$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b544946f-c017-317e-b382-afaea633b1ab.roa File: b544946f-c017-317e-b382-afaea633b1ab.roa (raw, json) Hash identifier: CSEg39PZEMtN4HwSVh/0ShxNtc9jENgtF3wolqhvoWg= Subject key identifier: 54:F6:17:E1:2D:0B:DD:C0:B3:79:3C:E0:A1:20:09:2C:12:F7:E7:38 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848BFEBD4FE686A0C91B780D380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b544946f-c017-317e-b382-afaea633b1ab.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 107.167.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:d4:fe:68:6a:0c:91:b7:80:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=98d7abd3-da63-478a-9d19-a919658bd132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3f:76:bd:bd:cc:4d:e1:37:e9:4b:f4:e8:8d: 3e:2f:4a:b5:93:02:aa:d1:24:7f:3f:d0:ea:98:48: 75:72:75:50:e8:02:cc:92:11:0f:63:af:d1:bd:8d: ed:a8:83:82:f5:86:0e:6a:5b:fe:08:12:13:7c:19: 24:ec:df:54:66:9c:a9:50:8c:8a:04:d2:10:0b:b4: 3b:7b:1d:d3:5e:56:09:39:d1:d6:c3:7c:c2:ec:80: 24:93:fb:41:b5:0e:bd:c2:c1:c0:00:df:67:4a:76: 8f:53:73:bf:e7:b3:be:81:b8:5d:88:bb:cc:95:4a: 0a:43:40:d1:82:e7:ca:a0:48:da:d5:6c:7e:79:3f: a4:ad:2a:8b:e2:e7:c5:89:8b:4b:30:df:e7:e5:22: 60:bd:5d:bc:a7:7e:d6:1d:51:20:c2:c8:21:dc:ea: 49:9e:6c:e5:b1:b5:1f:42:a8:1f:2c:e1:29:0c:b5: b7:73:97:c9:52:11:cd:ed:e3:9d:14:a5:d0:ba:3c: a9:08:a7:10:b9:57:87:d4:0c:a1:e6:2f:f8:e3:a2: 68:1c:47:a5:b8:62:b0:d9:04:74:77:78:f6:a3:c9: c7:2e:67:d4:4e:0f:d7:d8:d7:e6:73:71:fb:81:39: e7:88:04:8e:d8:36:a2:4f:dc:6d:f9:92:87:68:ef: 3e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F6:17:E1:2D:0B:DD:C0:B3:79:3C:E0:A1:20:09:2C:12:F7:E7:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b544946f-c017-317e-b382-afaea633b1ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 107.167.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:0b:b2:1c:87:17:95:3e:e5:39:20:ce:1a:5a:4f:bd:7b:a3: 1c:23:be:b4:4b:7e:22:a3:ed:76:ce:11:40:57:46:80:36:88: 5c:3e:7e:54:43:3c:86:74:a4:a1:ba:5a:d7:38:05:58:d5:9a: 2f:c9:64:4a:6a:00:a2:7a:6f:9b:0e:40:af:7c:2a:a1:42:98: af:87:e1:e5:82:cb:15:c6:65:fb:1b:e6:88:f2:54:ca:80:07: 73:86:6b:18:29:1e:81:b1:72:0d:1f:d0:55:14:21:99:98:27: 2b:3c:1a:ed:ea:ff:27:c1:49:5a:59:30:67:29:76:36:2f:69: 2e:7d:a9:33:54:2b:3e:bd:f8:b8:9f:cb:5c:d7:e4:d6:2c:ad: ac:61:77:c3:23:90:0b:1d:ab:e9:52:9b:e8:6f:b6:b8:57:b0: ce:0f:76:32:ed:43:51:28:8b:30:e1:e3:66:b5:e7:e0:5a:c1: a5:7b:56:a9:2b:25:9b:8f:a2:b6:cd:2d:b5:14:56:2d:b9:a1: db:85:1c:a7:7b:79:d8:0a:e4:90:24:0f:7a:ed:7b:1c:00:fe: 2c:54:9a:e6:d1:03:cb:84:a4:74:04:74:52:f4:e5:3f:bb:22: e0:48:63:af:d0:2b:9a:91:ce:03:6c:37:53:e6:57:bb:ae:87: 43:00:c0:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/69T+aGoMkbeA04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk OThkN2FiZDMtZGE2My00NzhhLTlkMTktYTkxOTY1OGJkMTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgD92vb3MTeE36Uv06I0+L0q1kwKq0SR/P9Dq mEh1cnVQ6ALMkhEPY6/RvY3tqIOC9YYOalv+CBITfBkk7N9UZpypUIyKBNIQC7Q7 ex3TXlYJOdHWw3zC7IAkk/tBtQ69wsHAAN9nSnaPU3O/57O+gbhdiLvMlUoKQ0DR gufKoEja1Wx+eT+krSqL4ufFiYtLMN/n5SJgvV28p37WHVEgwsgh3OpJnmzlsbUf QqgfLOEpDLW3c5fJUhHN7eOdFKXQujypCKcQuVeH1Ayh5i/446JoHEeluGKw2QR0 d3j2o8nHLmfUTg/X2Nfmc3H7gTnniASO2DaiT9xt+ZKHaO8+vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFT2F+EtC93As3k84KEgCSwS9+c4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjU0NDk0NmYtYzAxNy0z MTdlLWIzODItYWZhZWE2MzNiMWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa6eyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwLshyHF5U+5TkgzhpaT717oxwjvrRLfiKj7XbOEUBXRoA2iFw+flRD PIZ0pKG6Wtc4BVjVmi/JZEpqAKJ6b5sOQK98KqFCmK+H4eWCyxXGZfsb5ojyVMqA B3OGaxgpHoGxcg0f0FUUIZmYJys8Gu3q/yfBSVpZMGcpdjYvaS59qTNUKz69+Lif y1zX5NYsraxhd8MjkAsdq+lSm+hvtrhXsM4PdjLtQ1EoizDh42a15+BawaV7Vqkr JZuPorbNLbUUVi25oduFHKd7edgK5JAkD3rtexwA/ixUmubRA8uEpHQEdFL05T+7 IuBIY6/QK5qRzgNsN1PmV7uuh0MAwNg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:39 2025 by rpki-client