$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60375f84-058e-3934-9882-84d1a2ec55d3.roa File: 60375f84-058e-3934-9882-84d1a2ec55d3.roa (raw, json) Hash identifier: FL/Oz9peFzLpAi5SIIG1NDJYITCk6OF9pn9lEYfnodU= Subject key identifier: D4:4C:AB:1D:82:5F:76:FD:6B:31:9D:82:72:31:FA:0C:C6:6E:32:D0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584540B8EE595F47F118B885F500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60375f84-058e-3934-9882-84d1a2ec55d3.roa Signing time: Mon 18 Mar 2024 22:10:25 +0000 ROA not before: Mon 18 Mar 2024 22:10:25 +0000 ROA not after: Sun 16 Jun 2024 22:10:25 +0000 asID: 396982 IP address blocks: 108.170.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:40:b8:ee:59:5f:47:f1:18:b8:85:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 18 22:10:25 2024 GMT Not After : Jun 16 22:10:25 2024 GMT Subject: CN=05c67a6c-5818-467b-99e3-672a8d4287c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:05:d8:fa:ab:f2:bb:0e:86:ca:87:2b:2d:82: fb:24:73:ea:16:66:94:73:20:e1:1a:f9:8b:76:b0: 18:56:af:4b:11:fd:db:16:fb:cb:dd:29:39:ad:e3: df:95:b4:74:6c:46:87:77:87:80:35:88:55:73:3c: b3:12:77:a9:a4:be:a8:9c:1c:c0:c6:9b:12:d0:d4: 12:47:c9:ca:dc:89:31:ee:6e:4b:da:83:01:aa:14: 10:c7:c8:4a:f8:4d:ea:e2:de:29:d8:25:8b:ee:93: 39:a1:ad:bb:10:4b:f4:9d:44:f5:ef:26:8b:3a:c0: 57:05:ab:c8:3c:33:dd:f0:e0:df:9f:49:87:ba:0d: 41:16:c6:2b:a2:c1:e8:3d:de:8b:08:8f:c3:8b:db: b0:7e:43:e8:3a:7e:73:96:8b:e4:19:a5:7a:2f:eb: f4:b2:e9:aa:0b:74:ed:09:57:e0:9a:ef:5d:8a:6f: 65:97:8b:ca:20:da:3f:e8:84:9a:85:db:2b:d8:82: a1:4d:1f:1e:20:3c:ce:1f:1e:a1:e2:df:be:a6:e0: 8d:03:5e:15:75:19:a5:35:46:d2:be:b5:a5:d3:88: 32:90:3d:9c:f1:96:e0:4a:49:95:39:62:35:cb:9b: ce:d6:1b:ee:30:4a:2a:c1:ca:51:b4:6b:b5:75:91: 7d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:4C:AB:1D:82:5F:76:FD:6B:31:9D:82:72:31:FA:0C:C6:6E:32:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60375f84-058e-3934-9882-84d1a2ec55d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:74:a2:71:bf:b7:67:a3:99:09:21:ef:c6:1e:a7:d3:da:68: 1a:5a:b2:e8:9b:04:df:bf:8a:4f:2e:da:53:04:5a:7b:57:a9: 68:15:00:0a:a3:56:a1:2e:82:c8:63:68:45:30:61:b7:09:6b: 11:1f:1a:14:03:a9:e0:6c:58:1c:80:a9:4c:aa:51:3e:99:ae: 81:93:ee:3a:0a:9a:68:a2:ea:50:33:1c:f6:f7:38:07:d0:3d: 73:f8:e5:fa:1d:a4:45:5c:8b:8b:ea:db:4d:ed:b5:97:c4:7a: 8c:94:a9:06:6f:ab:3e:b2:69:25:43:5e:50:b2:51:0c:40:95: 63:da:f8:68:73:bd:44:70:2f:bf:00:07:20:76:bf:94:95:25: 4a:d0:00:2a:a1:34:fc:f1:fc:7c:f3:38:cc:ef:91:1b:07:ae: 6f:d8:d4:81:0c:7e:09:8c:bb:e2:3e:fe:c0:d9:3f:70:d6:55: 05:4e:08:b0:cd:bc:51:7e:c7:eb:ac:be:bf:a0:c3:c7:cf:de: f2:45:3d:aa:ed:12:39:de:8c:5f:fd:12:04:65:e6:0d:25:49: d4:43:43:b1:78:f7:ff:86:ef:d9:89:ca:3d:4e:fa:33:6f:96: 9b:39:70:2d:4f:88:fd:1e:93:41:f3:ba:92:d3:27:04:ce:1f: 3c:79:43:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVAuO5ZX0fxGLiF9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDMxODIyMTAyNVoXDTI0MDYxNjIyMTAyNVowLzEtMCsGA1UEAxMk MDVjNjdhNmMtNTgxOC00NjdiLTk5ZTMtNjcyYThkNDI4N2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwXY+qvyuw6GyocrLYL7JHPqFmaUcyDhGvmL drAYVq9LEf3bFvvL3Sk5rePflbR0bEaHd4eANYhVczyzEneppL6onBzAxpsS0NQS R8nK3Ikx7m5L2oMBqhQQx8hK+E3q4t4p2CWL7pM5oa27EEv0nUT17yaLOsBXBavI PDPd8ODfn0mHug1BFsYrosHoPd6LCI/Di9uwfkPoOn5zlovkGaV6L+v0sumqC3Tt CVfgmu9dim9ll4vKINo/6ISahdsr2IKhTR8eIDzOHx6h4t++puCNA14VdRmlNUbS vrWl04gykD2c8ZbgSkmVOWI1y5vO1hvuMEoqwcpRtGu1dZF9rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRMqx2CX3b9azGdgnIx+gzGbjLQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjAzNzVmODQtMDU4ZS0z OTM0LTk4ODItODRkMWEyZWM1NWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE90onG/t2ejmQkh78Yep9PaaBpasuibBN+/ik8u2lMEWntXqWgVAAqj VqEugshjaEUwYbcJaxEfGhQDqeBsWByAqUyqUT6ZroGT7joKmmii6lAzHPb3OAfQ PXP45fodpEVci4vq203ttZfEeoyUqQZvqz6yaSVDXlCyUQxAlWPa+GhzvURwL78A ByB2v5SVJUrQACqhNPzx/HzzOMzvkRsHrm/Y1IEMfgmMu+I+/sDZP3DWVQVOCLDN vFF+x+usvr+gw8fP3vJFPartEjnejF/9EgRl5g0lSdRDQ7F49/+G79mJyj1O+jNv lps5cC1PiP0ek0HzupLTJwTOHzx5Q5s= -----END CERTIFICATE-----Generated at Mon May 6 01:59:42 2024 by rpki-client on console-ams.rpki-client.org