$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/79befa65-2932-354e-aa3c-9d8fa2f95a14.roa File: 79befa65-2932-354e-aa3c-9d8fa2f95a14.roa (raw, json) Hash identifier: UzaHhe5Iqbui6d9Qvcn2Npw5IIO1AfrvNyRefn872FU= Subject key identifier: B2:22:DB:29:8C:2E:3C:EC:73:73:F9:DA:BC:3E:25:24:93:D3:57:6B Certificate issuer: /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Certificate serial: 010D0C9F432858491ED6E7113110AA2DA5328580 Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/79befa65-2932-354e-aa3c-9d8fa2f95a14.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 8014 IP address blocks: 108.60.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:e7:11:31:10:aa:2d:a5:32:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=d8176826-4588-44c7-9fbe-b05715ce8900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:df:28:3a:10:47:25:72:a7:01:ab:21:32:bf: d9:a8:e4:a3:b7:b7:ec:2f:84:3f:d5:90:38:d9:06: 0d:68:bf:0b:49:d1:39:f9:80:eb:71:e0:bd:5e:ef: a5:ca:e1:aa:5e:dc:f4:18:50:01:9a:5d:0c:1c:cd: e7:42:5c:09:85:0e:30:64:bf:8c:c7:16:2a:dc:fa: 96:98:3f:cc:64:a6:1a:44:9f:44:ad:3b:74:49:a8: 4c:4e:23:bf:46:92:45:3e:12:bd:52:b4:55:3a:da: a4:61:d4:4f:d3:06:20:09:e1:6d:47:bb:4f:e6:de: 5d:3f:97:8c:a7:4a:be:13:d4:93:9c:ff:18:4c:b6: 9e:a0:f1:c4:f3:d3:b8:a4:40:81:f9:a3:8d:42:77: 49:a3:8f:75:05:57:da:de:37:ca:84:db:f2:19:b0: 0a:66:a6:e3:fa:36:83:b7:68:09:eb:76:d3:97:49: 3f:1e:40:96:84:c9:8d:b9:58:d6:6d:5a:03:68:b2: c3:cf:d0:fb:29:02:ac:b4:31:66:38:47:27:a1:8a: 6e:3d:41:5d:9a:c1:5d:b4:08:81:49:d9:81:79:dd: 0f:5e:b5:40:a9:6e:80:81:3b:3b:8f:dc:8b:41:a3: 1a:f1:e3:c3:f9:1f:28:94:3e:4d:86:27:4e:22:61: c2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:22:DB:29:8C:2E:3C:EC:73:73:F9:DA:BC:3E:25:24:93:D3:57:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/79befa65-2932-354e-aa3c-9d8fa2f95a14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl X509v3 Authority Key Identifier: keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer sbgp-ipAddrBlock: critical IPv4: 108.60.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:49:29:72:27:3e:53:ef:cc:3a:af:3c:0f:d5:37:3e:5e:1a: 5b:cb:b6:a8:ab:34:30:33:5d:b4:88:1b:42:e6:8c:9a:e1:64: 27:c8:ed:73:ea:b1:4d:7c:73:b7:54:89:73:38:93:f2:c0:c5: 59:bc:2a:7b:a7:2d:ec:1b:70:67:fa:20:7f:e0:ae:c1:15:00: 70:c4:e7:d3:ec:f3:37:d6:ae:33:3e:e7:09:3e:40:bc:5f:b1: 7a:51:0c:c3:b5:7d:bc:14:72:2a:82:df:96:09:9f:5c:10:6c: b5:e3:77:2d:49:a1:9c:a4:8b:fa:fb:e6:25:6b:73:3f:de:29: 64:bd:50:c7:e3:d5:92:7d:71:83:ca:60:ce:4e:36:70:c1:b2: ad:1f:98:63:2c:91:91:92:14:d6:c5:2e:cf:bf:45:93:01:2f: 47:94:ff:14:4a:43:a9:58:b0:67:10:6c:f3:f9:d9:e7:21:11: 1e:8d:b3:0f:a1:e8:af:c1:1c:c7:81:6e:f1:e4:cc:ab:5e:9b: 48:0e:81:27:43:0e:68:f3:66:5f:3e:7a:bf:c9:5c:4a:ca:08: 36:f1:1e:80:36:b2:b0:36:eb:60:ba:0a:a2:27:e5:ea:3d:af: 09:3f:4e:23:d0:11:b3:80:e8:0f:d8:c2:f9:45:58:8d:d8:37: d2:98:03:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1ucRMRCqLaUyhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNiZDMwM2ItNzM4ZC00Yzc3LTljNTUtMzIwZmNmYTkz Zjc1MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk ZDgxNzY4MjYtNDU4OC00NGM3LTlmYmUtYjA1NzE1Y2U4OTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA298oOhBHJXKnAashMr/ZqOSjt7fsL4Q/1ZA4 2QYNaL8LSdE5+YDrceC9Xu+lyuGqXtz0GFABml0MHM3nQlwJhQ4wZL+MxxYq3PqW mD/MZKYaRJ9ErTt0SahMTiO/RpJFPhK9UrRVOtqkYdRP0wYgCeFtR7tP5t5dP5eM p0q+E9STnP8YTLaeoPHE89O4pECB+aONQndJo491BVfa3jfKhNvyGbAKZqbj+jaD t2gJ63bTl0k/HkCWhMmNuVjWbVoDaLLDz9D7KQKstDFmOEcnoYpuPUFdmsFdtAiB SdmBed0PXrVAqW6AgTs7j9yLQaMa8ePD+R8olD5NhidOImHCFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIi2ymMLjzsc3P52rw+JSST01drMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lM2Jk MzAzYi03MzhkLTRjNzctOWM1NS0zMjBmY2ZhOTNmNzUvNzliZWZhNjUtMjkzMi0z NTRlLWFhM2MtOWQ4ZmEyZjk1YTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTNiZDMwM2ItNzM4ZC00Yzc3LTlj NTUtMzIwZmNmYTkzZjc1L2UzYmQzMDNiLTczOGQtNGM3Ny05YzU1LTMyMGZjZmE5 M2Y3NS5jcmwwHwYDVR0jBBgwFoAUDvcTBpHWvRytSMfJLYkdltxTTVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lM2JkMzAzYi03MzhkLTRjNzctOWM1NS0zMjBm Y2ZhOTNmNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDzjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5JKXInPlPvzDqvPA/VNz5eGlvLtqirNDAzXbSIG0LmjJrhZCfI7XPq sU18c7dUiXM4k/LAxVm8KnunLewbcGf6IH/grsEVAHDE59Ps8zfWrjM+5wk+QLxf sXpRDMO1fbwUciqC35YJn1wQbLXjdy1JoZyki/r75iVrcz/eKWS9UMfj1ZJ9cYPK YM5ONnDBsq0fmGMskZGSFNbFLs+/RZMBL0eU/xRKQ6lYsGcQbPP52echER6Nsw+h 6K/BHMeBbvHkzKtem0gOgSdDDmjzZl8+er/JXErKCDbxHoA2srA262C6CqIn5eo9 rwk/TiPQEbOA6A/YwvlFWI3YN9KYAyg= -----END CERTIFICATE-----Generated at Mon Apr 7 02:17:32 2025 by rpki-client