$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/12a7ede0-ed71-3b0f-9590-7ce9301699e2.roa File: 12a7ede0-ed71-3b0f-9590-7ce9301699e2.roa (raw, json) Hash identifier: Ox5Cnbu2d6w8PMVYHIVXsOAavGNKSrQ/x0eDkXVewog= Subject key identifier: 3E:1C:4B:48:5A:72:05:9F:D2:12:76:05:51:25:BD:4F:F4:22:B9:60 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA124B782F172A1016F81D0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/12a7ede0-ed71-3b0f-9590-7ce9301699e2.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 108.177.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:24:b7:82:f1:72:a1:01:6f:81:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=591dae11-a020-414c-9486-5292a1533210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e8:d4:37:6e:ec:1c:24:ed:34:27:f0:fc:40: 6d:47:e3:01:e4:ec:3d:67:cd:b0:e0:49:1b:9a:38: 6d:a4:5c:ff:88:a5:40:f2:eb:b3:13:64:f6:04:74: 77:4c:a5:91:cd:2f:fd:76:d6:cb:56:84:01:95:c2: 2c:04:d8:be:0a:46:a3:bc:92:4c:83:dd:ae:8b:4c: 9d:d2:b9:c3:6e:a3:81:c1:90:f7:72:77:39:69:9b: 79:c6:d1:1e:6c:0f:93:03:e4:12:78:f0:31:4c:98: 2d:b8:63:e6:69:18:f0:6a:5b:37:23:01:07:5e:4e: c0:44:0d:96:ee:1d:e2:d9:1f:2a:73:be:89:34:3b: 32:5a:a0:b1:6c:da:60:58:b3:b4:5b:83:78:17:02: 41:c6:61:2c:5a:60:fa:05:94:ca:1e:9f:51:f9:c1: 8a:0a:3b:b6:8c:6a:66:9a:c5:c3:b0:38:1c:4f:92: 69:1b:4e:6b:b4:d5:fb:3a:50:10:78:3b:33:52:b0: ed:2c:dc:ec:15:e2:c5:48:27:1d:2a:7d:49:de:f1: 46:ab:18:60:03:09:a4:02:03:e0:6e:0b:09:29:dd: cb:85:07:db:b9:72:6d:1e:16:af:62:b8:4e:e5:7c: d8:99:35:a4:e5:d8:11:2b:75:e1:3d:58:a9:6e:a6: 14:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:1C:4B:48:5A:72:05:9F:D2:12:76:05:51:25:BD:4F:F4:22:B9:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/12a7ede0-ed71-3b0f-9590-7ce9301699e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:d7:9c:b5:b2:25:68:a0:eb:74:9c:c5:46:5e:26:44:31:2f: b1:b2:c3:6d:f5:21:df:b1:c1:31:be:3f:a5:66:88:a3:00:9f: 55:c6:8d:b3:87:84:18:83:c1:f5:08:c7:6e:33:99:ac:e4:6f: 85:62:1c:89:57:34:af:3e:c1:3f:dc:05:9a:89:97:82:00:4a: db:0e:fc:53:d1:e1:13:33:2e:4c:87:72:3a:ab:90:57:3a:aa: de:63:62:87:6e:99:11:64:d8:a8:30:9b:bd:8b:f3:9c:85:ff: 0c:48:38:c1:54:aa:9e:b6:48:4e:0d:96:49:bf:cc:a6:23:29: e2:b7:7c:94:12:72:90:27:6a:2f:d3:f9:b7:92:34:26:62:b1: d5:ef:1e:f6:2e:af:39:d0:bc:e7:ce:ce:0f:8e:a2:b2:8f:2b: 0f:67:a0:f8:3d:22:73:33:a0:74:aa:3b:fc:e3:2c:0f:cd:0c: f1:da:48:a0:b5:56:9d:d8:b3:ad:12:07:15:98:3e:e2:4e:62: a2:da:5f:7e:9c:b4:7b:7f:9b:d8:a9:bf:09:b5:e0:cc:21:5e: 46:ff:76:79:8b:a0:bf:17:d9:8e:bf:ba:5f:73:99:8e:77:6c: 2e:a9:49:32:51:97:22:22:b4:7e:08:1f:94:3f:d9:8f:9e:6c: 83:b3:9a:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSS3gvFyoQFvgdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk NTkxZGFlMTEtYTAyMC00MTRjLTk0ODYtNTI5MmExNTMzMjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhujUN27sHCTtNCfw/EBtR+MB5Ow9Z82w4Ekb mjhtpFz/iKVA8uuzE2T2BHR3TKWRzS/9dtbLVoQBlcIsBNi+CkajvJJMg92ui0yd 0rnDbqOBwZD3cnc5aZt5xtEebA+TA+QSePAxTJgtuGPmaRjwals3IwEHXk7ARA2W 7h3i2R8qc76JNDsyWqCxbNpgWLO0W4N4FwJBxmEsWmD6BZTKHp9R+cGKCju2jGpm msXDsDgcT5JpG05rtNX7OlAQeDszUrDtLNzsFeLFSCcdKn1J3vFGqxhgAwmkAgPg bgsJKd3LhQfbuXJtHhavYrhO5XzYmTWk5dgRK3XhPVipbqYUDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4cS0hacgWf0hJ2BVElvU/0IrlgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTJhN2VkZTAtZWQ3MS0z YjBmLTk1OTAtN2NlOTMwMTY5OWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLFkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjXnLWyJWig63ScxUZeJkQxL7Gyw231Id+xwTG+P6VmiKMAn1XGjbOH hBiDwfUIx24zmazkb4ViHIlXNK8+wT/cBZqJl4IAStsO/FPR4RMzLkyHcjqrkFc6 qt5jYodumRFk2Kgwm72L85yF/wxIOMFUqp62SE4Nlkm/zKYjKeK3fJQScpAnai/T +beSNCZisdXvHvYurznQvOfOzg+OorKPKw9noPg9InMzoHSqO/zjLA/NDPHaSKC1 Vp3Ys60SBxWYPuJOYqLaX36ctHt/m9ipvwm14MwhXkb/dnmLoL8X2Y6/ul9zmY53 bC6pSTJRlyIitH4IH5Q/2Y+ebIOzmhQ= -----END CERTIFICATE-----Generated at Fri Apr 4 08:45:21 2025 by rpki-client