$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/871664da-4c4c-3d9d-9cee-abde3f5a9e1a.roa File: 871664da-4c4c-3d9d-9cee-abde3f5a9e1a.roa (raw, json) Hash identifier: re04aPgiwPry1ktofTh9xFeeI2tXjKLByPkewetpUsk= Subject key identifier: 84:C9:41:62:25:B2:A0:C6:53:7A:7D:86:9F:B0:12:41:63:E9:8C:49 Certificate issuer: /CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e Certificate serial: 010D0C9F4328584902EC27FC0174E9384950E080 Authority key identifier: 8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/871664da-4c4c-3d9d-9cee-abde3f5a9e1a.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 41378 IP address blocks: 104.249.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:27:fc:01:74:e9:38:49:50:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=53f12e77-536e-40e5-9401-92a8d227ad4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5a:93:12:e2:bb:02:44:38:9c:69:f3:66:22: 5a:8e:eb:9e:5d:6f:4e:5f:44:18:2f:08:8c:91:e6: 75:4a:25:c4:6c:42:63:a4:50:29:d7:13:b3:86:fb: 75:23:97:9b:52:92:6b:60:23:3f:20:b0:6f:2a:14: 87:f6:8e:40:a7:8b:39:51:70:9a:1f:d6:d0:3c:4c: e7:4a:47:be:37:17:30:09:87:22:cd:b5:ad:38:4f: 0e:5f:bc:68:21:08:30:ed:a4:fb:b5:55:ed:30:56: 39:bf:7b:43:a8:24:a5:18:77:11:9f:48:39:89:b5: be:bb:19:e7:c1:cd:05:d0:7f:3f:0d:0a:b6:56:2c: c5:fc:61:c3:d5:b0:16:ac:a3:76:e9:56:b4:49:93: 52:2f:7c:1d:84:3a:18:f5:82:f2:91:13:5d:fa:c4: ab:7c:24:01:9a:09:70:8f:3d:0c:e8:d0:10:da:d5: fc:3d:cc:9b:98:74:ec:55:3a:9d:9a:22:ea:44:36: 3e:4e:63:27:ab:68:1b:90:75:cd:ce:4a:54:a9:2a: f7:6e:39:00:c3:f8:c7:ed:dc:eb:6e:7f:39:0d:51: c5:42:8c:f8:ff:56:10:57:ca:4c:20:24:ce:6f:dd: 48:33:f3:01:2e:c8:92:0e:96:17:38:78:52:b1:26: 12:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C9:41:62:25:B2:A0:C6:53:7A:7D:86:9F:B0:12:41:63:E9:8C:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/871664da-4c4c-3d9d-9cee-abde3f5a9e1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl X509v3 Authority Key Identifier: keyid:8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer sbgp-ipAddrBlock: critical IPv4: 104.249.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:6c:b7:86:16:d3:a7:cb:67:a3:f8:c8:09:af:3a:5e:3c:9f: 26:74:a5:29:71:f3:bf:a7:a4:98:c4:e3:53:31:49:82:92:8f: 34:77:83:13:cc:42:26:f4:40:68:a3:05:55:83:a0:54:19:66: 1b:62:0c:db:8f:13:43:7c:8f:68:9c:07:65:4b:a4:17:39:21: f2:65:f1:47:79:0c:6a:64:a3:7b:82:7b:cf:38:ac:b2:cf:28: 1b:ec:81:60:ba:2b:48:90:8a:f0:5e:b7:54:cc:f0:10:a7:b4: 8e:b1:8b:2a:a5:3b:47:8a:a8:f6:1b:04:fb:f2:34:6c:c0:f4: 65:dc:c6:f4:80:db:b4:1c:7c:03:0b:a4:66:21:99:9e:68:55: b2:73:cd:ce:dc:76:57:34:f5:90:d0:16:46:be:03:01:19:f9: d5:0c:00:37:60:09:1b:92:3a:a2:ac:b1:75:68:42:8d:6c:b8: c8:e5:fa:28:e0:40:8f:21:22:e6:fe:cc:1d:74:ba:45:01:9a: 05:ee:39:74:39:9c:b7:3c:bf:0d:a3:d8:86:1b:a7:b1:1c:db: 69:3a:38:28:34:88:d8:5a:88:e9:3d:2b:e1:2b:c7:30:e1:69: c4:42:8b:cc:00:bc:5a:17:19:c7:a8:38:73:09:fc:1a:0d:62: ea:28:24:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7Cf8AXTpOElQ4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE3ZmY1Y2MtZThhZS00MGY4LWJjYjktMzkwODEwZWI4 MjFlMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk NTNmMTJlNzctNTM2ZS00MGU1LTk0MDEtOTJhOGQyMjdhZDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1qTEuK7AkQ4nGnzZiJajuueXW9OX0QYLwiM keZ1SiXEbEJjpFAp1xOzhvt1I5ebUpJrYCM/ILBvKhSH9o5Ap4s5UXCaH9bQPEzn Ske+NxcwCYcizbWtOE8OX7xoIQgw7aT7tVXtMFY5v3tDqCSlGHcRn0g5ibW+uxnn wc0F0H8/DQq2VizF/GHD1bAWrKN26Va0SZNSL3wdhDoY9YLykRNd+sSrfCQBmglw jz0M6NAQ2tX8PcybmHTsVTqdmiLqRDY+TmMnq2gbkHXNzkpUqSr3bjkAw/jH7dzr bn85DVHFQoz4/1YQV8pMICTOb91IM/MBLsiSDpYXOHhSsSYSswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITJQWIlsqDGU3p9hp+wEkFj6YxJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdm ZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4MTBlYjgyMWUvODcxNjY0ZGEtNGM0Yy0z ZDlkLTljZWUtYWJkZTNmNWE5ZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWE3ZmY1Y2MtZThhZS00MGY4LWJj YjktMzkwODEwZWI4MjFlLzFhN2ZmNWNjLWU4YWUtNDBmOC1iY2I5LTM5MDgxMGVi ODIxZS5jcmwwHwYDVR0jBBgwFoAUjcqIVSKcOh2gFz9eNrHSpw0vYCYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdmZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4 MTBlYjgyMWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPmsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNst4YW06fLZ6P4yAmvOl48nyZ0pSlx87+npJjE41MxSYKSjzR3gxPM Qib0QGijBVWDoFQZZhtiDNuPE0N8j2icB2VLpBc5IfJl8Ud5DGpko3uCe884rLLP KBvsgWC6K0iQivBet1TM8BCntI6xiyqlO0eKqPYbBPvyNGzA9GXcxvSA27QcfAML pGYhmZ5oVbJzzc7cdlc09ZDQFka+AwEZ+dUMADdgCRuSOqKssXVoQo1suMjl+ijg QI8hIub+zB10ukUBmgXuOXQ5nLc8vw2j2IYbp7Ec22k6OCg0iNhaiOk9K+ErxzDh acRCi8wAvFoXGceoOHMJ/BoNYuooJLI= -----END CERTIFICATE-----Generated at Fri Mar 14 11:15:18 2025 by rpki-client