$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/43d698a9-f364-3f11-918e-a3f5a57ed484.roa File: 43d698a9-f364-3f11-918e-a3f5a57ed484.roa (raw, json) Hash identifier: johMPxYNln1csPUSU+0Q2vPq+Z+stc5wWlhuR8zwJLI= Subject key identifier: FE:CD:B5:4C:89:47:E3:60:82:15:EF:F7:CE:7B:DC:5D:40:68:4A:F8 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F43285848748B20F287D00DB433861E00 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/43d698a9-f364-3f11-918e-a3f5a57ed484.roa Signing time: Mon 06 Jan 2025 14:00:52 +0000 ROA not before: Mon 06 Jan 2025 14:00:52 +0000 ROA not after: Sun 06 Apr 2025 13:00:52 +0000 asID: 11290 IP address blocks: 104.200.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:74:8b:20:f2:87:d0:0d:b4:33:86:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jan 6 14:00:52 2025 GMT Not After : Apr 6 13:00:52 2025 GMT Subject: CN=849626bd-a812-4583-b59d-c712a300078a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:19:e8:54:5b:30:d7:df:6a:73:15:40:42:c5: c0:54:cf:fb:f3:f3:19:dc:8c:08:e1:6a:48:f0:97: 3f:c1:3c:b9:d0:b3:3f:c8:f6:bc:5c:6b:be:25:a3: b9:c6:49:c4:87:c8:39:e1:37:0f:29:06:39:01:40: 15:6c:ee:97:e0:11:ab:80:ae:06:cc:2b:c1:f6:1f: fe:8b:7e:8f:ce:3c:7a:b2:38:c6:e1:98:d3:7d:fd: 98:0a:6e:9c:7f:f3:11:9f:a9:58:a1:03:70:09:87: 4e:37:30:93:e1:95:50:9d:d4:82:d9:c3:18:ff:cf: b6:f1:72:a2:4f:d9:96:2c:ef:fe:88:6e:00:ec:1d: f0:0f:7e:e1:4e:f3:9a:f1:1d:ba:d8:6d:4a:bb:07: bf:bd:40:b4:01:ec:9f:3b:9d:b3:ef:bb:bb:44:7e: 86:d8:36:de:be:aa:32:c9:be:dd:06:c1:ed:b2:4e: 1d:9b:0b:cc:38:d8:22:3d:55:d0:cd:3e:a5:e4:01: 5c:52:76:b7:0c:78:3a:6c:b0:bd:6a:69:e3:65:cb: f9:12:54:6d:25:86:8c:34:44:1d:bc:ed:da:88:55: 37:ab:b6:66:fa:cd:24:69:f5:c4:64:23:0b:b2:d9: 8c:5e:8a:03:3c:cb:10:7e:4a:60:8f:6f:ab:eb:71: 7a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:CD:B5:4C:89:47:E3:60:82:15:EF:F7:CE:7B:DC:5D:40:68:4A:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/43d698a9-f364-3f11-918e-a3f5a57ed484.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 104.200.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:b7:c5:c5:01:c2:ae:7e:e1:f1:66:51:bf:d8:e7:45:6a:1b: 09:2a:95:9b:d3:b0:43:ca:d4:28:1c:9a:86:e4:60:f3:08:d1: f8:b7:e7:2a:2c:77:46:f3:1c:b7:05:15:15:b7:b7:21:02:c5: 07:66:2b:7a:1c:88:3b:ab:4a:56:70:80:3a:b3:4f:c5:b6:f7: ff:80:b6:07:d0:9c:db:32:0b:c4:83:36:e7:ac:b2:47:bd:6a: b4:c7:f0:12:96:5c:29:8d:d7:37:fc:1a:f1:ce:cb:f1:d5:cf: 56:06:9b:82:37:1a:5c:79:d4:45:80:7d:b9:de:9c:77:8d:21: 4d:ed:d2:0b:f7:ee:33:7b:e6:77:dd:0c:61:25:72:a6:b7:59: ef:fb:f1:af:6a:4e:3f:78:6e:38:cb:84:ad:37:75:2e:ce:ba: 75:3f:26:f8:ef:14:7b:67:b3:f7:06:2e:4a:f8:94:44:7a:6c: e3:84:57:cc:de:cc:a8:33:c3:a1:65:da:12:08:22:a9:b6:bf: ff:9f:08:d2:23:11:aa:43:e5:02:40:77:02:ae:4c:66:de:be: e7:d2:dd:ae:51:44:7c:99:c3:b8:41:c2:7c:e0:f7:af:44:1a: 36:ac:1b:d3:72:14:f3:ff:c6:39:67:dc:0f:91:c7:8f:5e:b3: bf:10:40:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh0iyDyh9ANtDOGHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDEwNjE0MDA1MloXDTI1MDQwNjEzMDA1MlowLzEtMCsGA1UEAxMk ODQ5NjI2YmQtYTgxMi00NTgzLWI1OWQtYzcxMmEzMDAwNzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBnoVFsw199qcxVAQsXAVM/78/MZ3IwI4WpI 8Jc/wTy50LM/yPa8XGu+JaO5xknEh8g54TcPKQY5AUAVbO6X4BGrgK4GzCvB9h/+ i36Pzjx6sjjG4ZjTff2YCm6cf/MRn6lYoQNwCYdONzCT4ZVQndSC2cMY/8+28XKi T9mWLO/+iG4A7B3wD37hTvOa8R262G1Kuwe/vUC0AeyfO52z77u7RH6G2Dbevqoy yb7dBsHtsk4dmwvMONgiPVXQzT6l5AFcUna3DHg6bLC9amnjZcv5ElRtJYaMNEQd vO3aiFU3q7Zm+s0kafXEZCMLstmMXooDPMsQfkpgj2+r63F6KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7NtUyJR+NgghXv98573F1AaEr4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvNDNkNjk4YTktZjM2NC0z ZjExLTkxOGUtYTNmNWE1N2VkNDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMhQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+3xcUBwq5+4fFmUb/Y50VqGwkqlZvTsEPK1CgcmobkYPMI0fi35yos d0bzHLcFFRW3tyECxQdmK3ociDurSlZwgDqzT8W29/+AtgfQnNsyC8SDNuesske9 arTH8BKWXCmN1zf8GvHOy/HVz1YGm4I3Glx51EWAfbnenHeNIU3t0gv37jN75nfd DGElcqa3We/78a9qTj94bjjLhK03dS7OunU/JvjvFHtns/cGLkr4lER6bOOEV8ze zKgzw6Fl2hIIIqm2v/+fCNIjEapD5QJAdwKuTGbevufS3a5RRHyZw7hBwnzg969E GjasG9NyFPP/xjln3A+Rx49es78QQA8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:54 2025 by rpki-client