$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9787dda9-9271-309a-9152-58bbbdcc1f7d.roa File: 9787dda9-9271-309a-9152-58bbbdcc1f7d.roa (raw, json) Hash identifier: LzThjqKb5m5kqF/13Q4PC+/DwXCrUVhJZyHl/UtCbU0= Subject key identifier: A5:BD:AA:CE:30:FF:9C:C1:DF:A2:AB:B5:E7:B9:0A:8D:D9:F7:DE:8B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858499F24CBB5BBEBDBFC80FF7000 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9787dda9-9271-309a-9152-58bbbdcc1f7d.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 108.59.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:cb:b5:bb:eb:db:fc:80:ff:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=c317d5f0-d5bf-46aa-9a80-6bfec1301b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b2:d7:0e:e9:49:ce:bf:ea:6a:e0:ee:25:ad: f7:8f:bb:57:b1:aa:07:a9:04:f9:9a:c9:e7:d3:c9: eb:4a:a1:9f:b6:1c:d2:fa:76:7c:0c:85:08:1f:1d: 79:1e:39:91:c4:fd:d0:15:29:5e:69:0c:74:38:6a: eb:25:e5:59:50:5c:12:0a:ef:fb:df:1d:31:cf:aa: 82:9d:76:1e:07:f4:17:79:57:86:a0:49:b1:08:c0: 85:c9:0a:59:04:4d:d3:a6:10:ea:6e:de:91:ed:55: 3a:8d:f1:53:51:da:d8:ba:45:10:68:79:f4:b3:3a: ce:dc:f8:d6:6c:a2:64:df:f0:20:e0:b6:7d:42:82: 4e:77:ab:64:81:40:9c:33:b9:43:f9:ce:5d:30:8c: d3:23:1d:c8:97:71:e6:4e:61:10:8e:df:5c:99:1d: 6d:72:1e:ec:77:94:8f:ba:08:9b:7d:07:7e:63:9b: 6a:33:73:d2:4c:79:9c:f0:ec:3d:76:36:08:9f:36: 3d:08:89:07:32:0e:de:a9:aa:09:ca:96:ed:d7:88: 03:ab:bb:7c:2b:50:d4:cc:cb:9c:80:d0:a6:04:85: 0f:c8:a0:e6:3b:1e:6e:54:d6:79:1d:ad:fd:d8:7c: 8e:5f:db:32:b2:6d:32:a2:c1:7a:d2:76:b7:4f:17: 6a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:BD:AA:CE:30:FF:9C:C1:DF:A2:AB:B5:E7:B9:0A:8D:D9:F7:DE:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9787dda9-9271-309a-9152-58bbbdcc1f7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 108.59.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:d1:78:dc:cc:9a:f6:46:ba:4d:64:25:d6:c6:83:cc:a5:a7: a1:a2:26:da:76:a6:bf:99:e0:cc:40:b3:c1:d8:c2:09:18:c2: c3:d1:2e:fb:bd:48:71:c7:c9:fe:8b:ac:3b:b2:4f:50:5f:81: 92:e9:87:1c:50:cc:f8:23:40:d5:bc:86:41:33:97:5a:4c:49: ce:60:dc:51:bb:53:95:3e:d4:07:09:e2:be:5e:f0:f1:f6:4c: 32:2c:5b:a2:70:13:98:ce:cb:cc:74:df:a9:53:8e:a6:87:89: cc:b2:35:10:d7:67:54:62:09:26:a6:2b:30:95:67:bc:1d:7c: d0:0b:8a:e0:cb:d5:e4:48:6c:45:28:cf:4b:6d:e0:97:89:b6: c2:13:ff:61:d9:65:d0:95:f0:9f:c6:35:f7:a8:e3:04:fe:c0: 43:88:0d:a9:ea:da:08:99:c6:82:3a:4a:ff:ba:7e:e4:dc:5f: a1:e6:12:07:13:69:19:80:6c:9c:c0:3b:43:09:83:6a:12:ac: 33:5d:4d:02:8c:a4:af:7e:e5:07:bf:55:aa:c1:d8:db:28:8c: a5:3d:f3:64:de:34:43:f4:ee:ff:bc:04:35:32:5d:19:da:f7: bb:ba:aa:c7:65:e7:ef:41:1c:8d:1d:61:bf:23:27:4b:97:b7: 50:4a:55:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJMu1u+vb/ID/cAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk YzMxN2Q1ZjAtZDViZi00NmFhLTlhODAtNmJmZWMxMzAxYjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobLXDulJzr/qauDuJa33j7tXsaoHqQT5msnn 08nrSqGfthzS+nZ8DIUIHx15HjmRxP3QFSleaQx0OGrrJeVZUFwSCu/73x0xz6qC nXYeB/QXeVeGoEmxCMCFyQpZBE3TphDqbt6R7VU6jfFTUdrYukUQaHn0szrO3PjW bKJk3/Ag4LZ9QoJOd6tkgUCcM7lD+c5dMIzTIx3Il3HmTmEQjt9cmR1tch7sd5SP ugibfQd+Y5tqM3PSTHmc8Ow9djYInzY9CIkHMg7eqaoJypbt14gDq7t8K1DUzMuc gNCmBIUPyKDmOx5uVNZ5Ha392HyOX9sysm0yosF60na3Txdq8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKW9qs4w/5zB36Krtee5Co3Z996LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTc4N2RkYTktOTI3MS0z MDlhLTkxNTItNThiYmJkY2MxZjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDtbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILReNzMmvZGuk1kJdbGg8ylp6GiJtp2pr+Z4MxAs8HYwgkYwsPRLvu9 SHHHyf6LrDuyT1BfgZLphxxQzPgjQNW8hkEzl1pMSc5g3FG7U5U+1AcJ4r5e8PH2 TDIsW6JwE5jOy8x036lTjqaHicyyNRDXZ1RiCSamKzCVZ7wdfNALiuDL1eRIbEUo z0tt4JeJtsIT/2HZZdCV8J/GNfeo4wT+wEOIDanq2giZxoI6Sv+6fuTcX6HmEgcT aRmAbJzAO0MJg2oSrDNdTQKMpK9+5Qe/VarB2NsojKU982TeNEP07v+8BDUyXRna 97u6qsdl5+9BHI0dYb8jJ0uXt1BKVTc= -----END CERTIFICATE-----Generated at Fri Jun 6 16:51:18 2025 by rpki-client