$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b09b8ccb-eb67-3a30-9d51-24dfc031880b.roa File: b09b8ccb-eb67-3a30-9d51-24dfc031880b.roa (raw, json) Hash identifier: Jj5fYYmOwsouk97DbSFPoTE9RRtRxvY+2DMRbxW0s3Q= Subject key identifier: F7:5A:DF:60:57:28:4E:2D:52:F1:6F:93:2B:9E:37:BC:8E:66:D0:3A Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858486C2B24F2F7A654DF39239BC0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b09b8ccb-eb67-3a30-9d51-24dfc031880b.roa Signing time: Fri 03 Jan 2025 14:00:51 +0000 ROA not before: Fri 03 Jan 2025 14:00:51 +0000 ROA not after: Thu 03 Apr 2025 13:00:51 +0000 asID: 11404 IP address blocks: 104.220.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6c:2b:24:f2:f7:a6:54:df:39:23:9b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jan 3 14:00:51 2025 GMT Not After : Apr 3 13:00:51 2025 GMT Subject: CN=384149e9-23a1-48b0-8d03-2ac2c7f806c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9c:e4:47:7e:e0:88:b6:53:3e:8a:5a:a9:7a: ac:43:19:5b:e7:70:cb:aa:fe:55:98:ff:30:8d:60: 15:e2:f6:a6:00:f7:9d:22:49:ad:1d:82:c4:de:f0: 63:9d:e4:b9:cb:55:26:04:c2:fa:69:30:a8:07:c2: d1:07:b8:fe:2d:c8:05:64:c8:03:74:0a:95:bc:d6: 29:55:77:97:4a:ed:9e:15:ad:52:57:a3:d9:71:24: 1b:1f:a6:11:1e:d9:56:0b:4b:2a:71:4e:7b:6b:3d: cc:b7:67:ba:70:a9:a6:4c:f6:12:48:04:50:64:34: 56:6a:ca:94:16:1b:1c:a7:39:a4:54:41:6a:f8:cd: d0:da:a8:e4:73:68:69:f1:a3:ef:7f:4b:bc:81:67: 1e:5e:6e:9b:31:b9:9c:10:a3:4d:f9:67:90:34:2a: ce:1e:d4:61:b5:e4:45:8e:ce:bc:ec:73:54:1c:06: d5:3c:25:77:80:67:26:a3:6a:28:f7:13:07:a5:2d: 8d:49:db:80:e6:67:f6:78:56:21:27:d4:eb:64:3f: e3:d7:25:ae:92:1f:56:49:85:ac:e2:05:4d:05:29: c7:6f:e7:21:23:6e:ce:eb:23:f0:24:69:60:38:a1: a5:c9:3c:d8:48:3f:b9:20:18:f7:2c:3e:d2:be:f3: 20:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:5A:DF:60:57:28:4E:2D:52:F1:6F:93:2B:9E:37:BC:8E:66:D0:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b09b8ccb-eb67-3a30-9d51-24dfc031880b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 104.220.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:9f:cd:7e:98:41:93:e1:03:e6:39:47:36:1b:b1:0b:0d:96: 14:6b:3b:c0:6b:08:1b:ea:7a:cd:94:bd:f6:ef:8e:5a:5c:bd: 0d:85:5b:ed:96:e1:81:3b:79:a0:90:5a:7b:04:8b:b8:8c:b2: 11:56:48:5e:4e:52:f9:49:b8:4d:21:a5:19:17:20:e4:98:be: 1e:4d:f8:0c:03:36:81:68:8f:32:24:bb:fc:ee:d0:72:78:c7: fe:ad:52:87:dd:65:48:a6:f8:13:7e:33:70:6e:ac:11:0d:6f: c6:74:0b:a6:ee:b3:8f:df:30:1c:88:fa:5f:33:ca:ec:9f:88: c9:f1:f9:6a:a1:0c:5b:d0:42:31:67:7d:86:4b:50:c5:fc:b0: c1:0a:75:25:26:fc:de:93:1d:69:b4:5b:c6:c2:bc:5e:f6:08: 3e:ae:c4:5d:2a:bf:27:eb:a0:0b:ec:87:75:fc:c6:eb:9a:1a: 02:01:94:b4:e3:aa:9d:86:d5:9f:c4:b5:8f:b1:3c:bc:ef:02: 64:99:b0:76:fe:ea:88:51:42:6e:85:1a:8b:71:3c:94:95:dc: 0a:5e:2a:36:a1:d7:de:dc:dc:44:79:31:47:d2:3b:d7:c4:0a: 34:0b:98:61:e5:e1:e4:45:ca:3b:23:f4:9e:a2:13:15:be:d7: fd:1a:45:93 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEhsKyTy96ZU3zkjm8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk Mzg0MTQ5ZTktMjNhMS00OGIwLThkMDMtMmFjMmM3ZjgwNmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5zkR37giLZTPopaqXqsQxlb53DLqv5VmP8w jWAV4vamAPedIkmtHYLE3vBjneS5y1UmBML6aTCoB8LRB7j+LcgFZMgDdAqVvNYp VXeXSu2eFa1SV6PZcSQbH6YRHtlWC0sqcU57az3Mt2e6cKmmTPYSSARQZDRWasqU FhscpzmkVEFq+M3Q2qjkc2hp8aPvf0u8gWceXm6bMbmcEKNN+WeQNCrOHtRhteRF js687HNUHAbVPCV3gGcmo2oo9xMHpS2NSduA5mf2eFYhJ9TrZD/j1yWukh9WSYWs 4gVNBSnHb+chI27O6yPwJGlgOKGlyTzYSD+5IBj3LD7SvvMgLwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPda32BXKE4tUvFvkyueN7yOZtA6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvYjA5YjhjY2ItZWI2Ny0z YTMwLTlkNTEtMjRkZmMwMzE4ODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAaNwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAEp/NfphBk+ED5jlHNhuxCw2WFGs7wGsIG+p6zZS99u+OWly9DYVb7Zbh gTt5oJBaewSLuIyyEVZIXk5S+Um4TSGlGRcg5Ji+Hk34DAM2gWiPMiS7/O7QcnjH /q1Sh91lSKb4E34zcG6sEQ1vxnQLpu6zj98wHIj6XzPK7J+IyfH5aqEMW9BCMWd9 hktQxfywwQp1JSb83pMdabRbxsK8XvYIPq7EXSq/J+ugC+yHdfzG65oaAgGUtOOq nYbVn8S1j7E8vO8CZJmwdv7qiFFCboUai3E8lJXcCl4qNqHX3tzcRHkxR9I718QK NAuYYeXh5EXKOyP0nqITFb7X/RpFkw== -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:28 2025 by rpki-client