$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10b9f552-b9a4-3676-bead-6e1a7bef29bc.roa File: 10b9f552-b9a4-3676-bead-6e1a7bef29bc.roa (raw, json) Hash identifier: oeouJrKt4nyDVjuWFsW9oMN2iqgBTv1ikXmLCMcgx7c= Subject key identifier: 49:46:79:EF:43:E7:9A:A3:B1:B2:CA:C3:3A:E8:66:EA:DB:33:F9:93 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848BFEBB7B860E0C9CB7D0AB520 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10b9f552-b9a4-3676-bead-6e1a7bef29bc.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 108.170.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:b7:b8:60:e0:c9:cb:7d:0a:b5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=8b5dcbd6-571d-4702-9e82-c2b934a16641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bd:37:e6:48:8d:16:ab:b9:59:96:75:46:ff: 34:62:f4:1d:32:bd:23:11:32:b0:52:5d:2a:3c:c1: 7f:57:4b:86:31:13:ac:b3:e0:95:c4:09:d5:e1:02: 57:ac:1d:e4:57:f3:31:a4:9f:0c:eb:70:48:d8:2d: c9:27:07:0d:27:7f:30:bb:82:e4:e9:89:79:b8:00: 60:78:52:70:4a:0a:60:bf:ec:88:80:82:01:9a:ce: b7:82:c1:86:66:84:b8:35:ef:31:1a:9b:ad:2e:96: 02:54:7b:0b:20:98:41:98:80:86:e5:0d:69:47:84: e5:29:9e:21:02:2b:2a:9c:85:83:26:46:09:6e:a5: e9:c0:3c:3e:0b:22:65:25:a4:82:22:c0:16:3c:ca: d6:c9:14:df:5d:f4:68:2a:c6:09:4b:4a:5a:fa:3b: 1f:0a:24:bf:54:87:10:97:42:f6:03:44:c2:86:61: bb:45:c0:c5:4f:a2:14:f0:90:a1:0e:b3:15:bb:ce: b7:c1:52:a8:85:4c:44:f2:bf:ea:bc:cc:12:40:9c: 21:c6:af:37:00:bb:46:23:58:58:f1:f0:55:a5:f0: ea:45:81:70:65:c7:0e:23:84:0d:ef:ca:0d:67:37: 27:cc:e4:ab:47:7b:1d:4b:94:8c:69:f7:39:08:f3: 9b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:46:79:EF:43:E7:9A:A3:B1:B2:CA:C3:3A:E8:66:EA:DB:33:F9:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10b9f552-b9a4-3676-bead-6e1a7bef29bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:92:46:45:43:58:52:c7:92:a0:94:38:6c:9e:a2:09:b1:ab: 3e:8b:ba:5e:ae:0a:30:d4:0f:a8:22:b6:3a:9d:09:c7:1b:20: 48:ee:cd:ef:cf:2c:2a:b1:8a:b2:45:1f:35:86:87:b4:37:b9: d9:02:e1:8d:9b:d9:0c:d1:ba:3f:3c:c2:c2:dc:44:06:77:b9: 1f:d2:ce:0e:1c:ed:ed:de:89:72:72:4d:18:3c:3e:57:b2:30: 44:f5:d9:9a:e3:e0:d7:65:0d:e4:56:f9:69:16:5e:eb:b8:2e: 60:26:c1:ec:0b:0d:1f:8d:ce:80:70:51:4b:5b:73:56:84:ae: 2c:0c:34:c2:b4:a3:fc:e4:9e:2e:1b:34:ca:47:4a:e1:3b:bc: be:77:ff:47:aa:28:41:ce:f2:24:6b:53:da:75:47:63:60:78: 42:77:80:f7:9c:d2:02:26:cb:2a:65:53:cf:fe:9d:e5:d3:04: 92:9a:1d:95:16:4b:6a:0e:b0:bd:e8:d3:a0:6e:fa:65:fd:9a: b6:03:5c:48:96:34:20:84:09:7c:03:12:7c:93:f5:6f:ea:d3: 74:fe:79:36:53:96:49:1d:a8:6f:47:26:72:91:3b:d1:86:02: 7b:5a:1a:65:04:95:e7:ed:ff:3b:e8:b3:37:cc:c1:8b:a8:6c: c2:5d:9d:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/67e4YODJy30KtSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk OGI1ZGNiZDYtNTcxZC00NzAyLTllODItYzJiOTM0YTE2NjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyL035kiNFqu5WZZ1Rv80YvQdMr0jETKwUl0q PMF/V0uGMROss+CVxAnV4QJXrB3kV/MxpJ8M63BI2C3JJwcNJ38wu4Lk6Yl5uABg eFJwSgpgv+yIgIIBms63gsGGZoS4Ne8xGputLpYCVHsLIJhBmICG5Q1pR4TlKZ4h AisqnIWDJkYJbqXpwDw+CyJlJaSCIsAWPMrWyRTfXfRoKsYJS0pa+jsfCiS/VIcQ l0L2A0TChmG7RcDFT6IU8JChDrMVu863wVKohUxE8r/qvMwSQJwhxq83ALtGI1hY 8fBVpfDqRYFwZccOI4QN78oNZzcnzOSrR3sdS5SMafc5CPObfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElGee9D55qjsbLKwzroZurbM/mTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTBiOWY1NTItYjlhNC0z Njc2LWJlYWQtNmUxYTdiZWYyOWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIeSRkVDWFLHkqCUOGyeogmxqz6Lul6uCjDUD6gitjqdCccbIEjuze/P LCqxirJFHzWGh7Q3udkC4Y2b2QzRuj88wsLcRAZ3uR/Szg4c7e3eiXJyTRg8Pley MET12Zrj4NdlDeRW+WkWXuu4LmAmwewLDR+NzoBwUUtbc1aEriwMNMK0o/zkni4b NMpHSuE7vL53/0eqKEHO8iRrU9p1R2NgeEJ3gPec0gImyyplU8/+neXTBJKaHZUW S2oOsL3o06Bu+mX9mrYDXEiWNCCECXwDEnyT9W/q03T+eTZTlkkdqG9HJnKRO9GG AntaGmUEleft/zvoszfMwYuobMJdnfQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:23 2025 by rpki-client