$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/b1f8fb3b-a82a-3540-813b-3f7707cf6368.roa File: b1f8fb3b-a82a-3540-813b-3f7707cf6368.roa (raw, json) Hash identifier: O3IKLjrmwkliDbtoD38URFgZdnn1Cxic4CyX4lYoOgA= Subject key identifier: 96:41:ED:4A:B4:00:F0:73:BB:E9:E2:2C:F7:D1:83:3A:BB:70:EE:11 Certificate issuer: /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35 Certificate serial: 010D0C9F43285848D211385E93A481AA697FCA00 Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/b1f8fb3b-a82a-3540-813b-3f7707cf6368.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 399045 IP address blocks: 104.167.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:38:5e:93:a4:81:aa:69:7f:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=7128f48d-15b6-4f40-9888-12fa90cf0c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4b:82:d1:9e:4e:f1:94:30:61:55:aa:58:b3: 03:86:51:20:7f:94:8c:5d:26:55:b1:0b:48:d8:1c: c5:5d:79:a2:92:24:10:89:be:97:3b:bd:ca:a7:ce: ec:b3:c0:63:64:fb:76:52:60:22:b0:9a:6b:7c:af: eb:92:de:a5:65:f9:16:5e:69:b4:2c:97:4a:09:09: 86:3d:b6:e9:d7:0b:c3:c6:96:22:10:13:95:99:1f: 24:58:3e:8d:63:74:93:55:6c:57:b7:9f:c5:42:bf: 59:a3:13:20:67:f6:c0:ec:d5:e9:38:ea:7d:ac:5f: bd:bb:ac:06:61:6d:4b:24:e7:8d:bb:f0:15:55:bd: 76:93:7f:e1:34:56:00:65:fa:1e:0e:b4:0c:d3:51: 4f:ac:ed:6c:da:2f:e3:15:7c:5f:8e:48:1f:bb:3e: 66:4a:42:5a:21:b8:4d:50:e1:c9:e8:47:90:f1:40: 49:3d:ba:fd:cf:9f:8c:12:d3:ae:42:a1:0c:34:f5: 46:4c:9d:32:33:41:39:b4:92:ad:67:80:50:77:1e: f5:30:7a:f3:6e:79:6a:bf:b5:95:5f:60:4c:42:96: 98:4b:f6:32:bf:e2:0a:7c:8e:34:d5:7f:f4:b0:8a: dc:36:b0:51:bb:14:dd:2a:9e:83:bf:9b:86:58:ba: 10:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:41:ED:4A:B4:00:F0:73:BB:E9:E2:2C:F7:D1:83:3A:BB:70:EE:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/b1f8fb3b-a82a-3540-813b-3f7707cf6368.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl X509v3 Authority Key Identifier: keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer sbgp-ipAddrBlock: critical IPv4: 104.167.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:b2:db:fc:46:de:7f:3e:5a:a6:ec:88:43:d7:02:2a:7f:ed: 10:b6:d1:b5:4b:cd:be:36:7d:01:a0:ce:9c:01:08:cc:a3:f9: 71:80:b7:84:18:20:fa:20:5d:0d:0e:28:91:bd:4b:d6:7d:2e: 00:b6:29:06:af:30:1a:2a:0c:67:d0:db:7d:3b:1d:ee:0c:3b: da:75:4b:52:c0:11:75:c5:55:68:e7:29:10:39:3d:b7:44:f4: 54:c6:95:21:f2:e9:5b:5f:fc:b6:22:98:14:11:25:a1:18:ae: 02:38:fd:0a:fa:07:a4:61:c7:e8:7b:94:10:7f:ee:b3:e8:c7: 24:c6:40:2b:c9:38:cc:48:29:07:38:71:24:13:f4:63:d0:05: 75:20:70:99:9a:0a:f3:4d:b2:1d:da:1f:7a:2b:57:14:64:c0: f9:61:f8:74:7c:b8:c7:33:22:55:c4:20:0f:76:47:a7:87:ce: 4c:a3:5e:61:26:c1:f5:58:85:d0:e6:c7:7a:83:11:21:5e:49: 9f:18:5c:96:36:f9:d4:9b:d8:52:9b:85:80:6b:d0:23:da:cf: 33:39:86:84:3e:e2:a1:76:70:e9:36:e2:65:a9:c7:64:99:db: d7:b9:ba:2b:f1:e5:10:ee:52:c4:93:39:b7:ca:16:ac:8f:9b: 2e:db:ff:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEThek6SBqml/ygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU0OWI0YzYtNGQ1OC00MmUwLWFiZTItOTM3NTRmZGNk YTM1MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NzEyOGY0OGQtMTViNi00ZjQwLTk4ODgtMTJmYTkwY2YwYzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0uC0Z5O8ZQwYVWqWLMDhlEgf5SMXSZVsQtI 2BzFXXmikiQQib6XO73Kp87ss8BjZPt2UmAisJprfK/rkt6lZfkWXmm0LJdKCQmG Pbbp1wvDxpYiEBOVmR8kWD6NY3STVWxXt5/FQr9ZoxMgZ/bA7NXpOOp9rF+9u6wG YW1LJOeNu/AVVb12k3/hNFYAZfoeDrQM01FPrO1s2i/jFXxfjkgfuz5mSkJaIbhN UOHJ6EeQ8UBJPbr9z5+MEtOuQqEMNPVGTJ0yM0E5tJKtZ4BQdx71MHrzbnlqv7WV X2BMQpaYS/Yyv+IKfI401X/0sIrcNrBRuxTdKp6Dv5uGWLoQZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZB7Uq0APBzu+niLPfRgzq7cO4RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5 YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1NGZkY2RhMzUvYjFmOGZiM2ItYTgyYS0z NTQwLTgxM2ItM2Y3NzA3Y2Y2MzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGU0OWI0YzYtNGQ1OC00MmUwLWFi ZTItOTM3NTRmZGNkYTM1LzhlNDliNGM2LTRkNTgtNDJlMC1hYmUyLTkzNzU0ZmRj ZGEzNS5jcmwwHwYDVR0jBBgwFoAUCkkYlphvz9SNs+aiIifBJlnS62swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1 NGZkY2RhMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaKfcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGay2/xG3n8+WqbsiEPXAip/7RC20bVLzb42fQGgzpwBCMyj+XGAt4QY IPogXQ0OKJG9S9Z9LgC2KQavMBoqDGfQ2307He4MO9p1S1LAEXXFVWjnKRA5PbdE 9FTGlSHy6Vtf/LYimBQRJaEYrgI4/Qr6B6Rhx+h7lBB/7rPoxyTGQCvJOMxIKQc4 cSQT9GPQBXUgcJmaCvNNsh3aH3orVxRkwPlh+HR8uMczIlXEIA92R6eHzkyjXmEm wfVYhdDmx3qDESFeSZ8YXJY2+dSb2FKbhYBr0CPazzM5hoQ+4qF2cOk24mWpx2SZ 29e5uivx5RDuUsSTObfKFqyPmy7b/zw= -----END CERTIFICATE-----Generated at Sun Apr 6 01:07:45 2025 by rpki-client