$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/d126c33e-9a10-3dd2-867e-fd2b14dabe5f.roa File: d126c33e-9a10-3dd2-867e-fd2b14dabe5f.roa (raw, json) Hash identifier: M0/GehDdLSGlUUIAKsx0ysZ+GV7aRrUqHeH6cYvrcYU= Subject key identifier: 0F:F5:CE:0B:CC:8E:55:B7:A5:5C:38:68:AD:FC:37:B7:34:C5:13:FD Certificate issuer: /CN=5d69c2a7-f7d7-48bb-a177-7c0b67654580 Certificate serial: 010D0C9F432858486AC5988B6296C2324C3A9D80 Authority key identifier: 93:D1:0F:40:82:93:2B:AF:BF:B2:20:7D:C6:3C:B3:00:03:5F:00:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/d126c33e-9a10-3dd2-867e-fd2b14dabe5f.roa Signing time: Fri 03 Jan 2025 02:00:40 +0000 ROA not before: Fri 03 Jan 2025 02:00:40 +0000 ROA not after: Thu 03 Apr 2025 01:00:40 +0000 asID: 395950 IP address blocks: 104.232.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6a:c5:98:8b:62:96:c2:32:4c:3a:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d69c2a7-f7d7-48bb-a177-7c0b67654580 Validity Not Before: Jan 3 02:00:40 2025 GMT Not After : Apr 3 01:00:40 2025 GMT Subject: CN=200e51d9-d3e5-43c5-93c2-28c7cf2361ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5f:72:65:3f:31:ba:b6:dd:eb:b5:25:2c:07: 0b:cb:37:eb:91:26:8d:67:bb:a3:a0:56:fd:28:b0: 83:df:c0:91:b4:fa:45:c8:23:93:00:d9:66:27:89: ed:9a:fb:a0:59:a0:01:17:cb:66:b8:d0:9b:9c:a8: 53:d8:4a:19:ff:57:69:fe:6d:75:2b:e6:97:7b:0c: d3:5b:4b:9d:e0:68:42:d5:0c:cd:21:b2:70:c3:9d: 3a:a2:18:d9:8c:28:e5:8f:52:e9:fd:9b:32:d7:2d: c4:6c:13:40:38:23:77:9a:9f:a4:7a:f1:69:f5:90: 47:97:ff:76:1c:95:b3:31:46:30:6f:61:b0:3b:5c: 62:e3:fb:12:97:33:c3:a1:68:27:10:ec:60:a9:3c: 76:16:a3:10:13:89:70:e7:99:89:0e:40:1b:dd:53: 84:55:bb:ae:7f:27:8a:14:48:22:62:f0:30:21:df: 15:8a:0a:e1:34:44:de:1f:26:8f:f5:f5:f7:19:81: 4e:ee:73:c9:f9:6d:1e:d8:ce:4a:76:04:78:4c:1a: bb:75:93:48:26:df:9e:f5:30:9d:da:8a:04:39:03: d7:48:1f:bb:31:86:80:c9:9a:90:cf:ad:77:77:2a: 71:24:99:cf:19:c9:a6:76:3b:50:cd:24:28:63:57: 91:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F5:CE:0B:CC:8E:55:B7:A5:5C:38:68:AD:FC:37:B7:34:C5:13:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/d126c33e-9a10-3dd2-867e-fd2b14dabe5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.crl X509v3 Authority Key Identifier: keyid:93:D1:0F:40:82:93:2B:AF:BF:B2:20:7D:C6:3C:B3:00:03:5F:00:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer sbgp-ipAddrBlock: critical IPv4: 104.232.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:ea:9a:00:e7:dd:4b:90:e4:a7:a4:28:ac:8b:7f:90:5b:8f: b0:a5:c7:7a:8b:de:e2:46:2d:41:39:77:37:fa:33:c5:99:60: 75:6b:cd:89:53:20:ad:5b:a8:c1:ce:78:b6:cc:6b:26:f6:65: 61:b7:bb:ce:7b:50:c4:a7:a2:11:2d:49:37:68:f1:70:98:09: fc:1b:71:cb:7e:af:06:4c:86:af:bd:1d:f7:2f:6f:97:ea:78: 5d:54:24:e3:51:52:f1:58:3b:8d:25:87:db:00:c0:a5:40:4b: 25:05:c1:a2:4b:99:f9:80:7e:47:54:52:bd:4a:b7:76:75:9b: a4:48:2f:00:a7:24:5d:41:f9:31:b6:22:08:8a:65:5f:fe:52: 23:0a:35:0d:ec:c0:58:8a:69:7f:e7:7f:1b:77:34:3f:64:a5: 83:f7:2a:b1:8d:71:66:06:aa:75:24:6a:c2:c9:7a:72:bd:ef: 8a:99:dc:79:f5:7c:21:cf:35:c1:dc:f9:6c:7d:df:67:1e:d4: 18:2a:de:ea:1c:4a:39:fc:db:0e:8c:ee:dd:61:c8:be:85:0b: e9:b8:63:05:ab:4e:5f:63:54:35:49:f6:6a:c6:87:70:b2:b1: 98:3a:dd:22:5e:f9:d9:2f:c1:10:09:b1:df:e3:97:68:55:25: 1a:f1:ff:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhqxZiLYpbCMkw6nYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ2OWMyYTctZjdkNy00OGJiLWExNzctN2MwYjY3NjU0 NTgwMB4XDTI1MDEwMzAyMDA0MFoXDTI1MDQwMzAxMDA0MFowLzEtMCsGA1UEAxMk MjAwZTUxZDktZDNlNS00M2M1LTkzYzItMjhjN2NmMjM2MWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF9yZT8xurbd67UlLAcLyzfrkSaNZ7ujoFb9 KLCD38CRtPpFyCOTANlmJ4ntmvugWaABF8tmuNCbnKhT2EoZ/1dp/m11K+aXewzT W0ud4GhC1QzNIbJww506ohjZjCjlj1Lp/Zsy1y3EbBNAOCN3mp+kevFp9ZBHl/92 HJWzMUYwb2GwO1xi4/sSlzPDoWgnEOxgqTx2FqMQE4lw55mJDkAb3VOEVbuufyeK FEgiYvAwId8VigrhNETeHyaP9fX3GYFO7nPJ+W0e2M5KdgR4TBq7dZNIJt+e9TCd 2ooEOQPXSB+7MYaAyZqQz613dypxJJnPGcmmdjtQzSQoY1eRnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/1zgvMjlW3pVw4aK38N7c0xRP9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZDY5 YzJhNy1mN2Q3LTQ4YmItYTE3Ny03YzBiNjc2NTQ1ODAvZDEyNmMzM2UtOWExMC0z ZGQyLTg2N2UtZmQyYjE0ZGFiZTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWQ2OWMyYTctZjdkNy00OGJiLWEx NzctN2MwYjY3NjU0NTgwLzVkNjljMmE3LWY3ZDctNDhiYi1hMTc3LTdjMGI2NzY1 NDU4MC5jcmwwHwYDVR0jBBgwFoAUk9EPQIKTK6+/siB9xjyzAANfANQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZDY5YzJhNy1mN2Q3LTQ4YmItYTE3Ny03YzBi Njc2NTQ1ODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaOgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKPqmgDn3UuQ5KekKKyLf5Bbj7Clx3qL3uJGLUE5dzf6M8WZYHVrzYlT IK1bqMHOeLbMayb2ZWG3u857UMSnohEtSTdo8XCYCfwbcct+rwZMhq+9Hfcvb5fq eF1UJONRUvFYO40lh9sAwKVASyUFwaJLmfmAfkdUUr1Kt3Z1m6RILwCnJF1B+TG2 IgiKZV/+UiMKNQ3swFiKaX/nfxt3ND9kpYP3KrGNcWYGqnUkasLJenK974qZ3Hn1 fCHPNcHc+Wx932ce1Bgq3uocSjn82w6M7t1hyL6FC+m4YwWrTl9jVDVJ9mrGh3Cy sZg63SJe+dkvwRAJsd/jl2hVJRrx/0A= -----END CERTIFICATE-----Generated at Fri Mar 14 10:53:38 2025 by rpki-client