$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10cf0c36-09ba-3825-b837-8a8a6a10fa66.roa File: 10cf0c36-09ba-3825-b837-8a8a6a10fa66.roa (raw, json) Hash identifier: RkH/d07VZrjMOz3M/woHzis7dvkS7kArVErSA/jFiN8= Subject key identifier: 2F:6F:E3:9F:69:4F:53:E8:DC:56:23:59:E3:67:63:E4:87:EC:1E:DD Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E094F60B5357BD5974C3AB80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10cf0c36-09ba-3825-b837-8a8a6a10fa66.roa Signing time: Thu 14 Nov 2024 14:00:40 +0000 ROA not before: Thu 14 Nov 2024 14:00:40 +0000 ROA not after: Wed 12 Feb 2025 14:00:40 +0000 asID: 15169 IP address blocks: 108.177.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e0:94:f6:0b:53:57:bd:59:74:c3:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 14 14:00:40 2024 GMT Not After : Feb 12 14:00:40 2025 GMT Subject: CN=3a80749e-4c5f-4a73-9d1c-ddec41f25f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:30:10:0d:76:de:86:33:cc:0f:e7:4d:74:0f: 47:fd:1b:47:5c:36:65:e0:04:d2:de:98:d4:45:ad: 5e:6f:69:81:9e:cb:2e:de:91:c2:cb:e9:05:8f:81: a2:61:d9:0e:ed:90:6f:7b:2b:28:ac:4d:64:98:f5: 41:bb:7e:10:cb:a9:bf:f1:56:40:47:37:38:8b:9e: fd:6d:ca:5d:4d:04:fc:00:b5:1c:6c:70:4f:fb:e0: 87:51:4a:45:9c:92:5e:81:e8:3a:02:1b:48:f8:77: 25:4a:92:94:ee:7e:e6:6b:b7:ca:24:4c:70:58:a4: d6:ab:f4:b6:e3:17:8d:10:4d:0d:41:65:27:f2:23: 14:4e:88:a9:14:42:07:cc:4a:02:5b:4b:2e:75:39: af:7e:dd:ee:fa:da:cf:cd:99:8b:16:8e:c2:01:73: e3:56:28:69:f3:18:0c:dc:24:cc:60:df:3a:9f:97: e5:d4:6a:dd:40:e3:29:3f:0b:d4:70:59:c8:f0:8d: 84:55:a5:d3:81:7e:57:c5:48:b1:de:a9:d6:48:5b: d1:6e:14:04:27:a7:7e:81:df:dc:47:6d:3c:e5:9a: 7a:d7:c2:06:e5:82:b8:a7:02:1a:c3:c2:50:7e:f9: 99:93:28:9e:e1:76:c3:a2:45:dc:80:d6:3d:80:ef: 17:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:6F:E3:9F:69:4F:53:E8:DC:56:23:59:E3:67:63:E4:87:EC:1E:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10cf0c36-09ba-3825-b837-8a8a6a10fa66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:55:d6:72:0d:e7:86:13:ce:ce:c7:42:34:a5:39:7e:38:1f: 26:5f:f8:0e:37:d5:27:a5:06:64:e1:c6:ee:d0:8d:4b:ab:c5: 86:25:76:f0:2a:52:38:b9:84:ef:05:24:57:cc:25:d6:e9:11: 26:d6:d8:7d:f2:c4:9a:a5:f3:23:17:40:d7:1d:f4:23:dd:0a: df:7d:08:f0:4d:a7:38:ec:42:7b:04:6a:a1:d3:9f:19:43:42: 72:66:85:d9:17:b4:60:40:76:8c:04:f5:3a:32:40:23:26:b5: a9:50:2a:c7:41:5b:11:8c:5a:b0:3c:80:29:d6:d9:83:b7:df: 4e:1e:5b:23:02:9f:fd:ba:90:f6:9a:14:87:43:a7:ad:eb:02: 00:b3:ba:62:ea:ff:8a:56:b7:61:08:30:48:8a:b6:39:f4:f8: e6:c0:91:49:2b:89:f1:cd:71:3e:63:44:8c:7a:32:55:8b:2d: 6b:1a:36:b9:f2:1a:85:cd:4f:33:91:d5:89:77:3f:75:30:38: 5c:68:0b:6f:60:58:4e:10:a1:d1:a2:f7:5c:48:49:e5:9b:c6: 25:d8:61:0e:b2:56:b2:80:bc:72:cc:5d:b3:fe:33:09:64:94: 1a:67:46:89:40:79:a7:a1:e9:60:5c:e6:cb:15:9a:43:22:f4: 26:ff:81:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglPYLU1e9WXTDq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk M2E4MDc0OWUtNGM1Zi00YTczLTlkMWMtZGRlYzQxZjI1ZjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszAQDXbehjPMD+dNdA9H/RtHXDZl4ATS3pjU Ra1eb2mBnssu3pHCy+kFj4GiYdkO7ZBveysorE1kmPVBu34Qy6m/8VZARzc4i579 bcpdTQT8ALUcbHBP++CHUUpFnJJegeg6AhtI+HclSpKU7n7ma7fKJExwWKTWq/S2 4xeNEE0NQWUn8iMUToipFEIHzEoCW0sudTmvft3u+trPzZmLFo7CAXPjVihp8xgM 3CTMYN86n5fl1GrdQOMpPwvUcFnI8I2EVaXTgX5XxUix3qnWSFvRbhQEJ6d+gd/c R2085Zp618IG5YK4pwIaw8JQfvmZkyie4XbDokXcgNY9gO8XqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9v459pT1Po3FYjWeNnY+SH7B7dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTBjZjBjMzYtMDliYS0z ODI1LWI4MzctOGE4YTZhMTBmYTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLEOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKNV1nIN54YTzs7HQjSlOX44HyZf+A431SelBmThxu7QjUurxYYldvAq Uji5hO8FJFfMJdbpESbW2H3yxJql8yMXQNcd9CPdCt99CPBNpzjsQnsEaqHTnxlD QnJmhdkXtGBAdowE9ToyQCMmtalQKsdBWxGMWrA8gCnW2YO3304eWyMCn/26kPaa FIdDp63rAgCzumLq/4pWt2EIMEiKtjn0+ObAkUkrifHNcT5jRIx6MlWLLWsaNrny GoXNTzOR1Yl3P3UwOFxoC29gWE4QodGi91xISeWbxiXYYQ6yVrKAvHLMXbP+Mwlk lBpnRolAeaeh6WBc5ssVmkMi9Cb/gTA= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:50 2024 by rpki-client on console-ams.rpki-client.org