$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48cea4f9-e08d-385c-9542-f4ec8f6227d2.roa File: 48cea4f9-e08d-385c-9542-f4ec8f6227d2.roa (raw, json) Hash identifier: h4qAQc0+iC0dRSwNpFu9kvDD3DAiWW1+83D5MaTfSTw= Subject key identifier: 58:EE:37:9E:C2:27:B2:EC:CF:9E:6B:12:42:85:2E:2C:FD:5F:38:B9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584540BB6120CAD17019A5A78F80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48cea4f9-e08d-385c-9542-f4ec8f6227d2.roa Signing time: Mon 18 Mar 2024 22:15:21 +0000 ROA not before: Mon 18 Mar 2024 22:15:21 +0000 ROA not after: Sun 16 Jun 2024 22:15:21 +0000 asID: 396982 IP address blocks: 108.170.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:40:bb:61:20:ca:d1:70:19:a5:a7:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 18 22:15:21 2024 GMT Not After : Jun 16 22:15:21 2024 GMT Subject: CN=04c046bd-09a2-4636-9119-2fff6fc6c25f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:09:2e:b1:67:8c:61:ca:d4:96:f4:0e:76:03: 27:45:45:e9:1b:dd:da:67:0f:a5:5a:cf:d0:64:82: 6f:46:b1:66:55:85:29:c3:40:29:d0:53:db:53:75: f1:d1:d9:e3:d2:52:32:4a:fe:bc:bc:fa:fa:a7:81: 3a:8d:6b:f6:30:25:e8:1f:44:88:fb:72:a5:e0:a7: cd:51:3a:82:6d:f6:54:5b:99:a9:3e:c4:bb:71:66: 1c:5b:6d:1d:11:0f:0b:03:df:46:1b:fc:a5:e6:52: 01:04:59:e2:d6:e8:c2:9f:26:5d:4c:d8:1a:d3:7d: 93:8e:c9:96:b5:cf:18:59:9a:c4:1e:18:a8:f3:63: 00:60:57:be:3f:5e:29:38:4d:3f:66:6a:30:c6:66: c3:13:a5:1d:24:4c:19:63:9a:5b:de:39:69:2b:64: 6e:54:7d:59:34:52:be:69:db:43:75:87:c4:d0:ce: 93:f8:69:db:8f:58:37:08:a1:70:b5:cf:3b:c0:26: 11:b3:7b:e7:72:58:45:5f:5b:91:d6:f1:47:e4:8e: 1d:b4:da:db:d1:03:7e:37:30:0a:d7:68:98:eb:54: 40:f7:35:6d:ef:90:27:ee:98:0d:ee:73:d4:b9:fd: 78:eb:37:f9:f0:1b:16:55:57:c3:98:f9:53:38:39: 80:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:EE:37:9E:C2:27:B2:EC:CF:9E:6B:12:42:85:2E:2C:FD:5F:38:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48cea4f9-e08d-385c-9542-f4ec8f6227d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:8e:39:2c:b2:0c:d4:91:65:ce:1c:25:d2:90:e4:5a:51:7c: fd:2a:48:f7:a5:a9:ad:d3:0a:36:90:41:fd:f0:ef:85:ab:48: 79:6b:a8:19:0d:b9:1d:cf:67:f4:b6:f8:0c:fe:92:e7:e1:8c: 88:8b:3c:ef:50:e9:5e:bb:64:94:b2:1d:bc:e3:ba:41:e8:5a: a4:f6:87:2e:ff:6f:6f:7d:27:2e:62:e0:65:a5:1b:f2:dc:10: e6:79:d9:4c:e0:48:21:0c:73:8c:8d:6d:5f:b4:5c:ee:58:eb: 70:84:86:6e:97:0f:ab:1a:9a:27:80:1b:de:6b:60:91:f8:66: 11:59:a6:88:5a:e8:4d:02:27:84:4f:90:d9:b9:e5:f3:be:cc: 00:52:9e:05:d8:d7:71:25:7f:bb:7c:9c:19:3d:1f:e3:15:29: 03:c7:d9:8e:1f:56:59:5c:eb:e9:41:30:39:ee:ab:45:0b:7b: c0:ed:c4:73:99:1d:d3:86:a0:1a:0f:6d:03:d0:35:ab:b1:40: eb:15:63:74:7f:44:3c:b6:2e:cd:57:47:48:d7:e9:3c:04:7d: 90:ee:40:29:5f:c7:d4:b4:c0:06:28:ef:75:c0:5c:84:47:12: f6:1d:e7:41:a8:9e:4e:21:dc:73:d5:ec:12:a2:ea:c1:2c:54: de:4c:72:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVAu2EgytFwGaWnj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDMxODIyMTUyMVoXDTI0MDYxNjIyMTUyMVowLzEtMCsGA1UEAxMk MDRjMDQ2YmQtMDlhMi00NjM2LTkxMTktMmZmZjZmYzZjMjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwkusWeMYcrUlvQOdgMnRUXpG93aZw+lWs/Q ZIJvRrFmVYUpw0Ap0FPbU3Xx0dnj0lIySv68vPr6p4E6jWv2MCXoH0SI+3Kl4KfN UTqCbfZUW5mpPsS7cWYcW20dEQ8LA99GG/yl5lIBBFni1ujCnyZdTNga032TjsmW tc8YWZrEHhio82MAYFe+P14pOE0/ZmowxmbDE6UdJEwZY5pb3jlpK2RuVH1ZNFK+ adtDdYfE0M6T+Gnbj1g3CKFwtc87wCYRs3vnclhFX1uR1vFH5I4dtNrb0QN+NzAK 12iY61RA9zVt75An7pgN7nPUuf146zf58BsWVVfDmPlTODmAEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjuN57CJ7Lsz55rEkKFLiz9Xzi5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDhjZWE0ZjktZTA4ZC0z ODVjLTk1NDItZjRlYzhmNjIyN2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK6OOSyyDNSRZc4cJdKQ5FpRfP0qSPelqa3TCjaQQf3w74WrSHlrqBkN uR3PZ/S2+Az+kufhjIiLPO9Q6V67ZJSyHbzjukHoWqT2hy7/b299Jy5i4GWlG/Lc EOZ52UzgSCEMc4yNbV+0XO5Y63CEhm6XD6samieAG95rYJH4ZhFZpoha6E0CJ4RP kNm55fO+zABSngXY13Elf7t8nBk9H+MVKQPH2Y4fVllc6+lBMDnuq0ULe8DtxHOZ HdOGoBoPbQPQNauxQOsVY3R/RDy2Ls1XR0jX6TwEfZDuQClfx9S0wAYo73XAXIRH EvYd50Gonk4h3HPV7BKi6sEsVN5Mcr0= -----END CERTIFICATE-----Generated at Sun May 5 22:50:27 2024 by rpki-client on console-fra.rpki-client.org