$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/14c6bd91-791c-37e8-bb9c-d847c0d361c2.roa File: 14c6bd91-791c-37e8-bb9c-d847c0d361c2.roa (raw, json) Hash identifier: ctjoRSbHGFCZjDLxdUM9q3UxexiPq2ZA7BK9Vops53k= Subject key identifier: 6D:48:05:B1:FD:0D:F6:86:0C:92:D9:89:FB:9F:B1:D2:28:16:63:9C Certificate issuer: /CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8 Certificate serial: 010D0C9F43285848854B41471CDAC1705B8EBF80 Authority key identifier: D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/14c6bd91-791c-37e8-bb9c-d847c0d361c2.roa Signing time: Sun 12 Jan 2025 14:00:53 +0000 ROA not before: Sun 12 Jan 2025 14:00:53 +0000 ROA not after: Sat 12 Apr 2025 13:00:53 +0000 asID: 63267 IP address blocks: 104.171.208.0/20 maxlen: 20 2602:fd43::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:85:4b:41:47:1c:da:c1:70:5b:8e:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8 Validity Not Before: Jan 12 14:00:53 2025 GMT Not After : Apr 12 13:00:53 2025 GMT Subject: CN=2cfab28b-eb4b-485d-b867-ba284f4ecb3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ed:b7:a9:a8:a4:fc:95:15:6d:c7:d0:45:31: da:d9:ad:09:59:1f:50:65:a4:c7:da:20:b8:9c:b6: d8:af:fc:74:13:f5:d6:c2:05:fc:49:27:53:95:b5: 9e:f5:a5:c4:93:f7:5a:1c:32:e6:a5:99:1f:b2:35: 4a:cb:c1:c9:c4:df:94:b5:18:47:98:47:1d:cb:e4: bd:15:22:33:c6:3c:b1:22:42:f5:87:ab:4b:9c:f1: 56:ed:b5:cc:1b:6e:ca:d7:57:93:53:7c:09:af:84: d0:ae:60:f8:69:f9:d7:18:e5:6a:0b:dc:94:15:fb: f6:58:ae:b4:d3:26:ba:9c:50:4a:59:90:0b:a0:8b: 80:d7:35:c2:1c:6c:13:28:cf:00:5e:5d:6d:dc:05: f4:c0:2d:4e:3b:8f:33:5c:04:3c:7e:1c:c4:97:a1: 84:b8:bd:98:3d:9f:22:bf:db:86:2b:37:aa:de:de: 99:42:f9:30:59:77:dc:f2:be:b2:a3:35:53:23:94: ce:aa:9d:50:a7:fc:e2:19:6a:0d:44:96:50:2b:5e: 24:c3:16:d0:35:60:b7:c9:59:22:c2:fb:60:4a:59: 2f:a4:26:b2:45:f9:2c:7c:1c:5e:9f:14:20:ae:95: 39:42:d1:84:78:9e:b4:69:ca:f5:c4:d8:59:26:85: 5f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:48:05:B1:FD:0D:F6:86:0C:92:D9:89:FB:9F:B1:D2:28:16:63:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/14c6bd91-791c-37e8-bb9c-d847c0d361c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl X509v3 Authority Key Identifier: keyid:D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer sbgp-ipAddrBlock: critical IPv4: 104.171.208.0/20 IPv6: 2602:fd43::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:1e:7b:d5:65:b2:39:d8:8a:79:98:68:ef:84:b2:de:e3:ab: 6b:bd:dc:4f:ee:f2:ef:8d:42:d5:cb:3c:4d:19:e9:d0:f9:a9: 41:38:51:82:3b:1e:05:fa:f6:6a:b5:a3:f2:6b:28:17:a4:e9: 6e:9f:4a:f6:1b:ac:b2:a8:c0:8b:cf:ce:01:a0:d0:fe:e6:af: e1:c8:9c:f7:8f:10:7c:e6:64:f3:f8:8f:d9:48:7b:2a:e8:fb: 12:29:ee:df:e9:31:82:e2:cf:8d:59:12:07:07:bf:9e:61:bf: 16:b7:27:8b:5f:c7:7d:85:ca:b3:65:0f:1f:7d:d7:1a:26:8d: 7a:c2:b9:0b:4a:94:25:32:18:3a:07:45:c8:af:98:43:8a:49: e4:7c:49:4f:7f:df:5f:17:8b:8b:c0:9a:ec:ba:92:97:7e:81: 96:3e:81:a6:9f:77:1c:20:10:d2:d2:d6:ad:a3:e1:25:52:5b: eb:24:88:8a:44:78:fb:a9:30:35:53:21:cb:44:a1:e4:97:ef: 96:d7:79:be:be:e7:fb:2b:4e:6f:6d:fd:f9:58:4c:72:98:22: ed:56:43:a0:c4:25:27:cf:53:77:f0:92:c3:f8:37:42:fd:c0: 04:71:26:b8:65:20:9e:28:53:34:f9:fc:c1:31:86:17:71:55: 6e:cf:13:fc -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEiFS0FHHNrBcFuOv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjdjN2EzNDQtNGJjNy00NjhiLWFkMzAtM2I5YzAwNmNk MGM4MB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk MmNmYWIyOGItZWI0Yi00ODVkLWI4NjctYmEyODRmNGVjYjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou23qaik/JUVbcfQRTHa2a0JWR9QZaTH2iC4 nLbYr/x0E/XWwgX8SSdTlbWe9aXEk/daHDLmpZkfsjVKy8HJxN+UtRhHmEcdy+S9 FSIzxjyxIkL1h6tLnPFW7bXMG27K11eTU3wJr4TQrmD4afnXGOVqC9yUFfv2WK60 0ya6nFBKWZALoIuA1zXCHGwTKM8AXl1t3AX0wC1OO48zXAQ8fhzEl6GEuL2YPZ8i v9uGKzeq3t6ZQvkwWXfc8r6yozVTI5TOqp1Qp/ziGWoNRJZQK14kwxbQNWC3yVki wvtgSlkvpCayRfksfBxenxQgrpU5QtGEeJ60acr1xNhZJoVfjwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFG1IBbH9DfaGDJLZifufsdIoFmOcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yN2M3 YTM0NC00YmM3LTQ2OGItYWQzMC0zYjljMDA2Y2QwYzgvMTRjNmJkOTEtNzkxYy0z N2U4LWJiOWMtZDg0N2MwZDM2MWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjdjN2EzNDQtNGJjNy00NjhiLWFk MzAtM2I5YzAwNmNkMGM4LzI3YzdhMzQ0LTRiYzctNDY4Yi1hZDMwLTNiOWMwMDZj ZDBjOC5jcmwwHwYDVR0jBBgwFoAU2UqH6Z9k85IcgEkD0OABbmMYM90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yN2M3YTM0NC00YmM3LTQ2OGItYWQzMC0zYjlj MDA2Y2QwYzguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQEaKvQMA4E AgACMAgDBgQmAv1DADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCvHnvVZbI52Ip5mGjvhLLe46trvdxP7vLv jULVyzxNGenQ+alBOFGCOx4F+vZqtaPyaygXpOlun0r2G6yyqMCLz84BoND+5q/h yJz3jxB85mTz+I/ZSHsq6PsSKe7f6TGC4s+NWRIHB7+eYb8WtyeLX8d9hcqzZQ8f fdcaJo16wrkLSpQlMhg6B0XIr5hDiknkfElPf99fF4uLwJrsupKXfoGWPoGmn3cc IBDS0tato+ElUlvrJIiKRHj7qTA1UyHLRKHkl++W13m+vuf7K05vbf35WExymCLt VkOgxCUnz1N38JLD+DdC/cAEcSa4ZSCeKFM0+fzBMYYXcVVuzxP8 -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:52 2025 by rpki-client