$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b4a7d40a-ddeb-3ca0-adae-d21c4c1a704a.roa File: b4a7d40a-ddeb-3ca0-adae-d21c4c1a704a.roa (raw, json) Hash identifier: ngW4OVoGx6dGyIhWdA2S0yEIoCmCy5epcCHyhjvs2bw= Subject key identifier: F8:72:D4:C8:0E:B8:96:7B:40:02:D8:59:8C:0A:8F:2A:C0:A9:DD:C7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849631ED1C827389AF6D29AED80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b4a7d40a-ddeb-3ca0-adae-d21c4c1a704a.roa Signing time: Wed 02 Apr 2025 01:00:46 +0000 ROA not before: Wed 02 Apr 2025 01:00:46 +0000 ROA not after: Tue 01 Jul 2025 01:00:46 +0000 asID: 15169 IP address blocks: 108.177.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:63:1e:d1:c8:27:38:9a:f6:d2:9a:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 2 01:00:46 2025 GMT Not After : Jul 1 01:00:46 2025 GMT Subject: CN=8679dbb6-8297-4af3-91f7-a45bc0348e0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:62:f3:bd:2d:40:96:e6:9f:1d:64:31:cb:a1: 65:fa:96:1a:3c:78:de:2f:2c:8f:7f:16:a8:dc:e3: c5:1f:d0:81:ff:2a:6a:d1:f3:ac:c6:99:2a:30:20: 0e:a5:9f:48:13:d2:ee:1a:ec:56:70:09:ca:e9:d6: 17:7c:85:40:05:c1:d9:2e:16:37:02:f5:43:f5:ec: f5:8c:6c:4e:35:bf:06:8f:30:94:6a:d3:ac:cd:4b: 10:d4:b0:ca:a5:bb:c0:d2:d9:6a:57:f5:00:29:34: 7f:ba:ff:ee:f5:3c:68:a1:82:90:88:3e:2e:dc:7e: 7c:01:98:10:f5:48:53:0f:2c:3d:20:3c:c1:1c:9e: 69:89:4a:fc:34:0f:ad:dd:1f:3f:09:58:ef:50:a4: a5:2c:b8:9b:b3:57:ef:57:77:0a:98:61:4d:16:4c: 3d:07:bd:1e:d8:df:42:34:cd:3e:97:22:a0:9e:60: 16:6b:e7:41:21:a0:50:23:df:0a:93:2e:cc:44:22: e4:36:97:e9:98:f4:ff:68:14:81:16:a0:22:7b:e8: b4:8f:92:da:75:2f:7e:e0:3d:56:2d:88:e7:6b:45: 87:69:e2:df:4f:6e:87:12:d6:c6:68:ad:70:7c:7b: 10:55:40:3d:23:41:6c:e8:6d:d2:dd:1f:c6:4a:2e: 96:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:72:D4:C8:0E:B8:96:7B:40:02:D8:59:8C:0A:8F:2A:C0:A9:DD:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b4a7d40a-ddeb-3ca0-adae-d21c4c1a704a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:cf:01:28:66:9d:9d:a7:3f:89:ea:8d:64:10:7e:f6:e1:4e: 8e:db:db:51:7d:9e:3a:c0:c7:d5:59:6c:11:c1:1f:01:72:e6: 41:06:95:68:c7:24:8d:9a:82:21:fd:c5:0c:9b:32:df:c4:a1: a8:52:79:d3:47:98:31:00:93:52:ac:fa:d8:aa:f3:67:3c:ac: 76:40:a9:6e:b3:36:89:8e:48:e0:06:cf:a6:51:53:dd:da:a4: 01:d9:47:35:49:14:c9:1b:88:1c:9b:7a:da:fb:ce:19:16:79: ec:8e:07:55:5f:21:73:f7:88:c6:a8:f1:c5:75:c7:00:8a:20: 1c:b8:be:74:fd:e8:d9:9b:01:e0:3a:a5:b3:a5:30:40:b3:bc: 9d:67:8d:05:af:a0:a9:71:f4:54:71:ba:0a:0a:61:13:7b:e0: 15:47:33:38:12:cb:0f:a1:6f:b1:b7:b6:c3:1c:8d:f3:a2:29: 43:85:90:1d:55:8c:3e:1c:b1:e9:9a:5b:01:bf:85:e2:e0:7c: f7:77:24:e0:b3:17:3d:8d:b5:56:80:87:d1:44:ed:d3:fb:5d: 7a:74:16:19:02:0a:f4:6c:7f:32:3f:b1:bc:ec:1e:bb:95:86: fb:d8:73:3a:6a:6a:f7:2a:6b:c2:17:6f:03:0f:a8:09:d7:c1: 2b:e7:43:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHtHIJzia9tKa7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk ODY3OWRiYjYtODI5Ny00YWYzLTkxZjctYTQ1YmMwMzQ4ZTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWLzvS1AluafHWQxy6Fl+pYaPHjeLyyPfxao 3OPFH9CB/ypq0fOsxpkqMCAOpZ9IE9LuGuxWcAnK6dYXfIVABcHZLhY3AvVD9ez1 jGxONb8GjzCUatOszUsQ1LDKpbvA0tlqV/UAKTR/uv/u9TxooYKQiD4u3H58AZgQ 9UhTDyw9IDzBHJ5piUr8NA+t3R8/CVjvUKSlLLibs1fvV3cKmGFNFkw9B70e2N9C NM0+lyKgnmAWa+dBIaBQI98Kky7MRCLkNpfpmPT/aBSBFqAie+i0j5LadS9+4D1W LYjna0WHaeLfT26HEtbGaK1wfHsQVUA9I0Fs6G3S3R/GSi6WcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhy1MgOuJZ7QALYWYwKjyrAqd3HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjRhN2Q0MGEtZGRlYi0z Y2EwLWFkYWUtZDIxYzRjMWE3MDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLFpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALTPAShmnZ2nP4nqjWQQfvbhTo7b21F9njrAx9VZbBHBHwFy5kEGlWjH JI2agiH9xQybMt/EoahSedNHmDEAk1Ks+tiq82c8rHZAqW6zNomOSOAGz6ZRU93a pAHZRzVJFMkbiBybetr7zhkWeeyOB1VfIXP3iMao8cV1xwCKIBy4vnT96NmbAeA6 pbOlMECzvJ1njQWvoKlx9FRxugoKYRN74BVHMzgSyw+hb7G3tsMcjfOiKUOFkB1V jD4csemaWwG/heLgfPd3JOCzFz2NtVaAh9FE7dP7XXp0FhkCCvRsfzI/sbzsHruV hvvYczpqavcqa8IXbwMPqAnXwSvnQ80= -----END CERTIFICATE-----Generated at Fri Apr 4 08:26:16 2025 by rpki-client