$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/0feb6021-2d48-3714-9fdb-694f7beb8eb1.roa File: 0feb6021-2d48-3714-9fdb-694f7beb8eb1.roa (raw, json) Hash identifier: ghK/y54+NmIaCLfybxUJ63meDDZIb5N3kH2PIAeUD6Q= Subject key identifier: 8C:08:B2:BD:72:8C:81:C6:73:E1:28:DD:48:47:68:8C:3B:DF:DE:06 Certificate issuer: /CN=5d69c2a7-f7d7-48bb-a177-7c0b67654580 Certificate serial: 010D0C9F43285848B125DA2E8314D64873FA003C Authority key identifier: 93:D1:0F:40:82:93:2B:AF:BF:B2:20:7D:C6:3C:B3:00:03:5F:00:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/0feb6021-2d48-3714-9fdb-694f7beb8eb1.roa Signing time: Tue 28 Jan 2025 07:01:14 +0000 ROA not before: Tue 28 Jan 2025 07:01:14 +0000 ROA not after: Mon 28 Apr 2025 06:01:14 +0000 asID: 16509 IP address blocks: 104.232.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:25:da:2e:83:14:d6:48:73:fa:00:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d69c2a7-f7d7-48bb-a177-7c0b67654580 Validity Not Before: Jan 28 07:01:14 2025 GMT Not After : Apr 28 06:01:14 2025 GMT Subject: CN=f15a3eb0-0c2e-4ac2-b9fb-86ceaed04a0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c1:7b:32:90:39:c8:8d:7d:3b:c8:08:86:b3: 1d:01:77:71:5f:55:8a:6e:eb:fb:73:af:9a:3d:68: 2b:5e:31:de:5f:fa:70:a3:86:69:d2:f7:48:5d:f1: 06:e8:ea:7c:38:33:ce:31:bc:8e:cd:4d:6d:f0:94: 47:61:04:e0:c6:8e:a9:82:d9:95:96:90:03:0c:ff: 78:05:fd:08:71:28:39:ae:dc:f9:0f:bc:e8:87:8b: 4b:94:e7:60:0c:8b:6d:70:9c:7d:58:81:ae:9d:c6: 1c:fc:57:82:26:5c:56:72:93:f4:db:ec:e6:b2:b1: 8a:6b:27:4a:3d:84:81:64:0a:0c:b4:38:79:1d:d7: a7:8c:2d:8f:72:fb:49:9f:fd:71:b1:1b:1c:3d:06: 62:5e:fb:40:4e:f4:f3:40:af:b5:04:a6:6d:bd:a0: b0:f1:a1:11:cf:ad:0c:c7:e0:2f:95:26:0e:7b:40: 1b:32:cf:3f:b3:54:15:37:de:cf:4a:37:47:7c:ad: a3:03:71:49:73:87:a7:b5:cb:0a:30:c5:ab:b1:73: a7:7d:8d:8a:a9:da:a6:b3:4a:e2:2b:2c:14:26:99: f1:88:d1:52:95:0f:cb:b2:99:0e:d5:ea:29:4c:3c: 33:b4:06:58:73:c3:df:d1:0c:45:d3:79:49:f7:09: 05:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:08:B2:BD:72:8C:81:C6:73:E1:28:DD:48:47:68:8C:3B:DF:DE:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/0feb6021-2d48-3714-9fdb-694f7beb8eb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.crl X509v3 Authority Key Identifier: keyid:93:D1:0F:40:82:93:2B:AF:BF:B2:20:7D:C6:3C:B3:00:03:5F:00:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer sbgp-ipAddrBlock: critical IPv4: 104.232.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:b5:a1:13:63:0b:bb:b2:50:41:ef:4c:2a:21:72:65:2f:fa: f8:20:a0:23:78:69:4e:69:fe:5e:3d:e9:5c:7b:c9:c3:00:4e: 37:09:3d:d4:a6:80:14:34:f3:8b:c7:52:2c:5c:f4:c0:73:fe: d8:8b:dc:b4:ab:b6:1b:c9:24:6d:46:47:0e:ec:8c:90:c8:01: 72:4a:0e:23:85:bf:c2:c8:09:62:54:f1:4c:1d:6c:90:a9:26: 74:1b:91:43:b9:9e:1d:18:3f:8c:a5:92:ee:fd:00:46:06:3a: 3d:72:f4:e0:bb:2c:be:87:eb:be:68:1b:be:a9:96:87:62:e6: e3:af:03:e7:af:f2:04:34:0f:36:57:0a:20:4a:3d:a2:43:b5: 59:b9:53:1e:ea:f5:b4:24:5f:84:77:26:b1:62:1d:e1:bf:5e: 84:63:6c:ab:85:09:e3:50:f7:99:22:fd:83:3a:a3:1a:a5:25: c4:93:6c:25:2c:71:73:cd:c5:d2:77:8d:da:7e:6c:b0:91:18: e1:20:ad:9a:fd:1a:cb:e4:27:df:40:24:20:4b:b4:9e:33:03: 82:55:a8:64:fd:32:d9:51:7b:b4:db:16:d5:ad:53:31:d2:ef: 43:31:96:22:8f:66:c2:f0:80:96:3b:6a:35:54:3d:6a:d8:cc: 5b:04:41:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEixJdougxTWSHP6ADwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ2OWMyYTctZjdkNy00OGJiLWExNzctN2MwYjY3NjU0 NTgwMB4XDTI1MDEyODA3MDExNFoXDTI1MDQyODA2MDExNFowLzEtMCsGA1UEAxMk ZjE1YTNlYjAtMGMyZS00YWMyLWI5ZmItODZjZWFlZDA0YTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksF7MpA5yI19O8gIhrMdAXdxX1WKbuv7c6+a PWgrXjHeX/pwo4Zp0vdIXfEG6Op8ODPOMbyOzU1t8JRHYQTgxo6pgtmVlpADDP94 Bf0IcSg5rtz5D7zoh4tLlOdgDIttcJx9WIGuncYc/FeCJlxWcpP02+zmsrGKaydK PYSBZAoMtDh5HdenjC2PcvtJn/1xsRscPQZiXvtATvTzQK+1BKZtvaCw8aERz60M x+AvlSYOe0AbMs8/s1QVN97PSjdHfK2jA3FJc4entcsKMMWrsXOnfY2Kqdqms0ri KywUJpnxiNFSlQ/LspkO1eopTDwztAZYc8Pf0QxF03lJ9wkFyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwIsr1yjIHGc+Eo3UhHaIw7394GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZDY5 YzJhNy1mN2Q3LTQ4YmItYTE3Ny03YzBiNjc2NTQ1ODAvMGZlYjYwMjEtMmQ0OC0z NzE0LTlmZGItNjk0ZjdiZWI4ZWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWQ2OWMyYTctZjdkNy00OGJiLWEx NzctN2MwYjY3NjU0NTgwLzVkNjljMmE3LWY3ZDctNDhiYi1hMTc3LTdjMGI2NzY1 NDU4MC5jcmwwHwYDVR0jBBgwFoAUk9EPQIKTK6+/siB9xjyzAANfANQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZDY5YzJhNy1mN2Q3LTQ4YmItYTE3Ny03YzBi Njc2NTQ1ODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaOgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK21oRNjC7uyUEHvTCohcmUv+vggoCN4aU5p/l496Vx7ycMATjcJPdSm gBQ084vHUixc9MBz/tiL3LSrthvJJG1GRw7sjJDIAXJKDiOFv8LICWJU8UwdbJCp JnQbkUO5nh0YP4ylku79AEYGOj1y9OC7LL6H675oG76plodi5uOvA+ev8gQ0DzZX CiBKPaJDtVm5Ux7q9bQkX4R3JrFiHeG/XoRjbKuFCeNQ95ki/YM6oxqlJcSTbCUs cXPNxdJ3jdp+bLCRGOEgrZr9GsvkJ99AJCBLtJ4zA4JVqGT9MtlRe7TbFtWtUzHS 70MxliKPZsLwgJY7ajVUPWrYzFsEQdA= -----END CERTIFICATE-----Generated at Wed Feb 19 20:40:30 2025 by rpki-client