$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48cea4f9-e08d-385c-9542-f4ec8f6227d2.roa File: 48cea4f9-e08d-385c-9542-f4ec8f6227d2.roa (raw, json) Hash identifier: odnNkLJwMZjdnohe6+9YmX/hc5b63q8mAxyQQtXZESk= Subject key identifier: 96:A0:57:5B:79:30:5C:EE:F3:39:3E:0E:83:22:DD:94:8F:83:DF:23 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848BFEBBDFA4C89638C29DC0340 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48cea4f9-e08d-385c-9542-f4ec8f6227d2.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 108.170.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:bd:fa:4c:89:63:8c:29:dc:03:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=14d489f7-13ea-4cec-a246-47e1149f19da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:30:72:3b:79:d5:a9:53:68:de:38:9a:31:57: 09:9b:7c:df:0d:bd:b2:19:6b:2d:4c:db:81:94:d8: 18:ee:50:32:2e:9d:d3:4d:8e:ac:bb:16:2e:5f:75: b4:b3:9a:fd:dd:b6:f3:a7:29:2c:5f:c4:a0:63:a4: 68:41:7a:19:f9:08:c7:02:19:70:1d:bc:26:72:b3: 9c:83:cd:2d:68:fb:84:f5:be:0d:6c:2c:a0:c0:59: 00:74:fb:e6:1e:0c:04:01:9c:b1:a0:f3:6b:9e:be: ad:d9:2a:cb:08:84:5d:00:08:8e:ff:c4:97:e9:7c: 8e:3a:e1:cd:1c:ee:07:b9:68:76:24:b9:b8:31:85: 27:d2:d3:5d:4b:79:8b:4c:69:bb:df:dc:fe:39:c6: 51:20:a6:c5:2e:96:fb:96:7f:51:44:d8:cb:d2:1e: ce:5f:92:19:04:6b:e6:f5:ab:55:02:88:bb:27:d4: 7a:a2:28:89:4f:fb:a1:0d:ac:37:51:db:a2:a3:dd: 76:f7:48:eb:b0:fc:70:6a:98:38:af:38:1e:c3:64: 84:8e:14:47:8b:18:81:21:2d:ff:c9:29:53:d4:f8: 4f:be:bc:13:aa:a8:a4:ab:8a:d3:e9:58:85:8f:93: 23:40:c1:e6:d6:a5:2c:ae:61:fa:b4:61:6d:bd:ed: 10:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A0:57:5B:79:30:5C:EE:F3:39:3E:0E:83:22:DD:94:8F:83:DF:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48cea4f9-e08d-385c-9542-f4ec8f6227d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:50:10:86:19:dc:ac:ac:b4:d7:78:43:09:4d:83:f3:f3:ec: 84:ca:99:01:6e:34:b2:58:aa:93:60:84:a0:6c:21:b7:78:8b: 21:58:ac:02:30:51:dd:54:3d:41:2c:79:ba:01:b6:c3:05:2a: 1e:a2:60:80:82:b3:4b:da:59:82:65:de:e8:af:57:4b:c0:a0: 6f:10:7f:e0:31:0a:a3:ec:82:51:62:34:aa:c3:1d:c0:92:fd: ac:b9:b9:9f:27:26:fe:a6:dc:d3:89:99:ee:bd:17:c5:e2:f3: bf:ae:29:a0:b8:6c:12:dc:27:90:c2:ff:6c:8d:93:43:c7:66: 65:b9:a3:16:af:0f:5b:cf:5b:fd:af:ea:90:a6:6d:5c:35:e1: 7f:30:c0:d6:5e:16:1f:f5:00:91:ac:2a:1b:86:38:fb:60:58: c0:3b:3a:a2:19:f0:1f:7d:ba:ff:b5:1b:5a:9f:22:30:0d:76: f5:bd:35:88:89:b8:87:f1:d9:54:ae:91:19:99:64:d5:48:0d: 9f:05:e6:40:f6:a0:ec:0f:ca:19:46:18:61:96:29:c2:76:c8: 39:41:1a:c7:1b:36:e5:a1:9e:a7:b5:b3:29:7d:0b:52:b4:f5: 04:14:7d:ea:e3:36:3b:ff:ba:53:64:d1:42:a7:dd:fb:4c:38: 3e:b5:f7:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/6736TIljjCncA0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk MTRkNDg5ZjctMTNlYS00Y2VjLWEyNDYtNDdlMTE0OWYxOWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjByO3nVqVNo3jiaMVcJm3zfDb2yGWstTNuB lNgY7lAyLp3TTY6suxYuX3W0s5r93bbzpyksX8SgY6RoQXoZ+QjHAhlwHbwmcrOc g80taPuE9b4NbCygwFkAdPvmHgwEAZyxoPNrnr6t2SrLCIRdAAiO/8SX6XyOOuHN HO4HuWh2JLm4MYUn0tNdS3mLTGm739z+OcZRIKbFLpb7ln9RRNjL0h7OX5IZBGvm 9atVAoi7J9R6oiiJT/uhDaw3Uduio91290jrsPxwapg4rzgew2SEjhRHixiBIS3/ ySlT1PhPvrwTqqikq4rT6ViFj5MjQMHm1qUsrmH6tGFtve0QpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJagV1t5MFzu8zk+DoMi3ZSPg98jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDhjZWE0ZjktZTA4ZC0z ODVjLTk1NDItZjRlYzhmNjIyN2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALZQEIYZ3KystNd4QwlNg/Pz7ITKmQFuNLJYqpNghKBsIbd4iyFYrAIw Ud1UPUEseboBtsMFKh6iYICCs0vaWYJl3uivV0vAoG8Qf+AxCqPsglFiNKrDHcCS /ay5uZ8nJv6m3NOJme69F8Xi87+uKaC4bBLcJ5DC/2yNk0PHZmW5oxavD1vPW/2v 6pCmbVw14X8wwNZeFh/1AJGsKhuGOPtgWMA7OqIZ8B99uv+1G1qfIjANdvW9NYiJ uIfx2VSukRmZZNVIDZ8F5kD2oOwPyhlGGGGWKcJ2yDlBGscbNuWhnqe1syl9C1K0 9QQUferjNjv/ulNk0UKn3ftMOD6193s= -----END CERTIFICATE-----Generated at Fri Apr 4 10:02:49 2025 by rpki-client