WBshZYcv ENQjrTXoc1TMX0/o39Zqgu/8c1eNDnngvdytyO93kRD5QfRT8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCiLX4hk0MqZblPU8iD1i2uUpcOUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTA5OTU1MDUtZWRhZi0z MmJhLTg2NTEtNjNlMTI3ODFkYzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAv6b47dQMEZvNl6WNshbn6iH1uT5PBjX85J/f2TF0Mxx+uCz5OnzCa 5Ti2P4/BZtz5Xb8WuKnK794V1I399zQ3DAaSMJd0ODUYmyhfOKW55HN42Uv2Nb/0 DcnXaMamSg12nsARtsL3uSFxkn8xZPUzZPl9KMi9XGARjgLfTIEE8PEcepTtnEUa nWO606ZP4BC4j+8ZHpRue9XcnOztKr/xKN8I/E5VG4cB0cQGSPgevazipqyvY7ID WOBnd/vtrBn7wA84liraWeId5STuhnayUzg8m7dtr5MqHN/UD3KlKdDPKbp/OHfH occg/nsgnTX/R+5SJE4qRCJhzh47HrA= -----END CERTIFICATE-----Generated at Thu Jun 5 19:15:35 2025 by rpki-client