$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4d5fb234-4b0d-375b-8830-f6a550ba1a38.roa File: 4d5fb234-4b0d-375b-8830-f6a550ba1a38.roa (raw, json) Hash identifier: NBJPnJ0AO87mzZYEbF5RIuuA9/SiON+CmLgn6kTpIek= Subject key identifier: 42:FE:77:89:76:27:CB:D0:9E:24:B4:C0:4D:80:97:B3:EC:84:8C:1E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848BFEBC70D3B562C4919045280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4d5fb234-4b0d-375b-8830-f6a550ba1a38.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 108.170.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:c7:0d:3b:56:2c:49:19:04:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=45a85dd7-2fc3-432e-879b-2915b20e6fa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1f:0a:f7:a8:05:89:b3:89:03:8a:2c:c8:96: 52:fc:3d:3b:20:d5:c5:57:fb:53:f8:a6:1d:aa:f1: 05:c3:c4:86:6a:cb:f8:ad:27:35:98:6d:92:2c:61: 17:ea:6f:5b:f6:ab:f3:49:c0:9b:32:28:a3:f9:20: 5a:7d:37:76:a0:c2:7e:9c:33:fd:28:8e:23:ab:3c: 79:0a:d2:55:94:d4:42:b7:23:ce:a2:f2:98:f1:ef: db:4a:90:51:11:eb:1d:65:c6:02:5d:e1:9c:f7:aa: c2:9f:44:38:77:03:7e:cd:71:bf:eb:67:bc:81:1d: ed:29:6c:22:c2:b4:77:9e:f8:6f:eb:51:4a:70:b2: 91:a5:19:c9:80:ac:7d:85:d8:c4:cf:35:d8:56:fd: 65:db:45:e1:c4:56:44:04:4c:08:6a:13:8a:eb:4e: 55:fe:d9:ef:b2:79:39:c9:6b:e4:18:02:ae:c8:20: be:cd:ad:c6:23:ed:9c:c4:d5:d5:87:94:4e:a5:8f: 34:71:29:ee:aa:4e:c8:87:df:00:da:24:f0:24:f2: a6:be:29:fb:8c:11:93:c4:ca:05:98:e0:09:ae:75: 00:8d:7d:f0:50:05:86:d9:9c:94:83:43:0d:d7:55: 1f:b9:d9:bc:52:b2:f5:32:68:32:48:ac:1b:fa:b5: 0d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:FE:77:89:76:27:CB:D0:9E:24:B4:C0:4D:80:97:B3:EC:84:8C:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4d5fb234-4b0d-375b-8830-f6a550ba1a38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:8a:4d:f3:7c:9a:20:d8:9d:5d:e6:1f:1b:c0:ad:a0:6f:88: 74:1e:a8:f3:09:04:17:78:f2:2e:76:31:7e:6a:99:88:1f:9f: b6:9b:8b:b7:72:31:2d:38:4c:ed:e2:ab:5f:19:8a:fb:01:b7: 2f:4f:fe:8f:f5:55:9e:1f:3d:d7:e0:20:81:60:30:dd:83:c4: df:d4:4c:6c:52:10:ca:21:f0:96:ec:d4:ec:d4:a3:16:ee:3a: 6f:8e:f9:9e:60:4e:4e:3f:ab:35:b4:ce:2c:90:aa:d0:bc:5f: bc:cd:a3:ed:47:6b:e2:f1:14:ca:2a:22:03:9c:30:c7:7e:ee: 16:7e:e0:b0:04:8c:63:be:64:0b:36:f8:94:db:59:51:ad:4d: 7d:84:26:0b:90:3f:e2:7c:cd:6c:c9:57:e6:0e:36:ac:32:40: 0b:33:fc:4a:4a:5e:3c:03:1a:ae:c8:a4:3b:28:d6:c7:a7:5d: 6e:39:43:e2:1e:86:ae:80:7e:e9:09:97:b5:bf:df:0f:81:dd: 39:37:12:0b:cf:21:09:69:1a:8e:c6:6a:0a:d2:80:1a:47:7b: df:aa:de:ed:f3:a1:86:53:5f:c1:4a:fd:e0:fc:1d:fc:78:ab: 3c:41:44:09:27:57:98:81:0a:cf:4a:f2:01:ed:0e:df:cc:2c: 0a:78:4d:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/68cNO1YsSRkEUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk NDVhODVkZDctMmZjMy00MzJlLTg3OWItMjkxNWIyMGU2ZmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnh8K96gFibOJA4osyJZS/D07INXFV/tT+KYd qvEFw8SGasv4rSc1mG2SLGEX6m9b9qvzScCbMiij+SBafTd2oMJ+nDP9KI4jqzx5 CtJVlNRCtyPOovKY8e/bSpBREesdZcYCXeGc96rCn0Q4dwN+zXG/62e8gR3tKWwi wrR3nvhv61FKcLKRpRnJgKx9hdjEzzXYVv1l20XhxFZEBEwIahOK605V/tnvsnk5 yWvkGAKuyCC+za3GI+2cxNXVh5ROpY80cSnuqk7Ih98A2iTwJPKmvin7jBGTxMoF mOAJrnUAjX3wUAWG2ZyUg0MN11Ufudm8UrL1MmgySKwb+rUNcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEL+d4l2J8vQniS0wE2Al7PshIweMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGQ1ZmIyMzQtNGIwZC0z NzViLTg4MzAtZjZhNTUwYmExYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyKTfN8miDYnV3mHxvAraBviHQeqPMJBBd48i52MX5qmYgfn7abi7dy MS04TO3iq18ZivsBty9P/o/1VZ4fPdfgIIFgMN2DxN/UTGxSEMoh8Jbs1OzUoxbu Om+O+Z5gTk4/qzW0ziyQqtC8X7zNo+1Ha+LxFMoqIgOcMMd+7hZ+4LAEjGO+ZAs2 +JTbWVGtTX2EJguQP+J8zWzJV+YONqwyQAsz/EpKXjwDGq7IpDso1senXW45Q+Ie hq6AfukJl7W/3w+B3Tk3EgvPIQlpGo7GagrSgBpHe9+q3u3zoYZTX8FK/eD8Hfx4 qzxBRAknV5iBCs9K8gHtDt/MLAp4TSU= -----END CERTIFICATE-----Generated at Fri Apr 4 10:12:40 2025 by rpki-client