$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/1f54617e-3c5e-3db3-ad0e-8c7f5e145528.roa File: 1f54617e-3c5e-3db3-ad0e-8c7f5e145528.roa (raw, json) Hash identifier: JUWMs26LF+BBonxLGb+d0tZdpS6RBi6YMNKu9iltowU= Subject key identifier: C1:AB:3E:2C:CA:4C:57:46:28:28:E2:FD:2E:7E:7B:EB:B6:D9:9D:1A Certificate issuer: /CN=265b0641-047d-4787-a12d-159370bfcdb1 Certificate serial: 010D0C9F43285848BE8630513708E1DF51EF7CD0 Authority key identifier: 26:6C:47:39:A7:73:A8:23:18:A0:B7:CF:9A:FB:63:72:91:54:0B:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/1f54617e-3c5e-3db3-ad0e-8c7f5e145528.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 20473 IP address blocks: 104.171.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:30:51:37:08:e1:df:51:ef:7c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=265b0641-047d-4787-a12d-159370bfcdb1 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=2e0284de-6101-49e3-b11a-9c912f72c2be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b2:92:7f:fa:a7:71:d9:94:f6:58:b6:56:57: d8:fd:01:7f:d9:e2:f6:51:ed:bf:50:e0:ce:3d:e4: a2:9e:ff:74:fe:16:57:16:80:aa:cc:ff:28:cc:82: 25:fc:18:e9:3f:43:9b:62:e6:55:d1:20:27:73:d1: ea:71:42:fc:e5:16:0c:1b:0b:e4:19:96:5d:7f:4e: 42:ad:2b:f9:0b:d8:80:39:50:1f:5c:35:24:5f:49: 80:13:59:7b:49:d3:6f:82:f3:2e:7e:31:b9:88:2e: 67:39:4d:df:3d:e1:e3:38:0e:b2:b7:af:94:e6:47: 61:66:0d:32:12:d1:5d:b6:28:26:eb:6c:9d:c4:79: a0:2c:aa:93:b6:e5:89:6a:72:5a:e3:35:83:6b:aa: aa:57:1d:0c:43:e1:c2:14:85:e6:88:f5:12:15:60: f6:2b:a4:af:06:a9:ca:cf:88:8f:89:26:d4:c1:07: d6:0a:e0:d2:f5:23:8a:47:04:ae:e6:1d:49:36:3a: 15:00:c2:09:dc:cd:e5:50:98:ea:bd:b3:5c:a9:af: 3a:32:42:9e:22:de:69:5e:be:c1:e6:cd:2c:0b:0a: a8:87:a0:61:c9:6b:74:85:d3:52:32:65:8f:7d:4a: 2c:f2:3d:59:89:5e:d3:4a:e2:e1:c3:a2:f6:7b:49: 40:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:AB:3E:2C:CA:4C:57:46:28:28:E2:FD:2E:7E:7B:EB:B6:D9:9D:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/1f54617e-3c5e-3db3-ad0e-8c7f5e145528.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.crl X509v3 Authority Key Identifier: keyid:26:6C:47:39:A7:73:A8:23:18:A0:B7:CF:9A:FB:63:72:91:54:0B:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer sbgp-ipAddrBlock: critical IPv4: 104.171.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:95:00:0b:2e:18:ee:08:a1:ea:4e:a2:32:d6:ff:9d:2f:df: 79:86:80:ff:f1:02:2e:82:3c:ae:5e:b8:91:78:a3:b8:0a:8b: 11:0d:53:60:c6:d3:a4:b6:64:c1:41:04:cc:15:71:31:ea:26: 34:94:c5:b1:a0:7a:0a:31:09:46:9b:3f:0d:fc:1d:6b:4e:b1: d7:9f:88:73:56:04:88:09:77:f6:99:f2:9e:44:8a:72:60:28: 77:69:21:11:6b:ec:d1:9a:95:ce:33:70:7f:6a:0f:1a:59:a3: db:3f:ee:0d:81:9b:6d:e2:d9:11:07:28:c1:f1:c8:d3:3b:7c: d4:7a:91:f2:d4:d6:4f:a4:6b:52:fa:c0:12:c7:9f:00:a5:5e: bd:41:5d:22:c0:11:6d:e3:03:e8:59:cb:2f:80:d7:98:14:6c: 7a:69:0c:d0:92:6d:d3:d3:39:e5:56:9a:ba:42:3f:6c:35:c3: 36:02:47:c8:0b:11:96:19:0a:29:64:a1:0f:3f:72:77:1c:82: c3:51:71:4d:0e:d9:a3:25:89:78:09:c4:48:e6:ba:8a:fd:11: 1b:10:a2:ab:c6:50:ce:62:31:72:1b:2c:f2:48:62:93:a0:18: 71:61:69:eb:8e:87:ef:f3:0f:f8:a4:6d:de:87:cd:dd:16:00: a0:71:aa:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hjBRNwjh31HvfNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjY1YjA2NDEtMDQ3ZC00Nzg3LWExMmQtMTU5MzcwYmZj ZGIxMB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk MmUwMjg0ZGUtNjEwMS00OWUzLWIxMWEtOWM5MTJmNzJjMmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbKSf/qncdmU9li2VlfY/QF/2eL2Ue2/UODO PeSinv90/hZXFoCqzP8ozIIl/BjpP0ObYuZV0SAnc9HqcUL85RYMGwvkGZZdf05C rSv5C9iAOVAfXDUkX0mAE1l7SdNvgvMufjG5iC5nOU3fPeHjOA6yt6+U5kdhZg0y EtFdtigm62ydxHmgLKqTtuWJanJa4zWDa6qqVx0MQ+HCFIXmiPUSFWD2K6SvBqnK z4iPiSbUwQfWCuDS9SOKRwSu5h1JNjoVAMIJ3M3lUJjqvbNcqa86MkKeIt5pXr7B 5s0sCwqoh6BhyWt0hdNSMmWPfUos8j1ZiV7TSuLhw6L2e0lAgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGrPizKTFdGKCji/S5+e+u22Z0aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNjVi MDY0MS0wNDdkLTQ3ODctYTEyZC0xNTkzNzBiZmNkYjEvMWY1NDYxN2UtM2M1ZS0z ZGIzLWFkMGUtOGM3ZjVlMTQ1NTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjY1YjA2NDEtMDQ3ZC00Nzg3LWEx MmQtMTU5MzcwYmZjZGIxLzI2NWIwNjQxLTA0N2QtNDc4Ny1hMTJkLTE1OTM3MGJm Y2RiMS5jcmwwHwYDVR0jBBgwFoAUJmxHOadzqCMYoLfPmvtjcpFUCyUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNjViMDY0MS0wNDdkLTQ3ODctYTEyZC0xNTkz NzBiZmNkYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKsVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOVAAsuGO4IoepOojLW/50v33mGgP/xAi6CPK5euJF4o7gKixENU2DG 06S2ZMFBBMwVcTHqJjSUxbGgegoxCUabPw38HWtOsdefiHNWBIgJd/aZ8p5EinJg KHdpIRFr7NGalc4zcH9qDxpZo9s/7g2Bm23i2REHKMHxyNM7fNR6kfLU1k+ka1L6 wBLHnwClXr1BXSLAEW3jA+hZyy+A15gUbHppDNCSbdPTOeVWmrpCP2w1wzYCR8gL EZYZCilkoQ8/cnccgsNRcU0O2aMliXgJxEjmuor9ERsQoqvGUM5iMXIbLPJIYpOg GHFhaeuOh+/zD/ikbd6Hzd0WAKBxqoI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:20 2025 by rpki-client