$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/40be57dc-7156-3f97-b77b-4e30e5469063.roa File: 40be57dc-7156-3f97-b77b-4e30e5469063.roa (raw, json) Hash identifier: m93vPvMPIFh9HPDPVh4Ig55kuqy0BnL6C1G0HRQcfH0= Subject key identifier: 0E:2A:39:4B:B8:95:E5:2C:5F:0F:A5:11:C6:CC:FB:5D:1E:BD:D0:86 Certificate issuer: /CN=5bb89f91-a9a1-4d88-b9d0-f7882ea134a9 Certificate serial: 010D0C9F43285848DEA11AD025832A590A0B0380 Authority key identifier: CE:3A:6A:1D:7B:CD:04:74:BB:B3:D6:43:72:CF:AE:22:23:D4:A8:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/40be57dc-7156-3f97-b77b-4e30e5469063.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 54911 IP address blocks: 104.171.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:1a:d0:25:83:2a:59:0a:0b:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bb89f91-a9a1-4d88-b9d0-f7882ea134a9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=5b376977-1262-4962-935f-3262943f7306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:af:eb:65:7d:5c:b5:1a:e6:a6:3f:83:4a:ee: 1f:4b:0d:57:5f:be:39:d3:9d:7b:4c:20:bf:c4:cc: 8b:a2:98:40:c8:dd:43:a9:2e:59:db:73:7a:18:39: 00:a2:a9:3a:af:b7:ae:85:93:15:35:d9:8c:7e:94: fb:b1:01:18:87:a7:dd:5c:b2:7e:ce:a6:07:7f:a3: 9e:a6:bc:f0:8c:84:fd:18:a1:0b:6f:b9:d9:bd:86: 32:a7:59:77:60:40:16:a7:dd:f4:9a:aa:b8:86:72: 80:f4:1d:ad:ed:6c:a7:0a:ac:f0:df:3c:a5:a2:b6: 34:9f:d0:63:d6:1f:08:78:5f:a4:3d:54:e5:63:14: 20:4d:91:6f:0f:11:1d:3e:8c:95:3a:23:73:09:92: 2c:70:0a:dd:50:3f:4e:a1:41:a0:16:b1:81:ff:3f: 25:2a:2a:c3:2e:3e:54:d4:09:08:19:a4:9f:2a:33: d7:16:0b:b4:4a:a6:04:c2:8b:42:46:ff:7d:51:6a: 28:70:2a:7e:31:1d:d6:76:2a:21:b7:c7:08:9f:99: b4:0b:1c:00:a0:d3:f6:aa:ac:77:35:0c:dd:08:e7: 96:28:ff:7b:ce:b2:df:e9:15:62:ea:be:b0:ff:6e: a2:61:96:22:12:2d:1d:56:06:96:b1:c2:9e:98:20: 66:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:2A:39:4B:B8:95:E5:2C:5F:0F:A5:11:C6:CC:FB:5D:1E:BD:D0:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/40be57dc-7156-3f97-b77b-4e30e5469063.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.crl X509v3 Authority Key Identifier: keyid:CE:3A:6A:1D:7B:CD:04:74:BB:B3:D6:43:72:CF:AE:22:23:D4:A8:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.cer sbgp-ipAddrBlock: critical IPv4: 104.171.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:a2:7b:b6:78:fd:81:8e:cf:a2:86:be:92:fe:7d:20:9f:c8: 86:83:84:f5:dd:97:84:48:c0:39:d8:66:fb:f9:ff:c1:71:9b: 6a:08:12:60:6b:74:a0:b0:22:af:8a:bd:2c:ff:f9:ab:db:c2: f3:81:f7:52:7f:8e:40:32:9e:ea:b9:29:8d:6e:a1:7a:fc:5a: d1:b5:ce:1c:61:38:a3:ca:d6:af:98:cd:7a:ed:01:6e:10:b6: 0a:2c:cc:24:4a:3b:b7:19:1b:ae:28:19:c1:66:d6:f4:3d:7a: bd:79:34:b9:41:a3:69:7a:f5:ba:01:89:56:c7:5c:14:f9:0b: 1f:d3:01:8b:96:15:78:d7:e3:c4:33:1a:0c:a2:97:5e:71:41: 72:17:9a:93:5c:46:9e:6f:c6:b1:cc:e9:6c:07:6f:4c:c3:4e: f8:85:4f:e3:24:9f:85:01:f0:4c:cf:c3:49:dd:ab:d1:68:9f: 9e:e2:44:81:cf:97:5b:d5:e7:19:00:94:a4:a9:d1:d2:49:a6: 99:8a:d3:83:af:bd:d3:d3:49:aa:90:26:3a:c6:f8:d1:47:81: 77:68:8a:4b:42:84:21:f5:35:62:44:74:e8:49:03:a3:70:3c: 7e:9d:d3:b4:9d:ec:03:fd:d1:aa:e3:97:29:66:bd:07:b8:8f: b5:ce:a7:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoRrQJYMqWQoLA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWJiODlmOTEtYTlhMS00ZDg4LWI5ZDAtZjc4ODJlYTEz NGE5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk NWIzNzY5NzctMTI2Mi00OTYyLTkzNWYtMzI2Mjk0M2Y3MzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiK/rZX1ctRrmpj+DSu4fSw1XX7450517TCC/ xMyLophAyN1DqS5Z23N6GDkAoqk6r7euhZMVNdmMfpT7sQEYh6fdXLJ+zqYHf6Oe przwjIT9GKELb7nZvYYyp1l3YEAWp930mqq4hnKA9B2t7WynCqzw3zylorY0n9Bj 1h8IeF+kPVTlYxQgTZFvDxEdPoyVOiNzCZIscArdUD9OoUGgFrGB/z8lKirDLj5U 1AkIGaSfKjPXFgu0SqYEwotCRv99UWoocCp+MR3Wdioht8cIn5m0CxwAoNP2qqx3 NQzdCOeWKP97zrLf6RVi6r6w/26iYZYiEi0dVgaWscKemCBmkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4qOUu4leUsXw+lEcbM+10evdCGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81YmI4 OWY5MS1hOWExLTRkODgtYjlkMC1mNzg4MmVhMTM0YTkvNDBiZTU3ZGMtNzE1Ni0z Zjk3LWI3N2ItNGUzMGU1NDY5MDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWJiODlmOTEtYTlhMS00ZDg4LWI5 ZDAtZjc4ODJlYTEzNGE5LzViYjg5ZjkxLWE5YTEtNGQ4OC1iOWQwLWY3ODgyZWEx MzRhOS5jcmwwHwYDVR0jBBgwFoAUzjpqHXvNBHS7s9ZDcs+uIiPUqHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YmI4OWY5MS1hOWExLTRkODgtYjlkMC1mNzg4 MmVhMTM0YTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaKsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+ie7Z4/YGOz6KGvpL+fSCfyIaDhPXdl4RIwDnYZvv5/8Fxm2oIEmBr dKCwIq+KvSz/+avbwvOB91J/jkAynuq5KY1uoXr8WtG1zhxhOKPK1q+YzXrtAW4Q tgoszCRKO7cZG64oGcFm1vQ9er15NLlBo2l69boBiVbHXBT5Cx/TAYuWFXjX48Qz Ggyil15xQXIXmpNcRp5vxrHM6WwHb0zDTviFT+Mkn4UB8EzPw0ndq9Fon57iRIHP l1vV5xkAlKSp0dJJppmK04OvvdPTSaqQJjrG+NFHgXdoiktChCH1NWJEdOhJA6Nw PH6d07Sd7AP90arjlylmvQe4j7XOp3U= -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:17 2025 by rpki-client