$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6c14cdf0-c63e-3fe5-aafb-4cbd1cdc49da.roa File: 6c14cdf0-c63e-3fe5-aafb-4cbd1cdc49da.roa (raw, json) Hash identifier: L82DM3Jm+GS7CeMpzmnPVdf/DccADlha7a+ZimkQjg4= Subject key identifier: 5B:91:76:9B:9D:99:62:33:DF:FD:56:6C:F0:D3:60:AD:7B:A2:AF:5D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848BFEBB2CB75D316F2B79D20C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6c14cdf0-c63e-3fe5-aafb-4cbd1cdc49da.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 108.170.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:b2:cb:75:d3:16:f2:b7:9d:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=eb0a0392-a779-42ee-a4f9-47217bf4ca7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:81:c5:72:55:67:54:f3:a5:ab:c7:99:d9:a0: 6f:cc:f0:81:4c:30:fe:3d:e2:18:af:5b:e2:38:60: 3b:d2:f4:bf:a5:a6:de:16:2b:42:ec:88:db:b4:d1: 93:ad:4b:60:39:a6:41:b1:50:ae:db:0a:8c:a2:82: 10:fa:49:eb:79:c2:d6:5e:1e:28:39:4d:00:77:cb: bc:a4:ad:9f:6b:5b:3e:c3:37:5e:c6:cb:be:bd:cd: 34:2e:72:ae:83:b1:75:38:f0:11:b9:fd:e1:a5:dc: f5:87:81:b3:c7:21:4b:21:15:7e:c0:db:45:11:04: c0:4f:33:1c:f0:28:8e:d7:29:b4:9b:3d:23:bf:72: 1f:9d:c7:aa:33:77:d6:17:2e:8c:7a:91:c7:a0:94: 1c:43:4e:0a:0a:1b:85:7b:07:a0:53:f1:78:a9:9d: 6b:f0:64:6e:89:d6:bc:6a:26:c6:1b:e8:65:71:29: 8d:b9:41:ac:b1:8c:ac:43:e3:06:0d:70:ba:d2:3b: 1e:ac:18:27:ae:ac:97:39:87:bf:ca:0c:c5:95:e4: 72:6f:ef:06:e2:31:a4:99:b9:c2:be:41:3a:0d:b9: 34:1b:47:7b:b4:84:62:10:42:dc:60:52:71:6e:6d: 31:d9:53:a7:a3:17:33:e4:d0:c4:94:9c:2d:e4:01: c7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:91:76:9B:9D:99:62:33:DF:FD:56:6C:F0:D3:60:AD:7B:A2:AF:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6c14cdf0-c63e-3fe5-aafb-4cbd1cdc49da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:06:5f:02:c7:0e:a8:e0:ae:d8:94:ad:a1:9b:99:02:b5:23: d9:bc:89:6f:43:61:ee:36:a0:b0:fb:18:91:48:87:ab:96:0e: 11:d6:88:a1:ba:eb:91:79:f1:5b:b3:68:f2:fe:ef:89:fa:68: 3a:e6:cd:e9:92:05:26:33:4a:cb:b5:0a:63:ad:5f:64:45:31: 70:01:a4:9a:e3:6d:1a:06:db:fc:50:6b:0a:90:1b:c8:da:3c: ed:1d:6b:e1:47:ae:b0:d9:88:0c:72:55:ba:0f:1d:83:51:49: 5a:95:d8:d8:5a:50:0c:45:29:3e:c5:25:5c:cb:02:ce:d6:80: bd:28:24:53:df:4c:57:6a:32:ce:30:82:83:4a:93:0d:6c:24: d9:e4:25:04:2b:88:65:57:a4:ae:a7:fc:b3:d1:bf:51:b1:27: d3:c9:a8:21:43:df:57:1f:fa:33:e1:54:10:f8:60:c6:26:c3: d1:1f:9b:3d:eb:97:75:97:89:04:c1:57:98:3e:c4:76:d6:6c: e2:53:ed:85:d5:83:0b:1c:bc:6f:77:2f:93:a6:42:3b:89:31: d2:2f:66:27:a1:e2:8d:8c:1c:e4:e8:a8:e3:43:cf:2d:2f:6d: d9:03:06:42:d2:48:31:d0:5b:c6:49:a5:0b:99:bf:a9:c7:69: 54:c3:c3:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/67LLddMW8redIMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk ZWIwYTAzOTItYTc3OS00MmVlLWE0ZjktNDcyMTdiZjRjYTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4HFclVnVPOlq8eZ2aBvzPCBTDD+PeIYr1vi OGA70vS/pabeFitC7IjbtNGTrUtgOaZBsVCu2wqMooIQ+knrecLWXh4oOU0Ad8u8 pK2fa1s+wzdexsu+vc00LnKug7F1OPARuf3hpdz1h4GzxyFLIRV+wNtFEQTATzMc 8CiO1ym0mz0jv3IfnceqM3fWFy6MepHHoJQcQ04KChuFewegU/F4qZ1r8GRuida8 aibGG+hlcSmNuUGssYysQ+MGDXC60jserBgnrqyXOYe/ygzFleRyb+8G4jGkmbnC vkE6Dbk0G0d7tIRiEELcYFJxbm0x2VOnoxcz5NDElJwt5AHHMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuRdpudmWIz3/1WbPDTYK17oq9dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNmMxNGNkZjAtYzYzZS0z ZmU1LWFhZmItNGNiZDFjZGM0OWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIGXwLHDqjgrtiUraGbmQK1I9m8iW9DYe42oLD7GJFIh6uWDhHWiKG6 65F58VuzaPL+74n6aDrmzemSBSYzSsu1CmOtX2RFMXABpJrjbRoG2/xQawqQG8ja PO0da+FHrrDZiAxyVboPHYNRSVqV2NhaUAxFKT7FJVzLAs7WgL0oJFPfTFdqMs4w goNKkw1sJNnkJQQriGVXpK6n/LPRv1GxJ9PJqCFD31cf+jPhVBD4YMYmw9Efmz3r l3WXiQTBV5g+xHbWbOJT7YXVgwscvG93L5OmQjuJMdIvZieh4o2MHOToqONDzy0v bdkDBkLSSDHQW8ZJpQuZv6nHaVTDw/M= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:56 2025 by rpki-client