$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a/1e85c596-69bf-373d-9906-1d381b3d01ef.roa File: 1e85c596-69bf-373d-9906-1d381b3d01ef.roa (raw, json) Hash identifier: +4M6Gb73O9INjN7Z3rc/G58BJscS/Djx8dDq+Q/7WhE= Subject key identifier: 1B:AA:AF:38:91:9E:DC:76:26:E4:5C:74:A5:CE:48:38:A8:AE:81:F9 Certificate issuer: /CN=0d76e4c1-4951-48f9-a654-18ee7c98157a Certificate serial: 010D0C9F43285848132A9FC1969A432C1E827A80 Authority key identifier: BC:A6:71:B7:AE:35:D0:B0:02:05:BF:4F:20:43:46:F6:C8:54:C8:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a/1e85c596-69bf-373d-9906-1d381b3d01ef.roa Signing time: Mon 02 Dec 2024 16:53:08 +0000 ROA not before: Mon 02 Dec 2024 16:53:08 +0000 ROA not after: Sun 02 Mar 2025 16:53:08 +0000 asID: 8987 IP address blocks: 104.254.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a/0d76e4c1-4951-48f9-a654-18ee7c98157a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a/0d76e4c1-4951-48f9-a654-18ee7c98157a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:13:2a:9f:c1:96:9a:43:2c:1e:82:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d76e4c1-4951-48f9-a654-18ee7c98157a Validity Not Before: Dec 2 16:53:08 2024 GMT Not After : Mar 2 16:53:08 2025 GMT Subject: CN=02846db1-26ff-4867-bee4-c4a235455572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6d:b0:c8:07:7b:31:b9:78:fb:0c:f8:0b:2f: 32:25:b7:13:6c:cd:38:05:2a:5d:db:ee:fd:25:c3: 94:40:b6:c5:a6:2c:f2:2c:55:6f:06:a7:89:0b:bc: 5f:03:75:69:d2:bb:49:14:40:d8:2a:5c:8b:19:fb: f4:df:74:f2:cd:a4:23:6d:4f:df:03:f3:b3:80:9d: 41:a1:81:74:2f:0e:d1:4c:a0:18:5d:11:8d:bd:2d: 37:1b:95:c0:b0:50:3d:21:0d:4b:8e:8e:ae:bb:ab: 43:3a:c8:01:ad:5b:00:91:8d:99:82:37:7e:7e:3a: 7d:af:a9:fb:9c:a9:43:ef:80:6b:93:5c:65:9c:a8: 14:98:ad:99:dd:c4:d5:23:18:9c:51:73:26:0b:e1: 60:42:2b:dc:81:27:bd:04:69:80:1a:be:99:89:aa: a7:d2:d6:6b:4a:b2:1b:67:28:3c:ce:92:80:05:df: 4a:b6:59:38:3b:91:47:f2:f2:44:0c:35:93:14:7e: 78:6d:26:c1:ae:00:1d:49:c6:3d:58:74:77:e0:82: 44:33:60:68:02:4d:6c:80:56:3c:b8:7a:b2:46:a7: 25:6f:8c:f7:4d:aa:c5:01:4c:5f:99:38:89:02:e3: 9f:1a:0a:00:d9:ff:0a:3a:46:97:88:0e:ef:2b:ea: e8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:AA:AF:38:91:9E:DC:76:26:E4:5C:74:A5:CE:48:38:A8:AE:81:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a/1e85c596-69bf-373d-9906-1d381b3d01ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a/0d76e4c1-4951-48f9-a654-18ee7c98157a.crl X509v3 Authority Key Identifier: keyid:BC:A6:71:B7:AE:35:D0:B0:02:05:BF:4F:20:43:46:F6:C8:54:C8:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a.cer sbgp-ipAddrBlock: critical IPv4: 104.254.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:12:e8:dd:37:17:33:9c:4d:ab:f9:20:5a:a1:c3:18:da:44: bb:13:5b:b0:42:5b:95:5e:fd:05:8d:3e:30:34:94:66:fa:5a: 68:58:6b:72:8d:e5:6a:ce:2f:77:6c:86:5d:ae:4a:0f:c6:ab: ac:a2:20:d8:43:4f:ee:ad:3c:69:25:c5:21:46:5e:0f:75:77: ed:6a:18:5c:45:93:60:a2:97:74:2e:21:be:df:33:f2:b7:ec: 9b:0c:61:69:ed:df:47:63:3e:b7:ea:e0:fd:94:5d:4f:92:9a: d9:68:82:6c:fa:1f:56:db:fe:fe:dc:a5:b7:e1:ef:17:9e:74: 66:69:13:70:b8:d6:b4:32:0a:af:f4:59:08:05:b9:54:46:be: 2f:b5:bd:f5:ab:a5:4d:0e:8c:3b:8d:de:19:7e:79:c6:ac:b5: 8a:23:49:44:e8:d9:20:20:51:1c:39:73:01:67:dc:aa:99:82: 55:69:e0:9a:4e:00:6f:26:c1:e2:67:0e:61:0c:e4:3d:52:29: bb:7b:5f:ba:42:14:ee:be:83:19:64:5e:15:a9:83:d7:10:5d: 35:82:d9:3c:ce:77:fe:3d:83:64:ef:8f:d5:c3:d2:5f:a1:c1: 0c:65:99:4e:e4:21:76:10:47:74:71:24:1a:c1:23:1d:4c:db: f0:44:f4:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgTKp/BlppDLB6CeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3NmU0YzEtNDk1MS00OGY5LWE2NTQtMThlZTdjOTgx NTdhMB4XDTI0MTIwMjE2NTMwOFoXDTI1MDMwMjE2NTMwOFowLzEtMCsGA1UEAxMk MDI4NDZkYjEtMjZmZi00ODY3LWJlZTQtYzRhMjM1NDU1NTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk22wyAd7Mbl4+wz4Cy8yJbcTbM04BSpd2+79 JcOUQLbFpizyLFVvBqeJC7xfA3Vp0rtJFEDYKlyLGfv033TyzaQjbU/fA/OzgJ1B oYF0Lw7RTKAYXRGNvS03G5XAsFA9IQ1Ljo6uu6tDOsgBrVsAkY2Zgjd+fjp9r6n7 nKlD74Brk1xlnKgUmK2Z3cTVIxicUXMmC+FgQivcgSe9BGmAGr6Ziaqn0tZrSrIb Zyg8zpKABd9Ktlk4O5FH8vJEDDWTFH54bSbBrgAdScY9WHR34IJEM2BoAk1sgFY8 uHqyRqclb4z3TarFAUxfmTiJAuOfGgoA2f8KOkaXiA7vK+roEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuqrziRntx2JuRcdKXOSDioroH5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wZDc2 ZTRjMS00OTUxLTQ4ZjktYTY1NC0xOGVlN2M5ODE1N2EvMWU4NWM1OTYtNjliZi0z NzNkLTk5MDYtMWQzODFiM2QwMWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGQ3NmU0YzEtNDk1MS00OGY5LWE2 NTQtMThlZTdjOTgxNTdhLzBkNzZlNGMxLTQ5NTEtNDhmOS1hNjU0LTE4ZWU3Yzk4 MTU3YS5jcmwwHwYDVR0jBBgwFoAUvKZxt6410LACBb9PIENG9shUyDowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wZDc2ZTRjMS00OTUxLTQ4ZjktYTY1NC0xOGVl N2M5ODE1N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP6NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKcS6N03FzOcTav5IFqhwxjaRLsTW7BCW5Ve/QWNPjA0lGb6WmhYa3KN 5WrOL3dshl2uSg/Gq6yiINhDT+6tPGklxSFGXg91d+1qGFxFk2Cil3QuIb7fM/K3 7JsMYWnt30djPrfq4P2UXU+Smtlogmz6H1bb/v7cpbfh7xeedGZpE3C41rQyCq/0 WQgFuVRGvi+1vfWrpU0OjDuN3hl+ecastYojSUTo2SAgURw5cwFn3KqZglVp4JpO AG8mweJnDmEM5D1SKbt7X7pCFO6+gxlkXhWpg9cQXTWC2TzOd/49g2Tvj9XD0l+h wQxlmU7kIXYQR3RxJBrBIx1M2/BE9Hk= -----END CERTIFICATE-----Generated at Wed Feb 5 15:43:50 2025 by rpki-client