$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/a1a2060a-6881-3ef5-aa7c-1c39f839b05b.roa File: a1a2060a-6881-3ef5-aa7c-1c39f839b05b.roa (raw, json) Hash identifier: xTj4HiujIiy3M5ZUPNxTUuBx6+/+BRCbbKpbUA3wG3o= Subject key identifier: 77:AD:FE:BF:8B:C1:23:A1:42:49:8E:8F:18:0F:97:15:9B:FE:DA:58 Certificate issuer: /CN=4d929512-7541-4207-be46-8af4cc4a4800 Certificate serial: 010D0C9F43285848A1361DB28F54C01B58FF7CC0 Authority key identifier: 50:76:C6:B0:0E:4F:BF:DD:EB:45:FC:C4:02:E7:4F:56:CB:5D:35:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/a1a2060a-6881-3ef5-aa7c-1c39f839b05b.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 26658 IP address blocks: 104.232.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:1d:b2:8f:54:c0:1b:58:ff:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d929512-7541-4207-be46-8af4cc4a4800 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=d7a02333-be4f-46f7-bca7-63e7a1d9d1f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5a:a6:fc:56:fa:de:23:61:a0:1e:67:04:ac: cc:37:8a:b5:e2:fc:25:5d:15:e8:99:85:58:2c:4a: 6d:95:3d:fe:6f:a5:07:37:e2:c1:78:08:c0:f1:a8: be:08:83:90:85:4e:8b:f2:da:f3:53:48:ae:ac:0e: 75:47:1e:2f:6a:76:37:a0:64:5e:6a:68:fc:f1:78: 6a:bd:52:e6:1a:de:f3:01:7b:ac:75:9a:88:6a:ac: aa:90:af:25:9c:6e:e2:49:37:01:78:a0:d5:eb:06: 90:a9:49:1b:68:ca:ce:6b:8c:7c:de:6e:a9:92:40: 0f:5b:ba:8a:51:c6:9e:f3:b1:00:e7:a7:98:78:aa: b1:ad:7b:43:bd:39:b2:9c:dc:3d:67:01:cc:78:20: eb:f7:ec:ba:07:20:a7:1d:44:3d:50:80:7b:32:ba: 6e:55:3b:8f:82:40:d1:a5:a3:ad:26:d7:53:f6:2c: fd:7e:87:e9:e6:81:21:4d:83:50:75:21:49:74:0a: 82:7c:f9:54:f6:b3:d1:e2:4f:c1:40:04:68:04:7d: 38:4f:60:05:57:1a:4a:46:d8:26:25:8e:fd:87:21: 12:17:bf:15:85:83:3f:d3:d4:76:c8:19:11:e1:13: a1:25:1d:60:b4:b3:fd:a0:da:86:59:c5:64:8d:a8: 0c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:AD:FE:BF:8B:C1:23:A1:42:49:8E:8F:18:0F:97:15:9B:FE:DA:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/a1a2060a-6881-3ef5-aa7c-1c39f839b05b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.crl X509v3 Authority Key Identifier: keyid:50:76:C6:B0:0E:4F:BF:DD:EB:45:FC:C4:02:E7:4F:56:CB:5D:35:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer sbgp-ipAddrBlock: critical IPv4: 104.232.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:5f:5a:b9:ef:5d:53:33:8d:58:1f:dd:62:1d:3a:b9:3e:77: 09:43:9d:77:1d:68:d4:dc:1a:b1:1c:5e:69:d0:5f:57:b2:0b: a8:88:e8:74:6c:53:49:4d:6b:6e:2b:2d:63:7f:9b:cc:17:47: 3a:b2:72:5b:78:72:3e:f8:fa:66:cd:cb:11:96:e1:fb:37:d7: de:8c:ba:0e:0d:57:17:11:50:f0:4e:01:68:6d:56:7d:90:ce: 79:96:43:8f:71:35:fa:3c:05:46:0f:68:b6:c9:d1:70:6e:fb: 55:fa:65:30:63:32:75:97:c0:06:23:d1:a2:55:be:12:88:3c: 90:ac:cb:1e:b6:b8:44:87:ba:cd:63:ce:db:6d:3a:65:f5:84: 59:8b:fb:4a:e2:9f:bc:a3:f4:93:04:bf:ac:5d:ef:c4:2b:b7: f6:1d:9d:98:c9:ad:7a:8e:67:f7:8b:54:8b:3d:53:71:2a:ca: 01:5b:85:cd:f3:85:35:e2:50:e7:22:84:52:0a:b5:b9:a3:39: b7:82:87:9e:f0:6f:d3:c7:84:67:3d:ca:15:3b:f3:77:c5:81: 3d:36:44:eb:d6:be:a8:bd:a8:6c:c6:a2:40:06:5d:ff:dd:fa: 82:ff:28:44:18:15:c1:80:7a:b0:87:04:df:1a:9b:5a:96:54: a9:45:a3:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNh2yj1TAG1j/fMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ5Mjk1MTItNzU0MS00MjA3LWJlNDYtOGFmNGNjNGE0 ODAwMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk ZDdhMDIzMzMtYmU0Zi00NmY3LWJjYTctNjNlN2ExZDlkMWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21qm/Fb63iNhoB5nBKzMN4q14vwlXRXomYVY LEptlT3+b6UHN+LBeAjA8ai+CIOQhU6L8trzU0iurA51Rx4vanY3oGReamj88Xhq vVLmGt7zAXusdZqIaqyqkK8lnG7iSTcBeKDV6waQqUkbaMrOa4x83m6pkkAPW7qK Ucae87EA56eYeKqxrXtDvTmynNw9ZwHMeCDr9+y6ByCnHUQ9UIB7MrpuVTuPgkDR paOtJtdT9iz9fofp5oEhTYNQdSFJdAqCfPlU9rPR4k/BQARoBH04T2AFVxpKRtgm JY79hyESF78VhYM/09R2yBkR4ROhJR1gtLP9oNqGWcVkjagMuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHet/r+LwSOhQkmOjxgPlxWb/tpYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80ZDky OTUxMi03NTQxLTQyMDctYmU0Ni04YWY0Y2M0YTQ4MDAvYTFhMjA2MGEtNjg4MS0z ZWY1LWFhN2MtMWMzOWY4MzliMDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGQ5Mjk1MTItNzU0MS00MjA3LWJl NDYtOGFmNGNjNGE0ODAwLzRkOTI5NTEyLTc1NDEtNDIwNy1iZTQ2LThhZjRjYzRh NDgwMC5jcmwwHwYDVR0jBBgwFoAUUHbGsA5Pv93rRfzEAudPVstdNTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80ZDkyOTUxMi03NTQxLTQyMDctYmU0Ni04YWY0 Y2M0YTQ4MDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaOhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhfWrnvXVMzjVgf3WIdOrk+dwlDnXcdaNTcGrEcXmnQX1eyC6iI6HRs U0lNa24rLWN/m8wXRzqyclt4cj74+mbNyxGW4fs3196Mug4NVxcRUPBOAWhtVn2Q znmWQ49xNfo8BUYPaLbJ0XBu+1X6ZTBjMnWXwAYj0aJVvhKIPJCsyx62uESHus1j ztttOmX1hFmL+0rin7yj9JMEv6xd78Qrt/YdnZjJrXqOZ/eLVIs9U3EqygFbhc3z hTXiUOcihFIKtbmjObeCh57wb9PHhGc9yhU783fFgT02ROvWvqi9qGzGokAGXf/d +oL/KEQYFcGAerCHBN8am1qWVKlFowc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:03 2025 by rpki-client