$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/8266ac6d-7bb0-35d9-89a0-c3181b874ad1.roa File: 8266ac6d-7bb0-35d9-89a0-c3181b874ad1.roa (raw, json) Hash identifier: g+MvrFWbJqgeQmuNL6WgQfUBeDaeRRMM6TdSxVPtKl8= Subject key identifier: 15:9E:7F:0E:AC:B0:F8:46:72:92:F4:A3:22:F4:0C:C4:A5:AE:58:80 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F432858486695B3145F57BCA2BB1DA400 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/8266ac6d-7bb0-35d9-89a0-c3181b874ad1.roa Signing time: Wed 01 Jan 2025 14:00:53 +0000 ROA not before: Wed 01 Jan 2025 14:00:53 +0000 ROA not after: Tue 01 Apr 2025 13:00:53 +0000 asID: 1239 IP address blocks: 104.218.195.0/24 maxlen: 24 104.251.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:66:95:b3:14:5f:57:bc:a2:bb:1d:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jan 1 14:00:53 2025 GMT Not After : Apr 1 13:00:53 2025 GMT Subject: CN=6f5c116e-09c9-44d1-9902-183d43bee338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:4f:0a:f5:b2:47:f0:6a:9b:b9:13:7a:2a:6a: 35:d7:b1:9f:6b:19:a6:a5:25:ce:68:23:e3:50:78: 84:22:41:2b:54:c4:99:4d:8a:54:93:a8:76:44:ba: 6d:ed:c7:a3:d3:3b:3c:a3:5c:a8:a7:c2:bb:a0:a2: cc:9d:1b:22:ad:fa:32:b6:1f:3e:b9:76:23:25:b0: 01:99:68:94:ad:11:b7:46:93:69:b6:fd:60:53:94: 0c:03:6c:40:81:cc:a3:e1:73:e4:ba:1f:1c:36:69: b5:d2:77:f1:fb:00:e2:b3:e0:8f:01:fc:02:ee:ff: 2d:4a:bb:35:4e:fa:f1:fd:d6:88:9d:24:f0:2e:15: 4e:57:ff:b6:51:76:a6:f3:e3:72:2e:31:5e:7a:af: 58:cb:a3:15:ab:7f:ed:4d:cb:b2:7b:2c:af:12:d0: b3:ca:04:19:ab:f5:fb:ac:55:59:a9:9a:07:b4:eb: 1f:4e:1f:ab:53:9c:93:52:67:e4:9d:22:e0:28:46: ba:5b:25:63:ad:1d:84:b1:ce:2c:e9:e6:61:d7:71: 8b:e2:6a:e5:3f:db:9b:4a:3a:49:a3:76:c7:d6:0e: a0:72:26:b4:59:8c:98:4c:7d:58:0b:09:d4:10:33: 80:10:c9:fa:23:a3:b3:1e:74:38:80:ba:97:ae:af: 2b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:9E:7F:0E:AC:B0:F8:46:72:92:F4:A3:22:F4:0C:C4:A5:AE:58:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/8266ac6d-7bb0-35d9-89a0-c3181b874ad1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.218.195.0/24 104.251.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:86:f8:4f:97:45:1d:a7:1e:40:24:92:2e:86:13:48:cf:71: 6f:6f:d5:1c:ac:bf:f5:09:03:47:f6:b9:b2:69:be:b2:2c:bb: d0:3e:a0:1e:2f:ac:d6:82:97:22:30:0d:88:3a:0c:45:aa:c2: 1b:91:d8:77:c6:19:b3:63:3b:53:a2:dc:52:00:7e:f6:b2:14: 36:e3:9c:03:6f:32:b3:6d:4f:e2:6c:ee:bd:a9:d2:44:90:f6: 4e:ae:c4:63:5e:59:f8:fc:e0:1b:98:3e:b6:a7:2c:5c:1b:33: e0:65:76:32:f4:ec:f2:0b:a2:a1:8b:17:1e:13:08:b6:cd:75: 82:31:42:e4:e6:c2:20:52:b3:7a:e5:57:fe:5c:70:73:35:b2: bd:2f:e7:9f:52:e2:bf:6d:58:1c:29:41:f0:a8:c7:8d:20:7a: dd:4b:f8:34:ac:e5:2a:b6:51:ef:71:46:f7:c7:11:a0:59:a1: a0:b8:4a:fa:91:87:eb:40:61:0a:b4:26:7e:a7:3e:95:e6:d4: 11:8b:00:30:d3:d3:58:68:ac:b4:62:b4:4f:82:3f:14:36:a6: ce:d9:d8:8c:40:03:28:0c:3c:30:03:37:02:78:db:ce:fb:eb: 85:58:31:0a:56:5e:c1:b3:d1:f9:5d:dc:a0:70:e7:d9:f9:7f: 05:54:e3:b9 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEhmlbMUX1e8orsdpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk NmY1YzExNmUtMDljOS00NGQxLTk5MDItMTgzZDQzYmVlMzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7k8K9bJH8GqbuRN6Kmo117GfaxmmpSXOaCPj UHiEIkErVMSZTYpUk6h2RLpt7cej0zs8o1yop8K7oKLMnRsirfoyth8+uXYjJbAB mWiUrRG3RpNptv1gU5QMA2xAgcyj4XPkuh8cNmm10nfx+wDis+CPAfwC7v8tSrs1 Tvrx/daInSTwLhVOV/+2UXam8+NyLjFeeq9Yy6MVq3/tTcuyeyyvEtCzygQZq/X7 rFVZqZoHtOsfTh+rU5yTUmfknSLgKEa6WyVjrR2Esc4s6eZh13GL4mrlP9ubSjpJ o3bH1g6gcia0WYyYTH1YCwnUEDOAEMn6I6OzHnQ4gLqXrq8rMQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBWefw6ssPhGcpL0oyL0DMSlrliAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvODI2NmFjNmQtN2JiMC0z NWQ5LTg5YTAtYzMxODFiODc0YWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaNrDAwQA aPtWMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFGG+E+XRR2nHkAkki6GE0jPcW9v1Rysv/UJA0f2ubJpvrIs u9A+oB4vrNaClyIwDYg6DEWqwhuR2HfGGbNjO1Oi3FIAfvayFDbjnANvMrNtT+Js 7r2p0kSQ9k6uxGNeWfj84BuYPranLFwbM+BldjL07PILoqGLFx4TCLbNdYIxQuTm wiBSs3rlV/5ccHM1sr0v559S4r9tWBwpQfCox40get1L+DSs5Sq2Ue9xRvfHEaBZ oaC4SvqRh+tAYQq0Jn6nPpXm1BGLADDT01horLRitE+CPxQ2ps7Z2IxAAygMPDAD NwJ4287764VYMQpWXsGz0fld3KBw59n5fwVU47k= -----END CERTIFICATE-----Generated at Sun Feb 16 15:23:56 2025 by rpki-client