$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/7455af95-a6a9-3486-8f84-52632f6b4330.roa File: 7455af95-a6a9-3486-8f84-52632f6b4330.roa (raw, json) Hash identifier: OVIpqQUxLoxBF2KDdxPp4evLEFpjgzP/XNisA8C1u00= Subject key identifier: 2C:40:8B:D4:79:E5:7F:C1:D5:DE:FB:B7:D3:4E:CA:69:22:E1:15:08 Certificate issuer: /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e Certificate serial: 010D0C9F43285848653036B61B11C68750A6C080 Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/7455af95-a6a9-3486-8f84-52632f6b4330.roa Signing time: Wed 01 Jan 2025 02:00:40 +0000 ROA not before: Wed 01 Jan 2025 02:00:40 +0000 ROA not after: Tue 01 Apr 2025 01:00:40 +0000 asID: 397923 IP address blocks: 104.171.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:65:30:36:b6:1b:11:c6:87:50:a6:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e Validity Not Before: Jan 1 02:00:40 2025 GMT Not After : Apr 1 01:00:40 2025 GMT Subject: CN=cf3ff732-c7b3-4f4b-a94a-d4de06022b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f7:1e:ce:1c:61:99:f2:51:14:0f:4d:0a:a7: 8f:95:38:06:00:bb:e5:55:02:88:1f:16:c7:27:76: b4:f6:fa:93:5b:55:47:2b:99:c0:c7:d8:7f:77:da: c1:a9:af:a2:96:a5:ba:3a:a1:ea:0b:8f:de:ad:1b: 1a:f9:01:44:98:ef:cd:53:a7:8a:ab:f1:35:16:93: e2:c0:6f:3c:4b:6a:fe:2a:78:93:68:25:12:ac:25: 4e:b1:8a:89:d3:7a:6e:9d:04:db:2c:b8:fc:e9:db: bb:67:29:f4:a0:a6:6e:a8:2b:ee:07:ec:1a:bb:5a: b0:f1:76:b0:ca:a7:fd:d2:ce:ff:1a:fb:69:9a:7c: aa:eb:8c:f6:41:f3:dc:7e:8f:dd:2b:62:eb:5d:03: 52:3f:9f:19:fd:c9:0f:9c:c4:57:60:a2:45:23:fd: b0:9d:ed:b7:ba:95:0c:f7:71:4f:c4:6b:93:46:4f: 9c:5d:9b:1f:fc:bd:f4:15:1a:32:f1:1b:5f:ec:17: 49:ee:6f:4e:7c:58:f2:a5:04:7f:25:27:a7:e5:0b: fc:0a:b8:b8:58:57:ae:a7:5b:56:ee:7c:6d:20:b3: fa:ee:7b:7a:99:1c:c0:5e:45:17:4f:97:2a:e3:18: 34:fb:a7:e7:20:af:ac:7f:bc:ca:3f:e8:90:45:bf: f8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:40:8B:D4:79:E5:7F:C1:D5:DE:FB:B7:D3:4E:CA:69:22:E1:15:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/7455af95-a6a9-3486-8f84-52632f6b4330.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl X509v3 Authority Key Identifier: keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer sbgp-ipAddrBlock: critical IPv4: 104.171.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:90:2a:59:36:97:3c:77:2e:53:e8:db:33:bd:f7:6f:c9:e1: e1:8f:26:34:e3:b1:d1:29:3a:4f:3c:c9:fb:f9:d8:26:65:63: 2f:5f:82:9d:45:d6:a5:02:9c:dc:96:d5:79:35:2c:9e:24:37: da:aa:2d:95:45:ed:85:e8:75:35:6e:15:e6:7a:80:09:22:fd: 34:43:e9:32:a4:29:5f:06:56:67:a1:38:74:6b:bf:86:3e:c3: 57:ec:17:03:fd:fb:85:d2:db:4e:e1:4c:0f:72:f9:db:d7:b4: 1a:b0:51:5a:27:44:f8:30:e4:ac:eb:18:10:91:d1:ad:a3:c6: 66:77:a9:85:d0:95:44:6f:60:ff:a1:07:22:1e:c7:91:69:55: 41:df:2a:c8:4e:3a:da:c3:a3:12:d3:86:dd:a1:4d:77:bc:00: 15:96:a0:03:ee:fa:03:a4:24:49:6f:97:12:10:7a:0d:f2:4b: d4:d7:69:b3:61:de:e7:d3:43:b6:04:4c:de:1b:43:4c:a2:ae: 97:6a:ef:44:3d:3b:c3:df:a6:24:ff:6e:62:a1:79:4d:a7:70: 99:c5:2a:ee:58:04:47:84:39:d1:40:48:81:81:02:14:5e:de: 25:cb:2c:5d:3c:85:e0:c2:bb:be:ba:d5:85:ef:ca:95:b7:93: 2e:88:a0:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhlMDa2GxHGh1CmwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWVlMmU0YjAtNmY5YS00M2M3LWI2YmUtNmVmZjQ4ODc2 NjNlMB4XDTI1MDEwMTAyMDA0MFoXDTI1MDQwMTAxMDA0MFowLzEtMCsGA1UEAxMk Y2YzZmY3MzItYzdiMy00ZjRiLWE5NGEtZDRkZTA2MDIyYjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfcezhxhmfJRFA9NCqePlTgGALvlVQKIHxbH J3a09vqTW1VHK5nAx9h/d9rBqa+ilqW6OqHqC4/erRsa+QFEmO/NU6eKq/E1FpPi wG88S2r+KniTaCUSrCVOsYqJ03punQTbLLj86du7Zyn0oKZuqCvuB+wau1qw8Xaw yqf90s7/Gvtpmnyq64z2QfPcfo/dK2LrXQNSP58Z/ckPnMRXYKJFI/2wne23upUM 93FPxGuTRk+cXZsf/L30FRoy8Rtf7BdJ7m9OfFjypQR/JSen5Qv8Cri4WFeup1tW 7nxtILP67nt6mRzAXkUXT5cq4xg0+6fnIK+sf7zKP+iQRb/4kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxAi9R55X/B1d77t9NOymki4RUIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZWUy ZTRiMC02ZjlhLTQzYzctYjZiZS02ZWZmNDg4NzY2M2UvNzQ1NWFmOTUtYTZhOS0z NDg2LThmODQtNTI2MzJmNmI0MzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWVlMmU0YjAtNmY5YS00M2M3LWI2 YmUtNmVmZjQ4ODc2NjNlLzVlZTJlNGIwLTZmOWEtNDNjNy1iNmJlLTZlZmY0ODg3 NjYzZS5jcmwwHwYDVR0jBBgwFoAUDhljVY9E40F4e1TAZyFIXjijozAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZWUyZTRiMC02ZjlhLTQzYzctYjZiZS02ZWZm NDg4NzY2M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKuqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSQKlk2lzx3LlPo2zO992/J4eGPJjTjsdEpOk88yfv52CZlYy9fgp1F 1qUCnNyW1Xk1LJ4kN9qqLZVF7YXodTVuFeZ6gAki/TRD6TKkKV8GVmehOHRrv4Y+ w1fsFwP9+4XS207hTA9y+dvXtBqwUVonRPgw5KzrGBCR0a2jxmZ3qYXQlURvYP+h ByIex5FpVUHfKshOOtrDoxLTht2hTXe8ABWWoAPu+gOkJElvlxIQeg3yS9TXabNh 3ufTQ7YETN4bQ0yirpdq70Q9O8PfpiT/bmKheU2ncJnFKu5YBEeEOdFASIGBAhRe 3iXLLF08heDCu7661YXvypW3ky6IoFg= -----END CERTIFICATE-----Generated at Fri Mar 14 11:10:57 2025 by rpki-client