$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/14bb2815-17b3-36ca-b86b-40cc4786f2b9.roa File: 14bb2815-17b3-36ca-b86b-40cc4786f2b9.roa (raw, json) Hash identifier: UWY9p2dihmkG7BebXQpeS1Ajg3EJ4cRlpmTf2p0jFLY= Subject key identifier: C5:D2:FA:D8:82:AC:0E:8F:30:5A:10:7C:E0:70:6B:AB:27:92:4F:15 Certificate issuer: /CN=4d4940f4-61c2-4251-acdb-36be83cdc744 Certificate serial: 010D0C9F432858497A204F764F41FCF365E823C0 Authority key identifier: 3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/14bb2815-17b3-36ca-b86b-40cc4786f2b9.roa Signing time: Thu 10 Apr 2025 06:47:33 +0000 ROA not before: Thu 10 Apr 2025 06:47:33 +0000 ROA not after: Wed 09 Jul 2025 06:47:33 +0000 asID: 6407 IP address blocks: 108.63.18.0/23 maxlen: 24 108.63.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7a:20:4f:76:4f:41:fc:f3:65:e8:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d4940f4-61c2-4251-acdb-36be83cdc744 Validity Not Before: Apr 10 06:47:33 2025 GMT Not After : Jul 9 06:47:33 2025 GMT Subject: CN=bb6988b6-fb6d-4449-9144-e32b73c11e5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ae:16:e5:94:2d:2b:dc:77:02:d4:4e:4f:ed: 25:59:15:b7:2d:92:d6:e4:75:fd:2d:cf:c4:b2:17: 14:7b:7a:c5:d0:bb:25:a0:9b:34:87:29:3f:a0:d1: f9:79:3f:98:3d:81:78:7d:38:45:70:b8:65:1e:a6: c9:7e:d4:ba:1a:47:18:36:c3:0b:6b:ef:f6:65:b8: 31:da:ca:18:98:56:68:58:8c:b1:8d:ce:df:4a:0b: db:a7:9e:20:40:d0:ba:3b:74:02:db:e4:68:87:91: a6:20:60:f7:e1:95:1d:1b:cd:83:02:d2:00:c9:57: 3f:0b:d3:42:93:ca:9d:14:85:67:73:fe:33:82:32: d1:a8:24:71:fe:7d:d1:0e:b5:aa:86:c2:a3:2e:60: 19:ac:93:58:f5:e4:7d:45:4d:f5:bb:13:01:de:23: ec:9a:6d:36:25:6c:e6:ad:ab:9c:73:eb:ef:51:cf: 86:ac:34:42:c6:13:a2:af:4a:e0:dc:e6:76:b2:1f: 1c:b6:de:64:ac:4f:ab:b7:d6:fb:24:b8:07:08:5d: 8b:65:11:3f:35:68:08:fc:eb:f9:dc:a1:c5:eb:7d: 9b:ed:68:e0:6c:bf:2a:05:54:09:4f:6c:38:1f:34: 16:32:30:e8:dc:95:9c:48:68:26:c8:b7:9e:bb:92: 63:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D2:FA:D8:82:AC:0E:8F:30:5A:10:7C:E0:70:6B:AB:27:92:4F:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/14bb2815-17b3-36ca-b86b-40cc4786f2b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl X509v3 Authority Key Identifier: keyid:3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer sbgp-ipAddrBlock: critical IPv4: 108.63.18.0-108.63.21.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:92:91:d7:9a:c2:3b:7a:48:b9:b4:5e:66:87:a1:f6:f3:59: 52:32:eb:8b:f4:d0:23:fc:6b:65:18:7c:ff:bb:1c:e9:66:34: 15:b1:9e:fa:54:24:bc:7f:d5:0f:2b:5e:f3:1f:44:b8:d9:b0: a2:76:60:28:72:29:e8:75:30:4d:81:1d:08:c0:72:b4:e6:b6: 33:7d:52:db:bb:7c:84:b4:27:99:c6:b2:e0:e8:f7:0a:ce:2c: c8:d6:e1:e4:2e:0f:17:b3:0f:eb:78:80:c9:d6:b5:fe:24:3e: 8f:4a:7a:c3:f5:f8:3b:20:0a:4d:e2:c9:d1:68:25:fa:1f:0b: 1a:a0:31:82:25:3a:44:12:c4:28:0a:e4:3e:48:1d:b7:da:5a: db:02:1f:f6:8e:f3:1c:96:e3:28:58:00:01:f7:d2:68:74:89: e0:f3:25:76:14:43:2f:41:ed:13:ab:aa:9c:0b:8c:92:73:38: d3:a0:9c:ac:27:89:5c:d5:08:e8:b8:38:57:8c:0d:46:09:38: bd:73:93:54:c3:7b:c2:d3:62:63:68:8d:cf:2b:07:7b:ce:71: 0b:d1:c2:8d:d2:40:11:68:12:75:ab:d7:e2:9d:51:2f:48:2c: 6f:b2:d1:ef:40:9b:68:41:da:93:bc:50:73:a4:ff:7e:c1:6e: c0:93:da:1a -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEl6IE92T0H882XoI8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ0OTQwZjQtNjFjMi00MjUxLWFjZGItMzZiZTgzY2Rj NzQ0MB4XDTI1MDQxMDA2NDczM1oXDTI1MDcwOTA2NDczM1owLzEtMCsGA1UEAxMk YmI2OTg4YjYtZmI2ZC00NDQ5LTkxNDQtZTMyYjczYzExZTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyK4W5ZQtK9x3AtROT+0lWRW3LZLW5HX9Lc/E shcUe3rF0LsloJs0hyk/oNH5eT+YPYF4fThFcLhlHqbJftS6GkcYNsMLa+/2Zbgx 2soYmFZoWIyxjc7fSgvbp54gQNC6O3QC2+Roh5GmIGD34ZUdG82DAtIAyVc/C9NC k8qdFIVnc/4zgjLRqCRx/n3RDrWqhsKjLmAZrJNY9eR9RU31uxMB3iPsmm02JWzm raucc+vvUc+GrDRCxhOir0rg3OZ2sh8ctt5krE+rt9b7JLgHCF2LZRE/NWgI/Ov5 3KHF632b7WjgbL8qBVQJT2w4HzQWMjDo3JWcSGgmyLeeu5JjPwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFMXS+tiCrA6PMFoQfOBwa6snkk8VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZDQ5 NDBmNC02MWMyLTQyNTEtYWNkYi0zNmJlODNjZGM3NDQvMTRiYjI4MTUtMTdiMy0z NmNhLWI4NmItNDBjYzQ3ODZmMmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGQ0OTQwZjQtNjFjMi00MjUxLWFj ZGItMzZiZTgzY2RjNzQ0LzRkNDk0MGY0LTYxYzItNDI1MS1hY2RiLTM2YmU4M2Nk Yzc0NC5jcmwwHwYDVR0jBBgwFoAUPdev1k6DmBY4LIH9klbSh2ozmcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZDQ5NDBmNC02MWMyLTQyNTEtYWNkYi0zNmJl ODNjZGM3NDQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFsPxID BAFsPxQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAKZKR15rCO3pIubReZoeh9vNZUjLri/TQI/xrZRh8/7sc 6WY0FbGe+lQkvH/VDyte8x9EuNmwonZgKHIp6HUwTYEdCMBytOa2M31S27t8hLQn mcay4Oj3Cs4syNbh5C4PF7MP63iAyda1/iQ+j0p6w/X4OyAKTeLJ0Wgl+h8LGqAx giU6RBLEKArkPkgdt9pa2wIf9o7zHJbjKFgAAffSaHSJ4PMldhRDL0HtE6uqnAuM knM406CcrCeJXNUI6Lg4V4wNRgk4vXOTVMN7wtNiY2iNzysHe85xC9HCjdJAEWgS davX4p1RL0gsb7LR70CbaEHak7xQc6T/fsFuwJPaGg== -----END CERTIFICATE-----Generated at Wed Apr 16 16:03:54 2025 by rpki-client