$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/06c5b376-79c2-38d5-9028-3935c65cc14b.roa File: 06c5b376-79c2-38d5-9028-3935c65cc14b.roa (raw, json) Hash identifier: Gxdu0IKIQgvDYR6rcPdtFcnkn+mSNj/hZr9EVVGwc8k= Subject key identifier: 8E:1E:C3:9E:BF:92:EF:C9:F6:92:F1:5B:2C:9F:7C:5C:70:83:26:6D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848BFEBCCFA87A023AD73AB01B0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/06c5b376-79c2-38d5-9028-3935c65cc14b.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 108.170.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:cc:fa:87:a0:23:ad:73:ab:01:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=b00eae4c-5c8a-40d2-aa8f-81de8bcef2ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:84:6f:57:33:78:9a:50:bb:bc:e3:94:37:c6: 1f:df:31:e4:41:92:ce:07:4b:4c:e6:49:1d:cb:49: 20:24:1c:e9:71:9a:dd:2c:84:bb:5b:37:40:21:bd: 18:b1:50:44:69:7c:81:72:2a:d5:a8:6d:64:23:be: 51:e7:a0:34:70:d4:43:cf:df:3c:71:68:3c:e5:52: 77:4e:94:a2:7b:89:70:b8:c0:73:b0:17:01:a4:5b: c6:69:47:f3:a4:56:83:b1:a0:54:c2:90:f0:e4:ce: e9:0a:08:ef:f2:c4:c7:45:7f:cf:61:ff:7b:e6:d1: c4:cb:bb:b9:44:be:0d:06:67:ae:8d:8b:be:29:98: 1d:68:39:09:44:1e:9c:39:84:77:1d:19:0a:04:09: b8:9d:a0:55:bb:49:fb:9a:84:0e:54:80:7b:ab:fd: e0:5d:18:42:bf:26:10:01:4e:e9:c2:81:cc:68:7b: 65:d2:2c:43:21:b7:99:71:a1:d5:08:fc:0e:c8:6a: ae:f4:5e:4d:65:76:91:15:4a:bf:be:5a:44:b1:2d: 71:6d:23:fe:b4:cd:6b:77:c8:8c:31:33:d7:7a:ff: 89:55:77:5e:61:6b:ab:71:85:52:03:d1:ca:7f:fc: 4f:06:d1:37:f8:20:ce:1d:b7:27:eb:cd:df:c4:a5: da:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1E:C3:9E:BF:92:EF:C9:F6:92:F1:5B:2C:9F:7C:5C:70:83:26:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/06c5b376-79c2-38d5-9028-3935c65cc14b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:03:81:03:05:5a:dd:6a:83:89:d0:16:f7:45:41:15:2c:98: 2b:fb:ad:65:9c:92:19:98:fe:e1:dc:95:34:89:d8:e3:cd:d9: 97:cb:2a:17:4c:53:98:fa:05:0c:f7:b9:f9:ee:75:92:a3:4c: 2b:92:2e:a5:2c:7f:cc:be:d5:cd:11:9f:c9:05:d8:24:5b:1d: 78:fa:b8:6d:fa:cc:af:5e:93:11:14:90:8c:f7:f3:52:11:96: 9a:d6:57:24:48:d6:c1:76:68:e2:ca:48:62:2c:97:d3:0d:82: 23:28:be:7f:33:0e:75:fb:c8:b5:cf:90:a7:90:e0:8d:48:23: 16:59:d8:d7:61:1e:e4:c5:5f:9a:98:99:dd:f3:4e:43:20:9e: c6:49:e6:4a:33:fc:ea:fe:33:60:09:7f:d4:a4:19:cc:f3:5a: d6:6d:80:b9:84:9b:ea:ef:6d:dc:76:2a:67:22:27:32:75:ae: c0:99:24:1f:54:84:f0:7e:c8:8e:1d:48:00:0f:7f:f5:e5:83: 6d:bb:a6:29:13:98:4c:1f:6f:d1:1f:f4:4e:d8:68:b5:f2:1a: 44:38:ba:96:9f:2f:2b:9e:22:8d:31:9a:07:19:f4:51:d1:36: a4:9a:1b:95:9c:5d:dc:f8:e9:10:44:15:ca:5d:09:22:db:bb: 87:7c:16:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/68z6h6AjrXOrAbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk YjAwZWFlNGMtNWM4YS00MGQyLWFhOGYtODFkZThiY2VmMmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIRvVzN4mlC7vOOUN8Yf3zHkQZLOB0tM5kkd y0kgJBzpcZrdLIS7WzdAIb0YsVBEaXyBcirVqG1kI75R56A0cNRDz988cWg85VJ3 TpSie4lwuMBzsBcBpFvGaUfzpFaDsaBUwpDw5M7pCgjv8sTHRX/PYf975tHEy7u5 RL4NBmeujYu+KZgdaDkJRB6cOYR3HRkKBAm4naBVu0n7moQOVIB7q/3gXRhCvyYQ AU7pwoHMaHtl0ixDIbeZcaHVCPwOyGqu9F5NZXaRFUq/vlpEsS1xbSP+tM1rd8iM MTPXev+JVXdeYWurcYVSA9HKf/xPBtE3+CDOHbcn683fxKXaJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4ew56/ku/J9pLxWyyffFxwgyZtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDZjNWIzNzYtNzljMi0z OGQ1LTkwMjgtMzkzNWM2NWNjMTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIDgQMFWt1qg4nQFvdFQRUsmCv7rWWckhmY/uHclTSJ2OPN2ZfLKhdM U5j6BQz3ufnudZKjTCuSLqUsf8y+1c0Rn8kF2CRbHXj6uG36zK9ekxEUkIz381IR lprWVyRI1sF2aOLKSGIsl9MNgiMovn8zDnX7yLXPkKeQ4I1IIxZZ2NdhHuTFX5qY md3zTkMgnsZJ5koz/Or+M2AJf9SkGczzWtZtgLmEm+rvbdx2KmciJzJ1rsCZJB9U hPB+yI4dSAAPf/Xlg227pikTmEwfb9Ef9E7YaLXyGkQ4upafLyueIo0xmgcZ9FHR NqSaG5WcXdz46RBEFcpdCSLbu4d8Fow= -----END CERTIFICATE-----Generated at Fri Mar 14 10:08:46 2025 by rpki-client