$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cb486e80-1606-3cc8-8fcc-80c739f8eccd.roa File: cb486e80-1606-3cc8-8fcc-80c739f8eccd.roa (raw, json) Hash identifier: ZYRyhVqEyldcYy1ZD9X5pq1LrfHGuwqk5nvHdEbjB7s= Subject key identifier: D2:4E:7B:5F:21:DA:96:42:E8:63:CE:9F:4C:FE:69:93:6C:7C:73:78 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA1268E15339B8A64644200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cb486e80-1606-3cc8-8fcc-80c739f8eccd.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 108.177.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:26:8e:15:33:9b:8a:64:64:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=d66bf102-65d8-471f-ac97-6f2bd27161d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ca:a4:08:52:50:a3:b4:4f:15:7b:72:0d:6f: 07:2b:1f:ee:23:54:4b:ac:d8:e1:67:c5:0c:52:e3: ec:7c:56:0d:e0:a6:64:ee:fb:45:70:d7:2f:36:95: 41:79:95:a8:8f:bf:04:9b:fd:1b:46:4f:c0:2e:49: 5e:fd:e3:a4:5a:12:fe:b6:b1:96:c2:86:5c:c0:c7: bd:80:11:16:9d:28:c1:2b:82:cf:0b:a5:80:00:5f: 62:26:80:07:3f:67:37:14:fb:16:ea:93:1d:8b:c2: 3b:f0:e0:22:98:c7:1e:a8:50:11:eb:40:d2:e8:de: 4c:5f:f6:7f:16:fd:64:c5:98:9d:7d:c9:2d:af:3c: 73:9b:50:a1:d8:c8:cd:73:49:6e:11:cf:d1:a3:af: 1a:43:92:7f:60:54:04:e8:0e:7e:9e:0b:9a:af:d9: 39:e3:15:b5:4f:5d:83:45:74:8e:ca:0b:17:cc:2c: 43:51:38:ed:47:f0:8f:09:54:01:26:9e:b1:22:ee: df:06:39:1e:24:15:69:f9:e7:63:98:0a:c1:fc:1e: e2:b2:a6:9d:19:22:72:1b:c6:5e:c3:be:2a:19:24: 97:eb:c5:1c:b9:23:8a:c5:d2:3a:ee:a2:7b:a9:75: b0:b4:7a:36:9a:73:37:95:5b:7f:45:fd:7a:79:ef: a3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:4E:7B:5F:21:DA:96:42:E8:63:CE:9F:4C:FE:69:93:6C:7C:73:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cb486e80-1606-3cc8-8fcc-80c739f8eccd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:c7:e3:80:45:aa:7d:85:50:c7:a6:d2:a8:ec:dd:49:b5:07: 30:51:9c:e2:e3:a2:86:f2:e4:70:15:1b:e9:a2:ba:d4:15:06: 77:4f:73:ab:a6:0c:31:78:1e:64:b4:bf:49:0d:53:57:c0:0f: 73:3b:6c:81:fb:a8:fb:36:79:fb:4e:14:37:a2:72:af:8f:e6: ab:9f:2f:24:ae:59:d9:3b:dc:39:6d:11:ea:6c:88:a7:d5:e9: 91:fa:79:30:51:de:16:25:c1:1e:34:ca:cb:15:5d:90:a9:2d: 6c:1b:91:32:29:2e:32:86:7b:c1:dd:37:4d:9b:17:63:8b:00: 05:28:41:37:d1:52:08:23:18:06:4b:07:2f:58:4c:67:43:62: 85:f9:db:d0:8e:c9:28:47:a3:3a:e2:d1:41:3d:8e:4d:9a:32: c5:b2:ed:af:5a:e8:68:ff:a1:d9:92:2e:91:22:01:22:d2:44: 7e:35:3e:f1:b5:32:b9:22:be:6a:51:25:e1:31:e9:98:8d:e7: 13:66:2c:63:2d:91:cc:92:fd:e5:1c:09:35:e2:d1:4f:5d:df: b2:7c:32:c2:b5:25:f5:78:40:ad:13:f9:95:fe:94:95:b4:1d: 35:2f:76:a1:69:13:9d:b8:6d:53:0e:91:98:4d:54:e4:a4:c8: 46:41:8d:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSaOFTObimRkQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk ZDY2YmYxMDItNjVkOC00NzFmLWFjOTctNmYyYmQyNzE2MWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48qkCFJQo7RPFXtyDW8HKx/uI1RLrNjhZ8UM UuPsfFYN4KZk7vtFcNcvNpVBeZWoj78Em/0bRk/ALkle/eOkWhL+trGWwoZcwMe9 gBEWnSjBK4LPC6WAAF9iJoAHP2c3FPsW6pMdi8I78OAimMceqFAR60DS6N5MX/Z/ Fv1kxZidfcktrzxzm1Ch2MjNc0luEc/Ro68aQ5J/YFQE6A5+nguar9k54xW1T12D RXSOygsXzCxDUTjtR/CPCVQBJp6xIu7fBjkeJBVp+edjmArB/B7isqadGSJyG8Ze w74qGSSX68UcuSOKxdI67qJ7qXWwtHo2mnM3lVt/Rf16ee+jowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJOe18h2pZC6GPOn0z+aZNsfHN4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2I0ODZlODAtMTYwNi0z Y2M4LThmY2MtODBjNzM5ZjhlY2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLFtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALTH44BFqn2FUMem0qjs3Um1BzBRnOLjooby5HAVG+miutQVBndPc6um DDF4HmS0v0kNU1fAD3M7bIH7qPs2eftOFDeicq+P5qufLySuWdk73DltEepsiKfV 6ZH6eTBR3hYlwR40yssVXZCpLWwbkTIpLjKGe8HdN02bF2OLAAUoQTfRUggjGAZL By9YTGdDYoX529COyShHozri0UE9jk2aMsWy7a9a6Gj/odmSLpEiASLSRH41PvG1 MrkivmpRJeEx6ZiN5xNmLGMtkcyS/eUcCTXi0U9d37J8MsK1JfV4QK0T+ZX+lJW0 HTUvdqFpE524bVMOkZhNVOSkyEZBjQk= -----END CERTIFICATE-----Generated at Fri Apr 4 08:26:15 2025 by rpki-client