$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584/89cb97ca-7d4a-3637-9cae-6f5745076a6f.roa File: 89cb97ca-7d4a-3637-9cae-6f5745076a6f.roa (raw, json) Hash identifier: /ACjSVG+vz3Grlai0AO89nTaJUasfdAgDUKe+0OBxpY= Subject key identifier: F2:C1:21:A2:35:90:2A:1B:35:E7:93:EA:8A:34:B6:EF:6E:98:0F:62 Certificate issuer: /CN=6c5be2bd-61a2-464a-be54-34e87a4a9584 Certificate serial: 010D0C9F432858483F801D8FFA85DE02C423E480 Authority key identifier: 8C:C1:42:F4:9C:11:05:F4:E8:B0:7B:1A:7F:C5:2A:C4:77:83:D0:71 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584/89cb97ca-7d4a-3637-9cae-6f5745076a6f.roa Signing time: Wed 18 Dec 2024 14:00:52 +0000 ROA not before: Wed 18 Dec 2024 14:00:52 +0000 ROA not after: Tue 18 Mar 2025 13:00:52 +0000 asID: 31851 IP address blocks: 104.219.188.0/22 maxlen: 24 167.88.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584/6c5be2bd-61a2-464a-be54-34e87a4a9584.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584/6c5be2bd-61a2-464a-be54-34e87a4a9584.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3f:80:1d:8f:fa:85:de:02:c4:23:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c5be2bd-61a2-464a-be54-34e87a4a9584 Validity Not Before: Dec 18 14:00:52 2024 GMT Not After : Mar 18 13:00:52 2025 GMT Subject: CN=5ea61c4d-f9b8-47a7-b9b1-fd1481ee06e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:13:14:28:f5:bc:8f:a3:4f:ea:e9:ca:3e:85: 7a:62:19:8c:31:55:ce:8c:5b:f2:3f:e5:0c:31:88: 52:7b:ec:45:b5:9b:38:6c:c0:e2:d8:0d:9c:b1:d8: e5:aa:3d:61:9b:59:5c:e2:70:af:fe:99:a3:2f:4b: 06:83:d2:52:59:d2:7d:d5:c1:6f:bd:65:a2:82:aa: ff:41:98:ef:8f:df:52:60:84:9e:3e:eb:5c:a2:31: 14:2e:10:41:b2:9c:5e:e1:df:b7:c6:79:00:57:30: 95:8d:b5:a6:92:bb:c3:4f:fd:24:82:f1:07:fb:4c: 6b:28:d7:5e:8a:7e:58:4b:fe:0e:16:2a:26:fe:07: 45:88:ce:5a:81:fe:3f:5e:a1:d3:78:65:08:4f:cb: 6f:14:11:16:96:78:d9:50:db:6e:9e:ee:9f:e1:99: 10:f6:ba:ae:26:8c:73:18:10:a0:73:8b:f5:33:c2: e9:77:a9:93:b6:31:4a:98:c8:22:51:98:7b:23:f5: f7:d3:bb:0f:15:18:38:27:cb:10:ba:fc:76:af:ca: 8c:d0:8b:e2:0b:fb:43:12:88:d0:58:8b:f5:0c:ef: 57:88:e2:fb:e7:bc:56:70:61:a1:1a:4b:6f:a9:eb: 11:c2:61:2a:e4:fc:b5:41:a3:b8:a5:18:55:c1:17: ad:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C1:21:A2:35:90:2A:1B:35:E7:93:EA:8A:34:B6:EF:6E:98:0F:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584/89cb97ca-7d4a-3637-9cae-6f5745076a6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584/6c5be2bd-61a2-464a-be54-34e87a4a9584.crl X509v3 Authority Key Identifier: keyid:8C:C1:42:F4:9C:11:05:F4:E8:B0:7B:1A:7F:C5:2A:C4:77:83:D0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584.cer sbgp-ipAddrBlock: critical IPv4: 104.219.188.0/22 167.88.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:46:10:87:6b:ff:b2:4a:2b:21:1c:eb:68:22:ec:f4:05:33: 7f:97:66:3b:2a:e8:1a:ff:33:f4:d7:4c:af:1e:2e:96:ac:1f: 20:e5:60:1a:2c:03:e7:1e:b6:a9:08:1e:13:a1:bd:80:fd:a1: fd:b1:36:fa:ea:ce:33:cb:e6:50:3c:13:23:c5:e1:cf:cc:14: 7f:b8:5a:d2:ec:16:80:f0:39:7d:96:81:92:8b:f7:d1:a7:7a: 3a:cc:30:8a:b8:1e:d3:f6:f4:dc:1f:04:1f:7b:dc:74:7e:ca: 0d:3e:fd:2f:c6:ee:16:09:38:47:a2:76:19:39:57:8d:7e:29: 01:a7:18:f9:6c:c2:ba:9f:88:1d:24:0b:cb:10:ff:5f:52:56: 09:3a:a8:85:c9:89:57:81:96:6c:50:a0:90:63:c2:f8:63:e1: f7:0f:d1:7e:67:5a:33:f1:bb:25:27:50:ff:3b:6f:31:99:f0: 14:47:a9:51:86:4c:ad:81:78:cb:06:81:36:2a:92:38:c7:2e: 75:dc:bf:f4:87:31:c4:d4:aa:aa:aa:e4:26:f1:e5:74:f1:ee: 3f:0a:88:b1:84:ed:3f:94:af:00:a6:a2:52:a1:a0:27:91:cc: 65:99:2e:ad:f2:75:e5:73:cc:b3:04:ee:66:73:ff:9a:13:26: 79:4f:0b:64 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEg/gB2P+oXeAsQj5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmM1YmUyYmQtNjFhMi00NjRhLWJlNTQtMzRlODdhNGE5 NTg0MB4XDTI0MTIxODE0MDA1MloXDTI1MDMxODEzMDA1MlowLzEtMCsGA1UEAxMk NWVhNjFjNGQtZjliOC00N2E3LWI5YjEtZmQxNDgxZWUwNmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBMUKPW8j6NP6unKPoV6YhmMMVXOjFvyP+UM MYhSe+xFtZs4bMDi2A2csdjlqj1hm1lc4nCv/pmjL0sGg9JSWdJ91cFvvWWigqr/ QZjvj99SYISePutcojEULhBBspxe4d+3xnkAVzCVjbWmkrvDT/0kgvEH+0xrKNde in5YS/4OFiom/gdFiM5agf4/XqHTeGUIT8tvFBEWlnjZUNtunu6f4ZkQ9rquJoxz GBCgc4v1M8Lpd6mTtjFKmMgiUZh7I/X307sPFRg4J8sQuvx2r8qM0IviC/tDEojQ WIv1DO9XiOL757xWcGGhGktvqesRwmEq5Py1QaO4pRhVwRetpQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPLBIaI1kCobNeeT6oo0tu9umA9iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YzVi ZTJiZC02MWEyLTQ2NGEtYmU1NC0zNGU4N2E0YTk1ODQvODljYjk3Y2EtN2Q0YS0z NjM3LTljYWUtNmY1NzQ1MDc2YTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmM1YmUyYmQtNjFhMi00NjRhLWJl NTQtMzRlODdhNGE5NTg0LzZjNWJlMmJkLTYxYTItNDY0YS1iZTU0LTM0ZTg3YTRh OTU4NC5jcmwwHwYDVR0jBBgwFoAUjMFC9JwRBfTosHsaf8UqxHeD0HEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YzViZTJiZC02MWEyLTQ2NGEtYmU1NC0zNGU4 N2E0YTk1ODQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCaNu8AwQC p1g0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIBGEIdr/7JKKyEc62gi7PQFM3+XZjsq6Br/M/TXTK8eLpas HyDlYBosA+cetqkIHhOhvYD9of2xNvrqzjPL5lA8EyPF4c/MFH+4WtLsFoDwOX2W gZKL99GnejrMMIq4HtP29NwfBB973HR+yg0+/S/G7hYJOEeidhk5V41+KQGnGPls wrqfiB0kC8sQ/19SVgk6qIXJiVeBlmxQoJBjwvhj4fcP0X5nWjPxuyUnUP87bzGZ 8BRHqVGGTK2BeMsGgTYqkjjHLnXcv/SHMcTUqqqq5Cbx5XTx7j8KiLGE7T+UrwCm olKhoCeRzGWZLq3ydeVzzLME7mZz/5oTJnlPC2Q= -----END CERTIFICATE-----Generated at Sun Feb 16 20:29:48 2025 by rpki-client