$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa7a9168-d9b5-3e3a-a2b1-ce2a7051cc43.roa File: aa7a9168-d9b5-3e3a-a2b1-ce2a7051cc43.roa (raw, json) Hash identifier: 7/ZJ/urY6SfAnPCV842J//YL8sAUXn3jVy7/K/tor3M= Subject key identifier: 46:47:68:10:F0:3E:1F:22:10:10:54:52:F5:9B:7F:D5:B1:3E:1D:7B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848BFEBD6147BA70F1105D08460 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa7a9168-d9b5-3e3a-a2b1-ce2a7051cc43.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 15169 IP address blocks: 108.177.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:d6:14:7b:a7:0f:11:05:d0:84:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=49bf8549-1de2-42e2-b5d4-bcace13aedba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:62:0d:2e:af:8a:55:8c:4d:11:7d:ab:e4:e5: 58:d0:2b:c4:d5:04:aa:e7:64:b6:4d:06:3f:0e:61: 49:e3:1e:22:41:21:b8:ff:70:62:ae:26:6b:3a:c5: 86:6c:e8:04:b9:d4:45:02:ff:e6:8a:fd:00:51:57: 41:fc:ef:18:ab:f1:19:2c:c8:a6:45:f0:d5:9d:57: 28:64:1e:11:e1:49:1c:61:4d:a5:c6:28:c6:1f:1e: 34:cc:41:01:c0:22:5a:9d:4d:54:7f:ae:d7:9f:98: cd:17:da:00:0c:4b:90:93:d8:50:a3:ff:1c:08:27: a6:64:eb:95:f0:1c:5e:e7:6f:ad:d0:45:82:62:bf: 7b:bb:f8:09:59:e9:33:05:cf:26:4b:fb:fe:45:29: 5a:aa:c5:eb:22:b0:4d:dc:99:51:35:2c:d1:b3:9d: 33:f9:fa:bd:ea:88:d0:97:88:cd:f6:6c:fd:a0:97: 2b:3d:7e:79:a1:4f:9d:51:30:e1:54:fa:2a:e3:af: 61:8f:54:16:65:64:1f:c8:8e:33:19:4f:e7:cf:a8: 72:c2:3c:a1:de:f8:ab:67:83:aa:0d:c7:92:0b:8b: 58:6c:1f:73:ab:1f:2c:16:b3:cf:df:0b:20:de:d3: fd:66:fc:d2:08:56:80:71:85:9a:dd:d4:db:ef:fb: 98:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:47:68:10:F0:3E:1F:22:10:10:54:52:F5:9B:7F:D5:B1:3E:1D:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa7a9168-d9b5-3e3a-a2b1-ce2a7051cc43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:db:a9:31:a8:48:3f:8d:58:ef:fc:0d:22:79:2b:ac:82:f7: bc:fe:24:90:b0:77:00:10:2b:30:76:1f:ef:03:fa:45:f8:f2: 39:00:8a:6d:34:3f:84:ff:39:2f:28:a3:2e:38:ac:28:d5:5a: 65:fe:90:e4:f8:9a:5c:f2:c8:5c:f7:47:c3:8f:df:92:b7:87: 77:70:0f:2c:26:3f:a5:15:70:07:d4:54:15:85:84:28:0a:4b: 95:d5:87:a4:18:30:44:9c:b7:f4:55:8b:be:61:00:b6:4f:cd: 27:5d:04:6c:11:7f:c6:b7:b4:50:8c:ef:15:4b:89:fc:33:f9: 9e:b5:2a:1f:8f:6d:8f:8c:80:ba:31:3f:18:ea:aa:e6:25:3e: 3b:d2:72:f6:36:a2:67:88:d8:c4:22:c7:f5:55:b6:8e:75:43: 8a:f6:50:ac:21:d5:df:74:70:c9:3e:2a:0e:68:5a:a8:d3:bd: 9d:32:8e:3e:23:44:18:9b:94:ab:cc:0e:8c:38:e9:7c:03:27: cd:e5:35:3c:f4:b3:1a:3f:3f:e7:df:df:00:19:9f:e2:94:29: 66:da:cd:75:ec:24:4f:44:ac:b5:1e:66:ac:49:d8:41:6a:5b: 18:f1:36:ce:b2:e8:b5:97:1a:98:89:cb:14:b3:d0:c0:de:52: 4d:2e:96:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/69YUe6cPEQXQhGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk NDliZjg1NDktMWRlMi00MmUyLWI1ZDQtYmNhY2UxM2FlZGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWINLq+KVYxNEX2r5OVY0CvE1QSq52S2TQY/ DmFJ4x4iQSG4/3BiriZrOsWGbOgEudRFAv/miv0AUVdB/O8Yq/EZLMimRfDVnVco ZB4R4UkcYU2lxijGHx40zEEBwCJanU1Uf67Xn5jNF9oADEuQk9hQo/8cCCemZOuV 8Bxe52+t0EWCYr97u/gJWekzBc8mS/v+RSlaqsXrIrBN3JlRNSzRs50z+fq96ojQ l4jN9mz9oJcrPX55oU+dUTDhVPoq469hj1QWZWQfyI4zGU/nz6hywjyh3virZ4Oq DceSC4tYbB9zqx8sFrPP3wsg3tP9ZvzSCFaAcYWa3dTb7/uYwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZHaBDwPh8iEBBUUvWbf9WxPh17MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWE3YTkxNjgtZDliNS0z ZTNhLWEyYjEtY2UyYTcwNTFjYzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLEXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHbqTGoSD+NWO/8DSJ5K6yC97z+JJCwdwAQKzB2H+8D+kX48jkAim00 P4T/OS8ooy44rCjVWmX+kOT4mlzyyFz3R8OP35K3h3dwDywmP6UVcAfUVBWFhCgK S5XVh6QYMESct/RVi75hALZPzSddBGwRf8a3tFCM7xVLifwz+Z61Kh+PbY+MgLox PxjqquYlPjvScvY2omeI2MQix/VVto51Q4r2UKwh1d90cMk+Kg5oWqjTvZ0yjj4j RBiblKvMDow46XwDJ83lNTz0sxo/P+ff3wAZn+KUKWbazXXsJE9ErLUeZqxJ2EFq WxjxNs6y6LWXGpiJyxSz0MDeUk0uln0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:45:07 2025 by rpki-client