$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/c5348b71-f872-3312-b8b7-af9e5854fe26.roa File: c5348b71-f872-3312-b8b7-af9e5854fe26.roa (raw, json) Hash identifier: Ojbnqi8GlyOU8SGIz55OvhwKjBkz7OSbVSZhwnmrznc= Subject key identifier: 28:47:A2:85:6B:46:CA:28:96:75:0E:B9:6F:80:4B:22:3E:EF:66:78 Certificate issuer: /CN=9b434aa6-b68f-41e7-8d4b-9c831255f11c Certificate serial: 010D0C9F432858493048F0C8517F667BDECBC4C0 Authority key identifier: C4:4B:74:74:83:CC:98:7A:FF:B0:14:84:B3:D8:7A:74:6D:1F:2C:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/c5348b71-f872-3312-b8b7-af9e5854fe26.roa Signing time: Fri 14 Mar 2025 19:59:35 +0000 ROA not before: Fri 14 Mar 2025 19:59:35 +0000 ROA not after: Thu 12 Jun 2025 19:59:35 +0000 asID: 396982 IP address blocks: 108.174.252.0/24 maxlen: 24 108.174.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/9b434aa6-b68f-41e7-8d4b-9c831255f11c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/9b434aa6-b68f-41e7-8d4b-9c831255f11c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:48:f0:c8:51:7f:66:7b:de:cb:c4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b434aa6-b68f-41e7-8d4b-9c831255f11c Validity Not Before: Mar 14 19:59:35 2025 GMT Not After : Jun 12 19:59:35 2025 GMT Subject: CN=096ef3bd-4575-49f0-8737-4412b64e5624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2c:64:cd:1a:14:cb:9b:a7:66:e0:c9:22:fb: 4e:59:76:88:96:23:29:fb:e1:37:46:7a:8c:20:05: 62:a9:c5:8d:56:be:55:ce:1e:ea:96:bb:2a:5d:2a: c1:d4:14:8a:39:70:76:90:d3:43:39:43:f8:5e:33: ea:ac:c2:6c:a6:cf:c4:8e:65:5e:d2:da:1f:b9:c8: 8d:11:93:36:86:46:0d:82:d6:b8:1d:ec:9e:a6:8c: dc:80:45:ab:d1:59:d0:11:75:f2:ab:c8:91:ec:7a: 0d:76:6f:14:2a:1e:7d:ed:a0:9a:3c:c0:c8:69:d8: af:75:02:e9:b3:f7:97:a6:2a:7d:d8:7e:4e:6f:b5: e0:34:4a:4a:37:02:7c:70:44:2f:79:e7:b9:fd:f2: 4e:f2:e0:84:61:92:39:00:fd:ff:77:33:a3:b9:6d: cc:58:88:f8:51:22:c2:93:bf:00:d6:0c:43:ed:ac: 51:0b:b6:f8:ff:20:d1:8b:63:4f:fc:0b:39:c9:af: a0:b8:ec:4f:4a:91:51:c5:57:29:d8:cb:75:b9:69: 58:79:73:ec:e1:59:6f:51:4a:f3:ef:70:67:53:94: 7a:23:b0:54:91:20:83:6e:26:c9:84:0d:a1:e4:59: 18:39:70:46:a3:86:ec:a9:11:1c:1f:84:4b:1d:09: 97:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:47:A2:85:6B:46:CA:28:96:75:0E:B9:6F:80:4B:22:3E:EF:66:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/c5348b71-f872-3312-b8b7-af9e5854fe26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/9b434aa6-b68f-41e7-8d4b-9c831255f11c.crl X509v3 Authority Key Identifier: keyid:C4:4B:74:74:83:CC:98:7A:FF:B0:14:84:B3:D8:7A:74:6D:1F:2C:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c.cer sbgp-ipAddrBlock: critical IPv4: 108.174.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:b9:2e:bd:36:b2:45:bb:2a:96:bf:e9:93:90:2e:e9:c3:8d: 48:95:1a:d1:ec:10:9d:d5:fd:49:51:8e:bb:55:e8:cb:f1:32: bc:18:a1:82:72:20:73:1f:04:1e:7e:04:f5:85:27:63:56:d7: 65:88:ad:d4:ab:92:c9:05:8d:96:9a:76:64:06:dc:fa:89:11: 4c:96:56:51:94:e1:d8:2d:2b:05:2b:61:d9:f4:df:e3:23:87: 7e:00:da:4d:64:8e:65:81:09:98:30:17:08:b2:37:59:df:e5: 4c:fb:40:03:2b:23:97:f6:41:80:1c:a3:9f:a7:96:c0:ab:d6: 90:be:ba:18:9c:03:c1:48:2b:ed:50:dd:e8:bb:c0:bd:5d:85: 85:94:d3:ac:f0:47:c1:7e:7a:be:88:85:be:07:55:31:cf:61: dc:b3:a3:5e:22:68:23:35:02:18:89:50:0a:09:5f:7d:32:4b: ae:aa:69:c6:21:50:a5:f1:bc:83:bb:92:97:9b:63:bb:ff:fc: ee:f2:6e:9e:1d:26:df:f8:96:5f:5f:9c:67:6a:f8:79:2c:b3: 27:21:48:02:b5:11:ff:60:a7:b9:41:e9:9e:74:45:ab:8f:34: a8:d1:e8:f0:57:fb:a8:47:34:7a:bd:54:d2:4f:bc:bf:21:10: 48:8e:0e:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkwSPDIUX9me97LxMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWI0MzRhYTYtYjY4Zi00MWU3LThkNGItOWM4MzEyNTVm MTFjMB4XDTI1MDMxNDE5NTkzNVoXDTI1MDYxMjE5NTkzNVowLzEtMCsGA1UEAxMk MDk2ZWYzYmQtNDU3NS00OWYwLTg3MzctNDQxMmI2NGU1NjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSxkzRoUy5unZuDJIvtOWXaIliMp++E3RnqM IAViqcWNVr5Vzh7qlrsqXSrB1BSKOXB2kNNDOUP4XjPqrMJsps/EjmVe0tofuciN EZM2hkYNgta4HeyepozcgEWr0VnQEXXyq8iR7HoNdm8UKh597aCaPMDIadivdQLp s/eXpip92H5Ob7XgNEpKNwJ8cEQveee5/fJO8uCEYZI5AP3/dzOjuW3MWIj4USLC k78A1gxD7axRC7b4/yDRi2NP/As5ya+guOxPSpFRxVcp2Mt1uWlYeXPs4VlvUUrz 73BnU5R6I7BUkSCDbibJhA2h5FkYOXBGo4bsqREcH4RLHQmXNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChHooVrRsoolnUOuW+ASyI+72Z4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85YjQz NGFhNi1iNjhmLTQxZTctOGQ0Yi05YzgzMTI1NWYxMWMvYzUzNDhiNzEtZjg3Mi0z MzEyLWI4YjctYWY5ZTU4NTRmZTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWI0MzRhYTYtYjY4Zi00MWU3LThk NGItOWM4MzEyNTVmMTFjLzliNDM0YWE2LWI2OGYtNDFlNy04ZDRiLTljODMxMjU1 ZjExYy5jcmwwHwYDVR0jBBgwFoAUxEt0dIPMmHr/sBSEs9h6dG0fLGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85YjQzNGFhNi1iNjhmLTQxZTctOGQ0Yi05Yzgz MTI1NWYxMWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbK78MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHS5Lr02skW7Kpa/6ZOQLunDjUiVGtHsEJ3V/UlRjrtV6MvxMrwYoYJy IHMfBB5+BPWFJ2NW12WIrdSrkskFjZaadmQG3PqJEUyWVlGU4dgtKwUrYdn03+Mj h34A2k1kjmWBCZgwFwiyN1nf5Uz7QAMrI5f2QYAco5+nlsCr1pC+uhicA8FIK+1Q 3ei7wL1dhYWU06zwR8F+er6Ihb4HVTHPYdyzo14iaCM1AhiJUAoJX30yS66qacYh UKXxvIO7kpebY7v//O7ybp4dJt/4ll9fnGdq+HkssychSAK1Ef9gp7lB6Z50RauP NKjR6PBX+6hHNHq9VNJPvL8hEEiODpE= -----END CERTIFICATE-----Generated at Fri Apr 4 20:52:38 2025 by rpki-client