$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60375f84-058e-3934-9882-84d1a2ec55d3.roa File: 60375f84-058e-3934-9882-84d1a2ec55d3.roa (raw, json) Hash identifier: VSjZBd55Brt8oYBLH0VwWM9BAMjACYh/LfmL9F7vbdw= Subject key identifier: 5B:12:12:EF:8C:AC:6B:60:01:A2:73:0F:9F:CB:FB:68:A0:55:1B:46 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848BFEBD037FD6D7821BA88E880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60375f84-058e-3934-9882-84d1a2ec55d3.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 108.170.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:d0:37:fd:6d:78:21:ba:88:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=012d44aa-0250-4801-85b3-a3abf1e18259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e6:f0:42:da:85:56:28:dc:4d:d3:ef:a2:c8: 55:68:f3:2e:9f:44:9f:9b:24:b4:6b:c1:69:12:3a: 51:3d:f8:74:41:fb:80:a5:d3:3e:e2:bb:67:7b:b1: e1:5c:59:ab:87:91:25:05:7f:a0:0f:67:83:c2:d7: a2:ab:2d:e9:4b:ee:ed:e1:51:f3:7e:34:4d:fe:16: e1:09:71:18:ad:e6:f8:62:d8:3a:d6:71:c3:8a:53: f9:b9:c1:4b:e7:3f:d6:21:d4:48:21:ae:25:30:ee: 03:4d:db:c5:01:d2:6b:e2:60:25:af:3c:37:ed:09: 3b:80:49:11:f4:cf:31:03:9c:ee:f5:3c:bb:e0:4e: 49:fb:56:30:b1:8e:3b:54:ff:24:b8:0c:c9:0c:95: be:c9:46:61:c0:de:b6:60:44:0d:d0:9b:fd:de:c6: 7b:3a:80:be:d5:3f:2c:a9:92:c2:c8:83:1c:c6:e8: 4f:3a:16:ea:5e:df:6f:44:3d:b1:ad:e2:67:2f:c6: 66:37:96:a5:16:4e:1a:68:fb:1c:a9:50:df:1a:9d: 78:99:57:93:6a:bb:04:1e:9c:ac:9e:d6:7f:3a:b4: d2:50:6d:1e:54:e1:c1:84:b3:2d:e7:3a:64:39:af: 22:82:22:62:25:f6:7c:4b:17:e7:07:0a:c5:e7:2b: b9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:12:12:EF:8C:AC:6B:60:01:A2:73:0F:9F:CB:FB:68:A0:55:1B:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60375f84-058e-3934-9882-84d1a2ec55d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:60:89:b5:9e:51:6e:9b:7b:c3:1f:c1:ae:10:0c:c9:47:3a: dc:99:62:3e:91:65:df:47:54:34:cd:2d:95:3f:93:2d:54:30: cd:e6:cc:c3:4b:17:aa:02:9b:47:12:3a:44:1a:f7:b9:3e:66: 40:c0:0a:dd:49:ee:af:26:5d:1f:45:b5:55:68:8e:70:e7:e7: 3d:9a:55:ef:70:b4:19:b9:4f:f4:14:f5:2f:99:87:7d:6b:4f: df:0e:00:c2:84:d1:50:63:c9:27:f4:0f:11:bc:ec:be:59:a6: 47:ef:23:51:f9:b7:07:fc:00:27:ec:2d:f7:38:ec:92:aa:ad: 23:c8:4b:60:f0:aa:bd:1e:20:ff:43:00:25:59:8f:a1:e7:69: e8:ae:53:e5:f2:27:59:11:0f:9e:5f:5b:39:99:23:f6:06:d1: a8:bf:85:e1:61:63:fb:53:2b:24:42:eb:d5:01:9f:2b:1a:e1: 4f:77:a5:b7:9b:4e:77:7c:12:cd:f7:da:c6:f2:b5:55:85:ec: e3:75:70:cc:79:ab:2d:09:c6:27:2d:07:9e:0e:e0:63:a4:81: 12:f3:80:9d:2a:42:9f:4a:f8:33:43:05:bb:11:cc:a2:61:2e: 06:12:ca:aa:b0:ab:e5:05:ce:2b:18:53:1d:93:f3:ab:7b:8f: e1:01:bb:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/69A3/W14IbqI6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk MDEyZDQ0YWEtMDI1MC00ODAxLTg1YjMtYTNhYmYxZTE4MjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmObwQtqFVijcTdPvoshVaPMun0SfmyS0a8Fp EjpRPfh0QfuApdM+4rtne7HhXFmrh5ElBX+gD2eDwteiqy3pS+7t4VHzfjRN/hbh CXEYreb4Ytg61nHDilP5ucFL5z/WIdRIIa4lMO4DTdvFAdJr4mAlrzw37Qk7gEkR 9M8xA5zu9Ty74E5J+1YwsY47VP8kuAzJDJW+yUZhwN62YEQN0Jv93sZ7OoC+1T8s qZLCyIMcxuhPOhbqXt9vRD2xreJnL8ZmN5alFk4aaPscqVDfGp14mVeTarsEHpys ntZ/OrTSUG0eVOHBhLMt5zpkOa8igiJiJfZ8SxfnBwrF5yu5HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsSEu+MrGtgAaJzD5/L+2igVRtGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjAzNzVmODQtMDU4ZS0z OTM0LTk4ODItODRkMWEyZWM1NWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9gibWeUW6be8Mfwa4QDMlHOtyZYj6RZd9HVDTNLZU/ky1UMM3mzMNL F6oCm0cSOkQa97k+ZkDACt1J7q8mXR9FtVVojnDn5z2aVe9wtBm5T/QU9S+Zh31r T98OAMKE0VBjySf0DxG87L5ZpkfvI1H5twf8ACfsLfc47JKqrSPIS2Dwqr0eIP9D ACVZj6HnaeiuU+XyJ1kRD55fWzmZI/YG0ai/heFhY/tTKyRC69UBnysa4U93pbeb Tnd8Es332sbytVWF7ON1cMx5qy0JxictB54O4GOkgRLzgJ0qQp9K+DNDBbsRzKJh LgYSyqqwq+UFzisYUx2T86t7j+EBu+I= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:03 2025 by rpki-client