$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a1e4c146-0d89-3f2f-90e3-39b6dacb84e1.roa File: a1e4c146-0d89-3f2f-90e3-39b6dacb84e1.roa (raw, json) Hash identifier: 6QUsqvvWxdqTY+tduhajVDorsjAUGZL3/3iw5j4CLL4= Subject key identifier: 16:C5:0C:7C:CE:19:9E:E7:96:50:8A:C2:9A:D4:20:D6:D5:97:C1:A0 Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7 Certificate serial: 010D0C9F43285848BFEBCC9E671F4975CAAC5480 Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a1e4c146-0d89-3f2f-90e3-39b6dacb84e1.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 36040 IP address blocks: 104.237.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:cc:9e:67:1f:49:75:ca:ac:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=cc07e450-d0f4-4b8a-9ec3-0716e3116d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:50:cf:d3:4c:57:ad:04:6c:6e:99:3f:0a:ce: f0:7b:7f:7b:54:a8:73:13:c1:f7:6b:82:ef:5c:84: 32:f7:c8:b6:69:f4:3c:97:4e:a3:a4:25:5d:35:fe: 22:f2:25:f6:93:d6:d0:8c:de:df:6c:93:f0:80:c8: 03:c0:20:da:10:6b:b7:fc:8d:7d:1c:d5:2c:2c:3f: e4:e5:a4:c5:66:be:ec:0e:01:ba:d2:bd:0a:ab:df: 25:00:94:72:7b:b2:69:cf:b8:e1:a6:71:ea:43:1b: d1:fb:e1:10:a2:d7:46:bd:11:16:69:3a:64:4f:a1: d8:37:6d:a4:30:b3:de:e4:bf:1b:3e:d1:a6:b5:a9: f1:be:4f:39:7b:bb:2e:dc:44:74:2e:f9:10:de:a8: cf:ba:d0:a2:76:23:ce:28:99:e1:2c:2e:2f:75:7b: 37:7c:f5:e8:87:63:e3:70:4a:c9:c1:7f:29:57:76: c1:95:b3:c5:03:23:76:dd:d0:a5:38:79:52:36:e1: 84:3d:42:7b:dd:c5:24:ed:2f:c0:96:46:e3:38:2e: b9:91:3e:d8:b5:2c:e4:2c:85:2a:b7:0f:6e:99:25: 29:68:26:01:17:38:c8:b3:da:90:fe:c1:88:9b:61: b6:64:61:03:7d:8f:ae:0c:39:aa:78:0d:da:79:f9: 1f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C5:0C:7C:CE:19:9E:E7:96:50:8A:C2:9A:D4:20:D6:D5:97:C1:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a1e4c146-0d89-3f2f-90e3-39b6dacb84e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl X509v3 Authority Key Identifier: keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer sbgp-ipAddrBlock: critical IPv4: 104.237.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:17:fb:0e:46:5b:d4:2e:3b:60:ac:d7:ce:00:4f:06:72:e2: b9:1f:9e:f5:3b:19:82:79:f3:04:7f:ec:42:4a:0d:67:c3:4a: 6d:15:19:2d:85:10:e9:84:ba:85:2a:ec:ab:c3:d6:52:81:92: 14:35:7f:49:e0:f9:4a:11:ee:61:0a:d5:96:ea:f7:93:68:db: c0:ca:46:1f:8a:fc:c4:a6:e9:82:07:3f:74:18:13:e1:76:f5: 12:7b:e6:a5:f4:10:65:b9:64:fc:37:51:71:34:aa:c5:24:a6: 9d:00:0a:cc:6b:2e:55:71:72:ab:d4:aa:af:b6:c0:6f:1e:07: 74:a4:95:cf:c8:ff:22:c5:22:20:d3:5e:66:1c:78:59:73:39: 83:c7:1d:72:df:a9:4e:84:39:5d:ec:87:17:90:de:15:94:bf: 1e:0f:ac:5d:4a:15:fd:4e:b7:45:af:ab:e0:fa:b4:41:3b:1c: 71:28:9c:6f:0d:73:de:39:2b:dc:ba:c8:aa:4e:35:da:f1:82: 64:54:83:4e:9c:e2:fb:db:60:9a:05:6a:be:64:36:93:f3:ad: 1a:5e:10:95:20:e4:f5:d6:be:e4:59:ef:bf:14:99:8f:07:37: 9b:05:d6:fe:94:c0:bd:98:8c:6e:6a:4c:4d:b3:e0:af:4b:94: 83:ca:b8:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/68yeZx9JdcqsVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3 MmI3MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk Y2MwN2U0NTAtZDBmNC00YjhhLTllYzMtMDcxNmUzMTE2ZDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFDP00xXrQRsbpk/Cs7we397VKhzE8H3a4Lv XIQy98i2afQ8l06jpCVdNf4i8iX2k9bQjN7fbJPwgMgDwCDaEGu3/I19HNUsLD/k 5aTFZr7sDgG60r0Kq98lAJRye7Jpz7jhpnHqQxvR++EQotdGvREWaTpkT6HYN22k MLPe5L8bPtGmtanxvk85e7su3ER0LvkQ3qjPutCidiPOKJnhLC4vdXs3fPXoh2Pj cErJwX8pV3bBlbPFAyN23dClOHlSNuGEPUJ73cUk7S/AlkbjOC65kT7YtSzkLIUq tw9umSUpaCYBFzjIs9qQ/sGIm2G2ZGEDfY+uDDmqeA3aefkf1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbFDHzOGZ7nllCKwprUINbVl8GgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvYTFlNGMxNDYtMGQ4OS0z ZjJmLTkwZTMtMzliNmRhY2I4NGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0 NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2 ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaO2oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEX+w5GW9QuO2Cs184ATwZy4rkfnvU7GYJ58wR/7EJKDWfDSm0VGS2F EOmEuoUq7KvD1lKBkhQ1f0ng+UoR7mEK1Zbq95No28DKRh+K/MSm6YIHP3QYE+F2 9RJ75qX0EGW5ZPw3UXE0qsUkpp0ACsxrLlVxcqvUqq+2wG8eB3Sklc/I/yLFIiDT XmYceFlzOYPHHXLfqU6EOV3shxeQ3hWUvx4PrF1KFf1Ot0Wvq+D6tEE7HHEonG8N c945K9y6yKpONdrxgmRUg06c4vvbYJoFar5kNpPzrRpeEJUg5PXWvuRZ778UmY8H N5sF1v6UwL2YjG5qTE2z4K9LlIPKuEE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:01 2025 by rpki-client