$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/2b8293b4-6f04-3436-b0f2-07c56dc8fcea.roa File: 2b8293b4-6f04-3436-b0f2-07c56dc8fcea.roa (raw, json) Hash identifier: dC/SEQo2ZOFfby+Gq822zrHEyaWJeW87PcbdOu5edqA= Subject key identifier: 19:56:CB:0D:97:99:28:64:7A:20:64:DA:65:86:6B:98:94:F1:CB:8C Certificate issuer: /CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8 Certificate serial: 010D0C9F4328584851A5762DB630DDED8446A100 Authority key identifier: D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/2b8293b4-6f04-3436-b0f2-07c56dc8fcea.roa Signing time: Wed 25 Dec 2024 02:00:38 +0000 ROA not before: Wed 25 Dec 2024 02:00:38 +0000 ROA not after: Tue 25 Mar 2025 01:00:38 +0000 asID: 3257 IP address blocks: 104.171.208.0/20 maxlen: 20 2602:fd43::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:51:a5:76:2d:b6:30:dd:ed:84:46:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8 Validity Not Before: Dec 25 02:00:38 2024 GMT Not After : Mar 25 01:00:38 2025 GMT Subject: CN=f8cf60bc-0460-4324-ac32-c5128752f006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:79:37:e2:e8:f5:fc:d6:76:6b:ec:68:9b:c1: 8e:cb:40:4f:41:69:6e:a4:98:74:2c:95:cc:10:10: 4f:46:ba:62:79:d7:41:69:c6:93:f0:57:5c:88:5d: 13:17:74:06:b0:9d:66:9e:25:2b:fd:1a:70:41:87: 56:67:8a:b0:84:8a:1d:70:57:b0:51:d4:72:f1:c8: 6b:59:fd:83:58:c8:5b:0c:14:9b:4f:af:18:cf:f4: c1:bd:ff:2a:32:28:ee:77:34:45:77:41:27:ca:71: 4c:8c:12:f7:8c:48:b7:37:98:25:eb:50:e5:d3:9e: 01:8e:a4:79:72:58:a4:05:20:30:ea:21:33:ca:ca: 52:7b:1a:03:9f:3f:f3:86:59:bb:54:ad:b7:93:d9: 99:cd:f4:95:5e:f8:ec:87:ae:bf:b0:3c:1b:ad:95: fb:c4:ab:a6:ed:70:03:fc:49:c4:07:a5:00:62:4c: f4:a7:e3:60:04:dd:13:1c:3f:f8:07:5a:7a:07:3d: 68:7f:ef:61:10:d1:d8:f7:1f:04:4b:1e:ca:28:80: f5:14:46:d7:35:f2:59:14:70:40:d1:a4:ea:25:8f: a0:58:66:df:1e:b7:d0:22:b5:6a:46:83:8a:0b:32: cb:73:97:4c:cd:88:74:08:6c:7d:61:d4:45:9b:04: 6c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:56:CB:0D:97:99:28:64:7A:20:64:DA:65:86:6B:98:94:F1:CB:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/2b8293b4-6f04-3436-b0f2-07c56dc8fcea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl X509v3 Authority Key Identifier: keyid:D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer sbgp-ipAddrBlock: critical IPv4: 104.171.208.0/20 IPv6: 2602:fd43::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:d4:10:80:f2:1e:45:ef:94:a6:79:ca:e5:0f:fd:5a:06:9f: 24:fc:f9:e8:e9:52:a9:bf:72:06:30:43:74:77:43:59:e5:b3: 12:59:6d:c5:9f:8c:ce:81:18:85:af:8c:10:90:ee:8d:e0:b3: b9:63:0a:6c:0a:6c:55:8f:2f:4e:58:0d:57:b7:58:d9:29:99: f9:38:91:27:11:c3:79:50:ee:28:87:e6:9a:4a:73:9b:15:15: 06:bb:58:ab:7f:5a:81:3b:94:76:ea:d3:5f:e7:b0:0b:ba:98: 84:14:31:d9:88:2e:50:92:b3:c5:7b:19:1b:80:0f:e4:45:b4: 49:3a:6c:95:72:0e:a0:a6:25:81:a1:82:9d:ef:1f:e0:3d:81: 06:c3:a5:ea:fd:21:25:0a:d6:0a:f5:30:33:73:df:ab:32:36: 20:8e:e6:a6:7a:c7:f8:c7:04:cd:b2:85:45:8e:f5:98:d4:8c: 73:55:46:7a:9e:8e:6d:e8:ad:7d:96:10:bd:69:40:0c:de:8e: 01:37:a0:8b:ba:5b:51:0d:49:b2:b0:bf:1d:0d:2b:ef:a9:02: 81:b9:2b:29:65:6c:ce:ec:d4:8d:9d:09:9d:e9:88:9d:6e:d3: 53:d0:f2:77:9a:54:ac:43:d3:db:34:2b:0f:f2:7b:67:5e:21: 80:2c:1f:12 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEhRpXYttjDd7YRGoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjdjN2EzNDQtNGJjNy00NjhiLWFkMzAtM2I5YzAwNmNk MGM4MB4XDTI0MTIyNTAyMDAzOFoXDTI1MDMyNTAxMDAzOFowLzEtMCsGA1UEAxMk ZjhjZjYwYmMtMDQ2MC00MzI0LWFjMzItYzUxMjg3NTJmMDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnk34uj1/NZ2a+xom8GOy0BPQWlupJh0LJXM EBBPRrpieddBacaT8FdciF0TF3QGsJ1mniUr/RpwQYdWZ4qwhIodcFewUdRy8chr Wf2DWMhbDBSbT68Yz/TBvf8qMijudzRFd0EnynFMjBL3jEi3N5gl61Dl054BjqR5 clikBSAw6iEzyspSexoDnz/zhlm7VK23k9mZzfSVXvjsh66/sDwbrZX7xKum7XAD /EnEB6UAYkz0p+NgBN0THD/4B1p6Bz1of+9hENHY9x8ESx7KKID1FEbXNfJZFHBA 0aTqJY+gWGbfHrfQIrVqRoOKCzLLc5dMzYh0CGx9YdRFmwRsCwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBlWyw2XmShkeiBk2mWGa5iU8cuMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yN2M3 YTM0NC00YmM3LTQ2OGItYWQzMC0zYjljMDA2Y2QwYzgvMmI4MjkzYjQtNmYwNC0z NDM2LWIwZjItMDdjNTZkYzhmY2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjdjN2EzNDQtNGJjNy00NjhiLWFk MzAtM2I5YzAwNmNkMGM4LzI3YzdhMzQ0LTRiYzctNDY4Yi1hZDMwLTNiOWMwMDZj ZDBjOC5jcmwwHwYDVR0jBBgwFoAU2UqH6Z9k85IcgEkD0OABbmMYM90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yN2M3YTM0NC00YmM3LTQ2OGItYWQzMC0zYjlj MDA2Y2QwYzguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQEaKvQMA4E AgACMAgDBgQmAv1DADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAY1BCA8h5F75SmecrlD/1aBp8k/Pno6VKp v3IGMEN0d0NZ5bMSWW3Fn4zOgRiFr4wQkO6N4LO5YwpsCmxVjy9OWA1Xt1jZKZn5 OJEnEcN5UO4oh+aaSnObFRUGu1irf1qBO5R26tNf57ALupiEFDHZiC5QkrPFexkb gA/kRbRJOmyVcg6gpiWBoYKd7x/gPYEGw6Xq/SElCtYK9TAzc9+rMjYgjuamesf4 xwTNsoVFjvWY1IxzVUZ6no5t6K19lhC9aUAM3o4BN6CLultRDUmysL8dDSvvqQKB uSspZWzO7NSNnQmd6YidbtNT0PJ3mlSsQ9PbNCsP8ntnXiGALB8S -----END CERTIFICATE-----Generated at Sun Feb 16 15:11:49 2025 by rpki-client