$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/95594a93-aada-3b86-809d-b02922f2e009.roa File: 95594a93-aada-3b86-809d-b02922f2e009.roa (raw, json) Hash identifier: TuWShQKd4gCicxx0oyefS5BZNA1+NgzKTgJj0eQhq0U= Subject key identifier: 91:65:E2:96:F4:AC:A4:4B:0D:88:DE:D1:9D:6A:22:9F:CC:07:FC:0A Certificate issuer: /CN=265b0641-047d-4787-a12d-159370bfcdb1 Certificate serial: 010D0C9F43285848BE8630420E9085C2D1310800 Authority key identifier: 26:6C:47:39:A7:73:A8:23:18:A0:B7:CF:9A:FB:63:72:91:54:0B:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/95594a93-aada-3b86-809d-b02922f2e009.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 20473 IP address blocks: 104.171.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:30:42:0e:90:85:c2:d1:31:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=265b0641-047d-4787-a12d-159370bfcdb1 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=2d20eb08-23df-4077-8c22-e9bc11127173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3e:60:8d:59:4f:10:28:e0:11:dc:b7:78:9b: 24:7b:40:d8:8c:b8:f0:70:9d:9a:58:fe:34:2a:97: 72:5d:3f:ba:66:77:a4:63:3f:f3:83:e5:3d:a0:d3: 07:23:dd:8a:7b:3c:4e:59:5c:45:0b:8c:19:0a:a4: 0c:de:94:46:74:84:3f:31:67:13:4d:70:dc:07:5c: 85:dd:11:5b:f1:8e:58:7d:75:c3:6f:80:95:b7:e1: 75:7f:1b:79:60:20:23:e9:fd:9c:ee:d7:69:65:28: 56:d5:1f:c5:f1:45:bb:88:a8:e4:49:4c:06:88:6e: 55:e1:65:13:17:f1:d1:a7:07:03:42:67:45:5e:37: 6d:0d:c7:e0:f4:48:4f:a8:86:08:dc:71:e7:db:81: b6:5c:bc:a8:85:36:55:08:a5:35:58:6e:5b:d2:d7: 6a:1a:3f:b5:f4:f4:3c:24:75:93:b1:4a:ea:c4:1c: 79:a2:34:32:4a:f8:76:79:8b:ed:f5:2b:6c:3e:81: 13:92:a2:6e:0a:92:80:cb:7e:9a:87:ba:de:e3:02: 09:5f:28:a3:c7:f5:3e:95:78:5f:01:d3:48:af:b3: 19:db:5a:8f:0e:37:70:d7:c2:0e:c7:c7:a6:cc:8c: 28:1a:72:ce:5a:b0:05:6f:17:f0:e7:2a:8d:0c:d2: f0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:65:E2:96:F4:AC:A4:4B:0D:88:DE:D1:9D:6A:22:9F:CC:07:FC:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/95594a93-aada-3b86-809d-b02922f2e009.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.crl X509v3 Authority Key Identifier: keyid:26:6C:47:39:A7:73:A8:23:18:A0:B7:CF:9A:FB:63:72:91:54:0B:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer sbgp-ipAddrBlock: critical IPv4: 104.171.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:03:f9:70:94:4a:17:fb:42:54:ff:64:e5:fc:e5:0a:1b:5f: c2:85:9c:60:7e:c8:34:c2:af:4d:de:e8:97:c2:2d:11:4a:fb: e0:00:a0:7e:52:ab:15:40:e7:a4:c4:d6:51:7f:2a:37:ce:45: 87:49:5b:cd:af:06:60:80:30:f0:13:6b:5d:df:0f:fd:35:6b: b3:74:0a:c8:ed:00:e2:18:18:55:4a:90:46:fb:a2:f5:37:11: f7:71:13:c4:3e:ad:d6:60:ec:fe:43:6a:bd:6a:d1:5f:fb:6a: 2d:ab:8b:52:d5:41:a4:92:74:3a:51:ce:27:38:e9:ea:95:a8: d3:8d:59:4b:c7:ee:62:1a:70:0a:91:d4:cd:b0:63:20:53:95: 89:c8:75:40:7f:6c:a6:58:10:11:75:62:5e:1d:f9:b3:22:44: e0:20:6c:72:47:c4:60:38:e1:01:86:a2:60:d4:24:ce:3f:4c: 6a:d9:04:47:68:34:8e:98:b9:2f:ce:b2:55:68:a5:ac:5a:04: 73:0b:6b:ab:41:11:62:b2:ad:f8:84:72:c9:22:a0:aa:be:c2: b9:b0:95:ac:82:91:53:92:9a:3d:79:e3:92:29:3d:75:e4:30: 21:48:79:af:b3:ef:f6:83:b6:3f:2d:3e:4b:7e:8d:9f:d9:d5: 95:7f:fe:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hjBCDpCFwtExCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjY1YjA2NDEtMDQ3ZC00Nzg3LWExMmQtMTU5MzcwYmZj ZGIxMB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk MmQyMGViMDgtMjNkZi00MDc3LThjMjItZTliYzExMTI3MTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkD5gjVlPECjgEdy3eJske0DYjLjwcJ2aWP40 KpdyXT+6ZnekYz/zg+U9oNMHI92KezxOWVxFC4wZCqQM3pRGdIQ/MWcTTXDcB1yF 3RFb8Y5YfXXDb4CVt+F1fxt5YCAj6f2c7tdpZShW1R/F8UW7iKjkSUwGiG5V4WUT F/HRpwcDQmdFXjdtDcfg9EhPqIYI3HHn24G2XLyohTZVCKU1WG5b0tdqGj+19PQ8 JHWTsUrqxBx5ojQySvh2eYvt9StsPoETkqJuCpKAy36ah7re4wIJXyijx/U+lXhf AdNIr7MZ21qPDjdw18IOx8emzIwoGnLOWrAFbxfw5yqNDNLwtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFl4pb0rKRLDYje0Z1qIp/MB/wKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNjVi MDY0MS0wNDdkLTQ3ODctYTEyZC0xNTkzNzBiZmNkYjEvOTU1OTRhOTMtYWFkYS0z Yjg2LTgwOWQtYjAyOTIyZjJlMDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjY1YjA2NDEtMDQ3ZC00Nzg3LWEx MmQtMTU5MzcwYmZjZGIxLzI2NWIwNjQxLTA0N2QtNDc4Ny1hMTJkLTE1OTM3MGJm Y2RiMS5jcmwwHwYDVR0jBBgwFoAUJmxHOadzqCMYoLfPmvtjcpFUCyUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNjViMDY0MS0wNDdkLTQ3ODctYTEyZC0xNTkz NzBiZmNkYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKsUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMD+XCUShf7QlT/ZOX85QobX8KFnGB+yDTCr03e6JfCLRFK++AAoH5S qxVA56TE1lF/KjfORYdJW82vBmCAMPATa13fD/01a7N0CsjtAOIYGFVKkEb7ovU3 EfdxE8Q+rdZg7P5Dar1q0V/7ai2ri1LVQaSSdDpRzic46eqVqNONWUvH7mIacAqR 1M2wYyBTlYnIdUB/bKZYEBF1Yl4d+bMiROAgbHJHxGA44QGGomDUJM4/TGrZBEdo NI6YuS/OslVopaxaBHMLa6tBEWKyrfiEcskioKq+wrmwlayCkVOSmj1545IpPXXk MCFIea+z7/aDtj8tPkt+jZ/Z1ZV//s4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:40 2025 by rpki-client