$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/bf023aaf-dae5-3af9-b654-95e3a44bf1ff.roa File: bf023aaf-dae5-3af9-b654-95e3a44bf1ff.roa (raw, json) Hash identifier: n3GCA8aaDG80y2H93GGscKpGgCjgIH2iWo2RSVHKDmg= Subject key identifier: 09:50:52:74:B6:12:8A:7D:80:8A:4C:61:97:1F:08:63:07:A2:E3:5F Certificate issuer: /CN=367e4bfe-b165-41fa-ab22-3f78555490cf Certificate serial: 010D0C9F432858485F9AE668DC8AAFBD74632280 Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/bf023aaf-dae5-3af9-b654-95e3a44bf1ff.roa Signing time: Mon 30 Dec 2024 02:00:39 +0000 ROA not before: Mon 30 Dec 2024 02:00:39 +0000 ROA not after: Sun 30 Mar 2025 01:00:39 +0000 asID: 16509 IP address blocks: 104.218.205.0/24 maxlen: 24 104.218.206.0/24 maxlen: 24 104.218.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5f:9a:e6:68:dc:8a:af:bd:74:63:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf Validity Not Before: Dec 30 02:00:39 2024 GMT Not After : Mar 30 01:00:39 2025 GMT Subject: CN=d27a5ddd-6e59-47c8-85e4-320cbd3a138e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:86:b1:04:97:6c:f7:bf:e1:de:87:52:1f:f3: 31:1a:c4:19:bd:e4:83:7a:1b:87:6f:88:97:a3:7e: 40:6a:15:cb:e1:d8:13:67:8d:09:04:e3:a7:b6:fa: a6:96:07:a1:2f:6a:15:fb:d9:01:90:4f:b1:a4:84: e4:b0:e3:f2:61:8a:f5:57:d6:4d:8f:fe:ee:62:4e: 76:f5:27:dc:06:7c:29:b4:d3:5b:b1:c6:df:8e:fb: 87:23:6d:67:a7:6c:bb:ff:81:3d:c1:b1:e5:a0:87: a7:67:6e:b5:71:d0:3b:be:b2:fe:2e:67:34:11:b1: 37:71:26:b5:76:7d:8b:2f:fb:5a:2f:0e:19:2c:89: 04:05:fa:09:4f:03:15:0a:6a:4c:27:7d:b4:c7:9e: 4a:be:60:f5:cd:33:3a:09:b9:a9:d8:27:b9:fd:46: 13:de:d4:29:93:43:b3:e3:b6:92:95:af:86:3b:13: 23:e9:8c:94:c2:d2:0b:de:aa:d5:24:fb:8d:54:90: 8d:83:3e:52:72:0b:92:27:59:9b:77:8b:a5:73:6c: a7:a1:78:6a:bb:8e:bc:85:80:23:50:49:d4:34:bf: 5b:fc:6a:d3:c4:ba:02:0e:60:e5:10:58:86:e8:f1: 9e:e8:9d:db:1e:fd:02:4e:c2:4f:20:fa:0c:75:52: da:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:50:52:74:B6:12:8A:7D:80:8A:4C:61:97:1F:08:63:07:A2:E3:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/bf023aaf-dae5-3af9-b654-95e3a44bf1ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl X509v3 Authority Key Identifier: keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer sbgp-ipAddrBlock: critical IPv4: 104.218.205.0-104.218.207.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:87:c2:64:d0:a4:59:5c:67:5d:5c:4f:92:65:f9:e2:50:f5: 85:15:96:54:5a:bf:26:97:d7:fb:9d:c3:c9:a7:8c:a1:f1:f6: a6:18:16:5a:0d:fd:23:df:aa:2a:24:92:91:e6:5d:ed:de:2d: 4f:a8:3a:54:61:4c:19:1d:21:99:70:b3:64:c1:2d:29:02:29: ef:e5:fe:22:ec:cd:2c:60:1b:72:cb:6f:9a:f4:6e:4f:56:78: e4:28:91:57:68:41:4d:28:40:30:b2:5c:3b:7f:4f:9f:5d:bf: f8:cc:66:59:11:ed:1f:98:a3:05:6c:ed:79:e2:df:ff:ea:fa: 7d:cb:f4:02:3a:a6:68:3a:ff:93:59:c7:22:a2:be:07:3a:ec: cb:9e:bf:f4:6a:94:8e:4c:3c:69:ea:37:91:f3:bf:fd:b0:7b: 2f:19:67:87:af:6b:3a:ef:28:5a:bd:72:52:8f:29:be:96:84: 6c:26:f2:02:07:7d:63:47:8b:e7:4e:00:8e:15:f3:bf:91:e1: 84:47:79:50:66:8a:ed:bc:93:88:77:3f:38:bc:fa:ec:df:83: 03:1a:55:15:52:7e:ba:ab:09:d1:28:d6:c6:9b:d6:f2:d6:4f: 30:a3:a1:bd:ea:b4:b4:17:a2:0c:10:54:87:46:d2:36:37:6f: 1f:c1:6c:7a -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEhfmuZo3IqvvXRjIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY3ZTRiZmUtYjE2NS00MWZhLWFiMjItM2Y3ODU1NTQ5 MGNmMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk ZDI3YTVkZGQtNmU1OS00N2M4LTg1ZTQtMzIwY2JkM2ExMzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIaxBJds97/h3odSH/MxGsQZveSDehuHb4iX o35AahXL4dgTZ40JBOOntvqmlgehL2oV+9kBkE+xpITksOPyYYr1V9ZNj/7uYk52 9SfcBnwptNNbscbfjvuHI21np2y7/4E9wbHloIenZ261cdA7vrL+Lmc0EbE3cSa1 dn2LL/taLw4ZLIkEBfoJTwMVCmpMJ320x55KvmD1zTM6Cbmp2Ce5/UYT3tQpk0Oz 47aSla+GOxMj6YyUwtIL3qrVJPuNVJCNgz5ScguSJ1mbd4ulc2ynoXhqu468hYAj UEnUNL9b/GrTxLoCDmDlEFiG6PGe6J3bHv0CTsJPIPoMdVLaRwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFAlQUnS2Eop9gIpMYZcfCGMHouNfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdl NGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4NTU1NDkwY2YvYmYwMjNhYWYtZGFlNS0z YWY5LWI2NTQtOTVlM2E0NGJmMWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY3ZTRiZmUtYjE2NS00MWZhLWFi MjItM2Y3ODU1NTQ5MGNmLzM2N2U0YmZlLWIxNjUtNDFmYS1hYjIyLTNmNzg1NTU0 OTBjZi5jcmwwHwYDVR0jBBgwFoAU3Roo7YWvv2p4CpyI5O7Q5tws+hMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdlNGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4 NTU1NDkwY2YuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABo2s0D BARo2sAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAhofCZNCkWVxnXVxPkmX54lD1hRWWVFq/JpfX+53DyaeM ofH2phgWWg39I9+qKiSSkeZd7d4tT6g6VGFMGR0hmXCzZMEtKQIp7+X+IuzNLGAb cstvmvRuT1Z45CiRV2hBTShAMLJcO39Pn12/+MxmWRHtH5ijBWzteeLf/+r6fcv0 AjqmaDr/k1nHIqK+Bzrsy56/9GqUjkw8aeo3kfO//bB7Lxlnh69rOu8oWr1yUo8p vpaEbCbyAgd9Y0eL504AjhXzv5HhhEd5UGaK7byTiHc/OLz67N+DAxpVFVJ+uqsJ 0SjWxpvW8tZPMKOhveq0tBeiDBBUh0bSNjdvH8Fseg== -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:53 2025 by rpki-client