$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d135e39-3ac9-3ff5-b4ea-7f23618ed5f5.roa File: 4d135e39-3ac9-3ff5-b4ea-7f23618ed5f5.roa (raw, json) Hash identifier: pD+1LbU6+fWBw7vObKzKTHFkCgbWoe+btOG94jQ57y8= Subject key identifier: 5E:2A:F7:1E:BE:71:73:26:6B:F3:91:65:DA:EE:E1:7D:8E:C0:51:F7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848B735864B9E47DBF650B11660 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d135e39-3ac9-3ff5-b4ea-7f23618ed5f5.roa Signing time: Thu 30 Jan 2025 11:07:40 +0000 ROA not before: Thu 30 Jan 2025 11:07:40 +0000 ROA not after: Wed 30 Apr 2025 10:07:40 +0000 asID: 30036 IP address blocks: 104.166.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:35:86:4b:9e:47:db:f6:50:b1:16:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 30 11:07:40 2025 GMT Not After : Apr 30 10:07:40 2025 GMT Subject: CN=817a2cbb-90e7-47dd-b012-de158164cfae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:81:cf:ed:f1:dd:83:45:37:38:c6:bd:8d:6a: d8:de:90:08:1c:d0:3e:1e:5f:3e:7a:71:15:be:3a: f6:0c:a8:c5:e6:67:48:fb:77:1c:99:31:a0:60:38: 42:7e:fe:d3:44:69:82:77:8e:f2:5c:0e:d2:27:b6: 61:91:fb:5b:a5:2e:9c:0f:fe:70:92:a0:3c:fa:71: 78:e5:4e:15:72:67:94:0e:78:eb:03:b3:de:cc:38: 3e:16:bd:a2:37:56:d8:76:50:02:a0:d0:bd:18:43: b4:49:b0:53:00:48:e0:2c:32:d1:09:95:04:29:d7: 5b:3b:68:a2:45:aa:59:05:bf:75:04:20:09:a9:19: 8b:4b:ff:ef:b0:84:cf:e3:c3:08:ac:53:f5:e1:2a: 13:f7:11:9e:31:6b:6f:59:67:73:03:30:ad:7b:2e: 57:8e:9d:ae:ad:52:2b:a1:b2:fd:2f:a7:1a:c8:b1: 8a:23:4d:0e:a7:a5:48:5b:6f:f5:00:33:32:94:5a: 92:91:e0:7d:6c:ce:64:9a:90:b5:5c:82:3d:49:1b: 18:0b:57:b1:b3:0c:d6:80:af:1f:3d:d9:01:5b:43: d2:43:83:3c:5d:22:9f:b1:98:fd:67:65:ed:b9:27: 0e:f0:3f:49:78:68:52:8b:8e:bc:55:41:59:f3:02: f0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2A:F7:1E:BE:71:73:26:6B:F3:91:65:DA:EE:E1:7D:8E:C0:51:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d135e39-3ac9-3ff5-b4ea-7f23618ed5f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 104.166.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:5d:13:eb:46:0b:52:4b:3c:1f:f0:d7:c0:18:7e:fb:d5:45: c4:1c:40:f1:1e:10:12:b0:57:02:34:82:c8:5d:ea:16:4f:89: de:b3:d2:19:88:80:db:16:55:68:99:01:d4:c0:f4:cb:d6:60: d8:9b:3e:03:dc:35:8a:60:5b:c9:6d:31:45:c8:7d:aa:96:b6: 25:90:35:b8:c0:3f:85:72:bd:1e:45:f6:fd:12:21:b3:f8:a8: f7:c2:46:a6:11:5c:3d:0a:c4:e9:66:01:56:29:51:e4:75:ee: ca:d5:5c:d8:dd:7a:19:90:2d:1a:91:35:f9:48:c0:f6:2d:28: 52:94:f7:a7:6b:ec:ad:12:5e:92:2c:56:0f:0a:d7:60:bc:68: 96:50:93:5e:aa:7c:5b:d8:a4:0a:88:b8:be:37:be:b6:a4:ec: c1:1c:f7:c9:78:46:ae:2a:1b:8b:84:8a:be:99:fd:7b:9c:af: 2d:4a:97:70:a9:1b:c9:f9:04:83:f6:5b:f9:f5:fd:de:0a:29: 92:b3:cc:ad:5c:bf:f3:7c:27:86:44:a3:f0:f0:8f:f0:df:38: 0e:55:88:e1:2b:05:c5:be:a3:ef:4f:f5:42:65:37:f2:60:fb: 1c:8b:5d:f3:ea:ba:45:36:5e:3c:81:5d:85:d8:2b:58:2c:91: f6:a0:7c:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3NYZLnkfb9lCxFmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDEzMDExMDc0MFoXDTI1MDQzMDEwMDc0MFowLzEtMCsGA1UEAxMk ODE3YTJjYmItOTBlNy00N2RkLWIwMTItZGUxNTgxNjRjZmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4HP7fHdg0U3OMa9jWrY3pAIHNA+Hl8+enEV vjr2DKjF5mdI+3ccmTGgYDhCfv7TRGmCd47yXA7SJ7ZhkftbpS6cD/5wkqA8+nF4 5U4VcmeUDnjrA7PezDg+Fr2iN1bYdlACoNC9GEO0SbBTAEjgLDLRCZUEKddbO2ii RapZBb91BCAJqRmLS//vsITP48MIrFP14SoT9xGeMWtvWWdzAzCtey5Xjp2urVIr obL9L6cayLGKI00Op6VIW2/1ADMylFqSkeB9bM5kmpC1XII9SRsYC1exswzWgK8f PdkBW0PSQ4M8XSKfsZj9Z2XtuScO8D9JeGhSi468VUFZ8wLwvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4q9x6+cXMma/ORZdru4X2OwFH3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGQxMzVlMzktM2FjOS0z ZmY1LWI0ZWEtN2YyMzYxOGVkNWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaKbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHddE+tGC1JLPB/w18AYfvvVRcQcQPEeEBKwVwI0gshd6hZPid6z0hmI gNsWVWiZAdTA9MvWYNibPgPcNYpgW8ltMUXIfaqWtiWQNbjAP4VyvR5F9v0SIbP4 qPfCRqYRXD0KxOlmAVYpUeR17srVXNjdehmQLRqRNflIwPYtKFKU96dr7K0SXpIs Vg8K12C8aJZQk16qfFvYpAqIuL43vrak7MEc98l4Rq4qG4uEir6Z/Xucry1Kl3Cp G8n5BIP2W/n1/d4KKZKzzK1cv/N8J4ZEo/Dwj/DfOA5ViOErBcW+o+9P9UJlN/Jg +xyLXfPqukU2XjyBXYXYK1gskfagfAQ= -----END CERTIFICATE-----Generated at Sun Apr 6 05:54:39 2025 by rpki-client