$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/bb993ae3-0e6a-3a6d-aca5-69edd22cf7f9.roa File: bb993ae3-0e6a-3a6d-aca5-69edd22cf7f9.roa (raw, json) Hash identifier: aTBglVjBUhACivHJGxUk19W/Fsh0d8bPAsERUv0Ggh4= Subject key identifier: C3:F8:04:07:C8:65:19:A8:55:A0:9D:B6:5F:B7:31:1C:6D:A3:DD:15 Certificate issuer: /CN=eb8204eb-8ce5-4d9a-b383-b4433e8075a0 Certificate serial: 010D0C9F43285848E2D11C72276D782E40FB1440 Authority key identifier: 2C:61:60:B2:3E:09:E8:97:9F:3C:2C:F5:B1:39:AB:BC:11:A5:38:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/bb993ae3-0e6a-3a6d-aca5-69edd22cf7f9.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 14618 IP address blocks: 104.36.208.0/21 maxlen: 24 2620:12f:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:1c:72:27:6d:78:2e:40:fb:14:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb8204eb-8ce5-4d9a-b383-b4433e8075a0 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=b7d38ca5-513f-4868-bdb3-92ddfe1ade0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f9:02:e8:08:7c:9c:57:d9:17:39:0c:68:8b: 43:48:cb:ae:56:00:cb:c9:f9:57:12:00:d0:d1:a7: bb:6a:5c:40:a6:de:4f:1a:a0:16:c6:e1:f5:63:8e: 95:80:fe:59:58:c6:0d:7e:b9:e5:a5:ab:a2:5e:7e: 00:80:61:00:57:bd:4a:bb:20:c6:1e:e4:60:47:98: 51:16:8b:0b:01:6a:b0:09:66:c6:dc:d1:e7:db:32: 8b:b1:11:a4:92:4d:ec:f3:a9:87:16:07:04:67:10: 0e:c4:4e:8e:49:db:2f:1f:69:be:af:4f:0d:95:2b: 1f:a2:79:3b:97:de:0c:ed:b1:81:5c:3c:02:50:44: ea:15:f1:be:e7:2b:de:d9:8d:7a:da:4e:61:1c:f6: f7:49:c2:d2:d3:6b:ee:52:d6:a4:6f:27:4a:0c:cb: 26:29:bb:36:78:7d:fc:ef:40:a7:74:0c:ae:4a:52: ab:29:86:b6:6b:84:80:3c:64:a5:1e:fd:ce:a1:51: e7:fd:3c:e3:96:6c:39:e0:71:b3:fd:bb:e7:95:57: da:f6:ba:58:0b:5f:21:73:6f:6f:a8:2d:d4:2c:c4: 8a:b3:f2:fc:a4:07:63:aa:f0:6d:52:89:52:39:2b: 97:6e:17:d4:c2:3c:ee:44:94:df:b2:17:ff:df:80: 46:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F8:04:07:C8:65:19:A8:55:A0:9D:B6:5F:B7:31:1C:6D:A3:DD:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/bb993ae3-0e6a-3a6d-aca5-69edd22cf7f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.crl X509v3 Authority Key Identifier: keyid:2C:61:60:B2:3E:09:E8:97:9F:3C:2C:F5:B1:39:AB:BC:11:A5:38:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.cer sbgp-ipAddrBlock: critical IPv4: 104.36.208.0/21 IPv6: 2620:12f:7000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:c2:f3:04:dc:85:f9:96:d3:3e:61:b1:ac:53:aa:70:e7:4b: 47:3a:a5:0b:5e:d3:cd:48:f7:e9:06:8c:60:86:54:43:2b:1b: 60:46:73:ad:e2:53:aa:1f:c4:7f:fe:2a:a6:1a:7f:c3:b2:63: 43:7b:16:68:cd:29:e0:32:a3:6a:0c:f0:a5:55:ab:ad:73:23: 79:a4:96:c0:d7:c5:a1:35:65:dc:9c:97:92:b4:39:bf:26:83: 55:98:32:b3:d8:87:07:2c:95:46:24:4c:2d:af:1a:e1:65:96: 6c:2c:9a:35:ba:d1:49:70:fa:d2:0f:8d:97:e6:52:47:b5:09: 1d:f0:ae:3f:5f:3e:f8:65:e7:dc:54:90:f9:aa:ac:db:3c:82: 2b:ee:8e:29:48:26:ff:c8:21:57:b8:20:91:95:5d:16:0f:36: 8e:09:8f:cb:1d:86:ad:bd:d0:bf:22:91:43:36:01:44:d5:92: 36:b2:3f:61:80:fb:e1:0b:42:69:4e:2c:df:03:37:ed:1f:37: bc:79:ad:4d:92:bd:0e:62:74:2a:ab:76:22:22:32:b6:4c:cc: 66:0f:cc:2e:95:a2:43:fc:4a:38:23:55:f6:ad:66:6b:3a:1c: b8:e9:5d:2f:33:01:c7:0b:89:6d:03:20:f4:bc:88:00:63:ce: d7:cf:39:49 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEji0RxyJ214LkD7FEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI4MjA0ZWItOGNlNS00ZDlhLWIzODMtYjQ0MzNlODA3 NWEwMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk YjdkMzhjYTUtNTEzZi00ODY4LWJkYjMtOTJkZGZlMWFkZTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfkC6Ah8nFfZFzkMaItDSMuuVgDLyflXEgDQ 0ae7alxApt5PGqAWxuH1Y46VgP5ZWMYNfrnlpauiXn4AgGEAV71KuyDGHuRgR5hR FosLAWqwCWbG3NHn2zKLsRGkkk3s86mHFgcEZxAOxE6OSdsvH2m+r08NlSsfonk7 l94M7bGBXDwCUETqFfG+5yve2Y162k5hHPb3ScLS02vuUtakbydKDMsmKbs2eH38 70CndAyuSlKrKYa2a4SAPGSlHv3OoVHn/Tzjlmw54HGz/bvnlVfa9rpYC18hc29v qC3ULMSKs/L8pAdjqvBtUolSOSuXbhfUwjzuRJTfshf/34BGiQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFMP4BAfIZRmoVaCdtl+3MRxto90VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lYjgy MDRlYi04Y2U1LTRkOWEtYjM4My1iNDQzM2U4MDc1YTAvYmI5OTNhZTMtMGU2YS0z YTZkLWFjYTUtNjllZGQyMmNmN2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZWI4MjA0ZWItOGNlNS00ZDlhLWIz ODMtYjQ0MzNlODA3NWEwL2ViODIwNGViLThjZTUtNGQ5YS1iMzgzLWI0NDMzZTgw NzVhMC5jcmwwHwYDVR0jBBgwFoAULGFgsj4J6JefPCz1sTmrvBGlOE8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9lYjgyMDRlYi04Y2U1LTRkOWEtYjM4My1iNDQz M2U4MDc1YTAuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQDaCTQMA4E AgACMAgDBgAmIAEvcDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAawvME3IX5ltM+YbGsU6pw50tHOqULXtPN SPfpBoxghlRDKxtgRnOt4lOqH8R//iqmGn/DsmNDexZozSngMqNqDPClVautcyN5 pJbA18WhNWXcnJeStDm/JoNVmDKz2IcHLJVGJEwtrxrhZZZsLJo1utFJcPrSD42X 5lJHtQkd8K4/Xz74ZefcVJD5qqzbPIIr7o4pSCb/yCFXuCCRlV0WDzaOCY/LHYat vdC/IpFDNgFE1ZI2sj9hgPvhC0JpTizfAzftHze8ea1Nkr0OYnQqq3YiIjK2TMxm D8wulaJD/Eo4I1X2rWZrOhy46V0vMwHHC4ltAyD0vIgAY87XzzlJ -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:21 2025 by rpki-client