$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48cea4f9-e08d-385c-9542-f4ec8f6227d2.roa File: 48cea4f9-e08d-385c-9542-f4ec8f6227d2.roa (raw, json) Hash identifier: IPe/9k7dXI3wCC3w3S4kpPVzhts9pUdKer/fhDM+L2w= Subject key identifier: BF:84:D8:F5:C8:53:18:C7:BE:0F:CA:D8:EE:E3:B2:17:92:F6:4E:F4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E094DEB5E9F698A6B6A84000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48cea4f9-e08d-385c-9542-f4ec8f6227d2.roa Signing time: Thu 14 Nov 2024 14:00:40 +0000 ROA not before: Thu 14 Nov 2024 14:00:40 +0000 ROA not after: Wed 12 Feb 2025 14:00:40 +0000 asID: 396982 IP address blocks: 108.170.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e0:94:de:b5:e9:f6:98:a6:b6:a8:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 14 14:00:40 2024 GMT Not After : Feb 12 14:00:40 2025 GMT Subject: CN=0b2f8294-b03f-49bb-b5c1-1eff0029fd99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b2:d8:94:38:e0:b2:9d:f8:af:b2:10:aa:37: a8:db:62:3e:0c:24:59:84:d5:17:48:ab:50:36:2a: 71:da:6b:76:5d:04:49:a9:76:ae:13:e8:77:d4:62: 68:f4:8f:9c:31:73:50:b9:c1:6b:d0:b9:71:e5:25: 08:a1:dd:83:8a:f9:80:f6:9a:d6:0d:cf:70:cc:73: 3d:34:ed:73:b3:6d:08:a0:92:85:d6:7f:4c:61:e1: 38:05:bd:5e:ed:c1:9c:86:63:e5:26:17:a1:8a:6f: 75:27:4f:18:16:c3:55:2e:c5:8b:8a:3b:ef:69:eb: 85:e1:87:db:79:24:c6:bf:29:5e:0c:eb:47:06:b7: 72:33:70:e9:ca:7d:f8:3e:81:a6:3f:b4:30:29:a7: a5:a5:e5:24:4a:4d:5e:b2:c5:59:e9:6a:76:ea:53: a1:1f:8c:83:99:ff:2f:68:e0:f9:60:5f:b9:09:2b: 85:12:e2:f8:ca:38:0f:0d:5d:13:9a:10:a5:d8:f9: de:97:49:c2:ab:b8:dd:0e:0b:78:37:dc:2d:02:fd: 90:3d:f1:29:c8:ef:dd:7c:2e:ec:f2:55:ab:7a:84: 2b:fd:41:7a:1e:ba:79:81:8a:99:4a:43:61:b8:6d: 68:e7:74:29:73:ba:96:61:e5:0c:d6:90:42:15:61: 9e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:84:D8:F5:C8:53:18:C7:BE:0F:CA:D8:EE:E3:B2:17:92:F6:4E:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48cea4f9-e08d-385c-9542-f4ec8f6227d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:9e:e2:98:80:32:f8:9d:2b:cc:96:14:c6:c5:74:8e:b7:be: 09:d1:39:6f:36:e4:50:13:a4:28:d8:fb:41:af:a9:ac:c6:59: c4:21:3c:28:ac:b3:ba:2b:a6:7d:d9:7f:40:86:4f:3d:57:61: e8:e9:18:d8:9d:33:21:c5:1a:7f:e8:db:23:14:09:78:6f:66: 80:0b:41:76:c0:90:0a:a9:2a:a5:1d:55:9d:f8:e9:d6:9c:39: c8:d8:4c:89:e6:3a:30:ce:d3:bc:0c:bc:31:6c:1b:b6:69:ab: 87:a9:53:df:73:85:5b:d8:1e:48:c0:65:11:ca:74:d1:7d:8f: aa:46:8c:a3:3c:46:8c:59:0c:d3:38:9a:23:e6:60:3c:cf:74: 8e:31:32:c2:1e:09:2b:85:1a:5d:f6:7b:1a:da:bc:aa:1f:0d: 9c:9f:7b:f9:4c:73:0b:91:b5:03:53:d3:cd:f9:82:0d:1e:fe: c4:69:8b:89:c5:c3:a0:27:e7:28:71:fd:00:bc:ca:e2:ed:58: 00:e7:6c:b0:e4:c4:2f:22:a7:c0:20:71:88:2d:ed:ef:33:ab: 0c:8d:3a:c0:74:ed:30:8b:bd:0d:d5:9c:2f:dc:14:e0:29:cd: 3a:62:55:f3:6d:df:f7:30:e4:37:e9:03:ca:9e:c5:6a:11:b6: 8f:23:d9:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglN616faYpraoQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk MGIyZjgyOTQtYjAzZi00OWJiLWI1YzEtMWVmZjAwMjlmZDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7LYlDjgsp34r7IQqjeo22I+DCRZhNUXSKtQ Nipx2mt2XQRJqXauE+h31GJo9I+cMXNQucFr0Llx5SUIod2DivmA9prWDc9wzHM9 NO1zs20IoJKF1n9MYeE4Bb1e7cGchmPlJhehim91J08YFsNVLsWLijvvaeuF4Yfb eSTGvyleDOtHBrdyM3Dpyn34PoGmP7QwKaelpeUkSk1essVZ6Wp26lOhH4yDmf8v aOD5YF+5CSuFEuL4yjgPDV0TmhCl2Pnel0nCq7jdDgt4N9wtAv2QPfEpyO/dfC7s 8lWreoQr/UF6Hrp5gYqZSkNhuG1o53Qpc7qWYeUM1pBCFWGe6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+E2PXIUxjHvg/K2O7jsheS9k70MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDhjZWE0ZjktZTA4ZC0z ODVjLTk1NDItZjRlYzhmNjIyN2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACue4piAMvidK8yWFMbFdI63vgnROW825FATpCjY+0GvqazGWcQhPCis s7orpn3Zf0CGTz1XYejpGNidMyHFGn/o2yMUCXhvZoALQXbAkAqpKqUdVZ346dac OcjYTInmOjDO07wMvDFsG7Zpq4epU99zhVvYHkjAZRHKdNF9j6pGjKM8RoxZDNM4 miPmYDzPdI4xMsIeCSuFGl32exravKofDZyfe/lMcwuRtQNT0835gg0e/sRpi4nF w6An5yhx/QC8yuLtWADnbLDkxC8ip8AgcYgt7e8zqwyNOsB07TCLvQ3VnC/cFOAp zTpiVfNt3/cw5DfpA8qexWoRto8j2Qw= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:52 2024 by rpki-client on console-ams.rpki-client.org