$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ffb70f16-1146-3f97-a777-eac317aad8ad.roa File: ffb70f16-1146-3f97-a777-eac317aad8ad.roa (raw, json) Hash identifier: I1J/apeQuywSnzqYH4fsqk+P/bP7JOLAGRM80kQWlUo= Subject key identifier: A8:98:FB:2F:20:45:9D:C4:F4:D5:2D:04:FF:38:3F:68:E8:82:8B:C1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858455F053BACDE754715591ADC80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ffb70f16-1146-3f97-a777-eac317aad8ad.roa Signing time: Fri 29 Mar 2024 18:38:25 +0000 ROA not before: Fri 29 Mar 2024 18:38:25 +0000 ROA not after: Thu 27 Jun 2024 18:38:25 +0000 asID: 396982 IP address blocks: 208.68.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:5f:05:3b:ac:de:75:47:15:59:1a:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 29 18:38:25 2024 GMT Not After : Jun 27 18:38:25 2024 GMT Subject: CN=d86ccae1-39b1-43ce-8151-d4130a1feec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1d:ab:67:4b:ce:c2:9f:cc:1e:d2:06:f9:3f: 1c:48:bf:14:ec:28:4c:10:53:ac:d3:9f:41:a2:64: 89:9b:f7:4e:7f:45:57:04:aa:b7:64:c2:36:11:c0: 69:e2:ea:c6:1e:d4:5f:00:1b:6f:4b:4d:f8:cf:36: 98:c9:ce:c2:12:f9:0a:d4:6d:db:43:2b:8b:13:8d: 34:13:c0:0f:02:7f:1e:ea:a0:54:3c:b0:c1:82:68: ac:23:f9:e4:d4:7b:87:23:ce:df:50:94:c9:44:d3: 50:b3:17:10:9e:84:ed:96:51:f8:f2:46:38:9d:8a: 57:de:e9:a0:a7:b5:77:0f:b2:92:af:ca:7b:1c:a5: 03:1e:5c:a3:ca:e4:17:be:4e:c2:1a:89:a7:eb:75: b0:9f:3a:1c:08:ba:fc:31:bf:ca:08:7d:0d:2e:64: 16:eb:ab:d5:9d:7b:0f:22:eb:0f:70:31:0b:60:b1: b1:b7:81:02:39:3a:f2:ca:af:55:1a:91:c7:93:54: 3d:94:62:eb:cc:53:96:54:61:cb:ae:33:cc:c9:e0: 39:35:90:27:6d:e0:1c:20:e2:00:64:47:d7:80:e2: 8a:83:4a:71:e2:43:ed:97:32:4b:f0:ac:02:5e:7a: e5:bb:65:ca:4e:46:b8:a9:af:fa:9c:bc:f2:c9:62: 0a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:98:FB:2F:20:45:9D:C4:F4:D5:2D:04:FF:38:3F:68:E8:82:8B:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ffb70f16-1146-3f97-a777-eac317aad8ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.68.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:3d:c8:83:b8:18:a3:11:c2:f6:8c:5b:94:32:96:f5:51:7c: de:ad:fb:a2:36:8b:06:e4:f4:c9:83:c6:b0:c4:4a:f1:a7:ca: a6:ac:67:a1:f5:2e:ec:78:02:96:30:73:cf:db:82:3d:89:29: bd:46:7a:24:89:c2:d8:be:a0:76:ae:3b:46:55:45:5b:ea:78: 2a:fa:3e:bf:6c:63:b9:3c:80:9f:2c:8c:20:01:66:d1:46:79: 93:e3:c8:b9:45:c4:18:91:cc:3e:d4:1c:da:5c:d1:11:46:9e: 8d:f8:56:a9:2e:ce:59:dd:e3:af:d8:fd:fd:ac:f1:12:bf:a1: 16:a9:ec:7c:32:52:36:92:21:24:ab:d3:d5:ee:65:be:e9:2b: 93:3b:90:a7:2c:ae:49:87:33:19:46:65:34:4d:0c:4f:73:63: e8:d9:87:2c:09:94:d8:06:eb:83:bc:0f:ba:50:74:19:59:e8: 62:9d:ff:90:4c:a0:64:39:dd:51:d1:d6:65:39:18:35:7b:62: 7d:09:d1:02:74:12:6b:75:b3:ba:11:c6:12:10:e2:8c:9f:59: 2f:df:79:eb:ec:99:71:ae:f2:c6:96:b2:75:7c:fc:0d:8f:0d: 27:5b:0e:c5:f7:0d:20:9b:87:76:39:2b:ab:5c:47:b1:c0:b8: 90:87:ba:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVfBTus3nVHFVka3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDMyOTE4MzgyNVoXDTI0MDYyNzE4MzgyNVowLzEtMCsGA1UEAxMk ZDg2Y2NhZTEtMzliMS00M2NlLTgxNTEtZDQxMzBhMWZlZWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB2rZ0vOwp/MHtIG+T8cSL8U7ChMEFOs059B omSJm/dOf0VXBKq3ZMI2EcBp4urGHtRfABtvS034zzaYyc7CEvkK1G3bQyuLE400 E8APAn8e6qBUPLDBgmisI/nk1HuHI87fUJTJRNNQsxcQnoTtllH48kY4nYpX3umg p7V3D7KSr8p7HKUDHlyjyuQXvk7CGomn63WwnzocCLr8Mb/KCH0NLmQW66vVnXsP IusPcDELYLGxt4ECOTryyq9VGpHHk1Q9lGLrzFOWVGHLrjPMyeA5NZAnbeAcIOIA ZEfXgOKKg0px4kPtlzJL8KwCXnrlu2XKTka4qa/6nLzyyWIKiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiY+y8gRZ3E9NUtBP84P2jogovBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmZiNzBmMTYtMTE0Ni0z Zjk3LWE3NzctZWFjMzE3YWFkOGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ERsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQ9yIO4GKMRwvaMW5QylvVRfN6t+6I2iwbk9MmDxrDESvGnyqasZ6H1 Lux4ApYwc8/bgj2JKb1GeiSJwti+oHauO0ZVRVvqeCr6Pr9sY7k8gJ8sjCABZtFG eZPjyLlFxBiRzD7UHNpc0RFGno34Vqkuzlnd46/Y/f2s8RK/oRap7HwyUjaSISSr 09XuZb7pK5M7kKcsrkmHMxlGZTRNDE9zY+jZhywJlNgG64O8D7pQdBlZ6GKd/5BM oGQ53VHR1mU5GDV7Yn0J0QJ0Emt1s7oRxhIQ4oyfWS/feevsmXGu8saWsnV8/A2P DSdbDsX3DSCbh3Y5K6tcR7HAuJCHuhk= -----END CERTIFICATE-----Generated at Mon May 6 01:59:46 2024 by rpki-client on console-ams.rpki-client.org