$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d513e5ac-bb80-3ec5-9118-78a41c20aaba.roa File: d513e5ac-bb80-3ec5-9118-78a41c20aaba.roa (raw, json) Hash identifier: pnM0NtHRHVGTOPQV+OQ9mfBac6bwWzpDke8U4wUdB6E= Subject key identifier: 00:FD:52:14:9E:C5:E1:C8:F8:F3:8B:09:75:25:14:E9:0B:65:4F:4F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848BFEBB47E3532DCC9A3479C65 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d513e5ac-bb80-3ec5-9118-78a41c20aaba.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 108.170.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:b4:7e:35:32:dc:c9:a3:47:9c:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=6ecd45df-84fb-4dc1-b1dc-ec96253f1dff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:dc:c2:cb:ce:42:f3:9d:de:9c:ef:70:7d:3a: de:27:a1:b2:18:68:1c:2b:13:e3:4f:46:26:22:8f: 8b:40:de:e6:0c:6f:59:48:48:a2:92:24:c6:97:13: bb:ea:ca:ad:79:b3:bd:32:a3:59:1b:9a:f3:cd:1b: 92:a8:a6:ff:5f:63:a5:48:cb:40:27:c3:f7:63:3a: aa:5d:c8:1f:4f:95:ff:85:b0:c0:dd:b9:a2:f4:6a: f2:19:c3:53:7f:79:ae:0d:8b:16:44:ad:f3:9f:ed: a9:0b:af:42:3b:37:52:29:4a:80:f1:2e:cd:e6:a1: e4:f2:15:6d:22:d1:f2:1b:7b:dc:2b:28:ce:cf:a2: ea:fc:5a:41:35:66:ba:3a:29:c5:3d:1f:29:e9:86: 81:65:a9:05:54:02:18:0f:72:52:47:37:81:98:bd: 42:a7:c4:fc:eb:2d:34:cf:94:6c:47:48:5a:9e:6c: d3:f8:b8:e8:8b:5a:ad:cc:c4:74:d1:34:e7:84:53: 36:30:33:e0:0c:45:3f:0c:11:30:eb:cc:9b:e7:02: c3:0a:82:62:12:ce:b4:07:5f:ee:27:05:c5:c1:73: 95:54:ef:63:85:6b:5f:93:1b:fc:04:fe:01:e3:f3: 62:77:f5:6b:e9:22:ea:35:52:6a:2b:fc:ab:42:0b: 9e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FD:52:14:9E:C5:E1:C8:F8:F3:8B:09:75:25:14:E9:0B:65:4F:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d513e5ac-bb80-3ec5-9118-78a41c20aaba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:06:f9:cc:b1:5a:90:16:67:8a:08:fe:c2:8b:12:c1:af:a6: 82:86:2e:ec:b1:89:d5:f8:22:00:c4:c1:7e:a7:de:53:d1:78: 9c:e9:37:22:0b:d6:9a:e8:12:77:a4:06:ac:5b:1e:5e:51:13: 40:0f:ae:40:17:59:ad:e1:8a:79:d9:b9:2c:e9:18:86:6c:23: ee:89:4a:5c:2d:92:2c:98:ef:28:18:6d:b7:62:3e:fc:30:17: c4:4c:58:91:69:0c:35:7d:c9:dc:7c:74:be:08:f2:6f:9e:b4: 5f:bf:43:dd:97:c0:de:0c:f5:54:f0:1b:ed:a9:ad:7f:30:85: 10:f1:1b:80:72:29:ef:5d:d0:50:55:2d:8c:b3:0f:64:8c:04: 49:ec:16:85:c7:63:11:c0:32:29:6b:ef:a1:2f:5a:bb:70:9a: 64:1d:45:fa:06:cf:ee:95:15:55:ce:e0:4a:90:a1:28:95:3f: 18:bd:2d:e1:22:b4:ef:08:8f:8f:35:20:b1:c2:87:11:12:82: 76:73:85:5c:eb:60:d5:e6:5d:ef:6b:85:b1:42:04:74:b9:dd: 16:e3:34:4b:99:9b:fe:b5:34:8a:0e:9b:e4:4d:5e:6c:a4:5d: 28:c9:f3:e4:30:2d:94:db:ba:21:29:e0:a3:52:83:9d:32:0e: 7f:21:cf:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/67R+NTLcyaNHnGUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk NmVjZDQ1ZGYtODRmYi00ZGMxLWIxZGMtZWM5NjI1M2YxZGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9zCy85C853enO9wfTreJ6GyGGgcKxPjT0Ym Io+LQN7mDG9ZSEiikiTGlxO76sqtebO9MqNZG5rzzRuSqKb/X2OlSMtAJ8P3Yzqq XcgfT5X/hbDA3bmi9GryGcNTf3muDYsWRK3zn+2pC69COzdSKUqA8S7N5qHk8hVt ItHyG3vcKyjOz6Lq/FpBNWa6OinFPR8p6YaBZakFVAIYD3JSRzeBmL1Cp8T86y00 z5RsR0hanmzT+Ljoi1qtzMR00TTnhFM2MDPgDEU/DBEw68yb5wLDCoJiEs60B1/u JwXFwXOVVO9jhWtfkxv8BP4B4/Nid/Vr6SLqNVJqK/yrQgueOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAD9UhSexeHI+POLCXUlFOkLZU9PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDUxM2U1YWMtYmI4MC0z ZWM1LTkxMTgtNzhhNDFjMjBhYWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgG+cyxWpAWZ4oI/sKLEsGvpoKGLuyxidX4IgDEwX6n3lPReJzpNyIL 1proEnekBqxbHl5RE0APrkAXWa3hinnZuSzpGIZsI+6JSlwtkiyY7ygYbbdiPvww F8RMWJFpDDV9ydx8dL4I8m+etF+/Q92XwN4M9VTwG+2prX8whRDxG4ByKe9d0FBV LYyzD2SMBEnsFoXHYxHAMilr76EvWrtwmmQdRfoGz+6VFVXO4EqQoSiVPxi9LeEi tO8Ij481ILHChxESgnZzhVzrYNXmXe9rhbFCBHS53RbjNEuZm/61NIoOm+RNXmyk XSjJ8+QwLZTbuiEp4KNSg50yDn8hz7U= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:09 2025 by rpki-client