$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/871664da-4c4c-3d9d-9cee-abde3f5a9e1a.roa File: 871664da-4c4c-3d9d-9cee-abde3f5a9e1a.roa (raw, json) Hash identifier: aPS8sYIdYTfArG4Z0oGy0okb4J8SUNZgRrD59pKY20I= Subject key identifier: 97:FF:03:02:80:CC:24:33:FD:06:4E:B4:CE:9B:CF:71:D3:64:2F:F5 Certificate issuer: /CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e Certificate serial: 010D0C9F432858482395491708BDE96AE8BBF780 Authority key identifier: 8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/871664da-4c4c-3d9d-9cee-abde3f5a9e1a.roa Signing time: Sun 08 Dec 2024 14:00:51 +0000 ROA not before: Sun 08 Dec 2024 14:00:51 +0000 ROA not after: Sat 08 Mar 2025 14:00:51 +0000 asID: 41378 IP address blocks: 104.249.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:23:95:49:17:08:bd:e9:6a:e8:bb:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e Validity Not Before: Dec 8 14:00:51 2024 GMT Not After : Mar 8 14:00:51 2025 GMT Subject: CN=441a8e90-1c67-44e1-a64d-322b6c6ea24e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:60:23:0a:03:e8:39:da:4d:32:7f:ee:3a:a2: 2e:ed:a8:3f:97:12:df:69:1a:93:52:06:90:b6:c6: 6d:21:05:98:7f:02:7a:80:f3:13:19:54:55:11:f4: aa:09:48:b9:96:d4:f4:09:29:67:7a:db:dc:2f:90: b0:0c:c3:b2:ae:ea:f0:0e:b1:62:a6:f4:5c:5c:2c: 22:8b:60:c5:cf:f5:b3:06:c4:4e:31:64:8f:c4:37: f9:82:9d:c3:37:58:7b:64:5e:62:e1:b4:20:55:79: 29:da:c5:90:50:3b:12:8f:92:d6:ae:d1:65:8f:30: 27:f9:f6:91:36:72:50:41:4d:41:da:37:95:c5:9d: e4:29:ff:81:94:fe:1a:ac:36:58:08:f0:3e:19:11: 02:9d:01:10:67:ff:72:3b:03:ab:68:fd:1f:a6:8d: b0:73:e7:de:30:42:6f:49:d0:44:c8:cc:f2:a4:6d: 5f:38:5a:17:54:af:ab:6d:69:75:60:0b:96:99:56: 47:3a:b9:79:93:8f:77:ef:9b:bb:e3:cf:81:4f:71: 53:05:ef:b0:14:fc:35:69:ff:a2:fb:2e:cd:66:1c: 4a:b6:6c:70:0a:02:88:09:48:f0:09:59:97:f9:4e: 9b:1d:c8:7f:fb:f1:97:4f:1d:10:37:a2:05:48:44: 0c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:FF:03:02:80:CC:24:33:FD:06:4E:B4:CE:9B:CF:71:D3:64:2F:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/871664da-4c4c-3d9d-9cee-abde3f5a9e1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl X509v3 Authority Key Identifier: keyid:8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer sbgp-ipAddrBlock: critical IPv4: 104.249.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:3a:9a:b4:0d:8f:a8:fb:13:1c:9f:97:c8:b8:48:c5:62:e0: e4:f7:73:c8:13:78:ee:f3:9f:52:64:97:20:f1:51:b4:6f:8a: c0:f6:89:c8:6c:41:58:7b:72:f2:64:27:6d:5b:ae:42:a5:57: ce:b0:fe:28:bc:5b:18:a2:45:ad:65:9e:64:6a:df:bc:ee:c6: 03:30:e9:7d:ae:13:8f:4d:98:03:84:e0:ae:7b:cc:aa:d5:51: 4e:6f:dc:13:ea:80:c0:94:e4:de:75:90:95:db:61:1c:45:47: 94:e1:c9:fe:56:fd:56:04:37:49:80:99:6a:51:65:69:e4:d8: 3a:fa:90:88:37:33:85:34:90:88:5b:91:fc:18:d1:47:fd:ec: 18:cd:81:72:1a:33:ae:6f:d1:3b:a6:0b:32:af:a1:53:6d:6e: 55:01:00:4e:2f:de:aa:66:2c:9c:a2:06:2b:e2:ff:df:5c:03: fb:1c:9f:dc:9f:bb:50:b4:9c:93:27:4a:85:9c:8b:c7:6d:f3: 42:f6:8f:7d:11:d3:02:99:e0:72:1d:b2:51:ce:ce:45:84:9c: 34:b6:48:cc:78:35:d0:f3:64:46:c9:46:fd:4d:5d:e3:6f:d9: 8e:9f:64:4a:45:12:a3:93:f0:cf:17:0b:de:88:a8:14:6e:ac: 6b:e2:e2:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgjlUkXCL3paui794AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE3ZmY1Y2MtZThhZS00MGY4LWJjYjktMzkwODEwZWI4 MjFlMB4XDTI0MTIwODE0MDA1MVoXDTI1MDMwODE0MDA1MVowLzEtMCsGA1UEAxMk NDQxYThlOTAtMWM2Ny00NGUxLWE2NGQtMzIyYjZjNmVhMjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2AjCgPoOdpNMn/uOqIu7ag/lxLfaRqTUgaQ tsZtIQWYfwJ6gPMTGVRVEfSqCUi5ltT0CSlnetvcL5CwDMOyrurwDrFipvRcXCwi i2DFz/WzBsROMWSPxDf5gp3DN1h7ZF5i4bQgVXkp2sWQUDsSj5LWrtFljzAn+faR NnJQQU1B2jeVxZ3kKf+BlP4arDZYCPA+GRECnQEQZ/9yOwOraP0fpo2wc+feMEJv SdBEyMzypG1fOFoXVK+rbWl1YAuWmVZHOrl5k49375u748+BT3FTBe+wFPw1af+i +y7NZhxKtmxwCgKICUjwCVmX+U6bHch/+/GXTx0QN6IFSEQMuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJf/AwKAzCQz/QZOtM6bz3HTZC/1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdm ZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4MTBlYjgyMWUvODcxNjY0ZGEtNGM0Yy0z ZDlkLTljZWUtYWJkZTNmNWE5ZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWE3ZmY1Y2MtZThhZS00MGY4LWJj YjktMzkwODEwZWI4MjFlLzFhN2ZmNWNjLWU4YWUtNDBmOC1iY2I5LTM5MDgxMGVi ODIxZS5jcmwwHwYDVR0jBBgwFoAUjcqIVSKcOh2gFz9eNrHSpw0vYCYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdmZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4 MTBlYjgyMWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPmsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAI6mrQNj6j7Exyfl8i4SMVi4OT3c8gTeO7zn1JklyDxUbRvisD2ichs QVh7cvJkJ21brkKlV86w/ii8WxiiRa1lnmRq37zuxgMw6X2uE49NmAOE4K57zKrV UU5v3BPqgMCU5N51kJXbYRxFR5Thyf5W/VYEN0mAmWpRZWnk2Dr6kIg3M4U0kIhb kfwY0Uf97BjNgXIaM65v0TumCzKvoVNtblUBAE4v3qpmLJyiBivi/99cA/scn9yf u1C0nJMnSoWci8dt80L2j30R0wKZ4HIdslHOzkWEnDS2SMx4NdDzZEbJRv1NXeNv 2Y6fZEpFEqOT8M8XC96IqBRurGvi4tE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:25:50 2025 by rpki-client