$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7cd73e8e-869e-33d4-abe2-b6f8efcf3ee8.roa File: 7cd73e8e-869e-33d4-abe2-b6f8efcf3ee8.roa (raw, json) Hash identifier: ZgQ/knIafGupEstIjY/VgoKtT1RWeITtCRfWzue3oNw= Subject key identifier: 1F:06:7B:1F:36:FA:3B:C5:79:98:31:5B:47:BE:FD:97:1E:C8:04:67 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848BFEBD56F2532FEBAEC5BABC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7cd73e8e-869e-33d4-abe2-b6f8efcf3ee8.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 15169 IP address blocks: 108.177.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:d5:6f:25:32:fe:ba:ec:5b:ab:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=b99632c6-6fdf-4864-b170-485b5e0dc993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b8:4b:7d:75:91:47:d7:dc:2f:3b:96:8b:22: 47:29:8e:66:52:4d:da:1f:42:45:7b:5f:13:38:49: 5a:ab:df:5d:6c:9d:be:5e:0a:85:1e:f6:1f:ed:6b: 88:2a:4d:eb:22:f7:4a:93:75:70:bb:ca:ed:1f:79: 12:d1:90:94:6d:aa:17:d9:bf:ec:f2:74:0a:6d:aa: 88:46:f1:af:a4:a8:98:7a:33:a2:36:db:63:26:b6: ce:49:d5:8a:fd:96:b0:08:17:81:07:66:67:08:7b: 11:0a:0a:9b:6d:f3:49:4e:b0:f9:b3:71:f8:38:dc: 1a:16:55:0a:41:78:9b:ce:40:a7:3b:3e:c3:3b:33: 52:da:c9:20:e1:9e:58:9e:9d:10:63:3a:86:31:f6: af:2b:e6:53:61:34:31:c0:66:39:b0:68:bd:6a:f3: 78:7c:65:b0:54:64:bc:96:6b:c5:62:b9:2b:93:5e: 6e:96:78:f1:14:86:01:d3:a1:9c:0f:fb:5e:90:77: 9f:a7:c7:4f:18:54:2a:6e:1b:c8:a3:92:0e:8b:dc: 8d:ab:0d:ba:69:01:eb:fd:a1:d5:d6:21:7b:49:07: b8:90:52:f5:a9:b8:93:bb:eb:7e:7b:bb:f8:d7:d8: bf:37:f3:76:0b:6f:d8:15:21:b6:48:67:bc:a0:a3: 89:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:06:7B:1F:36:FA:3B:C5:79:98:31:5B:47:BE:FD:97:1E:C8:04:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7cd73e8e-869e-33d4-abe2-b6f8efcf3ee8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:28:37:8b:92:4f:ce:5e:e2:4f:e3:2b:61:13:e5:96:70:18: 70:a1:27:ec:7b:cb:f5:4f:ca:46:1c:5f:38:c4:e1:59:2c:fe: a4:ef:0b:4f:de:6a:c1:ee:76:f7:34:0f:68:31:39:df:69:c3: 81:82:eb:ec:ed:c5:60:32:9f:7e:cd:b2:86:62:8d:87:eb:7c: 3e:40:81:66:e3:a2:4c:1a:c9:1b:b9:a6:dd:51:5a:48:93:a0: 5e:b4:31:93:0c:b0:f6:09:a7:1b:84:86:9a:9e:72:f1:d3:44: ca:8f:bd:d0:67:d4:ff:59:72:e5:a1:87:a2:c8:36:47:7b:6a: 9f:10:20:a9:cc:57:7c:e7:10:d0:ef:52:fc:39:be:aa:db:30: 29:64:e5:48:17:91:c2:d8:7c:8a:46:a1:19:12:c9:c2:b5:60: ae:3f:4f:9a:a0:05:74:06:ce:c4:e9:b3:5f:f8:2b:c7:d8:a1: 4e:11:e6:d3:c0:4c:f9:34:4b:3a:cb:6b:f5:e9:c4:b8:b7:b6: 2d:ac:e7:19:7b:aa:e1:a2:34:f2:0e:a2:94:32:71:21:6d:57: d7:37:15:a7:a9:66:79:5a:ff:3c:d3:87:02:18:b7:21:2e:2e: b4:c9:4c:0e:0f:ec:14:fd:28:bf:68:57:fd:9a:3d:d9:5b:bd: 9d:b7:5e:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/69VvJTL+uuxbq8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk Yjk5NjMyYzYtNmZkZi00ODY0LWIxNzAtNDg1YjVlMGRjOTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7hLfXWRR9fcLzuWiyJHKY5mUk3aH0JFe18T OElaq99dbJ2+XgqFHvYf7WuIKk3rIvdKk3Vwu8rtH3kS0ZCUbaoX2b/s8nQKbaqI RvGvpKiYejOiNttjJrbOSdWK/ZawCBeBB2ZnCHsRCgqbbfNJTrD5s3H4ONwaFlUK QXibzkCnOz7DOzNS2skg4Z5Ynp0QYzqGMfavK+ZTYTQxwGY5sGi9avN4fGWwVGS8 lmvFYrkrk15ulnjxFIYB06GcD/tekHefp8dPGFQqbhvIo5IOi9yNqw26aQHr/aHV 1iF7SQe4kFL1qbiTu+t+e7v419i/N/N2C2/YFSG2SGe8oKOJ2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8Gex82+jvFeZgxW0e+/ZceyARnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2NkNzNlOGUtODY5ZS0z M2Q0LWFiZTItYjZmOGVmY2YzZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLEJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEoN4uST85e4k/jK2ET5ZZwGHChJ+x7y/VPykYcXzjE4Vks/qTvC0/e asHudvc0D2gxOd9pw4GC6+ztxWAyn37NsoZijYfrfD5AgWbjokwayRu5pt1RWkiT oF60MZMMsPYJpxuEhpqecvHTRMqPvdBn1P9ZcuWhh6LINkd7ap8QIKnMV3znENDv Uvw5vqrbMClk5UgXkcLYfIpGoRkSycK1YK4/T5qgBXQGzsTps1/4K8fYoU4R5tPA TPk0SzrLa/XpxLi3ti2s5xl7quGiNPIOopQycSFtV9c3FaepZnla/zzThwIYtyEu LrTJTA4P7BT9KL9oV/2aPdlbvZ23XmI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:20 2025 by rpki-client