$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/fc03f7df-9064-3b4a-8629-009d7f845cbb.roa File: fc03f7df-9064-3b4a-8629-009d7f845cbb.roa (raw, json) Hash identifier: f5QdeUqJPKdr5A5T9EWMAubqdCwEDT4517TL27O0ceQ= Subject key identifier: 20:37:13:E2:22:F4:7A:29:50:BE:7F:5C:A7:96:B2:0C:89:97:43:33 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858486C2B32F83D6209D724C3CE80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/fc03f7df-9064-3b4a-8629-009d7f845cbb.roa Signing time: Fri 03 Jan 2025 14:00:51 +0000 ROA not before: Fri 03 Jan 2025 14:00:51 +0000 ROA not after: Thu 03 Apr 2025 13:00:51 +0000 asID: 54858 IP address blocks: 104.244.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6c:2b:32:f8:3d:62:09:d7:24:c3:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jan 3 14:00:51 2025 GMT Not After : Apr 3 13:00:51 2025 GMT Subject: CN=c23493d2-677b-48b4-a28d-efa3b971e667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a7:46:5d:28:64:82:00:01:52:08:6d:c8:1e: b4:7a:53:15:3f:27:da:ce:ad:aa:2f:e1:55:ea:2e: 4e:de:cb:2d:06:fe:d1:24:a4:9c:14:66:ad:d6:5e: a0:7c:95:ac:f9:a2:0a:08:36:94:39:19:1c:23:ce: d3:c2:a9:18:47:44:4f:f3:38:3c:0e:78:85:a1:ec: 42:ef:ee:50:3e:62:3b:e4:ff:32:17:9b:24:62:01: 10:aa:17:92:7f:f4:a8:9b:06:bc:19:00:f4:64:b4: cc:9b:96:ba:36:9d:37:20:a2:73:ee:47:bf:b3:49: c2:49:bd:d1:f9:c8:89:da:99:89:97:d1:05:b5:2c: 01:47:19:96:39:ab:4e:de:b2:64:eb:37:d8:66:2a: f8:51:dc:ac:ca:dd:a5:fc:f0:77:48:67:d7:28:47: 1b:d1:23:2f:81:f5:72:64:13:82:25:af:60:50:09: e8:d1:3f:8e:02:ad:3a:f2:10:32:8b:44:22:86:73: c0:d1:3f:78:72:ad:d9:0f:10:39:d9:e8:d0:2f:3b: 8a:da:c8:8b:c6:6a:2c:35:d6:5f:01:0d:ca:55:93: f9:59:2f:ad:28:4e:cb:b0:2b:a3:5e:0c:e4:34:58: 95:92:09:ab:fc:90:98:6a:b2:71:53:8e:6c:25:b5: 35:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:37:13:E2:22:F4:7A:29:50:BE:7F:5C:A7:96:B2:0C:89:97:43:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/fc03f7df-9064-3b4a-8629-009d7f845cbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 104.244.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:c2:cc:77:ff:8f:09:ab:7f:8a:56:31:a8:ca:49:89:68:79: 8b:2c:ac:a2:ed:40:8a:f5:37:e4:dc:d5:2e:86:a2:d5:e3:67: 2e:da:9a:db:ac:2e:af:8b:da:ae:54:cd:8b:f3:55:82:67:0c: 18:40:43:d4:41:a3:3e:a1:db:2c:6c:4f:74:63:10:fd:06:f0: e4:45:11:05:4f:5c:97:fd:d8:1d:99:be:8c:de:be:61:5e:98: aa:0e:97:de:0a:f5:26:47:8d:f7:70:b9:83:7f:73:6e:7c:e0: 53:c9:fc:ac:c5:d0:b5:e6:bc:9f:97:42:e9:57:66:76:b3:bf: 05:a6:b7:1d:b6:94:da:bb:c4:3e:d7:4a:71:3e:54:c9:76:74: b2:d7:af:88:99:85:2b:fd:f4:88:4a:b6:3d:0c:4b:f3:55:df: ce:90:38:bd:7d:fe:d8:7c:c2:91:16:d8:9b:7c:2e:10:16:79: 3d:cf:48:30:6e:36:51:11:8e:72:07:85:6b:1e:ce:a7:87:c9: 79:78:35:fc:16:ab:b3:0f:c7:bf:95:0f:4e:2d:d2:c7:a5:8c: 8b:26:a9:7b:55:eb:11:75:9e:cf:ad:94:53:60:4c:55:fc:9f: 6b:b0:b9:08:24:07:93:d7:50:41:20:7e:1e:e2:88:c4:d5:f7: 36:1d:77:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhsKzL4PWIJ1yTDzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk YzIzNDkzZDItNjc3Yi00OGI0LWEyOGQtZWZhM2I5NzFlNjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKdGXShkggABUghtyB60elMVPyfazq2qL+FV 6i5O3sstBv7RJKScFGat1l6gfJWs+aIKCDaUORkcI87TwqkYR0RP8zg8DniFoexC 7+5QPmI75P8yF5skYgEQqheSf/Somwa8GQD0ZLTMm5a6Np03IKJz7ke/s0nCSb3R +ciJ2pmJl9EFtSwBRxmWOatO3rJk6zfYZir4Udysyt2l/PB3SGfXKEcb0SMvgfVy ZBOCJa9gUAno0T+OAq068hAyi0QihnPA0T94cq3ZDxA52ejQLzuK2siLxmosNdZf AQ3KVZP5WS+tKE7LsCujXgzkNFiVkgmr/JCYarJxU45sJbU1eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCA3E+Ii9HopUL5/XKeWsgyJl0MzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZmMwM2Y3ZGYtOTA2NC0z YjRhLTg2MjktMDA5ZDdmODQ1Y2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPTcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzCzHf/jwmrf4pWMajKSYloeYssrKLtQIr1N+Tc1S6GotXjZy7amtus Lq+L2q5UzYvzVYJnDBhAQ9RBoz6h2yxsT3RjEP0G8ORFEQVPXJf92B2ZvozevmFe mKoOl94K9SZHjfdwuYN/c2584FPJ/KzF0LXmvJ+XQulXZnazvwWmtx22lNq7xD7X SnE+VMl2dLLXr4iZhSv99IhKtj0MS/NV386QOL19/th8wpEW2Jt8LhAWeT3PSDBu NlERjnIHhWsezqeHyXl4NfwWq7MPx7+VD04t0seljIsmqXtV6xF1ns+tlFNgTFX8 n2uwuQgkB5PXUEEgfh7iiMTV9zYdd+U= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:46 2025 by rpki-client