$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/9e41e3c6-4b01-376d-bc8c-8d6f59184714.roa File: 9e41e3c6-4b01-376d-bc8c-8d6f59184714.roa (raw, json) Hash identifier: ghu/38F/yXLRYyMCocExyh8C66Ct2tmOfFal/VAKd/c= Subject key identifier: B5:D5:48:A4:07:56:A2:BD:EF:02:50:63:FE:09:F2:DD:FD:9A:C8:82 Certificate issuer: /CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Certificate serial: 010D0C9F43285848B8822356D6AF297304FBC900 Authority key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/9e41e3c6-4b01-376d-bc8c-8d6f59184714.roa Signing time: Thu 30 Jan 2025 22:17:50 +0000 ROA not before: Thu 30 Jan 2025 22:17:50 +0000 ROA not after: Wed 30 Apr 2025 21:17:50 +0000 asID: 21581 IP address blocks: 108.161.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:82:23:56:d6:af:29:73:04:fb:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Validity Not Before: Jan 30 22:17:50 2025 GMT Not After : Apr 30 21:17:50 2025 GMT Subject: CN=0a8256ff-dcd7-4044-8f88-43e6942c22e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9e:2a:64:97:db:ea:13:e2:53:90:f1:50:f8: 53:3c:bd:8b:e1:73:85:57:2e:7f:63:4a:fd:88:b4: 6b:82:a7:01:4a:5e:fa:c9:81:94:44:02:55:e1:95: 16:94:35:22:19:2e:8b:f7:f5:84:0f:57:03:e5:db: 91:0d:94:7f:42:8b:70:c9:61:1a:6a:dd:c2:b0:20: f0:0b:e1:7b:19:d2:c4:ab:a1:1e:90:9b:65:9a:30: 7c:57:8c:aa:92:d3:1e:93:6e:f1:4f:2a:a8:f6:2c: e4:ee:b6:e7:0f:de:e9:97:49:43:5b:12:b8:e2:e9: 44:ad:c7:04:70:af:ef:5d:9a:8f:b9:d4:d3:86:bc: 6a:20:11:eb:04:73:38:71:b1:5c:db:f5:6e:12:04: 81:f4:b9:d9:6a:b9:81:11:c7:12:23:94:07:d9:27: 9a:cb:5b:38:62:fb:ff:09:f1:ab:b5:ee:12:a3:06: c4:5f:8f:9e:c8:de:8d:e8:26:3e:df:9f:a9:89:bd: b1:33:50:d4:2d:58:37:3f:9d:31:07:f0:2c:94:e0: b1:bf:4b:11:14:e0:1c:eb:1f:90:50:c0:c0:7a:c8: 58:e0:9e:e0:b7:a6:42:63:01:63:78:b1:5b:94:e4: 5f:78:c2:f8:fc:7f:a4:63:38:31:d9:7f:8b:b3:10: 08:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D5:48:A4:07:56:A2:BD:EF:02:50:63:FE:09:F2:DD:FD:9A:C8:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/9e41e3c6-4b01-376d-bc8c-8d6f59184714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl X509v3 Authority Key Identifier: keyid:AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer sbgp-ipAddrBlock: critical IPv4: 108.161.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:08:01:d8:71:ac:5f:23:02:3d:77:30:98:90:b2:f6:11:a9: b1:ed:28:02:13:20:46:18:07:7a:c4:62:ca:ab:df:7f:99:34: 17:e9:0c:13:f0:f2:b3:53:6d:ff:ab:f9:a6:9a:95:c4:fc:08: 41:54:f2:cd:c3:d3:0f:fa:aa:94:cd:9b:87:27:56:c4:08:43: 73:9d:b6:a3:b8:db:be:86:dc:0c:26:22:be:6d:b3:a4:bd:6c: e3:77:06:d9:f5:d1:7a:dc:8b:e8:80:ce:f9:f1:cb:e6:d6:0f: 55:17:11:45:2a:04:08:14:b1:27:2c:d8:bb:96:0d:84:2a:2f: 16:f1:f6:d5:58:f3:11:f5:26:f7:46:2c:75:e1:5d:f8:5a:ad: 22:5d:61:ac:fd:0a:67:90:3f:8e:16:49:63:75:fe:cc:eb:a0: fb:0a:09:09:d6:4b:b5:46:dc:6a:d8:85:66:69:12:b5:a7:20: 91:e3:a2:65:a7:ce:34:06:70:78:8d:8a:ad:9b:68:a5:b8:a2: 57:cb:ce:cd:11:c6:b5:61:10:93:2e:ff:de:2f:80:02:34:f0: 71:76:5a:84:9c:db:7f:46:c9:76:11:88:56:7e:bd:73:06:79: c3:61:fb:7e:a0:ba:6e:84:c9:c3:3e:b6:93:a7:66:fa:14:76: 3b:4a:94:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi4giNW1q8pcwT7yQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY5ZTYwYTYtNTFjNC00YTNlLTgyMWEtMmQ3ZDQzOGJh ZDRjMB4XDTI1MDEzMDIyMTc1MFoXDTI1MDQzMDIxMTc1MFowLzEtMCsGA1UEAxMk MGE4MjU2ZmYtZGNkNy00MDQ0LThmODgtNDNlNjk0MmMyMmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi54qZJfb6hPiU5DxUPhTPL2L4XOFVy5/Y0r9 iLRrgqcBSl76yYGURAJV4ZUWlDUiGS6L9/WED1cD5duRDZR/QotwyWEaat3CsCDw C+F7GdLEq6EekJtlmjB8V4yqktMek27xTyqo9izk7rbnD97pl0lDWxK44ulErccE cK/vXZqPudTThrxqIBHrBHM4cbFc2/VuEgSB9LnZarmBEccSI5QH2Seay1s4Yvv/ CfGrte4SowbEX4+eyN6N6CY+35+pib2xM1DULVg3P50xB/AslOCxv0sRFOAc6x+Q UMDAeshY4J7gt6ZCYwFjeLFblORfeML4/H+kYzgx2X+LsxAI3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXVSKQHVqK97wJQY/4J8t39msiCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNjll NjBhNi01MWM0LTRhM2UtODIxYS0yZDdkNDM4YmFkNGMvOWU0MWUzYzYtNGIwMS0z NzZkLWJjOGMtOGQ2ZjU5MTg0NzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjY5ZTYwYTYtNTFjNC00YTNlLTgy MWEtMmQ3ZDQzOGJhZDRjL2Y2OWU2MGE2LTUxYzQtNGEzZS04MjFhLTJkN2Q0Mzhi YWQ0Yy5jcmwwHwYDVR0jBBgwFoAUreo9MXSqvMcug0IvZpaHEFYYkwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNjllNjBhNi01MWM0LTRhM2UtODIxYS0yZDdk NDM4YmFkNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKGSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4IAdhxrF8jAj13MJiQsvYRqbHtKAITIEYYB3rEYsqr33+ZNBfpDBPw 8rNTbf+r+aaalcT8CEFU8s3D0w/6qpTNm4cnVsQIQ3OdtqO4276G3AwmIr5ts6S9 bON3Btn10Xrci+iAzvnxy+bWD1UXEUUqBAgUsScs2LuWDYQqLxbx9tVY8xH1JvdG LHXhXfharSJdYaz9CmeQP44WSWN1/szroPsKCQnWS7VG3GrYhWZpErWnIJHjomWn zjQGcHiNiq2baKW4olfLzs0RxrVhEJMu/94vgAI08HF2WoSc239GyXYRiFZ+vXMG ecNh+36gum6EycM+tpOnZvoUdjtKlHo= -----END CERTIFICATE-----Generated at Sat Apr 12 01:54:12 2025 by rpki-client