$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/a86dea4f-5f6f-32ae-8a25-ead4a4dba2ce.roa File: a86dea4f-5f6f-32ae-8a25-ead4a4dba2ce.roa (raw, json) Hash identifier: iHTysfMAbR1UO1SZhtx3/MG5+ZhdR+xdZcRMrZfoe/c= Subject key identifier: E6:37:3A:CB:A5:83:EF:6C:AF:15:AC:02:18:F2:3D:AB:C1:E2:3A:94 Certificate issuer: /CN=900920d7-dc26-412d-b92a-7af35af2cc24 Certificate serial: 010D0C9F43285848DEA11B5AE3EAEFD30C4EACC0 Authority key identifier: D7:72:A6:9A:5A:9A:5E:31:05:1B:21:51:B8:3B:C7:48:89:48:D3:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/a86dea4f-5f6f-32ae-8a25-ead4a4dba2ce.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 36694 IP address blocks: 104.219.228.0/22 maxlen: 24 2620:11d:1000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/900920d7-dc26-412d-b92a-7af35af2cc24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/900920d7-dc26-412d-b92a-7af35af2cc24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:1b:5a:e3:ea:ef:d3:0c:4e:ac:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900920d7-dc26-412d-b92a-7af35af2cc24 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=6e48ad78-4b29-489e-8007-bda968c8cead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ae:ce:f8:8f:bd:df:14:4d:88:63:9f:1f:d9: 15:c1:49:ad:a6:4d:3f:e5:e5:a6:f7:de:83:a1:b1: e9:79:fd:cc:41:ba:b8:27:f8:dc:2f:42:40:22:49: 95:84:d6:fd:67:a9:a8:fa:cd:07:ed:21:6e:15:6e: 98:ce:23:aa:5f:42:e6:de:0c:85:3d:bb:76:8e:83: 10:15:0f:75:89:bc:7a:6a:c2:af:0b:a4:1c:94:89: bd:f8:a1:00:f2:e6:51:44:8b:c4:44:ac:97:fa:68: 29:63:c3:b9:2b:d0:e4:37:96:1b:bc:58:08:73:f6: 4e:f8:4e:e8:5d:c7:75:40:b4:8f:f7:ef:dc:20:79: 6f:88:27:9a:46:22:aa:2c:ce:a0:55:45:e3:cb:d5: 18:b2:9c:05:5d:91:3e:49:17:11:a3:ea:4c:58:20: 5d:bf:e4:25:0a:f8:46:67:14:63:b7:ee:ef:2a:2c: a8:14:4e:b8:4e:05:7f:a4:76:a7:a9:5c:da:dc:4b: 26:d8:dd:a2:e9:99:45:f0:9e:d6:8c:40:69:05:49: 91:fa:a5:eb:50:8f:09:2f:d1:8b:5b:16:c3:77:ff: 61:c3:cf:e9:0a:bc:53:5a:ba:9b:82:5f:b5:20:e5: 48:7f:31:29:66:2f:4c:5d:46:81:b7:92:49:8a:c4: b9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:37:3A:CB:A5:83:EF:6C:AF:15:AC:02:18:F2:3D:AB:C1:E2:3A:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/a86dea4f-5f6f-32ae-8a25-ead4a4dba2ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/900920d7-dc26-412d-b92a-7af35af2cc24.crl X509v3 Authority Key Identifier: keyid:D7:72:A6:9A:5A:9A:5E:31:05:1B:21:51:B8:3B:C7:48:89:48:D3:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24.cer sbgp-ipAddrBlock: critical IPv4: 104.219.228.0/22 IPv6: 2620:11d:1000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:ea:22:97:57:b8:1d:61:f6:36:da:0a:51:e9:03:c6:87:6a: 08:dd:c7:8e:d2:28:a7:34:62:cf:a4:a0:8e:77:01:80:c6:2b: cc:08:ed:99:f1:17:e5:93:53:39:1a:18:d5:22:23:af:37:cc: cf:3f:d1:74:ce:f1:b7:28:5b:1c:59:7c:41:8f:87:c3:1d:1c: 3e:1d:03:4a:96:75:54:03:da:19:33:8e:92:dc:2c:51:4a:59: 76:d0:ef:36:80:fd:7f:f0:4b:e2:e1:63:0c:c3:53:3a:36:61: cb:5e:dc:77:c0:74:0d:7e:e2:af:e8:05:cc:4a:8d:97:38:80: 15:a0:cf:4d:d4:33:ad:e3:0c:3f:cf:57:39:4b:ca:78:bf:6d: 3c:1f:14:b5:10:7b:0c:d2:32:d1:f0:04:f4:b9:fc:68:03:46: dd:85:cf:04:d4:1b:02:a1:62:3a:a4:8b:35:ea:91:f9:0f:96: 5c:18:0e:fa:14:72:0f:e0:19:7e:7b:c2:5a:e4:2b:2f:6a:9a: 0e:f9:15:56:ba:e2:a5:35:dd:f0:2b:c6:98:13:02:ba:a8:40: 34:67:90:cb:7f:4b:a7:7c:2a:56:26:c9:a3:42:a9:ac:3c:9d: 34:38:58:4b:fd:9d:38:e9:f7:4b:c4:8f:19:e2:9c:25:7f:5b: b1:df:ec:4a -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEjeoRta4+rv0wxOrMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwOTIwZDctZGMyNi00MTJkLWI5MmEtN2FmMzVhZjJj YzI0MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk NmU0OGFkNzgtNGIyOS00ODllLTgwMDctYmRhOTY4YzhjZWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn67O+I+93xRNiGOfH9kVwUmtpk0/5eWm996D obHpef3MQbq4J/jcL0JAIkmVhNb9Z6mo+s0H7SFuFW6YziOqX0Lm3gyFPbt2joMQ FQ91ibx6asKvC6QclIm9+KEA8uZRRIvERKyX+mgpY8O5K9DkN5YbvFgIc/ZO+E7o Xcd1QLSP9+/cIHlviCeaRiKqLM6gVUXjy9UYspwFXZE+SRcRo+pMWCBdv+QlCvhG ZxRjt+7vKiyoFE64TgV/pHanqVza3Esm2N2i6ZlF8J7WjEBpBUmR+qXrUI8JL9GL WxbDd/9hw8/pCrxTWrqbgl+1IOVIfzEpZi9MXUaBt5JJisS5HQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFOY3Osulg+9srxWsAhjyPavB4jqUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDA5 MjBkNy1kYzI2LTQxMmQtYjkyYS03YWYzNWFmMmNjMjQvYTg2ZGVhNGYtNWY2Zi0z MmFlLThhMjUtZWFkNGE0ZGJhMmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTAwOTIwZDctZGMyNi00MTJkLWI5 MmEtN2FmMzVhZjJjYzI0LzkwMDkyMGQ3LWRjMjYtNDEyZC1iOTJhLTdhZjM1YWYy Y2MyNC5jcmwwHwYDVR0jBBgwFoAU13KmmlqaXjEFGyFRuDvHSIlI0+AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDA5MjBkNy1kYzI2LTQxMmQtYjkyYS03YWYz NWFmMmNjMjQuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCaNvkMA8E AgACMAkDBwQmIAEdEAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAEeoil1e4HWH2NtoKUekDxodqCN3HjtIo pzRiz6SgjncBgMYrzAjtmfEX5ZNTORoY1SIjrzfMzz/RdM7xtyhbHFl8QY+Hwx0c Ph0DSpZ1VAPaGTOOktwsUUpZdtDvNoD9f/BL4uFjDMNTOjZhy17cd8B0DX7ir+gF zEqNlziAFaDPTdQzreMMP89XOUvKeL9tPB8UtRB7DNIy0fAE9Ln8aANG3YXPBNQb AqFiOqSLNeqR+Q+WXBgO+hRyD+AZfnvCWuQrL2qaDvkVVrripTXd8CvGmBMCuqhA NGeQy39Lp3wqVibJo0KprDydNDhYS/2dOOn3S8SPGeKcJX9bsd/sSg== -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:18 2025 by rpki-client