$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0bb6e42d-39c9-3771-b079-96d881d2b624.roa File: 0bb6e42d-39c9-3771-b079-96d881d2b624.roa (raw, json) Hash identifier: 6MxyZVkRCMICgfgrFhE4+N+cEw3d1bETysTlx2Jb4V8= Subject key identifier: 7D:8E:55:CC:2D:2E:4F:14:CF:A8:71:65:A8:FD:0E:6F:73:92:4E:70 Certificate issuer: /CN=45de47ca-0b52-44ab-af26-767d8a671192 Certificate serial: 010D0C9F43285849B9AA078AD8A7EFA5E52A8080 Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0bb6e42d-39c9-3771-b079-96d881d2b624.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 5645 IP address blocks: 108.161.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:07:8a:d8:a7:ef:a5:e5:2a:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=d6dd828e-9c37-4864-af65-26b7d50c253d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b2:96:98:b6:ca:af:ee:ef:2c:bf:68:14:15: ba:56:5e:4c:94:c2:b7:93:e3:40:da:23:ec:e6:ee: 27:e9:53:19:12:a7:55:aa:23:a3:fd:91:e1:bf:c7: 9a:ca:ba:b9:cf:17:20:04:1a:9a:dc:56:c6:1a:82: 6a:2e:c9:98:86:a5:98:95:17:b1:2c:0c:72:14:1a: fe:00:3b:1c:42:23:56:19:38:a4:7f:ea:b5:aa:2b: 36:18:a1:ac:d2:6b:b0:b7:5a:95:b3:c4:2d:24:e2: cd:e5:2e:1d:e2:1d:00:2b:1c:12:94:d2:42:73:28: 78:fc:c7:c8:b6:b8:2e:b6:cf:d2:75:03:e6:b9:78: d9:9a:cd:26:03:88:b3:eb:cb:2c:47:3f:20:6d:52: 89:30:75:10:bc:1c:73:7d:1d:d9:94:f3:cd:1a:f0: 0e:97:7f:42:91:8b:e8:95:17:3f:f6:f9:0d:3c:a5: ed:d0:d0:9e:cb:aa:3d:d0:27:d6:a7:ad:a2:79:4b: c2:c4:1f:43:ad:b9:21:ca:c8:95:05:56:6c:2c:b2: 17:b1:72:17:ea:81:06:06:ab:9c:6f:4e:7d:3c:19: 8e:cf:04:c8:2d:0e:90:8f:4b:d7:b9:ae:fb:29:2f: 02:51:84:dc:89:47:78:b0:d8:f5:fc:01:f8:52:4e: 74:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:8E:55:CC:2D:2E:4F:14:CF:A8:71:65:A8:FD:0E:6F:73:92:4E:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0bb6e42d-39c9-3771-b079-96d881d2b624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl X509v3 Authority Key Identifier: keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer sbgp-ipAddrBlock: critical IPv4: 108.161.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:98:19:b5:e0:e1:7a:74:50:8c:c5:08:36:3b:d2:f1:67:e3: 8b:38:1f:9d:5a:19:cb:e9:18:c4:61:02:49:ce:cc:d1:e6:55: 92:39:cb:82:19:23:ed:d8:e2:02:1d:1a:1a:85:09:92:c9:00: b3:83:4c:7d:07:1e:a8:13:7f:96:a7:40:f7:55:49:55:be:b5: f9:58:78:51:e3:bf:79:4c:59:33:fd:77:a8:3a:e4:03:05:22: d7:8e:1e:ae:71:bd:e4:c0:22:bd:53:d8:b3:1d:39:fc:7a:68: 80:2e:84:81:13:4e:2c:58:e0:18:59:34:8b:12:0f:ca:f4:93: e6:cc:e5:24:f8:62:d3:c2:c5:ca:fb:47:d7:a3:58:b2:5c:1e: 55:b5:44:39:2a:e9:d4:e9:a1:5d:76:3a:98:d6:24:63:be:eb: c4:30:47:35:94:79:c8:91:63:c1:42:5d:6b:61:d0:c5:36:50: fe:6f:8c:5c:d5:3a:a1:fb:06:1d:ad:8a:ad:b9:05:8d:29:eb: 22:01:38:b6:47:e0:a0:c0:53:87:ca:75:41:a1:db:ba:f1:44: fc:85:80:66:f5:81:5d:d7:d5:e8:73:86:2f:f0:ff:65:72:c0: c3:0c:b8:a1:20:79:bb:a2:75:eb:d0:16:e8:8e:74:55:9b:9b: 02:1d:7c:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qgeK2KfvpeUqgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZTQ3Y2EtMGI1Mi00NGFiLWFmMjYtNzY3ZDhhNjcx MTkyMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk ZDZkZDgyOGUtOWMzNy00ODY0LWFmNjUtMjZiN2Q1MGMyNTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bKWmLbKr+7vLL9oFBW6Vl5MlMK3k+NA2iPs 5u4n6VMZEqdVqiOj/ZHhv8eayrq5zxcgBBqa3FbGGoJqLsmYhqWYlRexLAxyFBr+ ADscQiNWGTikf+q1qis2GKGs0muwt1qVs8QtJOLN5S4d4h0AKxwSlNJCcyh4/MfI trguts/SdQPmuXjZms0mA4iz68ssRz8gbVKJMHUQvBxzfR3ZlPPNGvAOl39CkYvo lRc/9vkNPKXt0NCey6o90CfWp62ieUvCxB9DrbkhysiVBVZsLLIXsXIX6oEGBquc b059PBmOzwTILQ6Qj0vXua77KS8CUYTciUd4sNj1/AH4Uk504wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2OVcwtLk8Uz6hxZaj9Dm9zkk5wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRl NDdjYS0wYjUyLTQ0YWItYWYyNi03NjdkOGE2NzExOTIvMGJiNmU0MmQtMzljOS0z NzcxLWIwNzktOTZkODgxZDJiNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZTQ3Y2EtMGI1Mi00NGFiLWFm MjYtNzY3ZDhhNjcxMTkyLzQ1ZGU0N2NhLTBiNTItNDRhYi1hZjI2LTc2N2Q4YTY3 MTE5Mi5jcmwwHwYDVR0jBBgwFoAUxgiZJ8n+iQwKmkdxsPshppvRgPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRlNDdjYS0wYjUyLTQ0YWItYWYyNi03Njdk OGE2NzExOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEbKFwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6YGbXg4Xp0UIzFCDY70vFn44s4H51aGcvpGMRhAknOzNHmVZI5y4IZ I+3Y4gIdGhqFCZLJALODTH0HHqgTf5anQPdVSVW+tflYeFHjv3lMWTP9d6g65AMF IteOHq5xveTAIr1T2LMdOfx6aIAuhIETTixY4BhZNIsSD8r0k+bM5ST4YtPCxcr7 R9ejWLJcHlW1RDkq6dTpoV12OpjWJGO+68QwRzWUeciRY8FCXWth0MU2UP5vjFzV OqH7Bh2tiq25BY0p6yIBOLZH4KDAU4fKdUGh27rxRPyFgGb1gV3X1ehzhi/w/2Vy wMMMuKEgebuidevQFuiOdFWbmwIdfAU= -----END CERTIFICATE-----Generated at Mon Jun 9 06:06:05 2025 by rpki-client