$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/12f7de92-880e-34c2-aa1a-041828be5182.roa File: 12f7de92-880e-34c2-aa1a-041828be5182.roa (raw, json) Hash identifier: yAtDD3IT6DC9IG/4mAPxp6Dt32a0XKaZsdQG1Aw66Ss= Subject key identifier: 10:60:AB:51:66:40:33:90:91:79:16:3F:57:47:96:88:95:4D:EB:85 Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7 Certificate serial: 010D0C9F43285848BFEBCF167F4B505215250C80 Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/12f7de92-880e-34c2-aa1a-041828be5182.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 36040 IP address blocks: 104.237.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:cf:16:7f:4b:50:52:15:25:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=4d0d4d50-22eb-4389-b22e-089754365461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:1e:ce:44:b5:3e:d9:36:2b:b7:5c:03:dc:3c: 51:2b:ef:00:6c:ca:37:50:36:c4:91:2f:ad:f2:7a: f3:00:9a:63:28:25:b3:41:7f:fe:f4:a7:33:20:d2: ad:a6:e2:18:5a:b2:f2:40:0e:ac:80:1c:8c:a3:28: 80:7e:71:1d:ab:73:bc:b0:ef:73:5e:78:4b:88:0d: 93:ca:b9:3d:02:45:61:60:d8:4b:59:db:1c:33:17: ae:e5:48:12:02:66:4c:22:7f:17:fa:6c:05:d9:35: c9:5a:06:22:ae:16:b5:f6:cb:01:8d:9c:fb:f6:c1: 36:63:53:c1:87:11:6f:76:be:23:c1:9e:62:2e:92: b5:e5:98:0a:87:7f:3d:1a:99:d5:74:65:f6:be:2e: 4c:ee:87:3e:c9:7b:ea:30:69:c9:03:a3:41:0a:a5: 24:27:88:48:89:5d:99:78:ee:f9:24:eb:bc:a7:2b: 2f:49:c0:d1:b7:99:22:0f:5a:86:cd:ae:e6:af:48: 0a:54:31:7a:00:1c:fc:14:51:25:f3:e6:1c:88:c6: 8f:7c:30:e8:01:bd:5a:ee:3b:45:16:6d:60:6b:ea: 85:19:93:29:39:04:72:ab:b3:21:e1:14:b6:ec:5f: 16:25:1d:ab:3b:3b:cb:3a:9a:0c:ba:1a:b5:cb:c9: 64:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:60:AB:51:66:40:33:90:91:79:16:3F:57:47:96:88:95:4D:EB:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/12f7de92-880e-34c2-aa1a-041828be5182.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl X509v3 Authority Key Identifier: keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer sbgp-ipAddrBlock: critical IPv4: 104.237.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:ce:3a:cf:1a:85:41:81:ce:ba:f6:e3:cb:5f:57:0a:25:31: da:15:50:31:fa:2e:57:16:bd:03:aa:4f:17:45:fa:1f:60:56: 52:72:7c:41:df:15:80:80:2b:d7:51:12:5d:b1:8a:41:03:07: 80:51:0b:c1:06:42:26:56:41:f4:66:d1:e8:d0:5f:81:85:15: f5:e3:0b:68:d3:bf:d6:86:d0:54:c1:4d:4e:0d:79:ca:51:d8: 4c:91:a1:7b:17:ed:f0:58:81:cd:81:9a:87:29:c8:65:f5:6e: 08:f3:06:6d:de:11:0a:f4:6b:d3:56:f6:2f:90:9b:fd:90:22: 75:91:78:c3:bd:4d:a5:3e:fd:97:d8:a3:67:ac:31:85:c5:2e: f3:30:ce:93:79:5a:f5:97:b6:40:0b:73:28:80:b9:f2:51:f0: a5:58:90:58:39:a9:9f:1c:d6:3d:7b:2b:ef:bd:2d:e8:2a:74: 8e:62:dc:e9:e0:76:13:3c:bc:de:8c:6a:08:f4:93:97:26:a6: f1:a8:b0:e1:0c:c5:93:cb:a3:26:50:ec:ee:92:cd:4c:87:b6: 36:a1:3d:43:95:21:44:c3:94:4e:69:94:00:60:5d:0d:4d:6b: 8c:e0:0c:e5:5f:5d:2d:e8:28:a8:a1:bd:d5:69:95:c9:61:96: 00:a8:45:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/688Wf0tQUhUlDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3 MmI3MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk NGQwZDRkNTAtMjJlYi00Mzg5LWIyMmUtMDg5NzU0MzY1NDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgR7ORLU+2TYrt1wD3DxRK+8AbMo3UDbEkS+t 8nrzAJpjKCWzQX/+9KczINKtpuIYWrLyQA6sgByMoyiAfnEdq3O8sO9zXnhLiA2T yrk9AkVhYNhLWdscMxeu5UgSAmZMIn8X+mwF2TXJWgYirha19ssBjZz79sE2Y1PB hxFvdr4jwZ5iLpK15ZgKh389GpnVdGX2vi5M7oc+yXvqMGnJA6NBCqUkJ4hIiV2Z eO75JOu8pysvScDRt5kiD1qGza7mr0gKVDF6ABz8FFEl8+YciMaPfDDoAb1a7jtF Fm1ga+qFGZMpOQRyq7Mh4RS27F8WJR2rOzvLOpoMuhq1y8lkOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBgq1FmQDOQkXkWP1dHloiVTeuFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvMTJmN2RlOTItODgwZS0z NGMyLWFhMWEtMDQxODI4YmU1MTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0 NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2 ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO29MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3OOs8ahUGBzrr248tfVwolMdoVUDH6LlcWvQOqTxdF+h9gVlJyfEHf FYCAK9dREl2xikEDB4BRC8EGQiZWQfRm0ejQX4GFFfXjC2jTv9aG0FTBTU4NecpR 2EyRoXsX7fBYgc2BmocpyGX1bgjzBm3eEQr0a9NW9i+Qm/2QInWReMO9TaU+/ZfY o2esMYXFLvMwzpN5WvWXtkALcyiAufJR8KVYkFg5qZ8c1j17K++9LegqdI5i3Ong dhM8vN6Magj0k5cmpvGosOEMxZPLoyZQ7O6SzUyHtjahPUOVIUTDlE5plABgXQ1N a4zgDOVfXS3oKKihvdVplclhlgCoRd8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:25:41 2025 by rpki-client