$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/4168211f-81ee-3a06-a39d-59f42a3495b8.roa File: 4168211f-81ee-3a06-a39d-59f42a3495b8.roa (raw, json) Hash identifier: Q1DcnKCiVeCT4DrRlFrbRdWjrG+We/0B6yz/cFMViHA= Subject key identifier: C9:9C:C5:9D:89:BF:49:4B:92:72:C9:76:AE:B0:CC:D3:9A:6D:B7:DE Certificate issuer: /CN=84052649-3401-4ba6-ad82-6f310741b104 Certificate serial: 010D0C9F43285848EC96954FEEA146BBF2CFD180 Authority key identifier: C5:7E:94:BF:F8:88:D8:AD:FC:2A:56:CE:FC:62:CA:F7:50:07:B3:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/4168211f-81ee-3a06-a39d-59f42a3495b8.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 395129 IP address blocks: 108.59.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/84052649-3401-4ba6-ad82-6f310741b104.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/84052649-3401-4ba6-ad82-6f310741b104.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:95:4f:ee:a1:46:bb:f2:cf:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84052649-3401-4ba6-ad82-6f310741b104 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=83868c56-047e-49a3-a51a-314338a0eca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:49:e9:2a:b4:37:e2:2f:f1:38:7d:b9:d3:9e: 72:29:6d:ee:f3:d5:c5:c6:f2:b3:fa:21:c3:b3:ad: e6:64:a8:70:08:ac:1a:aa:94:df:34:f4:8c:17:1f: a8:8e:e4:39:a7:2b:f9:31:0d:9a:fd:a2:b3:de:a4: 75:a4:10:f7:63:9c:a7:dc:22:8a:75:d2:1a:48:67: f2:9a:c4:29:9d:aa:51:aa:42:d0:81:cc:d4:45:74: e2:f1:50:74:0a:35:a9:3a:e3:87:20:c8:03:a2:a0: 61:a4:c3:69:02:6d:30:03:ad:3d:4b:9f:cc:3d:57: ba:2b:3c:0a:d5:6d:75:9d:b2:af:e9:31:aa:dd:29: 61:f4:93:d5:f5:fd:ef:dd:e1:6a:50:42:81:7f:b3: 9d:72:39:0c:50:05:ad:72:fc:9c:f1:b6:16:33:a5: 99:86:ea:87:3e:31:7e:1a:54:da:cc:5d:98:54:82: a6:43:b8:24:99:f0:e4:0a:72:d1:fd:3e:c2:12:4f: 1b:9a:be:e7:5e:d0:54:88:8e:76:b8:65:59:4a:e6: 56:f1:4c:9e:c6:4d:aa:44:9a:17:6c:75:65:84:c2: 1d:e5:60:53:79:44:6d:d7:63:8e:b2:b9:14:93:8b: 53:0c:df:b5:40:a3:89:6f:7b:79:16:58:d4:91:8f: f0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:9C:C5:9D:89:BF:49:4B:92:72:C9:76:AE:B0:CC:D3:9A:6D:B7:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/4168211f-81ee-3a06-a39d-59f42a3495b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/84052649-3401-4ba6-ad82-6f310741b104.crl X509v3 Authority Key Identifier: keyid:C5:7E:94:BF:F8:88:D8:AD:FC:2A:56:CE:FC:62:CA:F7:50:07:B3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104.cer sbgp-ipAddrBlock: critical IPv4: 108.59.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:11:0a:b4:b5:2e:0b:8d:6b:34:ef:bf:e3:61:bf:49:07:b4: 18:40:e7:88:8d:f7:a6:26:9c:da:95:af:6f:cf:85:ed:04:78: cf:64:47:77:6a:4e:6e:a8:5a:88:16:cb:ea:35:22:d1:8e:a7: 25:8c:91:84:29:b3:56:ba:79:c9:dc:c7:78:5d:1b:c3:8b:a7: bc:3e:fa:f6:eb:b0:b7:16:44:e6:96:13:02:5c:b8:71:15:12: c4:a6:01:19:73:f5:f9:81:b8:52:ef:d1:2a:6c:16:5c:96:95: e0:13:99:0c:1c:b7:aa:cd:da:f0:7d:ae:aa:2d:9f:de:e7:29: ed:bf:5d:1c:d8:f4:42:d1:9d:03:c8:92:fd:1f:29:f3:ab:bf: 55:f9:3d:a7:ca:e1:70:bc:e4:92:a5:56:00:e6:04:7c:37:e5: e3:04:ae:d1:76:02:9a:20:ee:76:ec:f0:5c:78:e7:b8:dc:35: 11:c3:c9:54:29:53:f7:ea:d6:8c:2b:30:27:3d:e3:e4:3b:34: 5c:2b:32:9f:06:56:84:bb:fa:8b:46:cd:07:8f:51:b1:92:03: a2:5f:6b:57:4e:db:25:dc:a4:9d:80:3b:36:21:d1:1c:f6:7e: 57:0f:73:4e:c4:f6:40:dd:50:f4:63:0a:94:32:e9:9e:16:48: cf:a3:15:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslpVP7qFGu/LP0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQwNTI2NDktMzQwMS00YmE2LWFkODItNmYzMTA3NDFi MTA0MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk ODM4NjhjNTYtMDQ3ZS00OWEzLWE1MWEtMzE0MzM4YTBlY2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEnpKrQ34i/xOH25055yKW3u89XFxvKz+iHD s63mZKhwCKwaqpTfNPSMFx+ojuQ5pyv5MQ2a/aKz3qR1pBD3Y5yn3CKKddIaSGfy msQpnapRqkLQgczURXTi8VB0CjWpOuOHIMgDoqBhpMNpAm0wA609S5/MPVe6KzwK 1W11nbKv6TGq3Slh9JPV9f3v3eFqUEKBf7OdcjkMUAWtcvyc8bYWM6WZhuqHPjF+ GlTazF2YVIKmQ7gkmfDkCnLR/T7CEk8bmr7nXtBUiI52uGVZSuZW8Uyexk2qRJoX bHVlhMId5WBTeURt12OOsrkUk4tTDN+1QKOJb3t5FljUkY/wuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmcxZ2Jv0lLknLJdq6wzNOabbfeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NDA1 MjY0OS0zNDAxLTRiYTYtYWQ4Mi02ZjMxMDc0MWIxMDQvNDE2ODIxMWYtODFlZS0z YTA2LWEzOWQtNTlmNDJhMzQ5NWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODQwNTI2NDktMzQwMS00YmE2LWFk ODItNmYzMTA3NDFiMTA0Lzg0MDUyNjQ5LTM0MDEtNGJhNi1hZDgyLTZmMzEwNzQx YjEwNC5jcmwwHwYDVR0jBBgwFoAUxX6Uv/iI2K38KlbO/GLK91AHs6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84NDA1MjY0OS0zNDAxLTRiYTYtYWQ4Mi02ZjMx MDc0MWIxMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbDvMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwRCrS1LguNazTvv+Nhv0kHtBhA54iN96YmnNqVr2/Phe0EeM9kR3dq Tm6oWogWy+o1ItGOpyWMkYQps1a6ecncx3hdG8OLp7w++vbrsLcWROaWEwJcuHEV EsSmARlz9fmBuFLv0SpsFlyWleATmQwct6rN2vB9rqotn97nKe2/XRzY9ELRnQPI kv0fKfOrv1X5PafK4XC85JKlVgDmBHw35eMErtF2Apog7nbs8Fx457jcNRHDyVQp U/fq1owrMCc94+Q7NFwrMp8GVoS7+otGzQePUbGSA6Jfa1dO2yXcpJ2AOzYh0Rz2 flcPc07E9kDdUPRjCpQy6Z4WSM+jFXs= -----END CERTIFICATE-----Generated at Sat Apr 12 15:21:26 2025 by rpki-client