$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/97bc6d79-fa01-33f8-b9f5-8f8fd0f53fda.roa File: 97bc6d79-fa01-33f8-b9f5-8f8fd0f53fda.roa (raw, json) Hash identifier: GB4Bfn22neRWaWODR1leffkY8B8o412u9/h4fzvO1ik= Subject key identifier: EF:E4:E9:1D:9B:06:5E:1D:8A:9B:0C:08:42:2D:80:D0:EA:B5:CC:AF Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F4328584871C06AEF11A98FE33119EE00 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/97bc6d79-fa01-33f8-b9f5-8f8fd0f53fda.roa Signing time: Sun 05 Jan 2025 14:00:52 +0000 ROA not before: Sun 05 Jan 2025 14:00:52 +0000 ROA not after: Sat 05 Apr 2025 13:00:52 +0000 asID: 395092 IP address blocks: 104.225.128.0/22 maxlen: 24 2607:a680:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:71:c0:6a:ef:11:a9:8f:e3:31:19:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Jan 5 14:00:52 2025 GMT Not After : Apr 5 13:00:52 2025 GMT Subject: CN=3ca57d48-74ab-4223-8167-1f4b64296b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:98:12:ec:0f:6a:c4:dc:b1:d3:e1:83:de:fc: 37:d3:42:dd:44:37:ff:ba:61:9e:8f:a5:a7:ef:f3: cc:f0:87:8f:ca:6a:5d:ae:01:90:af:11:06:cb:8c: b7:44:ce:8d:72:d7:90:d9:81:f9:08:64:e0:63:db: 7d:f6:85:79:27:c9:5c:5a:2f:b8:55:59:97:42:ba: 54:a2:6b:3e:1d:54:94:9b:ec:2f:f6:46:ab:d4:d2: cb:7f:16:cb:6e:57:51:99:ac:41:0b:2c:b8:2b:a8: 80:a6:53:4d:89:30:e3:0e:00:24:c1:f2:06:b9:ee: 03:cd:56:9f:d2:58:ee:90:fb:1d:8a:ac:59:ca:49: b3:db:c8:eb:87:98:a1:34:ed:0b:1c:b7:95:5a:8d: 4d:6f:bd:f1:6d:23:13:58:3e:64:a2:f7:10:bc:e5: 95:56:bc:9d:f0:5b:0f:c1:44:dd:68:ca:2c:c1:2b: 70:74:43:05:57:1c:e4:40:c2:a3:9e:0a:30:55:dd: 51:13:7f:97:a0:87:9e:32:96:4a:e7:54:44:91:62: 0f:5d:67:15:71:d4:77:a4:8c:de:01:45:ab:ef:5c: 89:53:79:c3:44:9d:aa:b6:cd:27:3a:75:a5:8e:b8: be:b7:ad:5d:15:bd:18:ca:7f:c9:c6:64:0d:e6:06: 79:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E4:E9:1D:9B:06:5E:1D:8A:9B:0C:08:42:2D:80:D0:EA:B5:CC:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/97bc6d79-fa01-33f8-b9f5-8f8fd0f53fda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 104.225.128.0/22 IPv6: 2607:a680:4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:d2:ca:8b:5c:08:9e:68:c9:af:25:f3:83:2e:d5:2b:b5:c2: e4:03:65:8c:f6:d3:8a:ed:4f:16:ca:2b:05:48:59:31:75:ba: ff:e6:14:a3:05:9a:3e:2a:e9:71:a4:3c:8c:ba:19:b6:d9:b4: f5:fa:b3:16:f5:f0:5e:d2:89:5f:3c:16:0a:2c:9f:58:5f:15: 69:5c:98:50:02:66:a1:57:4b:28:75:48:02:dd:36:8b:34:73: f2:6f:10:61:d1:38:8c:51:39:6a:1b:5a:34:0c:31:9e:48:c6: 6b:8c:9f:70:34:b1:d9:75:3f:e3:5d:91:0c:3b:ef:67:7f:ca: e8:80:fc:d5:d7:ba:5a:8b:26:30:22:9d:39:e7:9a:88:5d:47: 46:b9:3f:17:01:f8:6a:f8:70:da:b9:c1:7a:81:d1:e3:27:c1: e8:ea:33:28:a7:b7:ab:2a:3b:b8:e9:ca:0f:05:9b:37:69:a0: 40:59:c2:c3:71:be:1d:fc:12:60:68:13:8e:7d:62:0a:8f:6b: 22:1d:8f:9f:38:f6:6e:27:8b:ce:33:fe:b5:68:eb:86:b1:56: d1:ec:97:03:87:f1:ab:0b:99:a2:ce:be:e4:98:3f:75:7f:61: 97:82:9d:d5:7d:1f:77:51:c4:35:0c:7a:2a:60:7a:f9:83:4e: 7c:2d:65:51 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEhxwGrvEamP4zEZ7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI1MDEwNTE0MDA1MloXDTI1MDQwNTEzMDA1MlowLzEtMCsGA1UEAxMk M2NhNTdkNDgtNzRhYi00MjIzLTgxNjctMWY0YjY0Mjk2YjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5gS7A9qxNyx0+GD3vw300LdRDf/umGej6Wn 7/PM8IePympdrgGQrxEGy4y3RM6NcteQ2YH5CGTgY9t99oV5J8lcWi+4VVmXQrpU oms+HVSUm+wv9kar1NLLfxbLbldRmaxBCyy4K6iAplNNiTDjDgAkwfIGue4DzVaf 0ljukPsdiqxZykmz28jrh5ihNO0LHLeVWo1Nb73xbSMTWD5kovcQvOWVVryd8FsP wUTdaMoswStwdEMFVxzkQMKjngowVd1RE3+XoIeeMpZK51REkWIPXWcVcdR3pIze AUWr71yJU3nDRJ2qts0nOnWljri+t61dFb0Yyn/JxmQN5gZ5/wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFO/k6R2bBl4dipsMCEItgNDqtcyvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvOTdiYzZkNzktZmEwMS0z M2Y4LWI5ZjUtOGY4ZmQwZjUzZmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCaOGAMA8E AgACMAkDBwAmB6aAAAQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAYNLKi1wInmjJryXzgy7VK7XC5ANljPbT iu1PFsorBUhZMXW6/+YUowWaPirpcaQ8jLoZttm09fqzFvXwXtKJXzwWCiyfWF8V aVyYUAJmoVdLKHVIAt02izRz8m8QYdE4jFE5ahtaNAwxnkjGa4yfcDSx2XU/412R DDvvZ3/K6ID81de6WosmMCKdOeeaiF1HRrk/FwH4avhw2rnBeoHR4yfB6OozKKe3 qyo7uOnKDwWbN2mgQFnCw3G+HfwSYGgTjn1iCo9rIh2Pnzj2bieLzjP+tWjrhrFW 0eyXA4fxqwuZos6+5Jg/dX9hl4Kd1X0fd1HENQx6KmB6+YNOfC1lUQ== -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:45 2025 by rpki-client