$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/15500956-7ded-3d3f-ae50-b5a339fa54e2.roa File: 15500956-7ded-3d3f-ae50-b5a339fa54e2.roa (raw, json) Hash identifier: nUyPzM63yE4vHlwTSJTvmO8AGugJz78FK70WUJBvxUU= Subject key identifier: C5:13:83:0D:2D:61:FD:15:FB:40:F0:46:CE:E2:AD:EF:3A:E8:E3:29 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848BFEBC93CAA783369D84CA700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/15500956-7ded-3d3f-ae50-b5a339fa54e2.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 108.170.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:c9:3c:aa:78:33:69:d8:4c:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=e5c7442c-d25c-4900-8e1e-96623a3a2e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:28:a1:e4:d1:ea:d3:38:95:76:a0:be:f2:11: ac:a2:23:21:de:e4:ae:c4:ed:3c:9d:9d:a4:dc:16: fc:07:7a:e4:f9:2d:ac:fa:b4:06:1a:2a:55:7f:27: 96:5d:6c:91:5d:8d:cc:49:b5:ab:54:d4:39:35:53: 64:44:e6:20:b1:29:9d:96:98:7a:b6:8a:fd:bd:26: b1:65:f6:ac:bc:31:98:4f:d7:45:6c:03:58:b8:51: cb:ad:3e:6a:1a:a2:c5:ce:73:a1:a9:92:4c:f1:ec: d9:ac:dd:38:b1:90:62:23:44:93:d8:71:f3:cb:45: b2:5b:bf:66:c4:5c:43:26:69:e1:e6:92:04:9a:b5: dd:f7:87:96:2c:05:3d:30:e4:7f:d8:dd:78:1f:e6: 3b:4e:9d:77:02:c3:bd:f0:6e:47:7a:28:db:fe:24: f2:e0:d8:df:36:41:5a:f3:31:21:65:e2:b3:4a:f3: 40:f1:7e:2d:32:0f:3a:48:a1:6f:53:2a:51:4d:6e: 98:d3:2a:1a:52:19:34:ba:5f:aa:19:c6:77:07:af: a7:41:72:e5:df:c0:83:7b:b0:21:06:49:d3:99:0e: 9d:18:8e:11:bb:55:13:58:80:bc:4f:d3:dd:17:21: 6e:59:e7:87:d3:81:58:fd:80:db:c5:62:81:80:14: 86:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:13:83:0D:2D:61:FD:15:FB:40:F0:46:CE:E2:AD:EF:3A:E8:E3:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/15500956-7ded-3d3f-ae50-b5a339fa54e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:05:85:dd:0a:8b:29:8a:9a:f9:8a:fd:5a:34:72:5b:3c:24: 4b:97:7b:14:ec:b2:07:5e:80:44:38:83:e7:7a:2a:91:f5:e5: 51:d0:50:e5:40:77:07:35:cb:47:4b:5d:81:0c:6f:2b:2b:e2: e3:6c:63:89:3b:a3:6e:20:4f:73:71:ea:44:7b:c9:49:87:7a: 27:b0:f9:1d:e1:14:26:cf:6e:e7:ff:80:53:61:a1:48:89:00: 0e:7d:f9:20:c3:18:9e:a0:e8:95:83:cc:a8:b6:fa:69:74:91: 21:7f:49:d3:9d:24:46:e1:60:b9:81:17:0f:3a:24:f9:b2:95: 8c:de:a0:3c:5c:28:2e:cb:74:51:0c:f0:68:0d:87:ae:d6:cb: 2c:96:e6:7c:a1:cf:79:c9:52:00:a5:47:e7:ab:ed:c3:b0:da: dd:cd:b5:b0:03:04:16:b0:8c:f1:af:cc:c3:ff:a8:fc:ee:8e: 39:4a:4f:6b:39:96:65:7f:f9:01:d2:cc:ff:dc:b6:e9:13:bf: ac:59:c5:cf:ff:9c:6e:c0:17:92:b6:72:42:9a:71:85:d7:f4: 2f:5b:37:86:7b:dc:10:a0:1c:e5:f1:68:c2:5f:4e:f3:c6:91: 19:5f:85:be:82:51:da:15:d7:30:53:49:cd:5d:52:bb:c3:f4: 43:76:1c:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/68k8qngzadhMpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk ZTVjNzQ0MmMtZDI1Yy00OTAwLThlMWUtOTY2MjNhM2EyZTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSih5NHq0ziVdqC+8hGsoiMh3uSuxO08nZ2k 3Bb8B3rk+S2s+rQGGipVfyeWXWyRXY3MSbWrVNQ5NVNkROYgsSmdlph6tor9vSax ZfasvDGYT9dFbANYuFHLrT5qGqLFznOhqZJM8ezZrN04sZBiI0ST2HHzy0WyW79m xFxDJmnh5pIEmrXd94eWLAU9MOR/2N14H+Y7Tp13AsO98G5Heijb/iTy4NjfNkFa 8zEhZeKzSvNA8X4tMg86SKFvUypRTW6Y0yoaUhk0ul+qGcZ3B6+nQXLl38CDe7Ah BknTmQ6dGI4Ru1UTWIC8T9PdFyFuWeeH04FY/YDbxWKBgBSGvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUTgw0tYf0V+0DwRs7ire866OMpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTU1MDA5NTYtN2RlZC0z ZDNmLWFlNTAtYjVhMzM5ZmE1NGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgFhd0KiymKmvmK/Vo0cls8JEuXexTssgdegEQ4g+d6KpH15VHQUOVA dwc1y0dLXYEMbysr4uNsY4k7o24gT3Nx6kR7yUmHeiew+R3hFCbPbuf/gFNhoUiJ AA59+SDDGJ6g6JWDzKi2+ml0kSF/SdOdJEbhYLmBFw86JPmylYzeoDxcKC7LdFEM 8GgNh67WyyyW5nyhz3nJUgClR+er7cOw2t3NtbADBBawjPGvzMP/qPzujjlKT2s5 lmV/+QHSzP/ctukTv6xZxc//nG7AF5K2ckKacYXX9C9bN4Z73BCgHOXxaMJfTvPG kRlfhb6CUdoV1zBTSc1dUrvD9EN2HPo= -----END CERTIFICATE-----Generated at Fri Apr 4 10:10:35 2025 by rpki-client