$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9b5cfa33-fc05-34aa-b1b9-bfe8a7d0e17e.roa File: 9b5cfa33-fc05-34aa-b1b9-bfe8a7d0e17e.roa (raw, json) Hash identifier: 7sIPcxJFjeLhexgDziiNzsf7ttIoO2jnR2o6acfsr5k= Subject key identifier: BB:B5:4D:0F:EA:DD:E0:41:C3:A1:E8:93:E4:0F:7E:2C:A4:27:10:CF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848BFEBD6361B042C4739255B80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9b5cfa33-fc05-34aa-b1b9-bfe8a7d0e17e.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 15169 IP address blocks: 108.177.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:d6:36:1b:04:2c:47:39:25:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=5c434da0-9ee5-415c-94cb-937629bc7198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:40:3e:f8:f8:4d:ff:94:e8:b6:f0:fa:eb:a9: 48:17:9d:a5:20:2b:cd:a5:b8:6e:88:ea:1d:9a:ba: 7b:ca:51:e4:c4:2e:43:b8:34:5c:db:90:c6:07:77: b0:9a:bc:eb:ac:86:c2:81:6c:a1:06:87:ac:3e:d5: a8:1f:fd:d1:42:1c:0f:40:f6:24:b7:db:ac:6c:2e: 42:29:5c:bb:12:a1:4f:c7:e1:82:1d:2a:f2:b0:0f: 8c:78:4e:99:cc:2f:b4:37:40:62:7c:45:eb:b9:10: c8:a6:17:88:8e:1c:51:43:9c:e4:b2:84:ca:ce:a4: 5f:95:3d:29:b3:98:b2:db:9f:84:01:6d:06:0b:08: 65:13:0a:81:4f:fe:f0:ce:e0:36:ef:fb:7f:5c:96: 9e:d0:98:1e:e1:7a:2f:c9:9c:92:bb:99:b7:72:ad: 46:8e:bb:4b:ff:9c:e7:1b:3d:4b:02:3c:eb:33:b7: c6:0c:92:bc:e3:a2:d6:02:e9:b9:aa:bd:b5:fa:d1: 9e:45:6c:f8:8b:2d:87:79:41:4e:6c:7d:96:90:a7: 57:cd:ef:74:18:5f:9f:fb:86:b7:af:7d:2d:30:e1: f3:33:99:5d:17:e0:e7:a4:8f:a4:58:e9:13:ec:f6: b8:3d:b7:70:f9:08:5f:d6:99:be:98:26:b9:4e:4d: ae:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B5:4D:0F:EA:DD:E0:41:C3:A1:E8:93:E4:0F:7E:2C:A4:27:10:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9b5cfa33-fc05-34aa-b1b9-bfe8a7d0e17e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:03:c1:a8:74:9c:98:f5:e1:3b:bc:1c:ba:0c:71:45:44:08: 0d:c9:6f:82:1e:eb:68:9f:af:06:11:01:7a:2a:0b:15:c2:7b: 38:fe:8e:61:8c:50:77:08:08:d0:12:1d:49:54:fc:e9:70:52: b7:a1:b7:32:c7:41:6a:04:8e:1f:47:d5:76:88:a6:c0:8b:75: df:f2:f3:aa:b5:c3:ad:3a:cb:28:6a:53:e6:db:85:58:20:39: 07:92:59:02:1d:1a:04:57:1b:b0:8a:e5:0c:58:6b:05:16:ed: 56:c7:ab:47:bf:87:24:3d:05:94:52:c4:3d:ae:39:57:55:0c: 50:89:9f:16:e4:6d:f1:1c:d6:b2:71:eb:9e:01:68:bb:41:7e: b9:9a:67:c5:27:65:71:e5:cb:78:84:3d:fe:48:e0:2c:04:5c: 91:c6:a6:d6:3f:f1:53:8a:33:1c:63:cb:3d:63:8a:f7:ca:a3: b5:1b:81:77:30:39:a6:0f:40:2b:a9:a8:c2:a7:78:54:03:2a: 64:e2:00:ae:00:51:4a:e2:42:5a:f6:e9:a5:73:02:aa:da:d5: ad:dd:b8:0c:46:fd:b9:61:29:03:14:01:ef:8a:6e:5a:29:8b: 81:a3:8f:83:20:e5:a6:dc:79:c2:c0:e5:ac:c2:33:55:9d:cb: c9:5b:7f:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/69Y2GwQsRzklW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk NWM0MzRkYTAtOWVlNS00MTVjLTk0Y2ItOTM3NjI5YmM3MTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUA++PhN/5TotvD666lIF52lICvNpbhuiOod mrp7ylHkxC5DuDRc25DGB3ewmrzrrIbCgWyhBoesPtWoH/3RQhwPQPYkt9usbC5C KVy7EqFPx+GCHSrysA+MeE6ZzC+0N0BifEXruRDIpheIjhxRQ5zksoTKzqRflT0p s5iy25+EAW0GCwhlEwqBT/7wzuA27/t/XJae0Jge4XovyZySu5m3cq1GjrtL/5zn Gz1LAjzrM7fGDJK846LWAum5qr21+tGeRWz4iy2HeUFObH2WkKdXze90GF+f+4a3 r30tMOHzM5ldF+DnpI+kWOkT7Pa4Pbdw+Qhf1pm+mCa5Tk2u8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLu1TQ/q3eBBw6Hok+QPfiykJxDPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWI1Y2ZhMzMtZmMwNS0z NGFhLWIxYjktYmZlOGE3ZDBlMTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLF/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0Dwah0nJj14Tu8HLoMcUVECA3Jb4Ie62ifrwYRAXoqCxXCezj+jmGM UHcICNASHUlU/OlwUrehtzLHQWoEjh9H1XaIpsCLdd/y86q1w606yyhqU+bbhVgg OQeSWQIdGgRXG7CK5QxYawUW7VbHq0e/hyQ9BZRSxD2uOVdVDFCJnxbkbfEc1rJx 654BaLtBfrmaZ8UnZXHly3iEPf5I4CwEXJHGptY/8VOKMxxjyz1jivfKo7UbgXcw OaYPQCupqMKneFQDKmTiAK4AUUriQlr26aVzAqra1a3duAxG/blhKQMUAe+Kblop i4Gjj4Mg5abcecLA5azCM1Wdy8lbf/M= -----END CERTIFICATE-----Generated at Fri Mar 14 11:15:14 2025 by rpki-client