$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/943d4eb9-d91c-3916-9895-0d168e871044.roa File: 943d4eb9-d91c-3916-9895-0d168e871044.roa (raw, json) Hash identifier: WRiKEu5LmI+TkH3Jfy5VqC6eLSmBJyK8KhtoqGdhs9M= Subject key identifier: AD:94:B4:9E:DA:54:EE:03:F9:99:3A:22:31:5E:14:EC:56:5B:4F:C8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA13180C25EC1884F4BB000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/943d4eb9-d91c-3916-9895-0d168e871044.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 108.177.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:31:80:c2:5e:c1:88:4f:4b:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=d4ddb6c2-9c60-4dc2-bd67-492808a219fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b1:d7:a9:96:b0:2f:48:d3:1d:52:71:cf:61: a2:3a:cd:42:76:40:61:f8:67:2c:d7:b2:e4:a9:25: 4b:21:5a:6c:30:31:77:2b:23:c0:27:23:64:6d:11: 03:1c:82:3d:e9:54:94:92:74:34:f6:00:ad:a6:6c: 79:a9:88:a5:43:c8:5c:ae:b0:72:6e:f8:06:d6:78: 1b:92:38:74:98:67:2f:04:aa:42:af:28:c1:04:44: ad:8f:7a:86:54:40:8a:96:18:45:c3:43:d1:a0:9b: e8:bc:01:75:a9:fc:b6:62:74:68:0b:af:f7:9d:3e: 47:f7:6d:d6:62:e1:77:df:4c:c7:81:1f:9e:7f:48: 7b:8a:bb:ba:74:a7:53:dd:fb:1a:27:1b:3e:73:64: b2:f4:0d:72:e2:f2:e4:9e:b0:a6:38:32:1e:8e:04: f8:03:f7:55:63:59:ba:bf:aa:90:b7:5c:55:39:3a: b2:1c:7e:2f:f4:b4:20:41:e8:56:df:5f:96:00:4e: 5f:1a:2c:3d:7b:22:d5:f8:11:12:85:44:7f:0f:c1: 1d:44:50:fc:1b:6a:4c:31:86:06:c2:26:6b:11:8c: c8:ea:c2:ec:aa:cc:25:07:96:9f:76:cf:ee:09:e0: 97:d4:8c:32:a2:48:8d:1e:2d:85:be:48:9e:0e:49: 5a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:94:B4:9E:DA:54:EE:03:F9:99:3A:22:31:5E:14:EC:56:5B:4F:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/943d4eb9-d91c-3916-9895-0d168e871044.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:8a:70:49:80:46:6b:92:40:29:cd:c8:79:65:81:78:7c:b2: 7b:e8:e0:35:58:d2:92:e0:fa:b6:81:e2:18:d4:6f:c0:e5:a4: a4:31:1e:b7:58:ae:e3:89:74:5a:8e:a2:0e:c8:87:b8:c4:bf: d0:99:10:b1:f0:36:23:64:55:10:6f:33:d2:63:e3:a2:72:4e: 8d:ff:c7:cf:d9:c0:fc:f6:8a:5f:9d:2d:55:a6:00:3f:2d:89: 90:14:2c:90:fa:89:de:6e:00:db:7c:7c:13:05:c1:3a:57:8f: ba:ce:07:51:45:20:c7:e3:d9:b8:4d:77:35:ec:8e:9c:5e:1f: 61:38:d0:c9:84:e4:4f:d6:39:c1:86:44:f0:f6:1c:6f:f8:80: 6c:1d:a2:44:70:00:18:5e:18:42:b9:0f:f8:8a:45:51:0a:2e: d2:d2:0d:89:77:b8:a2:e4:73:20:0e:b1:0f:c3:2f:54:f4:0d: ee:95:07:76:3c:58:c5:13:1a:ae:5d:ca:51:8d:bf:22:4a:74: 20:a3:37:93:cb:0d:ce:be:a8:61:dc:c6:85:3d:bf:88:5d:8c: 64:28:4c:5a:6d:59:95:59:44:50:7c:b0:3b:25:56:ea:18:2b: 3f:6f:be:90:d5:b5:7e:cb:19:ee:98:98:73:14:ef:f0:3c:0b: 75:a2:49:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoTGAwl7BiE9LsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk ZDRkZGI2YzItOWM2MC00ZGMyLWJkNjctNDkyODA4YTIxOWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrHXqZawL0jTHVJxz2GiOs1CdkBh+Gcs17Lk qSVLIVpsMDF3KyPAJyNkbREDHII96VSUknQ09gCtpmx5qYilQ8hcrrBybvgG1ngb kjh0mGcvBKpCryjBBEStj3qGVECKlhhFw0PRoJvovAF1qfy2YnRoC6/3nT5H923W YuF330zHgR+ef0h7iru6dKdT3fsaJxs+c2Sy9A1y4vLknrCmODIejgT4A/dVY1m6 v6qQt1xVOTqyHH4v9LQgQehW31+WAE5fGiw9eyLV+BEShUR/D8EdRFD8G2pMMYYG wiZrEYzI6sLsqswlB5afds/uCeCX1IwyokiNHi2FvkieDklaIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2UtJ7aVO4D+Zk6IjFeFOxWW0/IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTQzZDRlYjktZDkxYy0z OTE2LTk4OTUtMGQxNjhlODcxMDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLFmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKyKcEmARmuSQCnNyHllgXh8snvo4DVY0pLg+raB4hjUb8DlpKQxHrdY ruOJdFqOog7Ih7jEv9CZELHwNiNkVRBvM9Jj46JyTo3/x8/ZwPz2il+dLVWmAD8t iZAULJD6id5uANt8fBMFwTpXj7rOB1FFIMfj2bhNdzXsjpxeH2E40MmE5E/WOcGG RPD2HG/4gGwdokRwABheGEK5D/iKRVEKLtLSDYl3uKLkcyAOsQ/DL1T0De6VB3Y8 WMUTGq5dylGNvyJKdCCjN5PLDc6+qGHcxoU9v4hdjGQoTFptWZVZRFB8sDslVuoY Kz9vvpDVtX7LGe6YmHMU7/A8C3WiSTI= -----END CERTIFICATE-----Generated at Fri Mar 14 09:30:03 2025 by rpki-client