$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7f0cb031-dcee-3d44-8d27-f094f67636b1.roa File: 7f0cb031-dcee-3d44-8d27-f094f67636b1.roa (raw, json) Hash identifier: FIjOa1othuFZqEX3biCwkUPOX7TZCWgGnIVSIqvtx5o= Subject key identifier: 38:3C:4C:27:4B:1D:4A:96:B6:93:93:16:65:4C:9B:F4:80:21:35:B4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E094CCE6DA7BFE8F6F8C9900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7f0cb031-dcee-3d44-8d27-f094f67636b1.roa Signing time: Thu 14 Nov 2024 14:00:40 +0000 ROA not before: Thu 14 Nov 2024 14:00:40 +0000 ROA not after: Wed 12 Feb 2025 14:00:40 +0000 asID: 396982 IP address blocks: 108.170.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e0:94:cc:e6:da:7b:fe:8f:6f:8c:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 14 14:00:40 2024 GMT Not After : Feb 12 14:00:40 2025 GMT Subject: CN=1ee903ff-2dad-410d-9ae6-136bce122c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c8:0e:24:c0:d9:40:4b:f8:d8:7d:5c:76:10: f9:d2:43:87:53:89:16:c9:3a:ef:fa:27:9f:3f:78: db:df:d0:d0:d2:fa:11:72:90:f0:a8:37:cb:0a:64: d3:4f:83:23:28:a3:59:ef:2a:33:f8:ae:92:77:97: 3a:74:a2:d1:bd:38:d7:af:8c:82:b6:68:f7:39:64: c9:b0:a1:9c:ed:55:2c:d7:e2:af:7b:d3:33:ae:8a: 9c:fe:6b:ac:c6:30:5a:74:28:a8:16:fb:e1:00:69: 63:48:3a:02:48:22:2a:71:05:ea:61:13:aa:c4:e8: c2:8e:a1:b2:d3:2c:29:99:42:8f:6d:fe:15:2f:80: a0:4d:08:9d:44:b8:27:02:fd:7d:25:68:98:fc:3e: 61:75:29:17:d0:04:e1:c9:7e:ff:bf:aa:6c:ab:4d: ae:e7:97:bd:c6:32:cd:e0:85:c7:0b:31:ed:83:5c: 3a:de:af:88:d4:21:58:50:37:73:ee:f4:e3:e2:2f: 03:02:42:27:ac:fe:57:39:66:69:3f:c5:35:58:17: 28:ec:f0:6d:23:b8:59:0e:69:08:7e:35:d9:19:3c: e5:2a:74:dc:ae:b4:1e:43:d0:31:e2:22:16:75:74: 3a:88:fd:7f:6a:e7:d7:60:da:48:47:f6:9e:4b:60: d4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:3C:4C:27:4B:1D:4A:96:B6:93:93:16:65:4C:9B:F4:80:21:35:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7f0cb031-dcee-3d44-8d27-f094f67636b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:50:d3:9d:80:1b:4e:76:76:3e:06:80:93:25:83:fc:95:c2: 43:8f:4b:9f:e2:a7:28:6c:28:e2:49:af:fe:aa:76:b6:7b:2d: 62:4c:f4:43:5b:ad:4b:41:2f:a0:66:13:42:ef:14:1e:11:87: 3e:f8:48:64:39:76:7a:8c:b1:16:07:ec:c3:fd:5f:c9:89:28: 82:ea:21:7a:00:45:63:be:e5:28:96:5b:a3:af:e9:4c:6a:8e: 9a:dd:bb:0c:7d:37:14:96:e9:1d:8e:97:34:79:e7:cf:9d:fd: 01:ac:91:bb:ee:33:fb:94:3b:f0:90:90:c5:9c:3f:4c:7d:f1: be:5d:0e:3d:df:3c:d7:3a:19:16:79:2c:aa:48:2e:73:0e:08: 41:13:73:72:4a:73:43:ff:4a:a3:a3:d5:e1:83:6c:34:bc:ff: e9:ce:2d:00:4c:20:39:86:01:85:d4:5c:8a:36:29:9a:e2:4c: a7:1f:96:af:52:a4:c0:67:1f:90:da:3d:83:60:8e:0c:03:a3: 68:66:e1:96:65:16:52:49:11:4e:6f:53:26:c5:77:fe:db:3c: 08:09:7b:e7:52:c2:e1:87:10:57:cd:1e:6e:5a:e1:32:25:7f: 79:b5:5d:0f:b6:08:c7:8d:3f:46:0b:c5:97:6b:19:2c:3f:7a: 97:73:39:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglMzm2nv+j2+MmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk MWVlOTAzZmYtMmRhZC00MTBkLTlhZTYtMTM2YmNlMTIyYzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsgOJMDZQEv42H1cdhD50kOHU4kWyTrv+ief P3jb39DQ0voRcpDwqDfLCmTTT4MjKKNZ7yoz+K6Sd5c6dKLRvTjXr4yCtmj3OWTJ sKGc7VUs1+Kve9Mzroqc/musxjBadCioFvvhAGljSDoCSCIqcQXqYROqxOjCjqGy 0ywpmUKPbf4VL4CgTQidRLgnAv19JWiY/D5hdSkX0AThyX7/v6psq02u55e9xjLN 4IXHCzHtg1w63q+I1CFYUDdz7vTj4i8DAkInrP5XOWZpP8U1WBco7PBtI7hZDmkI fjXZGTzlKnTcrrQeQ9Ax4iIWdXQ6iP1/aufXYNpIR/aeS2DU2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDg8TCdLHUqWtpOTFmVMm/SAITW0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2YwY2IwMzEtZGNlZS0z ZDQ0LThkMjctZjA5NGY2NzYzNmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxQ052AG052dj4GgJMlg/yVwkOPS5/ipyhsKOJJr/6qdrZ7LWJM9ENb rUtBL6BmE0LvFB4Rhz74SGQ5dnqMsRYH7MP9X8mJKILqIXoARWO+5SiWW6Ov6Uxq jprduwx9NxSW6R2OlzR558+d/QGskbvuM/uUO/CQkMWcP0x98b5dDj3fPNc6GRZ5 LKpILnMOCEETc3JKc0P/SqOj1eGDbDS8/+nOLQBMIDmGAYXUXIo2KZriTKcflq9S pMBnH5DaPYNgjgwDo2hm4ZZlFlJJEU5vUybFd/7bPAgJe+dSwuGHEFfNHm5a4TIl f3m1XQ+2CMeNP0YLxZdrGSw/epdzOS8= -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:18 2024 by rpki-client on console-fra.rpki-client.org