$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4fb9a481-635c-333e-8373-3856a78d029c.roa File: 4fb9a481-635c-333e-8373-3856a78d029c.roa (raw, json) Hash identifier: AoscME/hsqeEOF2YLbsnIjL+ukP98iXMDHUQZwt1QeU= Subject key identifier: 6E:97:53:B3:71:DF:CC:50:4E:89:ED:8A:2C:29:06:2F:A8:E1:33:24 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F43285848A29B550E4D1BC5225D9D2B80 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4fb9a481-635c-333e-8373-3856a78d029c.roa Signing time: Thu 23 Jan 2025 02:00:40 +0000 ROA not before: Thu 23 Jan 2025 02:00:40 +0000 ROA not after: Wed 23 Apr 2025 01:00:40 +0000 asID: 398993 IP address blocks: 104.233.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:9b:55:0e:4d:1b:c5:22:5d:9d:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Jan 23 02:00:40 2025 GMT Not After : Apr 23 01:00:40 2025 GMT Subject: CN=97732a6a-6e55-487c-88dc-3efc1583cd3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4c:33:f0:ae:48:aa:c1:b4:82:96:2f:26:3c: 53:4f:2f:f7:6c:2f:1c:23:48:3b:d5:fe:13:84:39: 2d:08:e1:c5:e5:cd:d1:7a:48:d3:4d:d0:83:39:b9: 38:05:38:83:72:2a:2e:d9:db:f2:6b:a8:26:f2:cd: 45:5d:9d:1e:d6:d2:d2:bb:97:a6:c0:48:ab:d2:39: 52:ef:e1:30:9b:30:45:7d:06:ac:5d:35:46:93:f7: 9d:70:39:b7:15:ad:e1:c7:38:ad:49:77:af:1e:ae: f7:64:78:9b:71:78:d4:e1:41:f7:76:fa:ec:d5:55: 17:80:ac:49:d8:c2:f9:8d:b2:02:c2:b9:17:cf:db: 7b:7d:21:4f:a2:fc:a8:01:94:61:80:64:fb:11:d4: 25:ea:e6:4f:31:51:19:fb:20:f7:34:52:ad:3c:3f: 55:3e:09:ca:c3:29:f6:d9:5b:85:50:76:b6:e8:f8: 10:6a:04:54:bf:4b:83:0e:e2:ee:32:d4:30:cb:62: 7d:b0:89:07:a0:cc:8f:76:de:4e:67:6c:3e:ed:0d: 26:04:bb:cf:e5:33:b6:3f:14:9d:27:af:26:f8:c7: 11:52:c6:84:12:32:16:13:ae:cf:2e:ee:5b:d8:d4: 56:be:d5:99:27:ab:e6:87:c4:89:94:42:2a:9c:2b: f9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:97:53:B3:71:DF:CC:50:4E:89:ED:8A:2C:29:06:2F:A8:E1:33:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4fb9a481-635c-333e-8373-3856a78d029c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 104.233.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:cd:b7:b1:41:1d:cf:85:05:f0:d7:24:09:75:99:15:45:2b: 45:1e:79:44:93:b5:f0:46:2f:96:2f:a9:99:a3:fa:de:53:2a: 36:c9:c9:c6:61:b1:1d:ac:06:89:13:2f:d1:cc:a0:93:0e:7f: e4:fb:80:96:b7:6d:ef:35:eb:99:9b:b7:71:96:cd:e0:91:a2: 6a:1d:03:7c:41:54:4d:0b:9b:28:2a:ec:6e:68:db:a1:73:5a: e7:c9:10:14:28:ce:5f:66:1e:3d:23:84:6b:c4:27:ad:ae:7b: 67:b9:6c:72:2c:29:fe:e8:51:95:48:20:70:71:12:d0:d4:d4: e0:60:f3:2e:d4:c9:92:75:7a:41:51:b2:2f:c3:3f:b3:f4:aa: e0:76:ba:9d:58:90:a4:2c:b1:34:af:f3:61:eb:41:53:55:c6: d0:af:21:24:47:58:1a:26:c4:02:6c:1c:22:af:01:9d:2a:33: ab:d4:50:5c:ee:01:dc:a5:f1:79:3c:ad:0d:5e:80:1d:c7:46: b2:a1:f7:16:81:ec:3a:b5:df:f7:8f:75:0e:9e:92:68:60:b5: 00:05:21:cb:78:b6:fc:67:bc:09:f8:0e:8e:ab:2e:ce:48:92: 44:9c:09:d8:d3:b2:17:8c:f3:93:3d:73:5f:e1:e5:07:26:6e: 08:5c:33:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiim1UOTRvFIl2dK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk OTc3MzJhNmEtNmU1NS00ODdjLTg4ZGMtM2VmYzE1ODNjZDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUwz8K5IqsG0gpYvJjxTTy/3bC8cI0g71f4T hDktCOHF5c3RekjTTdCDObk4BTiDciou2dvya6gm8s1FXZ0e1tLSu5emwEir0jlS 7+EwmzBFfQasXTVGk/edcDm3Fa3hxzitSXevHq73ZHibcXjU4UH3dvrs1VUXgKxJ 2ML5jbICwrkXz9t7fSFPovyoAZRhgGT7EdQl6uZPMVEZ+yD3NFKtPD9VPgnKwyn2 2VuFUHa26PgQagRUv0uDDuLuMtQwy2J9sIkHoMyPdt5OZ2w+7Q0mBLvP5TO2PxSd J68m+McRUsaEEjIWE67PLu5b2NRWvtWZJ6vmh8SJlEIqnCv5ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6XU7Nx38xQTontiiwpBi+o4TMkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNGZiOWE0ODEtNjM1Yy0z MzNlLTgzNzMtMzg1NmE3OGQwMjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaOmoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/Nt7FBHc+FBfDXJAl1mRVFK0UeeUSTtfBGL5YvqZmj+t5TKjbJycZh sR2sBokTL9HMoJMOf+T7gJa3be8165mbt3GWzeCRomodA3xBVE0Lmygq7G5o26Fz WufJEBQozl9mHj0jhGvEJ62ue2e5bHIsKf7oUZVIIHBxEtDU1OBg8y7UyZJ1ekFR si/DP7P0quB2up1YkKQssTSv82HrQVNVxtCvISRHWBomxAJsHCKvAZ0qM6vUUFzu Adyl8Xk8rQ1egB3HRrKh9xaB7Dq13/ePdQ6ekmhgtQAFIct4tvxnvAn4Do6rLs5I kkScCdjTsheM85M9c1/h5QcmbghcM3k= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:07 2025 by rpki-client