$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/cfce2ba4-7cd8-3722-96e0-415b3fc5526a.roa File: cfce2ba4-7cd8-3722-96e0-415b3fc5526a.roa (raw, json) Hash identifier: E9VcKuRL++JvQ+Qt0KQX2gv4Ubb2SJlpm97i/jKeoHI= Subject key identifier: C8:09:79:5E:F5:E9:7C:E8:66:03:46:FA:D9:52:29:09:44:7F:0D:1A Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F43285848A830AB6E4149613DCEFD0680 Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/cfce2ba4-7cd8-3722-96e0-415b3fc5526a.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 14618 IP address blocks: 104.200.216.0/24 maxlen: 24 104.200.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:ab:6e:41:49:61:3d:ce:fd:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=bd7ef761-ffb7-46a8-a468-37d102288c98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:62:c1:73:78:d7:af:39:06:82:1c:21:52:d7: 63:92:95:93:43:3d:25:2f:41:19:8b:ec:85:5b:e4: 96:b4:a9:c6:d4:9d:7b:7a:d8:4c:10:2c:45:2b:21: be:b5:9b:46:98:e9:57:cb:d7:11:b6:28:47:0e:f5: 0c:0a:82:5a:80:57:b5:77:17:6a:e4:5b:84:e5:c9: 78:4d:dc:38:9b:d5:eb:2d:90:69:cb:16:01:68:f3: a7:eb:fc:66:da:ed:14:33:bc:8b:c2:70:d2:a0:78: 6d:83:bd:e8:29:c8:9f:03:0c:c7:49:7d:a1:9d:f3: 76:19:8b:24:6a:3b:f0:eb:33:b6:73:65:80:94:7a: db:54:e4:cd:6c:be:88:c8:f4:24:4c:b5:62:70:bc: 73:b2:47:04:88:56:c5:15:9e:43:20:cb:de:89:ae: bf:b7:b8:ff:7a:17:e6:25:b1:6d:b9:41:f1:a9:69: 9b:07:fb:69:fd:c3:89:9d:ac:03:da:e5:4f:78:2f: 64:44:61:a4:99:13:f8:12:f2:31:8f:6b:00:f5:b2: 5e:ec:21:53:e6:18:f8:27:91:fa:ad:fe:fc:09:03: 8f:c9:01:94:91:df:07:11:9b:e1:7d:67:e9:fb:92: bf:ed:09:1c:5f:21:8a:e4:4f:0a:8d:74:ef:65:fa: a3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:09:79:5E:F5:E9:7C:E8:66:03:46:FA:D9:52:29:09:44:7F:0D:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/cfce2ba4-7cd8-3722-96e0-415b3fc5526a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 104.200.216.0/24 104.200.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:cd:52:68:fd:45:f2:4e:0e:25:40:84:8b:1b:9e:5f:e3:06: 05:b3:c9:4a:3a:d0:22:6f:47:d3:67:31:ea:86:fc:df:8e:99: 10:22:3a:69:15:3e:32:27:cf:42:08:27:ca:89:9e:35:c9:94: d7:f5:e0:2f:1f:b2:45:ff:04:8d:83:74:9c:ab:ea:05:4b:cb: 57:66:7d:e8:4e:60:5b:94:57:5f:7f:e1:38:93:40:b7:62:8c: 4a:84:43:a8:6c:4f:7a:f3:77:2e:cf:4e:b3:a6:21:a5:0b:52: e2:e4:bb:92:ee:9e:66:d0:0a:81:2f:ac:50:9e:dd:49:d5:94: 18:d6:6c:62:91:a1:fe:67:30:a7:29:b1:d7:52:8e:c0:fc:49: 21:de:b6:7a:ca:3c:c9:c4:b2:24:7d:7e:57:ed:4a:de:26:79: b1:40:c5:77:98:65:ef:a7:25:69:e1:6e:93:51:e7:85:19:bd: 37:a3:60:64:2b:c7:01:21:0f:6f:b2:1d:38:3a:19:2f:cb:47: 53:bf:d2:e6:11:f8:2a:89:29:e2:12:12:2f:d9:29:74:22:56: 5e:36:d1:bd:44:7d:94:3a:60:14:ad:ff:1b:5f:f4:4c:21:39: c7:5f:14:c3:75:46:1b:0b:18:db:a0:af:48:b9:5b:69:af:f9: bf:8a:bb:bf -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEioMKtuQUlhPc79BoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk YmQ3ZWY3NjEtZmZiNy00NmE4LWE0NjgtMzdkMTAyMjg4Yzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWLBc3jXrzkGghwhUtdjkpWTQz0lL0EZi+yF W+SWtKnG1J17ethMECxFKyG+tZtGmOlXy9cRtihHDvUMCoJagFe1dxdq5FuE5cl4 Tdw4m9XrLZBpyxYBaPOn6/xm2u0UM7yLwnDSoHhtg73oKcifAwzHSX2hnfN2GYsk ajvw6zO2c2WAlHrbVOTNbL6IyPQkTLVicLxzskcEiFbFFZ5DIMveia6/t7j/ehfm JbFtuUHxqWmbB/tp/cOJnawD2uVPeC9kRGGkmRP4EvIxj2sA9bJe7CFT5hj4J5H6 rf78CQOPyQGUkd8HEZvhfWfp+5K/7QkcXyGK5E8KjXTvZfqjCwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMgJeV716XzoZgNG+tlSKQlEfw0aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvY2ZjZTJiYTQtN2NkOC0z NzIyLTk2ZTAtNDE1YjNmYzU1MjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaMjYAwQA aMjeMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAE/NUmj9RfJODiVAhIsbnl/jBgWzyUo60CJvR9NnMeqG/N+O mRAiOmkVPjInz0IIJ8qJnjXJlNf14C8fskX/BI2DdJyr6gVLy1dmfehOYFuUV19/ 4TiTQLdijEqEQ6hsT3rzdy7PTrOmIaULUuLku5LunmbQCoEvrFCe3UnVlBjWbGKR of5nMKcpsddSjsD8SSHetnrKPMnEsiR9flftSt4mebFAxXeYZe+nJWnhbpNR54UZ vTejYGQrxwEhD2+yHTg6GS/LR1O/0uYR+CqJKeISEi/ZKXQiVl420b1EfZQ6YBSt /xtf9EwhOcdfFMN1RhsLGNugr0i5W2mv+b+Ku78= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:09 2025 by rpki-client