$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48e52871-1ad8-3c20-84eb-f90a383a24be.roa File: 48e52871-1ad8-3c20-84eb-f90a383a24be.roa (raw, json) Hash identifier: LR+3IFiXxXNflsNEMMf1tva5hvzeUK2rab2AbEN9+nQ= Subject key identifier: 78:FA:40:C8:75:0B:77:9B:3B:A7:B1:24:4A:AA:C8:F9:10:CE:68:42 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848BFEBB4C996A4878365536680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48e52871-1ad8-3c20-84eb-f90a383a24be.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 15169 IP address blocks: 108.177.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:b4:c9:96:a4:87:83:65:53:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=91f7407f-63bf-41de-8a5e-d221d194fa8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:36:ea:b3:06:bd:6b:b3:8e:68:f7:57:4f:4f: 9e:58:3d:36:4f:60:56:c9:8f:8f:e5:26:54:79:43: 8e:c8:c0:8f:9f:f6:bf:10:1f:06:bb:63:8a:ad:e5: 8e:d5:eb:7c:d1:cb:f3:d6:ca:f3:b1:02:c9:f8:97: d9:34:d5:a8:9e:19:26:d3:ac:8f:dc:3f:5f:a8:53: 1d:33:f3:d6:b0:1c:0b:c2:e3:d9:4c:1e:68:67:ca: ac:4e:43:9d:72:84:53:20:b9:7d:f2:79:e4:00:8b: ff:4e:03:85:a0:6a:6b:d6:ea:27:b3:55:82:18:83: 34:1a:d0:16:06:71:98:14:ca:cc:ad:4f:ae:ee:a5: 92:6e:de:40:d2:88:12:9b:55:71:77:46:51:fa:37: 01:fd:62:72:17:4a:9c:7d:78:d6:11:d4:ce:33:bf: a0:6c:48:35:d4:50:d9:fd:55:57:72:c0:71:d8:05: ba:fb:3f:c2:b4:cc:d2:5d:af:52:b9:8b:b1:b2:f1: a6:21:cc:0b:bc:88:39:45:8e:27:83:ea:31:b8:d9: 47:ce:6a:e6:e7:12:4c:1e:1c:64:d2:72:9a:fc:5b: 79:0c:cc:f4:f1:df:4b:07:62:1b:82:0a:e0:de:4f: 07:74:3a:c8:42:01:d0:ff:5b:6b:9f:31:ec:8f:91: 5c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:FA:40:C8:75:0B:77:9B:3B:A7:B1:24:4A:AA:C8:F9:10:CE:68:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48e52871-1ad8-3c20-84eb-f90a383a24be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:16:69:9d:7e:1d:79:5e:59:98:8e:4f:cb:f4:d5:9e:7b:17: cb:a1:c7:3b:59:f5:d6:94:9a:35:5b:e5:0c:9b:7e:a6:dc:76: e7:4d:cd:cd:79:45:0f:8f:51:19:df:6e:fe:44:31:9d:26:c0: fb:56:f1:76:88:af:b1:02:7e:f9:fc:9d:65:b1:5f:cf:8f:07: 55:2c:35:31:78:ef:a3:b8:52:20:58:b8:72:6d:19:02:13:2a: c1:d0:2d:74:94:30:64:20:f5:de:e7:c6:da:9d:40:c4:31:c8: 44:a1:87:d1:c6:d0:ad:8f:1d:da:f5:a8:7f:14:56:b7:94:ff: b2:7f:6e:92:01:d0:47:0a:b9:d3:3b:fb:cc:b8:c2:88:13:14: 4a:23:97:9e:f6:9c:4c:3b:d9:02:1f:42:2e:e6:c4:dc:35:46: 94:fd:8c:83:bc:74:a2:71:fc:c6:d7:61:00:71:c5:86:7e:36: 74:c8:4b:55:e7:9b:1e:bd:00:ef:7f:d3:70:e9:36:e6:31:a1: f9:49:cb:62:10:99:37:a1:8a:c7:26:1b:78:9b:cb:12:ad:6a: 3d:b6:d2:ce:73:98:ca:80:d0:e9:e1:35:a4:ac:46:29:cd:95: 54:8c:f1:5d:d5:23:56:e4:3d:f6:2a:f7:32:4f:4b:5a:07:c5: 31:1e:ad:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/67TJlqSHg2VTZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk OTFmNzQwN2YtNjNiZi00MWRlLThhNWUtZDIyMWQxOTRmYThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzbqswa9a7OOaPdXT0+eWD02T2BWyY+P5SZU eUOOyMCPn/a/EB8Gu2OKreWO1et80cvz1srzsQLJ+JfZNNWonhkm06yP3D9fqFMd M/PWsBwLwuPZTB5oZ8qsTkOdcoRTILl98nnkAIv/TgOFoGpr1uons1WCGIM0GtAW BnGYFMrMrU+u7qWSbt5A0ogSm1Vxd0ZR+jcB/WJyF0qcfXjWEdTOM7+gbEg11FDZ /VVXcsBx2AW6+z/CtMzSXa9SuYuxsvGmIcwLvIg5RY4ng+oxuNlHzmrm5xJMHhxk 0nKa/Ft5DMz08d9LB2Ibggrg3k8HdDrIQgHQ/1trnzHsj5Fc5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHj6QMh1C3ebO6exJEqqyPkQzmhCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDhlNTI4NzEtMWFkOC0z YzIwLTg0ZWItZjkwYTM4M2EyNGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLFiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0WaZ1+HXleWZiOT8v01Z57F8uhxztZ9daUmjVb5QybfqbcdudNzc15 RQ+PURnfbv5EMZ0mwPtW8XaIr7ECfvn8nWWxX8+PB1UsNTF476O4UiBYuHJtGQIT KsHQLXSUMGQg9d7nxtqdQMQxyEShh9HG0K2PHdr1qH8UVreU/7J/bpIB0EcKudM7 +8y4wogTFEojl572nEw72QIfQi7mxNw1RpT9jIO8dKJx/MbXYQBxxYZ+NnTIS1Xn mx69AO9/03DpNuYxoflJy2IQmTehiscmG3ibyxKtaj220s5zmMqA0OnhNaSsRinN lVSM8V3VI1bkPfYq9zJPS1oHxTEerUI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:01 2025 by rpki-client