$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4d5fb234-4b0d-375b-8830-f6a550ba1a38.roa File: 4d5fb234-4b0d-375b-8830-f6a550ba1a38.roa (raw, json) Hash identifier: AXl0SCD8VwG8Ow9NFIV/afcLvp1/FQNAUEPWMEajsCU= Subject key identifier: FC:81:F4:48:81:04:44:F0:68:5C:BF:4E:B2:94:F1:77:22:28:E6:EC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E094EA52CFF40FA66ABCD200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4d5fb234-4b0d-375b-8830-f6a550ba1a38.roa Signing time: Thu 14 Nov 2024 14:00:40 +0000 ROA not before: Thu 14 Nov 2024 14:00:40 +0000 ROA not after: Wed 12 Feb 2025 14:00:40 +0000 asID: 396982 IP address blocks: 108.170.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e0:94:ea:52:cf:f4:0f:a6:6a:bc:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 14 14:00:40 2024 GMT Not After : Feb 12 14:00:40 2025 GMT Subject: CN=faf39c63-1850-4a8b-9f84-a60c225aff79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:51:8c:89:36:c1:8a:79:6f:eb:39:6d:d4:c7: f0:18:39:5c:ec:89:ef:49:49:a4:d6:23:a1:2f:54: 83:c8:7c:b0:51:29:f9:8c:c8:f0:11:ea:42:89:ef: 04:22:1d:86:d6:96:f8:ed:af:40:67:88:ec:31:e6: 9e:53:29:a0:bb:55:8c:5d:99:49:8f:fd:39:de:3c: 09:d7:15:73:f9:d3:ae:8d:49:ed:b7:ff:75:46:3c: a8:50:f6:b3:65:da:7a:d1:a1:cc:58:f1:42:d8:ae: 77:8a:49:25:a5:87:bc:fa:c0:2c:0e:98:12:80:98: 9d:2a:8d:d5:7b:92:be:58:e2:da:68:ca:26:5f:a9: d7:46:14:77:49:8a:e5:bb:89:0c:5c:dd:7e:ad:03: 42:20:f0:55:83:13:5a:ea:2e:eb:81:50:e2:dd:23: 13:d8:94:26:3c:24:2e:16:d9:6c:f5:31:05:6f:e7: 44:9c:10:a9:1f:e9:63:d8:9b:61:a2:2e:8d:7b:87: 53:5f:50:2f:1e:d3:b8:cd:82:b1:93:57:4b:df:cb: df:b4:14:90:a0:64:95:cd:3c:80:11:11:97:bf:4b: 23:20:c8:f5:ec:93:93:0f:ee:fa:ee:75:fc:ba:71: 48:99:7c:f3:ed:39:41:59:1a:45:ab:a8:f5:31:00: 81:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:81:F4:48:81:04:44:F0:68:5C:BF:4E:B2:94:F1:77:22:28:E6:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4d5fb234-4b0d-375b-8830-f6a550ba1a38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:34:c5:2d:5f:75:93:63:62:4f:a0:eb:39:2a:24:ec:0f:a6: 91:4d:89:3f:61:e8:63:69:ab:81:e9:ba:0c:ac:79:ef:19:d2: 8e:01:4c:2f:e8:d8:8a:85:d3:5a:12:38:e7:b9:d3:18:e4:f1: c9:ed:62:14:8c:13:de:27:5e:e6:29:48:7b:c8:8b:67:3d:c9: bc:7a:96:fe:75:34:5b:05:32:34:f3:06:06:2b:b6:85:fd:04: e2:21:7e:76:c2:1a:87:85:ce:36:fb:1a:b2:0c:f0:9a:1e:3b: aa:a8:be:9e:93:9b:eb:2b:37:0d:24:59:98:c4:da:ba:32:fc: ad:2d:2b:d0:15:8d:55:16:f9:39:5b:46:c0:44:20:01:ff:07: f2:9c:c1:74:31:df:26:eb:10:12:aa:ca:05:bf:bf:09:6d:57: 54:bf:2d:ca:b7:ed:db:ae:eb:21:9a:c9:00:72:8c:4b:e3:be: 43:b5:61:f6:80:b5:39:44:37:1d:ca:ba:fd:10:da:ab:14:cd: 8e:64:8a:25:72:0e:38:f5:02:08:77:ad:97:2b:0e:87:2a:da: f9:44:50:01:d0:a0:65:e5:9c:f8:46:92:a3:90:e5:c1:80:33: a0:44:92:a1:06:6b:ce:46:e1:9e:3a:12:08:d4:e6:e3:af:a9: 35:50:2e:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglOpSz/QPpmq80gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk ZmFmMzljNjMtMTg1MC00YThiLTlmODQtYTYwYzIyNWFmZjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllGMiTbBinlv6zlt1MfwGDlc7InvSUmk1iOh L1SDyHywUSn5jMjwEepCie8EIh2G1pb47a9AZ4jsMeaeUymgu1WMXZlJj/053jwJ 1xVz+dOujUntt/91RjyoUPazZdp60aHMWPFC2K53ikklpYe8+sAsDpgSgJidKo3V e5K+WOLaaMomX6nXRhR3SYrlu4kMXN1+rQNCIPBVgxNa6i7rgVDi3SMT2JQmPCQu Ftls9TEFb+dEnBCpH+lj2Jthoi6Ne4dTX1AvHtO4zYKxk1dL38vftBSQoGSVzTyA ERGXv0sjIMj17JOTD+767nX8unFImXzz7TlBWRpFq6j1MQCBHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyB9EiBBETwaFy/TrKU8XciKObsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGQ1ZmIyMzQtNGIwZC0z NzViLTg4MzAtZjZhNTUwYmExYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH00xS1fdZNjYk+g6zkqJOwPppFNiT9h6GNpq4Hpugysee8Z0o4BTC/o 2IqF01oSOOe50xjk8cntYhSME94nXuYpSHvIi2c9ybx6lv51NFsFMjTzBgYrtoX9 BOIhfnbCGoeFzjb7GrIM8JoeO6qovp6Tm+srNw0kWZjE2roy/K0tK9AVjVUW+Tlb RsBEIAH/B/KcwXQx3ybrEBKqygW/vwltV1S/Lcq37duu6yGayQByjEvjvkO1YfaA tTlENx3Kuv0Q2qsUzY5kiiVyDjj1Agh3rZcrDocq2vlEUAHQoGXlnPhGkqOQ5cGA M6BEkqEGa85G4Z46EgjU5uOvqTVQLj0= -----END CERTIFICATE-----Generated at Mon Nov 25 03:22:40 2024 by rpki-client on console-ams.rpki-client.org