$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5398fed9-f8e8-360b-93b6-176a2eaef9c2.roa File: 5398fed9-f8e8-360b-93b6-176a2eaef9c2.roa (raw, json) Hash identifier: WlW2rVjo9Nbd+6JEdmbaJZw9qeVvqS9eGjVThOnPeM0= Subject key identifier: 0E:7D:C4:9D:4D:3B:AF:48:FC:9C:5F:90:81:A2:68:72:8D:03:27:3D Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848AF2B9CB96AF66906A4CDFC00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5398fed9-f8e8-360b-93b6-176a2eaef9c2.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 206728 IP address blocks: 108.171.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:9c:b9:6a:f6:69:06:a4:cd:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=b1e73b0a-9c54-46d4-81a1-08802fe4a1dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3f:b5:8b:a6:a7:02:05:31:65:7b:81:e2:52: 43:f4:95:06:39:52:03:cf:fe:16:66:ed:57:8b:3e: a9:4d:3b:1b:ef:d8:5d:2e:fa:9c:96:33:63:01:87: e8:f3:5e:78:69:02:07:34:59:7c:7c:f9:44:77:95: ff:bf:3e:42:9b:de:d1:87:1d:81:05:af:51:d1:ff: 3c:03:89:b1:b4:33:59:a7:70:3b:4a:b3:0a:98:e4: da:82:bb:d6:42:54:bb:fd:87:7e:af:9b:8a:e8:a3: 12:8b:14:ac:e1:0f:26:3c:be:51:64:59:17:f8:10: f3:d8:06:5e:ba:f2:72:ad:ca:da:73:9c:56:0b:22: 24:d0:96:05:1b:f5:06:a2:8b:b6:a2:47:8f:b4:38: 5f:cd:6f:4b:f1:8c:e8:5b:53:cf:c9:d8:88:34:4e: 4b:8e:2b:8d:68:85:7d:43:91:8a:13:20:8e:4b:93: dc:17:c5:c2:fa:cc:ef:f1:62:75:5b:89:c8:6a:35: 98:71:e9:9c:fe:18:5a:a6:c6:c0:09:d3:41:ea:5e: 5e:35:76:64:11:ab:99:69:b2:aa:51:26:45:9d:80: 72:92:39:e4:ca:47:bf:a4:1a:88:0a:26:fd:70:00: 0f:5c:26:38:27:c0:c0:3c:4f:25:0d:4f:5d:7d:96: 42:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:7D:C4:9D:4D:3B:AF:48:FC:9C:5F:90:81:A2:68:72:8D:03:27:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5398fed9-f8e8-360b-93b6-176a2eaef9c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 108.171.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:af:65:d2:38:8e:51:a7:23:a2:ef:fe:bf:04:a2:6a:e0:b0: 27:77:5e:11:bd:a7:6e:dc:a3:ee:5b:2f:10:4b:2b:6f:af:f7: 95:e6:52:e2:99:02:85:5a:61:ae:0a:5e:27:28:b5:a2:db:db: 90:8f:19:f4:7b:01:1b:4f:f5:1c:3b:16:94:c5:a9:43:67:b0: c7:9e:11:30:92:9f:80:b2:0e:6b:f0:35:2c:ae:ae:ed:b4:d3: 54:31:b2:cc:19:82:d5:dc:69:cb:68:bf:5f:c8:52:40:2c:8c: 4a:2c:b6:ee:8c:e5:3c:56:e6:59:47:85:d5:44:87:78:0e:15: 9a:16:44:4c:d8:3a:66:34:d4:b6:27:99:a0:fc:c5:a7:98:a1: 93:61:40:b8:d4:25:2e:e0:c4:b0:24:c2:79:3c:16:cc:a9:69: a5:49:5b:38:c3:12:e4:ad:03:83:f2:75:40:22:c2:b5:bf:42: eb:bb:67:04:2d:eb:1d:fb:a5:11:4e:a6:a1:b5:82:36:8b:99: 9d:8d:a6:c1:45:67:ef:a5:28:46:df:0b:3e:f8:77:8d:9a:e7: aa:aa:3c:fd:ae:90:aa:9c:b1:c4:d7:a3:a2:46:cf:89:46:0a: 9e:02:b0:d3:72:c9:90:ac:a8:42:a0:86:c2:f8:b4:da:75:21: a6:32:c1:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK5y5avZpBqTN/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk YjFlNzNiMGEtOWM1NC00NmQ0LTgxYTEtMDg4MDJmZTRhMWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD+1i6anAgUxZXuB4lJD9JUGOVIDz/4WZu1X iz6pTTsb79hdLvqcljNjAYfo8154aQIHNFl8fPlEd5X/vz5Cm97Rhx2BBa9R0f88 A4mxtDNZp3A7SrMKmOTagrvWQlS7/Yd+r5uK6KMSixSs4Q8mPL5RZFkX+BDz2AZe uvJyrcrac5xWCyIk0JYFG/UGoou2okePtDhfzW9L8YzoW1PPydiINE5LjiuNaIV9 Q5GKEyCOS5PcF8XC+szv8WJ1W4nIajWYcemc/hhapsbACdNB6l5eNXZkEauZabKq USZFnYBykjnkyke/pBqICib9cAAPXCY4J8DAPE8lDU9dfZZCZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA59xJ1NO69I/JxfkIGiaHKNAyc9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNTM5OGZlZDktZjhlOC0z NjBiLTkzYjYtMTc2YTJlYWVmOWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKsjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWvZdI4jlGnI6Lv/r8EomrgsCd3XhG9p27co+5bLxBLK2+v95XmUuKZ AoVaYa4KXicotaLb25CPGfR7ARtP9Rw7FpTFqUNnsMeeETCSn4CyDmvwNSyuru20 01QxsswZgtXcactov1/IUkAsjEostu6M5TxW5llHhdVEh3gOFZoWREzYOmY01LYn maD8xaeYoZNhQLjUJS7gxLAkwnk8FsypaaVJWzjDEuStA4PydUAiwrW/Quu7ZwQt 6x37pRFOpqG1gjaLmZ2NpsFFZ++lKEbfCz74d42a56qqPP2ukKqcscTXo6JGz4lG Cp4CsNNyyZCsqEKghsL4tNp1IaYywTI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:27 2025 by rpki-client