$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ec87e182-1298-3a9f-b8ca-3428281070d9.roa File: ec87e182-1298-3a9f-b8ca-3428281070d9.roa (raw, json) Hash identifier: Q93aa3UX7g3GmffGDHx1Y7y/FVxfWO+ZifJ14wsEvl8= Subject key identifier: BE:0E:22:5F:61:33:2C:2D:67:8C:CE:DA:FE:BA:92:AE:8A:79:0A:3E Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F43285848F22C6BAEAB852A33FDFA61C0 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ec87e182-1298-3a9f-b8ca-3428281070d9.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 62651 IP address blocks: 108.171.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:6b:ae:ab:85:2a:33:fd:fa:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=6dbe5442-38b8-4618-82ca-bdfcc7a53b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f1:4c:f6:aa:b4:66:90:6c:c9:4b:54:1b:28: 11:d6:82:1b:0c:6f:02:f2:a9:cf:29:69:ae:0b:49: 3a:c9:07:7b:b3:59:69:ff:49:56:cb:ed:96:93:3f: a0:da:3f:d4:81:87:4a:17:5a:13:f5:1b:73:ce:1a: 89:f2:f8:73:0a:81:6c:e5:0a:aa:a1:71:1e:af:2c: c8:41:62:8d:f7:50:ac:27:1a:81:3f:d5:1a:b2:25: fa:07:69:07:02:57:d0:b9:5e:07:35:38:05:85:4d: 99:28:05:1e:77:2e:fb:8f:c9:3f:d8:c4:75:37:03: 97:75:3b:89:0b:6c:36:91:aa:c1:c6:47:a4:f0:b8: 84:92:16:2a:c9:37:ad:2d:73:86:b2:38:71:64:45: 09:ff:c4:c5:12:06:7b:63:a2:30:be:a0:21:91:5a: 96:fd:b3:8f:88:1a:29:89:e6:4a:cd:d3:79:7d:50: 9a:86:ac:5f:51:e1:40:1d:88:4e:7e:98:1c:d7:89: d6:8d:4e:d2:db:b4:b6:3b:02:22:cc:84:0c:1f:7a: 48:59:83:54:e4:7c:b3:3d:c0:ff:fa:c5:d9:f9:55: c3:89:17:bf:6d:00:19:1d:ed:f2:d5:30:f9:15:55: 4d:71:ce:dd:7b:8d:e8:27:9c:27:63:50:da:80:14: 02:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:0E:22:5F:61:33:2C:2D:67:8C:CE:DA:FE:BA:92:AE:8A:79:0A:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ec87e182-1298-3a9f-b8ca-3428281070d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 108.171.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:d1:f4:75:a5:f5:1c:07:5b:6d:52:6f:23:d3:8a:0d:55:65: 2d:fd:88:9c:1e:5a:b0:b2:9a:fa:32:81:24:bb:b2:df:fd:2d: 26:13:3b:13:e5:42:6b:f0:48:ae:c7:a2:c0:46:13:44:73:49: b9:95:c5:80:2c:69:0b:de:64:26:b9:62:a7:e5:b4:6d:2c:0e: c3:52:b2:01:c2:c8:0d:d4:4a:69:65:9b:5d:94:58:c9:aa:3d: 04:f8:43:c6:61:f2:92:fd:4c:78:08:3b:ca:ee:0f:33:98:f8: f2:8c:4c:36:fa:bc:48:76:6d:71:bf:07:7f:df:56:14:a8:28: 45:fd:36:9c:77:41:1e:80:7c:f1:8c:01:fd:82:a4:3d:ab:8d: 43:38:12:cd:61:3c:eb:74:f8:b1:32:6a:05:92:f9:bf:cd:69: fb:dc:7f:45:bc:b2:a5:fd:72:bb:5b:3b:b9:49:03:8f:f2:d6: 89:3e:f6:b2:50:58:fe:88:1e:3c:1b:66:6b:7a:78:22:e0:ae: fc:50:b1:d6:1f:38:46:d6:13:4c:1f:c6:d3:ec:5e:4b:0a:18: 7c:7d:5a:d2:7f:2d:1d:4b:f6:b3:ab:38:62:b6:24:da:fe:c0: 7c:a6:89:99:26:b6:93:93:42:3c:59:00:73:47:0c:dc:db:1f: 54:62:9c:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLGuuq4UqM/36YcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk NmRiZTU0NDItMzhiOC00NjE4LTgyY2EtYmRmY2M3YTUzYjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vFM9qq0ZpBsyUtUGygR1oIbDG8C8qnPKWmu C0k6yQd7s1lp/0lWy+2Wkz+g2j/UgYdKF1oT9RtzzhqJ8vhzCoFs5QqqoXEeryzI QWKN91CsJxqBP9UasiX6B2kHAlfQuV4HNTgFhU2ZKAUedy77j8k/2MR1NwOXdTuJ C2w2karBxkek8LiEkhYqyTetLXOGsjhxZEUJ/8TFEgZ7Y6IwvqAhkVqW/bOPiBop ieZKzdN5fVCahqxfUeFAHYhOfpgc14nWjU7S27S2OwIizIQMH3pIWYNU5HyzPcD/ +sXZ+VXDiRe/bQAZHe3y1TD5FVVNcc7de43oJ5wnY1DagBQC7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4OIl9hMywtZ4zO2v66kq6KeQo+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZWM4N2UxODItMTI5OC0z YTlmLWI4Y2EtMzQyODI4MTA3MGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKtmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjR9HWl9RwHW21SbyPTig1VZS39iJweWrCymvoygSS7st/9LSYTOxPl QmvwSK7HosBGE0RzSbmVxYAsaQveZCa5YqfltG0sDsNSsgHCyA3USmllm12UWMmq PQT4Q8Zh8pL9THgIO8ruDzOY+PKMTDb6vEh2bXG/B3/fVhSoKEX9Npx3QR6AfPGM Af2CpD2rjUM4Es1hPOt0+LEyagWS+b/Nafvcf0W8sqX9crtbO7lJA4/y1ok+9rJQ WP6IHjwbZmt6eCLgrvxQsdYfOEbWE0wfxtPsXksKGHx9WtJ/LR1L9rOrOGK2JNr+ wHymiZkmtpOTQjxZAHNHDNzbH1RinCI= -----END CERTIFICATE-----Generated at Sun Apr 6 12:51:16 2025 by rpki-client