$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1294a0aa-0f27-3bf4-a037-bb87197fe260.roa File: 1294a0aa-0f27-3bf4-a037-bb87197fe260.roa (raw, json) Hash identifier: ky1ZWJCaX/vPRVhX8o/1Ftp/2nAr1KPOJq2wRp1Lvo0= Subject key identifier: 79:13:F7:1D:AC:6F:DB:30:09:9F:CE:1D:80:5A:68:86:A5:B0:71:1D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848BFEBBAC0AAD5FF1ABD486FA0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1294a0aa-0f27-3bf4-a037-bb87197fe260.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 108.170.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:ba:c0:aa:d5:ff:1a:bd:48:6f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=6a530701-2fa1-4ede-b440-5de7da7e381c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:40:d9:81:08:f6:99:04:89:40:4e:b6:a0:ea: 44:47:ba:92:17:0e:c6:99:48:8d:a4:23:08:a1:89: a7:1a:a0:3c:48:c5:4f:47:fa:83:e4:25:a1:3a:c2: 36:0e:bc:5f:0b:81:6c:31:77:3f:6a:2b:15:53:b1: 5d:7c:81:32:a8:b6:f0:00:ae:95:91:8d:11:ba:ad: 5b:c0:2b:5b:d0:00:5a:db:78:05:8c:63:af:e2:2e: bd:3b:c6:5e:35:33:e2:8e:3e:35:5b:59:a2:b9:09: f7:5f:93:00:7f:09:9b:50:fe:81:a8:d5:3b:8f:bb: c6:d6:27:8e:df:7d:fd:30:d1:84:0f:18:42:08:60: 9a:32:76:01:06:33:06:72:16:78:f5:b7:72:71:47: 23:8f:ac:c5:93:3e:03:6b:ae:f6:0d:2a:19:d1:7d: 49:72:6f:c7:35:8f:18:45:60:12:3b:a4:17:e5:3d: 2e:ab:16:8a:56:47:cf:dd:66:b5:d0:f0:3f:c8:63: 49:1c:f7:fa:d0:e7:9f:15:78:1e:40:b5:ec:b2:00: d7:59:8a:3c:ad:2a:50:10:78:d8:ba:48:0b:e5:d1: 99:a8:04:49:83:3b:90:0a:b6:3a:fb:97:8a:3a:64: c0:e2:42:8c:47:1c:a6:21:43:c4:1f:de:8c:84:9f: 4c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:13:F7:1D:AC:6F:DB:30:09:9F:CE:1D:80:5A:68:86:A5:B0:71:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1294a0aa-0f27-3bf4-a037-bb87197fe260.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:7e:a0:34:e4:79:18:d6:7f:00:b4:b9:ab:31:bd:df:bd:4f: 50:62:75:7f:09:8e:20:1a:13:3d:e8:a4:7b:09:f6:47:9b:1e: cb:35:ab:e9:7b:50:4f:43:48:1b:9c:50:20:b3:db:c1:0e:52: a7:bf:cf:56:d9:fd:23:75:9e:71:ac:4a:5e:a5:60:80:f1:6a: 21:a4:a1:11:a6:e8:da:d5:a8:b0:f1:d6:93:7c:55:69:0f:bd: 1e:ec:c4:5c:73:c4:b2:77:ed:f8:e9:85:73:2c:fe:8b:0b:40: 71:f2:8e:e0:70:e7:8b:f0:a7:b3:60:3b:a4:96:93:b8:80:cf: dd:05:2d:cf:05:11:8d:7d:ba:11:19:88:0f:78:12:e1:24:69: 7e:9f:ff:5b:c9:14:48:be:19:0f:e0:12:b6:6b:9c:d8:43:25: fe:4e:69:d5:e8:59:5d:1c:00:86:89:24:cf:35:66:4d:e5:02: 41:26:53:ee:07:cf:5c:6d:1e:bc:ab:23:17:b8:91:39:b7:03: 8d:6e:a7:85:4d:83:ec:e4:fc:46:21:70:9f:99:15:a3:c7:2c: 34:b2:6f:10:e1:61:f0:98:63:c4:ff:3a:3e:33:ca:bf:1a:54: 92:c9:1b:bc:e7:0b:bd:10:00:a9:aa:ad:c3:b8:53:e8:d6:c1: e2:ca:f1:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/67rAqtX/Gr1Ib6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk NmE1MzA3MDEtMmZhMS00ZWRlLWI0NDAtNWRlN2RhN2UzODFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEDZgQj2mQSJQE62oOpER7qSFw7GmUiNpCMI oYmnGqA8SMVPR/qD5CWhOsI2DrxfC4FsMXc/aisVU7FdfIEyqLbwAK6VkY0Ruq1b wCtb0ABa23gFjGOv4i69O8ZeNTPijj41W1miuQn3X5MAfwmbUP6BqNU7j7vG1ieO 3339MNGEDxhCCGCaMnYBBjMGchZ49bdycUcjj6zFkz4Da672DSoZ0X1Jcm/HNY8Y RWASO6QX5T0uqxaKVkfP3Wa10PA/yGNJHPf60OefFXgeQLXssgDXWYo8rSpQEHjY ukgL5dGZqARJgzuQCrY6+5eKOmTA4kKMRxymIUPEH96MhJ9MEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkT9x2sb9swCZ/OHYBaaIalsHEdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTI5NGEwYWEtMGYyNy0z YmY0LWEwMzctYmI4NzE5N2ZlMjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJ+oDTkeRjWfwC0uasxvd+9T1BidX8JjiAaEz3opHsJ9kebHss1q+l7 UE9DSBucUCCz28EOUqe/z1bZ/SN1nnGsSl6lYIDxaiGkoRGm6NrVqLDx1pN8VWkP vR7sxFxzxLJ37fjphXMs/osLQHHyjuBw54vwp7NgO6SWk7iAz90FLc8FEY19uhEZ iA94EuEkaX6f/1vJFEi+GQ/gErZrnNhDJf5OadXoWV0cAIaJJM81Zk3lAkEmU+4H z1xtHryrIxe4kTm3A41up4VNg+zk/EYhcJ+ZFaPHLDSybxDhYfCYY8T/Oj4zyr8a VJLJG7znC70QAKmqrcO4U+jWweLK8Qk= -----END CERTIFICATE-----Generated at Fri Apr 4 10:10:35 2025 by rpki-client