$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/87047fdd-e83e-3526-a38e-6e704a5c2c0d.roa File: 87047fdd-e83e-3526-a38e-6e704a5c2c0d.roa (raw, json) Hash identifier: ckZSVPZU4QrsrlrAXp5d6x+E8m/2xxQwMaXw7oELktI= Subject key identifier: 8E:AD:C9:EF:75:20:FB:0D:F3:51:EB:D1:35:E4:5B:B2:93:84:73:D3 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858486C2B2707D4A09DD458FEC080 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/87047fdd-e83e-3526-a38e-6e704a5c2c0d.roa Signing time: Fri 03 Jan 2025 14:00:51 +0000 ROA not before: Fri 03 Jan 2025 14:00:51 +0000 ROA not after: Thu 03 Apr 2025 13:00:51 +0000 asID: 54858 IP address blocks: 104.152.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6c:2b:27:07:d4:a0:9d:d4:58:fe:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jan 3 14:00:51 2025 GMT Not After : Apr 3 13:00:51 2025 GMT Subject: CN=92fbec05-01c6-4c87-b398-fb216a4fbe38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:47:6e:07:b9:93:41:b8:f6:36:c4:8c:44:b6: 1e:ba:a5:36:8c:ac:fc:eb:a9:da:b4:a3:9e:3c:bc: 7e:4d:cb:37:52:00:b5:f4:54:ba:cb:a2:d2:df:8d: ac:34:82:96:b8:18:3b:58:1c:f6:09:3f:7d:21:76: cd:58:82:4f:73:f2:73:6d:39:b8:42:02:d2:4a:f7: e9:ef:83:f9:2f:3b:39:ed:9d:4a:2d:f2:13:0a:23: ec:3a:30:e7:ce:a6:3f:cc:c7:37:9c:da:e8:1f:01: 6d:5c:4b:cb:e4:b1:6f:fc:b6:39:c8:ff:fc:44:18: fa:9c:39:20:11:fb:f7:9b:cc:d2:ef:d9:b0:44:93: e1:62:b9:d3:e6:4c:80:dd:15:15:4f:29:1f:70:58: 26:f8:0b:c5:d1:02:2a:fe:e7:43:d2:61:08:be:c2: 99:0e:6b:f7:a4:b0:0b:54:77:3c:f5:fc:67:2e:83: f0:94:2e:17:31:fb:07:87:f2:70:09:12:57:21:6c: 3e:e3:38:7e:42:4c:40:b4:b0:90:2c:c4:15:0d:d1: 72:67:cc:fd:45:e5:f6:04:36:1d:b3:6a:5f:da:38: 2f:d4:73:5f:6b:56:b6:35:ee:cc:61:62:d3:58:b1: 5f:7b:03:0a:42:4b:08:15:4d:11:2b:1e:37:7b:69: 88:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:AD:C9:EF:75:20:FB:0D:F3:51:EB:D1:35:E4:5B:B2:93:84:73:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/87047fdd-e83e-3526-a38e-6e704a5c2c0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 104.152.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:b7:50:37:50:ea:86:40:5a:df:de:44:1b:75:96:0e:1f:bb: b6:4e:ae:52:67:09:b1:42:9a:1c:ac:47:d1:5a:3e:fd:ec:b4: 44:ec:86:70:aa:3a:bf:51:65:f0:d2:aa:29:8a:99:8d:fe:c7: 21:55:c4:4f:49:2b:79:b1:9c:9f:10:82:e7:05:02:33:22:cb: 5f:1f:59:a0:96:93:70:68:29:dd:46:d5:08:3c:6e:6d:c5:08: 85:d9:90:71:8c:7c:20:2c:39:ea:11:39:0e:1e:b7:77:26:d3: ac:8b:68:1f:05:35:02:59:25:08:e2:94:d5:18:b0:66:11:94: de:5d:07:92:a6:a2:7d:15:1e:a4:2d:64:45:91:85:b2:22:e6: 6a:4a:2f:d6:41:e0:5a:5b:82:3c:94:a0:97:41:d3:74:bd:7f: a9:44:14:52:83:e8:2e:23:2b:af:c1:7a:8f:0d:f0:53:da:37: 70:25:a5:89:3d:b4:9d:97:cf:7b:6c:6e:f0:0a:7f:06:a6:5a: ea:65:09:bd:dc:f2:af:e7:ce:49:d9:02:10:96:bb:f4:c8:1e: a4:8a:a3:3c:4e:d7:38:ed:b3:67:ce:7b:7e:99:47:89:70:24: 72:33:4f:7c:66:9b:82:8b:29:f2:9a:ea:02:dc:a0:8b:ca:05: 1a:aa:ae:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhsKycH1KCd1Fj+wIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk OTJmYmVjMDUtMDFjNi00Yzg3LWIzOTgtZmIyMTZhNGZiZTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkduB7mTQbj2NsSMRLYeuqU2jKz866natKOe PLx+Tcs3UgC19FS6y6LS342sNIKWuBg7WBz2CT99IXbNWIJPc/JzbTm4QgLSSvfp 74P5Lzs57Z1KLfITCiPsOjDnzqY/zMc3nNroHwFtXEvL5LFv/LY5yP/8RBj6nDkg Efv3m8zS79mwRJPhYrnT5kyA3RUVTykfcFgm+AvF0QIq/udD0mEIvsKZDmv3pLAL VHc89fxnLoPwlC4XMfsHh/JwCRJXIWw+4zh+QkxAtLCQLMQVDdFyZ8z9ReX2BDYd s2pf2jgv1HNfa1a2Ne7MYWLTWLFfewMKQksIFU0RKx43e2mIdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6tye91IPsN81Hr0TXkW7KThHPTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvODcwNDdmZGQtZTgzZS0z NTI2LWEzOGUtNmU3MDRhNWMyYzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJhoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH63UDdQ6oZAWt/eRBt1lg4fu7ZOrlJnCbFCmhysR9FaPv3stETshnCq Or9RZfDSqimKmY3+xyFVxE9JK3mxnJ8QgucFAjMiy18fWaCWk3BoKd1G1Qg8bm3F CIXZkHGMfCAsOeoROQ4et3cm06yLaB8FNQJZJQjilNUYsGYRlN5dB5Kmon0VHqQt ZEWRhbIi5mpKL9ZB4FpbgjyUoJdB03S9f6lEFFKD6C4jK6/Beo8N8FPaN3AlpYk9 tJ2Xz3tsbvAKfwamWuplCb3c8q/nzknZAhCWu/TIHqSKozxO1zjts2fOe36ZR4lw JHIzT3xmm4KLKfKa6gLcoIvKBRqqrpM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:14:33 2025 by rpki-client