$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/55217647-19f2-3f41-9966-9baf6ed218d5.roa File: 55217647-19f2-3f41-9966-9baf6ed218d5.roa (raw, json) Hash identifier: rTtoWT0bb9U0A3fqZLYTaE+9k6J8V+zvDeE2HsiA35k= Subject key identifier: 92:64:50:78:24:10:26:49:DF:1E:11:AE:2D:6E:44:F9:02:C5:F2:42 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848BFEBC71E8AF6659F31857000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/55217647-19f2-3f41-9966-9baf6ed218d5.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 108.170.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:c7:1e:8a:f6:65:9f:31:85:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=490c92ba-1505-4fd7-a2e2-aaf5481e0523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5f:7c:46:ea:dd:3d:97:4c:4b:56:42:b3:3a: f9:20:58:00:2b:72:e6:a5:29:e5:9d:59:62:33:0b: 45:0b:0c:e4:f0:7f:f5:31:f8:84:00:0f:74:aa:b7: a5:b6:77:84:7a:2e:d9:04:57:50:8a:53:da:b7:ae: d4:1d:45:62:20:af:fc:8c:1f:94:b8:c6:20:25:b5: ed:9f:ac:0d:0e:7f:a6:31:6a:ed:a5:5f:52:df:cb: 57:e9:b7:f8:18:83:1d:fa:43:0c:97:1a:b4:b7:2d: 56:4d:07:17:9d:68:67:d3:75:c7:78:eb:e6:00:cc: 19:f9:a9:e2:32:e1:42:65:54:41:a7:a9:b9:72:b9: dc:c9:4c:ed:08:3a:6e:ca:f5:40:7e:a5:2f:90:cc: ea:8f:81:6a:7c:21:d0:9f:d9:90:8a:c5:20:3b:c4: a4:ed:b4:df:19:f0:4d:f4:80:5a:d8:26:64:57:ed: 10:28:53:a3:5c:c8:c1:f8:83:53:32:60:d3:e6:8d: e9:5e:97:4a:39:14:76:8f:c8:85:f5:58:0b:c3:69: 28:2d:1f:5d:fe:6d:ad:48:52:e1:61:f9:93:9c:94: 5c:65:b1:49:da:38:81:ae:c7:11:d8:04:ef:fa:41: 38:ad:9f:b2:a6:69:de:34:57:0a:a1:61:74:41:71: de:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:64:50:78:24:10:26:49:DF:1E:11:AE:2D:6E:44:F9:02:C5:F2:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/55217647-19f2-3f41-9966-9baf6ed218d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:e1:30:b8:2c:9e:28:82:21:a5:70:b2:a3:39:bc:73:b3:11: 5b:c3:13:3b:ee:83:0a:c2:5d:ec:4e:ce:c4:af:17:b7:5c:0e: aa:af:f6:23:33:e9:b3:1f:4b:2f:55:b0:e3:58:1c:00:04:04: 4d:b3:83:b5:8f:05:51:68:5f:84:ea:6d:eb:65:1c:11:ed:69: 2c:1e:a1:b0:ca:72:89:d5:9b:85:99:94:ab:5e:5d:62:19:8e: bb:ff:80:5a:76:24:4d:2e:c5:cd:81:b0:cb:d7:4f:b9:34:af: ce:5a:c5:77:a6:50:22:69:80:b5:b0:44:09:ec:ec:08:23:ec: 79:cb:2b:72:18:ac:bc:8c:3d:ba:69:5b:cb:77:66:74:31:81: f5:60:b9:04:01:89:5e:73:ce:92:91:af:76:0e:84:0b:e1:7c: 74:0b:c6:8d:f3:0d:3c:a9:f6:95:60:a7:7b:c8:5e:29:48:83: 47:06:b2:e7:c8:14:f0:7e:72:1f:3a:35:41:fe:ad:f5:3a:e9: 15:7f:c9:ae:e9:22:1e:df:72:25:66:e5:ef:cf:3a:d4:1d:bd: f1:0d:93:c3:18:58:b0:12:1b:95:63:0e:0f:95:5e:62:44:53: 0a:f3:1a:ab:a3:e9:05:39:17:22:f2:d1:48:70:31:1b:8b:03: 25:cc:04:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/68ceivZlnzGFcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk NDkwYzkyYmEtMTUwNS00ZmQ3LWEyZTItYWFmNTQ4MWUwNTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkl98RurdPZdMS1ZCszr5IFgAK3LmpSnlnVli MwtFCwzk8H/1MfiEAA90qreltneEei7ZBFdQilPat67UHUViIK/8jB+UuMYgJbXt n6wNDn+mMWrtpV9S38tX6bf4GIMd+kMMlxq0ty1WTQcXnWhn03XHeOvmAMwZ+ani MuFCZVRBp6m5crncyUztCDpuyvVAfqUvkMzqj4FqfCHQn9mQisUgO8Sk7bTfGfBN 9IBa2CZkV+0QKFOjXMjB+INTMmDT5o3pXpdKORR2j8iF9VgLw2koLR9d/m2tSFLh YfmTnJRcZbFJ2jiBrscR2ATv+kE4rZ+ypmneNFcKoWF0QXHe7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJkUHgkECZJ3x4Rri1uRPkCxfJCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTUyMTc2NDctMTlmMi0z ZjQxLTk5NjYtOWJhZjZlZDIxOGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKreMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfhMLgsniiCIaVwsqM5vHOzEVvDEzvugwrCXexOzsSvF7dcDqqv9iMz 6bMfSy9VsONYHAAEBE2zg7WPBVFoX4TqbetlHBHtaSweobDKconVm4WZlKteXWIZ jrv/gFp2JE0uxc2BsMvXT7k0r85axXemUCJpgLWwRAns7Agj7HnLK3IYrLyMPbpp W8t3ZnQxgfVguQQBiV5zzpKRr3YOhAvhfHQLxo3zDTyp9pVgp3vIXilIg0cGsufI FPB+ch86NUH+rfU66RV/ya7pIh7fciVm5e/POtQdvfENk8MYWLASG5VjDg+VXmJE UwrzGquj6QU5FyLy0UhwMRuLAyXMBFc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:48 2025 by rpki-client