$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/81e132f5-7153-3263-a573-22214c133437.roa File: 81e132f5-7153-3263-a573-22214c133437.roa (raw, json) Hash identifier: Tj32zfeqNpfFNe4kmZr9JjW2I3FCsO9xx2md1aq4uGw= Subject key identifier: CC:61:8F:23:A6:91:1B:EF:4C:73:D8:47:D6:6D:34:6C:2E:CC:F8:75 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E094DDD4F2E0849C96FD3300 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/81e132f5-7153-3263-a573-22214c133437.roa Signing time: Thu 14 Nov 2024 14:00:40 +0000 ROA not before: Thu 14 Nov 2024 14:00:40 +0000 ROA not after: Wed 12 Feb 2025 14:00:40 +0000 asID: 396982 IP address blocks: 108.170.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e0:94:dd:d4:f2:e0:84:9c:96:fd:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 14 14:00:40 2024 GMT Not After : Feb 12 14:00:40 2025 GMT Subject: CN=85c93c8b-6e86-4fc1-b598-c59616516a26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:03:cb:36:ad:ea:a8:08:c6:6e:42:76:84:10: 1a:57:fb:4c:ed:d9:2d:dd:26:93:04:dd:de:ff:bc: f6:be:f0:1b:22:b3:79:b1:bf:28:6c:f4:11:bc:a5: 75:8e:41:ef:42:fe:6b:31:92:85:40:b6:11:b9:db: 7d:5e:72:ab:e2:47:49:99:c9:f5:aa:b8:18:e7:86: ae:7d:f0:74:0a:28:2e:f1:1f:09:04:f2:a0:82:61: 8a:1d:f7:8f:b4:43:0c:59:43:56:15:00:ff:0d:9e: 47:1f:c4:01:1d:84:79:1b:7c:71:f8:9a:8f:f0:33: 56:3b:c7:6f:28:07:fa:3f:94:20:a6:cd:8d:ce:36: aa:59:33:17:51:d6:33:66:ea:93:5c:6b:f0:6d:96: d8:18:62:c2:ce:4b:86:c5:f7:4a:b5:5e:b0:88:c3: 6d:cd:70:d6:c2:44:0d:ec:65:dc:d0:f7:8b:bd:de: 9b:44:98:8d:5f:f7:12:d1:5b:ca:85:3c:e1:96:b4: e2:2d:06:9b:fe:2c:6b:49:bb:4f:18:6d:d0:19:1e: aa:ca:59:ee:e8:ef:e9:8c:65:25:ea:e1:ea:79:b2: d6:4e:d0:63:45:75:9a:0f:69:0b:21:0e:32:f5:e4: cd:1d:7e:51:25:94:80:9e:67:5b:34:ad:3c:32:33: e5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:61:8F:23:A6:91:1B:EF:4C:73:D8:47:D6:6D:34:6C:2E:CC:F8:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/81e132f5-7153-3263-a573-22214c133437.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:72:14:87:75:fb:7b:2f:b6:df:76:d5:6f:59:27:2a:a9:18: 8a:87:9d:ac:43:88:1c:6c:5e:c1:ba:78:0f:63:d0:a0:d2:14: 0d:5d:2c:da:5b:33:f1:ca:c0:05:71:46:0e:6e:5a:9f:37:cc: 29:4a:a1:76:5d:93:0d:24:66:02:3f:7f:fd:17:eb:ca:14:8a: e5:11:45:32:78:b6:aa:6e:f1:57:4f:8d:84:a9:dd:e3:fa:18: 26:3d:b7:a9:23:21:29:fd:03:d1:f7:7a:58:25:54:85:9c:4d: be:15:e4:0b:73:ff:ea:9f:ba:41:6e:c1:ac:60:fd:52:09:db: 3c:db:61:c6:9e:cc:b9:3b:ff:c4:aa:79:15:f3:f5:62:1f:bb: 7d:29:c2:f9:c9:54:00:a7:b3:06:f3:3e:5c:cd:f6:ee:35:07: 56:6d:7f:df:09:cd:0f:63:05:93:f3:22:de:ee:42:df:f2:13: 49:a2:c2:14:2d:53:73:81:a8:94:06:cd:3c:24:28:d2:b8:1b: a3:92:ad:92:7d:e3:f2:b6:15:e2:d1:e0:7a:45:ac:13:aa:8b: a1:4b:47:6a:e3:54:49:c6:b0:0b:0c:d7:b5:e9:e9:5e:d8:2d: 68:63:47:3c:39:82:54:d9:4b:8e:d2:b7:55:0c:6d:7e:1d:60: d8:77:31:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglN3U8uCEnJb9MwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk ODVjOTNjOGItNmU4Ni00ZmMxLWI1OTgtYzU5NjE2NTE2YTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7APLNq3qqAjGbkJ2hBAaV/tM7dkt3SaTBN3e /7z2vvAbIrN5sb8obPQRvKV1jkHvQv5rMZKFQLYRudt9XnKr4kdJmcn1qrgY54au ffB0Cigu8R8JBPKggmGKHfePtEMMWUNWFQD/DZ5HH8QBHYR5G3xx+JqP8DNWO8dv KAf6P5Qgps2NzjaqWTMXUdYzZuqTXGvwbZbYGGLCzkuGxfdKtV6wiMNtzXDWwkQN 7GXc0PeLvd6bRJiNX/cS0VvKhTzhlrTiLQab/ixrSbtPGG3QGR6qylnu6O/pjGUl 6uHqebLWTtBjRXWaD2kLIQ4y9eTNHX5RJZSAnmdbNK08MjPlJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxhjyOmkRvvTHPYR9ZtNGwuzPh1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODFlMTMyZjUtNzE1My0z MjYzLWE1NzMtMjIyMTRjMTMzNDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5yFId1+3svtt921W9ZJyqpGIqHnaxDiBxsXsG6eA9j0KDSFA1dLNpb M/HKwAVxRg5uWp83zClKoXZdkw0kZgI/f/0X68oUiuURRTJ4tqpu8VdPjYSp3eP6 GCY9t6kjISn9A9H3elglVIWcTb4V5Atz/+qfukFuwaxg/VIJ2zzbYcaezLk7/8Sq eRXz9WIfu30pwvnJVACnswbzPlzN9u41B1Ztf98JzQ9jBZPzIt7uQt/yE0miwhQt U3OBqJQGzTwkKNK4G6OSrZJ94/K2FeLR4HpFrBOqi6FLR2rjVEnGsAsM17Xp6V7Y LWhjRzw5glTZS47St1UMbX4dYNh3MaI= -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:18 2024 by rpki-client on console-fra.rpki-client.org