$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e3c11be6-5b2b-36be-b0de-2021cecfc3af.roa File: e3c11be6-5b2b-36be-b0de-2021cecfc3af.roa (raw, json) Hash identifier: +S4+BEE622NtkGYqWbrkzsAyRGjgFp1z0fypLKEyGcU= Subject key identifier: 0E:BA:9D:D8:51:97:5A:AA:D9:B5:2B:2B:FA:C5:9C:A2:1E:26:7B:E6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848BFEBD7E73B4A14C8D5296E40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e3c11be6-5b2b-36be-b0de-2021cecfc3af.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 108.170.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:d7:e7:3b:4a:14:c8:d5:29:6e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=030477c9-4cb6-4a44-9029-9992a63fe0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:6f:19:74:16:88:0a:05:0c:c7:d3:95:5a:95: 71:da:0b:ee:e0:c3:d4:74:4e:b0:b5:30:bf:29:2a: 59:97:65:93:ee:fc:99:b9:8a:61:ce:ef:27:0d:ff: 98:26:2e:17:9e:22:06:2e:45:0e:91:dc:32:59:fc: f0:ae:ef:a0:2e:04:22:62:f0:94:05:bd:8b:4c:c9: ab:d5:2e:7f:07:f8:d2:dd:f8:21:74:50:02:66:b3: 30:34:89:34:5b:94:3c:5f:19:c0:b7:39:8f:89:d2: e4:15:fd:5b:76:0c:29:4e:89:0a:fc:84:d0:ef:01: 5f:5f:42:4c:53:57:a8:1b:db:f4:ee:c0:ba:b1:e3: 3a:e9:93:49:81:a5:bc:31:67:67:a3:77:fd:b9:f3: 4d:b7:36:b0:64:ed:37:67:a6:6a:98:d6:98:b5:81: 38:b2:a5:41:0d:38:60:10:db:02:9a:93:07:de:9b: c3:3a:9c:4e:1f:08:27:f0:d5:5f:3e:26:c2:64:e9: 59:fd:44:49:d1:d4:31:1d:dc:b5:57:ad:36:33:85: 27:04:8d:b1:5d:7d:f8:44:73:eb:dd:4b:93:e4:24: 56:57:a0:3a:f0:ce:8d:92:22:a1:7e:9b:95:81:ab: 04:26:06:fb:6f:09:40:b9:ba:0f:1f:a9:3a:98:01: 80:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:BA:9D:D8:51:97:5A:AA:D9:B5:2B:2B:FA:C5:9C:A2:1E:26:7B:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e3c11be6-5b2b-36be-b0de-2021cecfc3af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:52:bd:d8:04:f9:d4:bd:1b:5d:32:0c:8b:df:cb:3d:2c:c6: 93:2d:e6:9f:6a:cc:8f:cd:e8:9f:08:9b:0c:b4:e1:f5:6f:14: ef:67:c7:16:b7:bd:39:ef:e7:57:bc:e7:98:52:d2:26:d5:f5: be:74:7f:e8:60:0c:a6:0d:64:7e:ab:cc:29:e7:f4:5c:22:f5: 68:80:ec:d0:b0:4b:3a:0c:94:99:3a:ff:b8:54:de:e0:05:d0: 87:b3:e9:75:14:e3:ac:4e:9e:62:10:14:25:04:9b:2e:40:f8: 26:6b:10:4d:ce:01:5b:f3:d9:9a:7b:de:fa:99:0c:fd:ab:d9: 75:01:e2:6d:15:fa:76:41:b9:a4:53:bf:71:8c:22:4a:93:5b: 2a:70:2c:06:1b:e7:00:b8:35:a2:f1:70:2e:0f:2a:52:9a:e1: cc:8b:97:ea:d2:1c:77:01:b2:f8:b3:64:22:ae:18:c4:20:95: be:85:7f:7b:29:2a:86:67:9a:73:46:12:9a:ae:96:a5:f8:ae: bd:96:cf:36:2c:20:46:21:3f:a6:bb:1b:48:c7:eb:a5:59:26: e0:db:d7:b9:39:3f:83:5f:8d:e3:5e:54:5c:0b:ff:85:9e:45: 81:f1:d9:74:2b:7b:a1:b9:9b:88:56:86:1d:14:76:0e:b4:ea: ff:c3:fd:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/69fnO0oUyNUpbkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk MDMwNDc3YzktNGNiNi00YTQ0LTkwMjktOTk5MmE2M2ZlMGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG8ZdBaICgUMx9OVWpVx2gvu4MPUdE6wtTC/ KSpZl2WT7vyZuYphzu8nDf+YJi4XniIGLkUOkdwyWfzwru+gLgQiYvCUBb2LTMmr 1S5/B/jS3fghdFACZrMwNIk0W5Q8XxnAtzmPidLkFf1bdgwpTokK/ITQ7wFfX0JM U1eoG9v07sC6seM66ZNJgaW8MWdno3f9ufNNtzawZO03Z6ZqmNaYtYE4sqVBDThg ENsCmpMH3pvDOpxOHwgn8NVfPibCZOlZ/URJ0dQxHdy1V602M4UnBI2xXX34RHPr 3UuT5CRWV6A68M6NkiKhfpuVgasEJgb7bwlAuboPH6k6mAGAlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA66ndhRl1qq2bUrK/rFnKIeJnvmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTNjMTFiZTYtNWIyYi0z NmJlLWIwZGUtMjAyMWNlY2ZjM2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRSvdgE+dS9G10yDIvfyz0sxpMt5p9qzI/N6J8Imwy04fVvFO9nxxa3 vTnv51e855hS0ibV9b50f+hgDKYNZH6rzCnn9Fwi9WiA7NCwSzoMlJk6/7hU3uAF 0Iez6XUU46xOnmIQFCUEmy5A+CZrEE3OAVvz2Zp73vqZDP2r2XUB4m0V+nZBuaRT v3GMIkqTWypwLAYb5wC4NaLxcC4PKlKa4cyLl+rSHHcBsvizZCKuGMQglb6Ff3sp KoZnmnNGEpqulqX4rr2WzzYsIEYhP6a7G0jH66VZJuDb17k5P4NfjeNeVFwL/4We RYHx2XQre6G5m4hWhh0Udg606v/D/Zs= -----END CERTIFICATE-----Generated at Fri Apr 4 10:08:22 2025 by rpki-client