$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4c8fab89-95b2-3396-a9be-461ce805ad75.roa File: 4c8fab89-95b2-3396-a9be-461ce805ad75.roa (raw, json) Hash identifier: FI+oKulVnevEKg+WsyKYpX0B8QfM+mxUD0Gp20xejmY= Subject key identifier: B3:0A:0F:C0:9C:54:B2:EF:FB:2C:96:3F:86:FC:B8:D9:E5:6C:0C:67 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584839EAB5DD1441258885A05F80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4c8fab89-95b2-3396-a9be-461ce805ad75.roa Signing time: Mon 16 Dec 2024 14:00:51 +0000 ROA not before: Mon 16 Dec 2024 14:00:51 +0000 ROA not after: Sun 16 Mar 2025 13:00:51 +0000 asID: 20473 IP address blocks: 104.243.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:39:ea:b5:dd:14:41:25:88:85:a0:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Dec 16 14:00:51 2024 GMT Not After : Mar 16 13:00:51 2025 GMT Subject: CN=21a1d008-29ce-4a5f-a158-200382037936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:85:2f:5c:67:dc:cd:30:53:b0:83:57:12:64: 6a:4d:ee:e8:ad:a9:3a:4a:07:b2:fe:1c:87:c3:bf: fa:df:34:2a:8f:f2:d6:14:8a:8d:cd:96:56:ca:b4: 66:2b:7e:3b:8e:a7:b7:8e:63:32:c2:48:92:5e:9d: ac:f8:80:0c:28:d8:e4:76:5f:de:60:a7:22:5e:dd: f0:96:a5:69:e0:0c:ba:0b:07:0d:13:da:38:dd:69: b2:db:c4:f7:f9:f6:39:ba:de:40:5c:ca:50:24:ef: 7a:26:c0:4e:52:0b:22:56:08:63:74:b1:60:1a:e4: 88:01:09:dd:c0:1d:2a:a8:3c:70:cc:75:19:41:78: 1e:28:09:7e:71:09:18:53:0b:db:24:6b:46:ab:bf: 2f:d5:ea:fb:32:5b:6b:67:69:ab:ee:a6:e6:ac:79: 45:2e:29:8f:a8:f6:4b:10:bd:15:62:55:57:c2:8e: ef:0c:9c:51:3f:d5:59:ff:65:f8:13:ec:6b:71:e2: 31:e9:c7:35:01:70:b7:92:fc:96:78:fc:09:54:ae: f3:6f:37:0e:4f:e8:38:1e:42:5c:9d:c5:76:e4:d7: 7d:75:c1:01:4b:5a:b7:0f:00:5d:11:d9:43:ed:4d: bb:f0:3f:2d:45:2c:fc:64:b9:40:22:18:06:f5:c2: fc:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:0A:0F:C0:9C:54:B2:EF:FB:2C:96:3F:86:FC:B8:D9:E5:6C:0C:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4c8fab89-95b2-3396-a9be-461ce805ad75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.243.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:82:9c:6a:e7:46:79:09:1f:22:74:be:a5:a3:a2:b5:0e:b5: 8a:f3:c5:fa:0c:5c:0f:b8:4f:71:69:02:78:b9:7b:53:3d:6d: dc:a6:a4:f2:c0:f7:b8:e2:dc:4e:be:d5:c8:c4:10:15:e0:44: 0f:81:18:58:ef:75:4b:99:d1:80:9a:21:3e:7c:99:64:e5:b1: f5:33:c6:17:3f:9a:a7:47:0b:d3:f2:2d:70:76:9b:62:0d:9e: 84:80:26:ae:25:a2:7d:4b:b7:c7:56:b8:bb:1f:53:d3:5a:91: ec:b2:48:d1:2f:c2:ac:d5:cb:97:05:bb:39:3d:bc:56:a4:48: 56:a1:39:bb:2d:0f:1b:ae:a1:8d:97:47:84:bd:24:b3:12:b0: 7e:53:43:e6:82:1d:10:ac:80:b1:63:27:67:48:38:1f:35:07: 43:f7:7d:48:0f:0e:70:9f:4f:46:a3:1c:e6:07:af:63:16:d1: e9:e2:38:32:af:8d:93:16:dd:c9:b1:e7:b0:c3:da:58:cd:df: 75:6f:47:65:fe:f9:63:86:2e:1f:49:5d:fa:59:6c:81:d6:29: 94:f1:44:e5:cb:be:ef:e0:63:7f:a1:3d:b6:50:ad:28:60:d7: d7:c1:5f:73:e4:84:95:9c:03:1a:40:b1:87:01:6e:5e:9e:b9: fb:b8:c6:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg56rXdFEEliIWgX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTIxNjE0MDA1MVoXDTI1MDMxNjEzMDA1MVowLzEtMCsGA1UEAxMk MjFhMWQwMDgtMjljZS00YTVmLWExNTgtMjAwMzgyMDM3OTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYUvXGfczTBTsINXEmRqTe7orak6Sgey/hyH w7/63zQqj/LWFIqNzZZWyrRmK347jqe3jmMywkiSXp2s+IAMKNjkdl/eYKciXt3w lqVp4Ay6CwcNE9o43Wmy28T3+fY5ut5AXMpQJO96JsBOUgsiVghjdLFgGuSIAQnd wB0qqDxwzHUZQXgeKAl+cQkYUwvbJGtGq78v1er7MltrZ2mr7qbmrHlFLimPqPZL EL0VYlVXwo7vDJxRP9VZ/2X4E+xrceIx6cc1AXC3kvyWePwJVK7zbzcOT+g4HkJc ncV25Nd9dcEBS1q3DwBdEdlD7U278D8tRSz8ZLlAIhgG9cL8GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMKD8CcVLLv+yyWP4b8uNnlbAxnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNGM4ZmFiODktOTViMi0z Mzk2LWE5YmUtNDYxY2U4MDVhZDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPPxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqCnGrnRnkJHyJ0vqWjorUOtYrzxfoMXA+4T3FpAni5e1M9bdympPLA 97ji3E6+1cjEEBXgRA+BGFjvdUuZ0YCaIT58mWTlsfUzxhc/mqdHC9PyLXB2m2IN noSAJq4lon1Lt8dWuLsfU9NakeyySNEvwqzVy5cFuzk9vFakSFahObstDxuuoY2X R4S9JLMSsH5TQ+aCHRCsgLFjJ2dIOB81B0P3fUgPDnCfT0ajHOYHr2MW0eniODKv jZMW3cmx57DD2ljN33VvR2X++WOGLh9JXfpZbIHWKZTxROXLvu/gY3+hPbZQrShg 19fBX3PkhJWcAxpAsYcBbl6eufu4xnk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:25 2025 by rpki-client