$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9d5d0e6b-ec68-3781-9902-b93c0e624ba2.roa File: 9d5d0e6b-ec68-3781-9902-b93c0e624ba2.roa (raw, json) Hash identifier: 30ImfDNjD5ZTfuyqU2WY7bjHrWxgVyYji9+c5TbY71U= Subject key identifier: 85:BE:57:B8:35:63:22:53:57:76:CC:1F:59:60:A2:6C:F1:5D:A2:B7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA12B6E01684758A8D18900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9d5d0e6b-ec68-3781-9902-b93c0e624ba2.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 108.177.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:2b:6e:01:68:47:58:a8:d1:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=17c6f576-bcc5-4586-9c6a-4568d4ae6559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5a:6e:2c:50:cf:8c:e2:b7:78:85:80:4f:04: 46:eb:60:43:1a:e1:7e:39:ee:cb:91:b3:0c:92:91: aa:c8:b6:9d:7c:f4:7f:4c:a7:8e:a5:65:e4:69:91: 96:7a:8d:a3:08:a3:ad:21:b2:1e:08:53:53:f9:c7: 69:ae:5b:f0:5a:3f:8b:fd:f8:a9:0e:b9:e9:aa:9d: 01:50:8b:29:02:a6:9c:39:9b:c8:23:ad:6e:4c:db: 17:82:cd:45:a6:9d:12:95:ed:c7:92:e6:a4:8c:b4: 1a:a7:9d:9e:8a:83:fe:39:71:ef:46:81:12:9f:67: 7c:2e:09:7f:e6:d5:07:ef:3d:26:e9:27:9b:e0:f1: 57:c4:e9:10:15:20:d7:9f:7b:58:de:59:10:5a:11: 66:b6:c5:f2:b4:c8:4c:3d:28:ea:f6:a4:19:97:5c: 8c:08:2d:63:b0:68:a0:cf:98:0f:3a:67:af:10:a9: ae:59:d5:18:ae:c7:45:fb:31:ba:54:07:83:cf:4a: 76:a4:63:8d:00:55:00:4a:20:d2:71:c7:21:3e:52: 28:7b:08:c3:d7:55:cc:f8:d2:51:c1:da:30:f9:7d: 48:77:99:51:cf:24:e8:83:49:cd:53:16:28:af:99: bb:07:b1:fb:3a:35:9a:a7:72:ad:a3:d5:82:02:21: 6c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BE:57:B8:35:63:22:53:57:76:CC:1F:59:60:A2:6C:F1:5D:A2:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9d5d0e6b-ec68-3781-9902-b93c0e624ba2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:f4:66:22:1f:ad:26:ae:89:57:f6:71:3b:7a:5a:ea:b0:50: e8:84:53:d4:2a:a4:a9:8f:2e:e8:8f:08:3a:b8:21:87:40:6a: c7:c0:d7:5a:73:0f:4d:ae:3a:20:ee:24:d7:74:08:a1:76:c6: 75:85:3b:00:e0:95:7c:b3:cc:44:75:ae:35:b6:59:50:15:1e: e9:11:27:b0:5a:ce:dc:32:dc:3d:e6:7a:81:27:76:af:3b:7d: 04:ea:d9:8b:b9:3b:3d:6b:34:6b:67:f9:82:90:c1:ab:f3:1a: 5b:4f:e2:f3:29:14:8a:24:98:55:62:ae:bd:ff:4a:9a:0a:ec: 68:a3:45:25:82:e6:22:e1:a9:b3:8b:4f:62:50:8c:93:8b:02: e5:03:80:df:64:aa:1c:b6:5f:8b:2c:c1:f4:88:8d:33:28:ef: ee:94:39:e8:cc:b1:d4:6f:d9:63:97:23:f5:61:b6:d3:26:f2: 58:41:87:90:f9:3b:a0:02:63:72:c9:0d:3e:49:83:3f:78:a7: 4b:25:59:8a:24:da:71:96:45:b0:fb:4e:94:47:a5:f2:3d:2f: 29:cc:5d:f6:69:1e:57:15:79:49:e9:9a:b5:90:0a:88:dc:12: 77:44:c2:c6:a5:29:59:3e:29:51:56:3a:13:f7:ac:2c:7f:3b: 9f:d8:cf:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoStuAWhHWKjRiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk MTdjNmY1NzYtYmNjNS00NTg2LTljNmEtNDU2OGQ0YWU2NTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVpuLFDPjOK3eIWATwRG62BDGuF+Oe7LkbMM kpGqyLadfPR/TKeOpWXkaZGWeo2jCKOtIbIeCFNT+cdprlvwWj+L/fipDrnpqp0B UIspAqacOZvII61uTNsXgs1Fpp0Sle3HkuakjLQap52eioP+OXHvRoESn2d8Lgl/ 5tUH7z0m6Seb4PFXxOkQFSDXn3tY3lkQWhFmtsXytMhMPSjq9qQZl1yMCC1jsGig z5gPOmevEKmuWdUYrsdF+zG6VAeDz0p2pGONAFUASiDSccchPlIoewjD11XM+NJR wdow+X1Id5lRzyTog0nNUxYor5m7B7H7OjWap3Kto9WCAiFsJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIW+V7g1YyJTV3bMH1lgomzxXaK3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWQ1ZDBlNmItZWM2OC0z NzgxLTk5MDItYjkzYzBlNjI0YmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLFsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIz0ZiIfrSauiVf2cTt6WuqwUOiEU9QqpKmPLuiPCDq4IYdAasfA11pz D02uOiDuJNd0CKF2xnWFOwDglXyzzER1rjW2WVAVHukRJ7Baztwy3D3meoEndq87 fQTq2Yu5Oz1rNGtn+YKQwavzGltP4vMpFIokmFVirr3/SpoK7GijRSWC5iLhqbOL T2JQjJOLAuUDgN9kqhy2X4sswfSIjTMo7+6UOejMsdRv2WOXI/VhttMm8lhBh5D5 O6ACY3LJDT5Jgz94p0slWYok2nGWRbD7TpRHpfI9LynMXfZpHlcVeUnpmrWQCojc EndEwsalKVk+KVFWOhP3rCx/O5/Yz4o= -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:44 2025 by rpki-client