$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/be18e591-d26b-3f5d-b3a9-bd62b0697f15.roa File: be18e591-d26b-3f5d-b3a9-bd62b0697f15.roa (raw, json) Hash identifier: ozyG8lOTm+6RriRAjJS4JUbX8HMtYQwiMeUYtOcaC38= Subject key identifier: 8A:38:E2:D3:61:2C:63:3A:AB:8E:DE:B5:C6:6D:52:72:2B:0A:B0:60 Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F43285848BFEBA46C406ADD3A92143300 Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/be18e591-d26b-3f5d-b3a9-bd62b0697f15.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 40342 IP address blocks: 104.200.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:a4:6c:40:6a:dd:3a:92:14:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=d4b8a309-6a83-41b3-8ed7-8e60d7b6706e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c3:97:7b:8d:ae:d1:3a:a3:db:70:78:79:b9: cd:b9:13:82:83:6f:f7:9e:3f:fe:85:09:6d:44:f7: 52:8e:45:90:9b:89:da:df:27:69:87:f8:72:7c:a6: 56:a0:b8:db:40:6a:a3:d8:36:5f:c8:2b:a0:d2:4d: 0b:d3:0c:19:ba:be:ad:e9:cb:24:dd:38:7c:5f:5e: 4e:ca:8e:af:64:5e:6b:4f:79:79:0e:0d:c2:a4:88: a8:06:b2:76:88:6b:31:35:8d:26:52:59:c1:72:40: 53:98:59:c4:57:81:3c:a0:5e:78:bb:c2:a3:81:12: c2:20:ce:12:5c:8e:90:7f:3b:f8:8e:9a:68:1a:9d: a3:9b:08:f6:32:d6:73:65:fc:d7:61:39:15:a0:54: 67:d5:7e:9b:02:cf:94:57:f7:30:fe:2f:3b:53:90: 8b:6c:b1:a2:fa:a7:7f:2c:da:b3:2f:30:89:1d:84: 84:54:59:1e:a2:5d:20:3a:e0:34:74:96:e1:e6:e6: 1e:2a:07:a7:ba:3b:d0:54:df:bc:4a:91:85:ce:2a: b0:eb:7e:e2:a4:ee:ab:c7:09:f6:7f:29:37:bb:ce: 19:1c:1d:3f:09:6c:92:dc:a1:73:a1:cf:0c:a9:8a: 41:56:bb:97:c0:de:4c:3e:e1:40:31:1c:32:74:1e: 4e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:38:E2:D3:61:2C:63:3A:AB:8E:DE:B5:C6:6D:52:72:2B:0A:B0:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/be18e591-d26b-3f5d-b3a9-bd62b0697f15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 104.200.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:52:6c:ee:24:29:0a:79:95:32:4b:d3:5d:1c:01:b9:74:42: 72:26:a2:e8:b6:cd:89:43:38:54:8c:78:cc:7d:48:3d:d7:d1: e3:94:ed:0b:3c:a7:63:87:3f:95:bd:c3:e8:52:bf:cf:98:d6: 8d:97:16:84:79:89:8e:ad:02:f9:16:b2:a2:89:6c:22:7a:a6: a9:0c:40:c2:ab:96:ab:2b:40:8f:f9:fd:2e:7c:32:74:3a:c4: 97:21:2a:07:24:93:85:b7:28:88:13:99:84:67:9f:e1:31:ab: 70:fd:f0:33:86:be:db:fa:fe:03:88:2e:81:93:e8:4e:52:26: e6:57:1d:8a:95:d4:a0:ba:af:28:8b:a9:1b:fc:43:8f:f0:06: dd:22:bf:55:08:5e:35:8e:63:bb:b1:ea:9e:48:41:d3:b2:89: 02:80:fa:79:3b:ff:68:0e:f3:86:47:63:7a:b0:a0:1d:c8:e6: 3b:87:f1:7a:1e:82:c2:d6:a1:a3:39:e0:f7:d5:ea:67:ec:fa: 60:fd:35:37:a4:2f:32:6b:fd:29:32:6a:d3:df:d5:af:95:8b: eb:19:04:86:c3:3c:54:b3:b5:f3:f2:21:90:b4:59:28:09:9b: d5:e0:aa:63:da:5e:6e:7d:57:86:82:12:97:d4:63:9a:53:80: d8:91:f7:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/66RsQGrdOpIUMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk ZDRiOGEzMDktNmE4My00MWIzLThlZDctOGU2MGQ3YjY3MDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysOXe42u0Tqj23B4ebnNuROCg2/3nj/+hQlt RPdSjkWQm4na3ydph/hyfKZWoLjbQGqj2DZfyCug0k0L0wwZur6t6csk3Th8X15O yo6vZF5rT3l5Dg3CpIioBrJ2iGsxNY0mUlnBckBTmFnEV4E8oF54u8KjgRLCIM4S XI6Qfzv4jppoGp2jmwj2MtZzZfzXYTkVoFRn1X6bAs+UV/cw/i87U5CLbLGi+qd/ LNqzLzCJHYSEVFkeol0gOuA0dJbh5uYeKgenujvQVN+8SpGFziqw637ipO6rxwn2 fyk3u84ZHB0/CWyS3KFzoc8MqYpBVruXwN5MPuFAMRwydB5OZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIo44tNhLGM6q47etcZtUnIrCrBgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvYmUxOGU1OTEtZDI2Yi0z ZjVkLWIzYTktYmQ2MmIwNjk3ZjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaMjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhSbO4kKQp5lTJL010cAbl0QnImoui2zYlDOFSMeMx9SD3X0eOU7Qs8 p2OHP5W9w+hSv8+Y1o2XFoR5iY6tAvkWsqKJbCJ6pqkMQMKrlqsrQI/5/S58MnQ6 xJchKgckk4W3KIgTmYRnn+Exq3D98DOGvtv6/gOILoGT6E5SJuZXHYqV1KC6ryiL qRv8Q4/wBt0iv1UIXjWOY7ux6p5IQdOyiQKA+nk7/2gO84ZHY3qwoB3I5juH8Xoe gsLWoaM54PfV6mfs+mD9NTekLzJr/SkyatPf1a+Vi+sZBIbDPFSztfPyIZC0WSgJ m9XgqmPaXm59V4aCEpfUY5pTgNiR92M= -----END CERTIFICATE-----Generated at Sun Feb 16 22:04:50 2025 by rpki-client