$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/2ff5e986-62fe-36cf-9d95-ecb4c2754c94.roa File: 2ff5e986-62fe-36cf-9d95-ecb4c2754c94.roa (raw, json) Hash identifier: QNIivIEegckpjPtvat3glxmn+caW3Nknt7CstgGiDKQ= Subject key identifier: 8F:26:DB:76:6A:99:29:67:AF:E8:B2:25:3C:9F:EF:AD:32:60:48:2B Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Certificate serial: 010D0C9F4328584695791E6F96A9DB1057B97400 Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/2ff5e986-62fe-36cf-9d95-ecb4c2754c94.roa Signing time: Wed 17 Jul 2024 12:00:00 +0000 ROA not before: Wed 17 Jul 2024 12:00:00 +0000 ROA not after: Fri 21 Aug 2026 04:00:00 +0000 asID: 36692 IP address blocks: 108.171.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:95:79:1e:6f:96:a9:db:10:57:b9:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Validity Not Before: Jul 17 12:00:00 2024 GMT Not After : Aug 21 04:00:00 2026 GMT Subject: CN=397f0d23-d54e-49f4-b0bb-7a277a096e00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7d:c3:60:1d:29:bf:50:e6:f9:85:88:fe:f7: cb:f5:6b:4e:f8:29:30:3b:92:2c:6c:bc:05:13:ab: b9:47:8d:37:5b:8b:35:92:13:64:bc:8b:47:91:44: 9e:5c:38:b6:02:8e:8b:68:35:41:a8:01:6e:05:e6: 46:3e:82:df:5a:3d:d2:74:d3:c7:28:a3:cb:b3:1b: 53:a9:27:1e:7e:49:13:0b:05:be:cb:6a:2c:b7:30: 89:e9:52:e9:d4:b1:fe:63:48:3f:77:78:7c:94:0e: f7:97:07:0d:95:9a:b4:db:c3:2d:0a:87:73:01:24: f1:53:e1:48:df:42:6d:c0:26:f4:00:90:02:ce:27: f7:1a:c0:5b:5b:36:c1:3e:14:e5:4e:22:c7:eb:9e: 48:da:2b:44:1f:28:f5:ee:90:9f:83:17:25:48:1a: e7:8d:42:2e:f6:5c:30:98:c3:96:8d:e6:ad:17:26: 01:d0:b3:ea:4f:24:37:59:46:9e:37:03:be:03:c2: ae:43:16:68:93:bb:8d:2e:50:58:45:b3:ad:1e:ce: 6d:3f:64:47:f6:3a:ed:3a:90:75:a0:98:9a:ae:16: 8a:be:a9:89:cc:12:7b:f4:a2:43:8c:14:c4:9f:e8: 77:09:fc:83:ef:12:4c:3b:71:2f:06:23:d5:3c:b2: 97:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:26:DB:76:6A:99:29:67:AF:E8:B2:25:3C:9F:EF:AD:32:60:48:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/2ff5e986-62fe-36cf-9d95-ecb4c2754c94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl X509v3 Authority Key Identifier: keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer sbgp-ipAddrBlock: critical IPv4: 108.171.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:7b:ad:53:f0:77:79:5b:95:9d:47:99:74:9a:a5:2f:00:4c: 8d:74:0d:82:50:57:0c:fe:74:06:81:a1:08:78:95:09:60:41: 96:13:37:1d:9a:e4:00:13:13:f6:3a:0e:52:cc:c6:b8:b9:bb: 55:45:53:3f:ea:10:05:1e:42:a9:c6:db:00:e0:92:e1:a5:10: 20:20:9d:9e:ca:62:01:c7:e7:36:5d:8c:e2:b5:65:d2:30:57: 33:9f:5d:9e:55:06:5c:ed:c3:0e:d7:29:25:87:33:65:07:db: 71:d2:7f:77:fa:c8:f3:a8:a5:33:d1:33:42:b7:28:fb:f1:0e: 01:7a:a5:bd:49:2e:15:d2:04:2b:b4:eb:e6:0e:a9:53:f1:18: 32:6c:b3:57:cc:e4:be:c1:94:e9:04:f7:5f:b5:75:5c:c0:80: 92:03:6a:98:af:4e:fa:6b:a5:27:47:64:fa:d5:84:56:31:70: 7c:4f:e1:a9:94:b3:97:2b:31:86:83:a5:9e:4c:58:84:05:d4: 90:59:fb:5c:d8:8e:81:c9:fe:78:8c:da:82:0c:7e:60:6e:82: 1b:de:b6:bb:1c:02:97:51:fb:3c:64:5a:57:40:1b:b4:88:0f: 8a:89:23:33:17:c5:aa:ca:c4:3d:63:e5:8c:5b:9e:0a:31:dd: 6e:88:1c:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEaVeR5vlqnbEFe5dAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJk ZWZjMB4XDTI0MDcxNzEyMDAwMFoXDTI2MDgyMTA0MDAwMFowLzEtMCsGA1UEAxMk Mzk3ZjBkMjMtZDU0ZS00OWY0LWIwYmItN2EyNzdhMDk2ZTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnX3DYB0pv1Dm+YWI/vfL9WtO+CkwO5IsbLwF E6u5R403W4s1khNkvItHkUSeXDi2Ao6LaDVBqAFuBeZGPoLfWj3SdNPHKKPLsxtT qScefkkTCwW+y2ostzCJ6VLp1LH+Y0g/d3h8lA73lwcNlZq028MtCodzASTxU+FI 30JtwCb0AJACzif3GsBbWzbBPhTlTiLH655I2itEHyj17pCfgxclSBrnjUIu9lww mMOWjeatFyYB0LPqTyQ3WUaeNwO+A8KuQxZok7uNLlBYRbOtHs5tP2RH9jrtOpB1 oJiarhaKvqmJzBJ79KJDjBTEn+h3CfyD7xJMO3EvBiPVPLKXGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8m23ZqmSlnr+iyJTyf760yYEgrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84OTFj YzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvMmZmNWU5ODYtNjJmZS0z NmNmLTlkOTUtZWNiNGMyNzU0Yzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODkxY2MwMWEtMzdiZC00MWNhLThm MmEtMjNjMDYyYmJkZWZjLzg5MWNjMDFhLTM3YmQtNDFjYS04ZjJhLTIzYzA2MmJi ZGVmYy5jcmwwHwYDVR0jBBgwFoAUnjHotKY0A7BPCiCfMGrdCmC4kkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2Mw NjJiYmRlZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKuBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFd7rVPwd3lblZ1HmXSapS8ATI10DYJQVwz+dAaBoQh4lQlgQZYTNx2a 5AATE/Y6DlLMxri5u1VFUz/qEAUeQqnG2wDgkuGlECAgnZ7KYgHH5zZdjOK1ZdIw VzOfXZ5VBlztww7XKSWHM2UH23HSf3f6yPOopTPRM0K3KPvxDgF6pb1JLhXSBCu0 6+YOqVPxGDJss1fM5L7BlOkE91+1dVzAgJIDapivTvprpSdHZPrVhFYxcHxP4amU s5crMYaDpZ5MWIQF1JBZ+1zYjoHJ/niM2oIMfmBughvetrscApdR+zxkWldAG7SI D4qJIzMXxarKxD1j5Yxbngox3W6IHDU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:28 2025 by rpki-client