$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/29a58d32-1b11-3407-904f-eb229919ae94.roa File: 29a58d32-1b11-3407-904f-eb229919ae94.roa (raw, json) Hash identifier: lEYNGnd/fdyiBsT+PByPgGMa+8EdFCfizi98rNw8zKg= Subject key identifier: 0A:0E:BB:2B:4D:9B:CE:4F:6E:ED:C8:AD:4B:75:38:BD:6D:2E:34:52 Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Certificate serial: 010D0C9F4328584865303CE6AA4C7C1C32ED3900 Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/29a58d32-1b11-3407-904f-eb229919ae94.roa Signing time: Wed 01 Jan 2025 02:00:40 +0000 ROA not before: Wed 01 Jan 2025 02:00:40 +0000 ROA not after: Tue 01 Apr 2025 01:00:40 +0000 asID: 4922 IP address blocks: 104.251.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:65:30:3c:e6:aa:4c:7c:1c:32:ed:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Validity Not Before: Jan 1 02:00:40 2025 GMT Not After : Apr 1 01:00:40 2025 GMT Subject: CN=0a31cdfa-b2b4-48d2-9f84-efa6d7ca19b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4a:ce:3a:f8:ca:9c:5e:31:ff:a9:e5:24:72: 27:6e:e3:db:e0:11:3a:46:19:37:f3:c0:ed:99:d7: 11:a5:90:69:af:e4:31:f7:9c:94:43:54:81:ac:8b: 04:c5:7c:2b:92:d7:c2:2d:e8:84:1e:7e:fc:b1:c0: 34:87:de:12:90:f1:1f:c0:88:10:9c:45:1c:1e:16: 4b:ff:47:06:4b:88:01:73:77:01:62:9a:ec:97:6b: 93:22:54:d2:51:77:8c:3a:43:ff:a4:1b:29:d1:6c: b9:be:ff:af:13:75:0e:26:33:af:3e:f5:bf:9c:e9: f2:6a:ca:b7:69:d6:d3:99:15:b1:fe:2e:2a:b0:5c: 9b:3b:84:bc:40:7b:87:01:af:5a:b6:98:53:59:86: b6:ed:64:52:ee:d8:55:60:4e:76:5d:6e:87:f4:96: e8:22:88:4d:c0:b6:98:8a:31:bb:a5:9e:6f:11:0f: 9e:5b:ea:d1:8f:1d:91:26:a1:4c:65:c0:c0:6c:e3: ac:fb:69:bb:8c:91:43:93:19:5a:65:10:8d:65:7e: 00:4d:8d:66:61:23:0a:6f:26:a7:3a:81:17:17:f6: 23:f2:72:f0:bf:80:44:00:d4:ee:e4:85:77:a6:ea: 44:89:0c:25:bb:8e:56:a5:a1:b5:4c:3c:f2:e9:08: 42:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:0E:BB:2B:4D:9B:CE:4F:6E:ED:C8:AD:4B:75:38:BD:6D:2E:34:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/29a58d32-1b11-3407-904f-eb229919ae94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl X509v3 Authority Key Identifier: keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer sbgp-ipAddrBlock: critical IPv4: 104.251.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:18:ec:96:f8:d4:2e:f7:f1:7f:95:a1:88:9d:a6:27:a7:39: 9d:e3:4c:8c:b4:d9:67:21:2e:cd:08:c6:7f:37:7c:ae:49:8f: 3d:6d:13:24:41:d5:56:88:02:25:4d:61:e5:43:04:bd:03:ff: ab:c7:83:03:66:a6:d9:dc:58:a3:32:d2:02:c1:5c:d5:b5:8b: 31:33:0c:c0:97:07:c3:71:48:9a:1b:5b:46:62:69:13:6d:bd: 33:ab:51:5a:93:ef:91:85:0b:04:f2:48:1b:1d:ed:bc:ed:b1: 62:28:16:7b:12:e1:36:86:0b:8d:3f:63:96:23:31:41:57:f5: 23:77:8d:65:b9:28:c4:1f:76:81:c7:78:df:0c:5c:f1:b1:1d: eb:6c:17:eb:2f:e8:23:db:94:3e:21:1f:e6:5e:5b:49:00:35: c0:90:81:79:6b:bb:7e:a6:f3:a1:3a:43:be:a4:37:11:1a:85: 23:1c:e0:56:ea:eb:24:38:eb:4f:da:9b:9c:f1:2c:ca:bb:6e: ce:c0:98:d1:a2:ea:3f:61:41:5c:f8:4f:f3:a4:65:f1:fe:8c: a8:71:25:dd:f8:0d:e4:6a:81:76:59:d8:03:80:fa:87:5d:30: 58:45:d5:10:2c:83:b8:63:f8:ee:98:b0:16:35:3d:fc:c4:42: 88:2a:1f:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhlMDzmqkx8HDLtOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz MTA5MB4XDTI1MDEwMTAyMDA0MFoXDTI1MDQwMTAxMDA0MFowLzEtMCsGA1UEAxMk MGEzMWNkZmEtYjJiNC00OGQyLTlmODQtZWZhNmQ3Y2ExOWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0rOOvjKnF4x/6nlJHInbuPb4BE6Rhk388Dt mdcRpZBpr+Qx95yUQ1SBrIsExXwrktfCLeiEHn78scA0h94SkPEfwIgQnEUcHhZL /0cGS4gBc3cBYprsl2uTIlTSUXeMOkP/pBsp0Wy5vv+vE3UOJjOvPvW/nOnyasq3 adbTmRWx/i4qsFybO4S8QHuHAa9atphTWYa27WRS7thVYE52XW6H9JboIohNwLaY ijG7pZ5vEQ+eW+rRjx2RJqFMZcDAbOOs+2m7jJFDkxlaZRCNZX4ATY1mYSMKbyan OoEXF/Yj8nLwv4BEANTu5IV3pupEiQwlu45WpaG1TDzy6QhC6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoOuytNm85Pbu3IrUt1OL1tLjRSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvMjlhNThkMzItMWIxMS0z NDA3LTkwNGYtZWIyMjk5MTlhZTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3 MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaPtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcY7Jb41C738X+VoYidpienOZ3jTIy02WchLs0Ixn83fK5Jjz1tEyRB 1VaIAiVNYeVDBL0D/6vHgwNmptncWKMy0gLBXNW1izEzDMCXB8NxSJobW0ZiaRNt vTOrUVqT75GFCwTySBsd7bztsWIoFnsS4TaGC40/Y5YjMUFX9SN3jWW5KMQfdoHH eN8MXPGxHetsF+sv6CPblD4hH+ZeW0kANcCQgXlru36m86E6Q76kNxEahSMc4Fbq 6yQ460/am5zxLMq7bs7AmNGi6j9hQVz4T/OkZfH+jKhxJd34DeRqgXZZ2AOA+odd MFhF1RAsg7hj+O6YsBY1PfzEQogqH3k= -----END CERTIFICATE-----Generated at Sun Feb 16 20:29:35 2025 by rpki-client