$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4fd9a91-edb2-3025-bc74-1a054d6c617d.roa File: d4fd9a91-edb2-3025-bc74-1a054d6c617d.roa (raw, json) Hash identifier: chNjHq12ghJtrtvMAez/slajpXbV5NHCYrEVl4AVM5E= Subject key identifier: 46:2C:71:54:B7:E8:A5:5D:01:44:DF:C9:2B:3A:E8:E3:E6:56:58:F4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584540BB5464035795B6A684A780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4fd9a91-edb2-3025-bc74-1a054d6c617d.roa Signing time: Mon 18 Mar 2024 22:15:15 +0000 ROA not before: Mon 18 Mar 2024 22:15:15 +0000 ROA not after: Sun 16 Jun 2024 22:15:15 +0000 asID: 396982 IP address blocks: 108.170.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:40:bb:54:64:03:57:95:b6:a6:84:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 18 22:15:15 2024 GMT Not After : Jun 16 22:15:15 2024 GMT Subject: CN=0cb9be2f-3564-41d0-a07e-e77fc2bb3e5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:40:58:a1:ec:a9:5d:90:70:1c:7b:07:2c:9b: 87:e7:39:4b:cd:e4:76:62:28:a1:61:1b:14:17:c1: 31:ae:19:44:5a:13:16:7b:36:74:56:c6:41:e3:dc: 49:c5:8c:42:10:0a:7e:35:e2:34:a8:a9:fd:61:c9: c2:69:60:3e:88:d0:79:80:50:58:d8:72:d3:03:5a: 0c:ad:9c:42:2c:37:15:59:f8:bd:8e:92:4c:37:98: 30:5c:56:db:f5:83:9c:e4:42:1a:0d:be:17:4e:e3: 7f:41:7b:d5:dc:34:a7:d6:42:c6:47:6e:ec:38:f1: 7c:13:d1:1c:e5:16:5a:2f:a2:b8:e0:86:dc:a5:8e: 74:48:2b:12:ed:e3:9b:fa:3a:b1:dd:3d:1d:56:a4: fc:25:63:5e:93:d1:a0:08:ce:6f:5d:9b:50:5c:e0: ee:33:4e:5c:34:4f:e7:7f:26:86:9a:ae:47:77:7d: 72:51:49:77:36:63:7c:19:e2:43:be:2b:4c:9f:e9: 10:65:74:6b:29:8e:c5:ca:a3:e4:68:a9:fb:3d:fb: bc:66:d1:6d:4f:1c:8c:2a:4e:49:27:f0:0f:48:49: 09:d2:97:42:d8:33:16:6e:29:02:fa:4a:af:e3:0e: 2f:93:dd:be:80:d1:9b:f5:92:eb:81:e8:b5:40:9f: 2e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:2C:71:54:B7:E8:A5:5D:01:44:DF:C9:2B:3A:E8:E3:E6:56:58:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4fd9a91-edb2-3025-bc74-1a054d6c617d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:93:8d:92:40:9b:11:64:0e:49:9f:07:2e:a7:c7:af:05:26: 0e:9f:7e:cb:58:ed:9e:f5:00:49:62:6e:77:52:99:a2:d0:4a: bf:78:bf:5a:a3:75:06:88:b5:17:53:10:6a:65:24:f1:c9:7e: 78:8b:cc:ff:a8:c2:66:18:44:20:7d:f5:a0:27:d0:47:3e:c0: 8a:7b:3a:c5:8a:5f:2c:f3:09:f8:ee:15:8d:d1:bd:52:e3:83: ed:e1:ad:ef:0c:a0:b4:a0:3d:4f:c1:d4:28:ae:de:39:c2:9b: 75:3b:8b:50:ed:f3:09:10:2e:74:bc:c6:7a:b9:15:89:0e:4f: cc:2b:32:2a:39:d5:f4:c4:dc:89:ad:5e:31:bc:bb:ee:4d:da: 3c:39:fd:e5:d5:e2:28:cd:28:e7:7b:3e:63:c1:70:fe:e4:f4: b2:f9:9c:a6:e7:93:9c:1f:5b:a1:1d:dc:f7:e5:6a:4d:a1:bd: e0:30:a7:12:38:57:0a:98:18:51:f6:38:5e:8c:cb:30:6e:ac: 9f:ad:41:ee:2d:21:fd:0e:7b:d1:7d:ec:fa:2f:3a:66:65:62: 91:a0:95:33:ee:15:13:55:23:15:93:e7:97:21:6d:28:e5:3f: 59:9c:64:03:25:ae:34:39:df:54:bb:91:ee:e8:e6:5f:96:37: d7:c9:86:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVAu1RkA1eVtqaEp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDMxODIyMTUxNVoXDTI0MDYxNjIyMTUxNVowLzEtMCsGA1UEAxMk MGNiOWJlMmYtMzU2NC00MWQwLWEwN2UtZTc3ZmMyYmIzZTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEBYoeypXZBwHHsHLJuH5zlLzeR2YiihYRsU F8ExrhlEWhMWezZ0VsZB49xJxYxCEAp+NeI0qKn9YcnCaWA+iNB5gFBY2HLTA1oM rZxCLDcVWfi9jpJMN5gwXFbb9YOc5EIaDb4XTuN/QXvV3DSn1kLGR27sOPF8E9Ec 5RZaL6K44IbcpY50SCsS7eOb+jqx3T0dVqT8JWNek9GgCM5vXZtQXODuM05cNE/n fyaGmq5Hd31yUUl3NmN8GeJDvitMn+kQZXRrKY7FyqPkaKn7Pfu8ZtFtTxyMKk5J J/APSEkJ0pdC2DMWbikC+kqv4w4vk92+gNGb9ZLrgei1QJ8uRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYscVS36KVdAUTfySs66OPmVlj0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDRmZDlhOTEtZWRiMi0z MDI1LWJjNzQtMWEwNTRkNmM2MTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCTjZJAmxFkDkmfBy6nx68FJg6ffstY7Z71AElibndSmaLQSr94v1qj dQaItRdTEGplJPHJfniLzP+owmYYRCB99aAn0Ec+wIp7OsWKXyzzCfjuFY3RvVLj g+3hre8MoLSgPU/B1Ciu3jnCm3U7i1Dt8wkQLnS8xnq5FYkOT8wrMio51fTE3Imt XjG8u+5N2jw5/eXV4ijNKOd7PmPBcP7k9LL5nKbnk5wfW6Ed3Pflak2hveAwpxI4 VwqYGFH2OF6MyzBurJ+tQe4tIf0Oe9F97PovOmZlYpGglTPuFRNVIxWT55chbSjl P1mcZAMlrjQ531S7ke7o5l+WN9fJhsk= -----END CERTIFICATE-----Generated at Mon May 6 02:01:52 2024 by rpki-client on console-fra.rpki-client.org