$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/aed93bfa-9682-377b-b2b6-d73c1d09f1c8.roa File: aed93bfa-9682-377b-b2b6-d73c1d09f1c8.roa (raw, json) Hash identifier: MVZJgxgv68S8Jc0ug7xwJyjb5jItkcE+1P2EOTYAryw= Subject key identifier: EF:38:96:CC:8A:AC:16:22:D0:3F:40:FE:8C:D5:2C:70:D7:58:FB:29 Certificate issuer: /CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Certificate serial: 010D0C9F43285848B8828C2ECB14AF4272CA9000 Authority key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/aed93bfa-9682-377b-b2b6-d73c1d09f1c8.roa Signing time: Thu 30 Jan 2025 22:18:40 +0000 ROA not before: Thu 30 Jan 2025 22:18:40 +0000 ROA not after: Wed 30 Apr 2025 21:18:40 +0000 asID: 21581 IP address blocks: 108.161.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:82:8c:2e:cb:14:af:42:72:ca:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Validity Not Before: Jan 30 22:18:40 2025 GMT Not After : Apr 30 21:18:40 2025 GMT Subject: CN=f06b3de8-cd03-460e-b70b-3625202f4bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0a:6f:52:18:cf:3b:91:b1:d1:93:0f:0e:7e: 9f:7e:78:a4:3a:46:00:ef:4e:be:59:b4:23:a8:45: 91:35:50:d0:01:7d:f3:a7:fe:6c:d1:9f:c6:31:76: 35:b3:29:13:df:48:9c:3f:9c:80:f5:da:bb:be:7d: 5a:10:42:60:23:c7:25:8a:d3:db:64:45:a9:75:7b: f8:53:75:da:13:66:29:6e:c4:9a:3f:14:e9:ce:f8: 7c:c6:66:30:25:b7:7c:f1:4b:14:e4:9f:1e:ec:20: 3f:5e:a9:9e:11:45:16:28:48:9d:de:e2:35:d3:7b: 2d:e1:e1:ff:63:a6:55:61:d8:5f:ff:80:3b:1c:55: cf:0a:9b:62:5a:81:82:e7:c9:b9:25:4e:a9:76:db: 04:de:fd:c3:52:00:9e:0a:df:01:26:dd:ee:a8:33: b7:81:6e:d7:41:e2:97:f6:0c:b6:27:62:dc:d6:31: b4:61:c2:23:db:c6:a4:41:03:94:2a:41:ae:32:f3: 21:21:c1:fe:98:f2:8c:57:42:99:d5:0a:1d:65:bc: 16:1e:b1:a0:17:7e:f7:5d:e9:8a:aa:16:bb:1c:0b: e4:37:81:92:c5:17:43:de:ba:b1:c6:1f:b3:dd:89: 52:71:fd:97:96:06:a9:53:8a:8e:cd:23:03:4a:ed: 9c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:38:96:CC:8A:AC:16:22:D0:3F:40:FE:8C:D5:2C:70:D7:58:FB:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/aed93bfa-9682-377b-b2b6-d73c1d09f1c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl X509v3 Authority Key Identifier: keyid:AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer sbgp-ipAddrBlock: critical IPv4: 108.161.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:b8:9a:05:e3:0d:88:df:1a:76:27:cc:0d:2e:a6:8a:4e:a5: 26:fc:97:b1:a9:e4:d0:c8:27:11:fe:75:b1:7b:b3:3f:ba:19: f5:8c:00:2f:35:5a:99:d2:f8:bf:b0:cb:65:dd:69:8f:32:16: 4f:3c:eb:2b:bf:3b:eb:db:aa:a7:8d:db:e8:a9:60:6e:61:18: 9d:32:63:b3:7e:77:71:3d:ca:df:4d:3d:db:6e:bf:db:b9:9b: ae:74:d1:35:b3:36:a0:e2:72:28:a8:f3:b3:9e:5a:31:77:ba: 1a:d5:15:42:5f:95:34:68:44:51:5b:08:89:c9:42:90:1f:26: 4e:82:ea:7b:bc:35:06:54:9d:40:2c:f0:5e:66:84:ba:52:1f: 75:1e:d3:88:8b:7d:49:e4:6d:a6:4c:4c:5c:a4:73:f2:ea:c7: 8b:47:aa:89:5f:93:9b:d9:6d:8c:bb:e0:11:69:d9:da:a3:1a: b0:2e:d9:df:0e:c9:72:92:7f:93:94:51:de:1b:8e:aa:09:a6: 7c:22:83:96:4a:3e:8a:65:60:a8:5c:29:49:7e:ce:89:fc:01: 78:33:8e:b6:12:1f:fb:10:99:0a:38:c0:65:89:12:75:3b:04: 74:09:55:66:f4:cb:6c:24:7f:fc:39:3f:d0:6b:75:c2:d9:16: 73:a3:45:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi4gowuyxSvQnLKkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY5ZTYwYTYtNTFjNC00YTNlLTgyMWEtMmQ3ZDQzOGJh ZDRjMB4XDTI1MDEzMDIyMTg0MFoXDTI1MDQzMDIxMTg0MFowLzEtMCsGA1UEAxMk ZjA2YjNkZTgtY2QwMy00NjBlLWI3MGItMzYyNTIwMmY0YmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgpvUhjPO5Gx0ZMPDn6ffnikOkYA706+WbQj qEWRNVDQAX3zp/5s0Z/GMXY1sykT30icP5yA9dq7vn1aEEJgI8clitPbZEWpdXv4 U3XaE2YpbsSaPxTpzvh8xmYwJbd88UsU5J8e7CA/XqmeEUUWKEid3uI103st4eH/ Y6ZVYdhf/4A7HFXPCptiWoGC58m5JU6pdtsE3v3DUgCeCt8BJt3uqDO3gW7XQeKX 9gy2J2Lc1jG0YcIj28akQQOUKkGuMvMhIcH+mPKMV0KZ1QodZbwWHrGgF373XemK qha7HAvkN4GSxRdD3rqxxh+z3YlScf2XlgapU4qOzSMDSu2cHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO84lsyKrBYi0D9A/ozVLHDXWPspMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNjll NjBhNi01MWM0LTRhM2UtODIxYS0yZDdkNDM4YmFkNGMvYWVkOTNiZmEtOTY4Mi0z NzdiLWIyYjYtZDczYzFkMDlmMWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjY5ZTYwYTYtNTFjNC00YTNlLTgy MWEtMmQ3ZDQzOGJhZDRjL2Y2OWU2MGE2LTUxYzQtNGEzZS04MjFhLTJkN2Q0Mzhi YWQ0Yy5jcmwwHwYDVR0jBBgwFoAUreo9MXSqvMcug0IvZpaHEFYYkwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNjllNjBhNi01MWM0LTRhM2UtODIxYS0yZDdk NDM4YmFkNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbKGcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIm4mgXjDYjfGnYnzA0upopOpSb8l7Gp5NDIJxH+dbF7sz+6GfWMAC81 WpnS+L+wy2XdaY8yFk886yu/O+vbqqeN2+ipYG5hGJ0yY7N+d3E9yt9NPdtuv9u5 m6500TWzNqDiciio87OeWjF3uhrVFUJflTRoRFFbCInJQpAfJk6C6nu8NQZUnUAs 8F5mhLpSH3Ue04iLfUnkbaZMTFykc/Lqx4tHqolfk5vZbYy74BFp2dqjGrAu2d8O yXKSf5OUUd4bjqoJpnwig5ZKPoplYKhcKUl+zon8AXgzjrYSH/sQmQo4wGWJEnU7 BHQJVWb0y2wkf/w5P9BrdcLZFnOjReE= -----END CERTIFICATE-----Generated at Tue Apr 15 12:38:09 2025 by rpki-client