$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/25e244e3-f519-394a-951d-cdac4dc84db7.roa File: 25e244e3-f519-394a-951d-cdac4dc84db7.roa (raw, json) Hash identifier: RhH3nGM3ojAGiqnldDtOZ5ObvAuEhfZSRct6Xg3a0Sg= Subject key identifier: 3E:01:9C:00:3F:52:1C:3F:98:62:5E:EB:12:46:69:3A:C9:24:39:DF Certificate issuer: /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Certificate serial: 010D0C9F432858491ED6E7312F8EBFE0DC567B80 Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/25e244e3-f519-394a-951d-cdac4dc84db7.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 8014 IP address blocks: 108.60.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:e7:31:2f:8e:bf:e0:dc:56:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=cb6323af-6e32-4ebf-8b56-37d0c093a317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:81:c3:ae:00:37:38:fc:66:cc:25:8a:61:ce: 00:04:85:6d:31:78:c5:7c:78:ff:d4:6b:75:1d:5b: 12:5a:af:98:27:12:37:14:26:f8:22:65:a9:b8:70: d7:1a:b9:b6:8f:dd:69:2c:f7:80:f4:78:4b:5b:38: 8d:79:83:d9:28:cb:03:54:22:99:72:69:81:d4:92: a8:81:27:ac:8e:20:b8:4c:dc:27:0c:41:4d:54:d1: b8:ca:83:f7:02:0a:99:21:22:73:9a:12:46:c7:8f: ac:8c:97:e7:22:3b:22:c2:de:6b:c9:8e:77:9e:6d: e7:24:fe:7c:7d:7e:f9:0d:b9:6e:81:27:ec:70:af: 5b:45:0a:21:fe:70:1f:d0:9b:4b:ae:c6:1f:ce:8a: 45:6d:de:3f:28:dc:c0:9d:bf:b9:2a:96:cc:6e:3c: 0b:c6:b4:11:6c:16:db:a5:23:85:4c:32:a3:f3:32: 02:ed:dc:3b:7c:77:fc:42:5d:74:da:9f:6e:8e:73: 06:a0:b0:43:e2:06:5f:35:c3:07:d7:f3:ad:8d:71: 53:bc:4d:d8:cd:1b:38:98:2b:b2:7a:5c:6f:9d:e4: 40:9f:83:2c:9d:e5:07:7c:0a:9f:f0:d5:95:73:67: e5:71:c0:e7:9c:b6:ea:36:56:85:9b:e5:91:19:ce: 97:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:01:9C:00:3F:52:1C:3F:98:62:5E:EB:12:46:69:3A:C9:24:39:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/25e244e3-f519-394a-951d-cdac4dc84db7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl X509v3 Authority Key Identifier: keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer sbgp-ipAddrBlock: critical IPv4: 108.60.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:e0:f8:93:01:36:51:5e:d5:6b:71:41:76:f9:c0:2e:05:61: 1a:af:c7:c5:f5:de:36:ef:41:3e:9f:de:73:19:b2:fc:30:20: 9d:d9:30:b1:83:83:31:2f:83:0b:c7:d8:78:48:ff:5c:ce:65: b2:0a:bd:a3:59:0e:b5:31:85:8f:c6:ff:25:44:be:8c:99:b4: b5:c9:af:c0:d5:64:66:b0:22:f5:f5:c1:ee:f7:55:8e:9a:d8: b4:5d:2c:a6:fb:47:5c:9c:87:3f:fa:b5:c0:44:e2:1d:fd:c8: 3d:89:ce:42:14:19:2f:dc:92:5d:28:a9:cc:3b:d1:37:c0:98: 98:d0:d5:f0:88:65:7e:0d:9c:ca:bd:75:55:79:ed:77:2f:c7: 56:85:14:fb:94:0b:27:54:07:d2:0c:a4:d4:6c:24:9a:7f:18: 3a:fd:ce:f6:9b:f3:38:8e:c1:5e:db:f4:29:09:0f:63:f7:ef: 54:e9:46:50:9a:fa:e2:a9:57:4f:d9:58:8d:37:3d:c7:eb:98: e7:68:d5:61:9d:d7:33:00:37:de:39:e7:ec:89:67:e1:65:84: 30:57:44:65:21:a7:e0:30:47:f9:a2:2f:d7:44:f4:d1:63:72: a7:a5:a0:3b:55:95:da:a8:59:27:af:79:19:67:1c:9b:4d:bc: f8:3f:39:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1ucxL46/4NxWe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNiZDMwM2ItNzM4ZC00Yzc3LTljNTUtMzIwZmNmYTkz Zjc1MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk Y2I2MzIzYWYtNmUzMi00ZWJmLThiNTYtMzdkMGMwOTNhMzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4HDrgA3OPxmzCWKYc4ABIVtMXjFfHj/1Gt1 HVsSWq+YJxI3FCb4ImWpuHDXGrm2j91pLPeA9HhLWziNeYPZKMsDVCKZcmmB1JKo gSesjiC4TNwnDEFNVNG4yoP3AgqZISJzmhJGx4+sjJfnIjsiwt5ryY53nm3nJP58 fX75DblugSfscK9bRQoh/nAf0JtLrsYfzopFbd4/KNzAnb+5KpbMbjwLxrQRbBbb pSOFTDKj8zIC7dw7fHf8Ql102p9ujnMGoLBD4gZfNcMH1/OtjXFTvE3YzRs4mCuy elxvneRAn4MsneUHfAqf8NWVc2flccDnnLbqNlaFm+WRGc6X1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4BnAA/Uhw/mGJe6xJGaTrJJDnfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lM2Jk MzAzYi03MzhkLTRjNzctOWM1NS0zMjBmY2ZhOTNmNzUvMjVlMjQ0ZTMtZjUxOS0z OTRhLTk1MWQtY2RhYzRkYzg0ZGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTNiZDMwM2ItNzM4ZC00Yzc3LTlj NTUtMzIwZmNmYTkzZjc1L2UzYmQzMDNiLTczOGQtNGM3Ny05YzU1LTMyMGZjZmE5 M2Y3NS5jcmwwHwYDVR0jBBgwFoAUDvcTBpHWvRytSMfJLYkdltxTTVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lM2JkMzAzYi03MzhkLTRjNzctOWM1NS0zMjBm Y2ZhOTNmNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFbDzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfg+JMBNlFe1WtxQXb5wC4FYRqvx8X13jbvQT6f3nMZsvwwIJ3ZMLGD gzEvgwvH2HhI/1zOZbIKvaNZDrUxhY/G/yVEvoyZtLXJr8DVZGawIvX1we73VY6a 2LRdLKb7R1ychz/6tcBE4h39yD2JzkIUGS/ckl0oqcw70TfAmJjQ1fCIZX4NnMq9 dVV57Xcvx1aFFPuUCydUB9IMpNRsJJp/GDr9zvab8ziOwV7b9CkJD2P371TpRlCa +uKpV0/ZWI03PcfrmOdo1WGd1zMAN9455+yJZ+FlhDBXRGUhp+AwR/miL9dE9NFj cqeloDtVldqoWSeveRlnHJtNvPg/OcY= -----END CERTIFICATE-----Generated at Fri Mar 14 13:25:47 2025 by rpki-client