$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ab24d62c-2fff-3baf-b92a-0d28aaaca333.roa File: ab24d62c-2fff-3baf-b92a-0d28aaaca333.roa (raw, json) Hash identifier: RG3LPFcxgXpolk7DycRThuLfvc9NwOIEIc1/tM4nA9k= Subject key identifier: F4:E6:1E:B8:8A:4A:FA:53:C0:11:22:C4:7B:1A:A8:60:16:B0:5B:F2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848BFEBCD7B93C16C7F67868100 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ab24d62c-2fff-3baf-b92a-0d28aaaca333.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 15169 IP address blocks: 108.177.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:cd:7b:93:c1:6c:7f:67:86:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=6727fa77-7d08-4348-864c-85309d8b9a45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6f:f0:e5:79:30:7f:bb:8b:77:7a:80:84:45: 58:b8:e7:66:a8:b1:25:23:34:08:8f:66:4b:02:92: ef:74:25:a6:dd:85:09:1d:d7:94:79:24:f6:2c:94: 72:85:67:8b:a3:78:2b:93:7e:38:15:0f:b9:42:a7: 4e:d4:2d:1f:3b:d3:d4:3d:03:bf:c4:e5:7d:cb:1c: 39:4c:67:3c:2f:ab:fa:9f:64:d0:5c:48:77:92:5c: 03:3a:1c:2a:47:72:cd:ed:00:c4:7d:6f:e5:05:bf: d4:a8:4d:84:32:5d:8b:bb:6d:0d:0c:31:16:56:b4: b5:f1:a1:b3:d9:42:0f:f6:b4:6a:16:6a:20:fa:16: 62:78:15:6a:fe:e4:dc:94:ee:5e:e8:55:ec:6a:1e: e8:a6:97:a2:e4:e5:6f:00:8e:6b:1f:dd:52:3f:da: 80:fd:80:87:56:7c:81:7c:24:22:5a:a0:42:f7:7d: 7d:ad:cd:d1:48:f1:4b:75:7f:9d:13:98:7b:72:ed: 0f:72:c3:27:b9:bd:15:87:da:6d:77:ee:48:fa:30: 1e:37:9e:02:91:f3:76:c9:a1:7c:b0:9c:59:1c:82: 87:8a:e3:e2:c2:fd:b2:b7:07:fa:6e:54:fc:0a:b3: 2a:50:ec:68:25:0e:d0:05:88:18:cb:d1:cf:76:97: 37:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E6:1E:B8:8A:4A:FA:53:C0:11:22:C4:7B:1A:A8:60:16:B0:5B:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ab24d62c-2fff-3baf-b92a-0d28aaaca333.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:a7:4e:34:3d:13:7e:14:1a:95:37:58:4e:f8:c3:2f:bc:57: e1:78:63:29:a4:22:e2:a3:b1:70:d8:f3:1f:7e:b2:aa:84:bb: 4d:23:d2:00:ae:3c:01:ee:7f:41:01:e3:50:39:50:d9:37:37: 3d:b8:3d:37:3e:a8:7c:fa:d5:6c:0e:fd:1b:01:63:38:50:f7: 7f:d9:c2:61:cc:f8:c7:9b:a9:bb:42:3e:d0:ce:fd:4c:b4:d8: b5:86:73:97:ca:fc:1f:31:fd:6e:7d:67:78:a5:90:cb:88:f6: 5a:3e:83:c8:d3:68:a2:3b:61:a3:c0:f3:cc:8d:75:07:94:19: a3:74:3b:10:51:c4:93:8a:d5:9a:08:ec:3e:a6:67:07:c2:d4: db:e9:73:4a:89:94:29:c4:04:e0:af:c4:f7:f9:b7:a5:6b:a5: 3c:11:6d:61:52:18:55:36:00:02:0e:de:b2:25:18:43:13:ea: f2:50:e7:ee:b5:0a:d3:48:95:a0:24:e8:f1:a2:fa:c6:b0:b9: ff:91:32:3c:db:45:73:0d:52:9b:8f:36:58:a2:9e:2d:79:e2: 2e:5b:e7:93:f1:79:b4:b1:15:63:45:5c:a4:75:11:5f:f7:90: 92:a1:ff:eb:c6:c5:71:a2:7d:9b:65:be:3d:04:2c:81:d9:f9: a9:11:0b:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/6817k8Fsf2eGgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk NjcyN2ZhNzctN2QwOC00MzQ4LTg2NGMtODUzMDlkOGI5YTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW/w5Xkwf7uLd3qAhEVYuOdmqLElIzQIj2ZL ApLvdCWm3YUJHdeUeST2LJRyhWeLo3grk344FQ+5QqdO1C0fO9PUPQO/xOV9yxw5 TGc8L6v6n2TQXEh3klwDOhwqR3LN7QDEfW/lBb/UqE2EMl2Lu20NDDEWVrS18aGz 2UIP9rRqFmog+hZieBVq/uTclO5e6FXsah7oppei5OVvAI5rH91SP9qA/YCHVnyB fCQiWqBC9319rc3RSPFLdX+dE5h7cu0PcsMnub0Vh9ptd+5I+jAeN54CkfN2yaF8 sJxZHIKHiuPiwv2ytwf6blT8CrMqUOxoJQ7QBYgYy9HPdpc3xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPTmHriKSvpTwBEixHsaqGAWsFvyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWIyNGQ2MmMtMmZmZi0z YmFmLWI5MmEtMGQyOGFhYWNhMzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLF9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABinTjQ9E34UGpU3WE74wy+8V+F4YymkIuKjsXDY8x9+sqqEu00j0gCu PAHuf0EB41A5UNk3Nz24PTc+qHz61WwO/RsBYzhQ93/ZwmHM+MebqbtCPtDO/Uy0 2LWGc5fK/B8x/W59Z3ilkMuI9lo+g8jTaKI7YaPA88yNdQeUGaN0OxBRxJOK1ZoI 7D6mZwfC1Nvpc0qJlCnEBOCvxPf5t6VrpTwRbWFSGFU2AAIO3rIlGEMT6vJQ5+61 CtNIlaAk6PGi+sawuf+RMjzbRXMNUpuPNliini154i5b55PxebSxFWNFXKR1EV/3 kJKh/+vGxXGifZtlvj0ELIHZ+akRCxA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:33 2025 by rpki-client