$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/d459f45e-a006-338c-9b08-b1327ea9704d.roa File: d459f45e-a006-338c-9b08-b1327ea9704d.roa (raw, json) Hash identifier: ZU88NccQyYAvmo2sVLzrr+Q97b5r8PbDcyS/SkarqlM= Subject key identifier: EE:5B:32:65:78:0B:CB:7D:A9:F0:80:35:1D:6A:3D:86:D6:3A:AE:F8 Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F43285848A830AB46AD2A64E419F5FF00 Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/d459f45e-a006-338c-9b08-b1327ea9704d.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 22773 IP address blocks: 104.200.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:ab:46:ad:2a:64:e4:19:f5:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=f25b0950-0dc3-422e-bdca-2def54968873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:53:8c:81:5e:f3:bb:ef:70:4c:f7:93:bc:af: cc:c4:8d:fb:89:4e:21:b0:44:6f:be:30:a1:b3:23: 50:22:5a:3e:bc:fb:bd:e0:2b:fa:99:81:01:33:42: bd:7d:21:d8:ba:cf:63:14:7b:35:48:6f:c1:c7:55: 0f:48:4e:d7:d3:f4:50:43:3d:27:73:5d:2f:22:1d: 8f:00:fd:8d:01:5b:2f:99:70:b7:bc:d9:08:1a:e2: d6:ac:ba:0c:06:38:b0:dc:c8:1f:f9:6b:1f:f2:cf: 85:81:ee:2f:8d:cb:7f:9a:bb:29:f0:3b:56:23:30: 6d:77:48:74:47:47:90:2e:52:c1:04:01:f6:3e:06: c7:e4:17:dd:b5:de:60:35:f2:e0:39:ba:64:e1:80: 06:13:d6:a8:21:cc:dc:f1:1c:a0:3a:1d:55:11:db: 52:4f:fa:2b:85:7a:84:67:b8:7a:70:7a:e9:30:b8: a7:53:c5:27:8c:1c:d7:db:8e:16:6c:1b:42:8c:27: f7:66:96:35:e8:25:40:e9:7d:d2:bd:8e:bc:85:4d: 06:8c:e4:fa:71:40:43:75:fa:2b:9b:d1:d0:42:e4: 2c:58:4a:d7:fd:1e:b4:95:00:70:f3:2b:00:9d:e9: 1d:2b:c0:98:6b:51:a5:03:de:99:c4:2b:77:32:9a: 24:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:5B:32:65:78:0B:CB:7D:A9:F0:80:35:1D:6A:3D:86:D6:3A:AE:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/d459f45e-a006-338c-9b08-b1327ea9704d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 104.200.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:02:07:b9:4c:40:45:b3:e5:c6:7f:92:eb:ed:34:0e:10:92: ba:d2:3f:12:32:fb:e7:7c:75:09:eb:a0:53:99:f8:24:48:05: b5:fb:bc:4d:d7:c1:18:ef:6b:dd:62:78:d3:b5:33:fa:d5:08: a0:47:d4:0f:05:27:4b:8b:f4:10:a9:aa:e0:e7:73:95:ef:41: 2e:4a:f8:50:86:66:4a:45:6c:66:a0:6a:16:dc:fb:a1:8c:a5: e1:71:8d:7f:71:98:df:a1:b6:30:06:ba:91:2e:67:0b:78:bd: ef:9d:78:96:ed:a3:a8:73:60:19:72:3d:fb:b2:4f:5f:47:3e: 1e:b9:12:c8:8c:8e:0f:a2:1d:68:50:4e:a8:a9:fa:88:47:04: aa:dc:77:cc:1e:7d:84:fb:88:1c:3a:7a:f1:9c:c5:d8:7d:35: fe:55:45:11:4d:06:5a:af:35:eb:7c:20:41:75:cc:fe:b8:91: 88:05:34:a3:57:a5:64:bf:50:e2:88:d7:6c:38:3c:ee:a9:d8: 58:57:4b:04:02:b1:10:36:02:10:10:09:18:7d:88:a5:d1:70: 85:48:df:01:aa:b2:b1:81:95:e9:4b:d2:8f:57:21:72:fe:b4: 6f:d7:47:f9:d0:33:b9:eb:cf:af:2c:3f:e9:e0:c9:db:5d:78: 1a:e6:9c:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMKtGrSpk5Bn1/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk ZjI1YjA5NTAtMGRjMy00MjJlLWJkY2EtMmRlZjU0OTY4ODczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlOMgV7zu+9wTPeTvK/MxI37iU4hsERvvjCh syNQIlo+vPu94Cv6mYEBM0K9fSHYus9jFHs1SG/Bx1UPSE7X0/RQQz0nc10vIh2P AP2NAVsvmXC3vNkIGuLWrLoMBjiw3Mgf+Wsf8s+Fge4vjct/mrsp8DtWIzBtd0h0 R0eQLlLBBAH2PgbH5Bfdtd5gNfLgObpk4YAGE9aoIczc8RygOh1VEdtST/orhXqE Z7h6cHrpMLinU8UnjBzX244WbBtCjCf3ZpY16CVA6X3SvY68hU0GjOT6cUBDdfor m9HQQuQsWErX/R60lQBw8ysAnekdK8CYa1GlA96ZxCt3MpokJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5bMmV4C8t9qfCANR1qPYbWOq74MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvZDQ1OWY0NWUtYTAwNi0z MzhjLTliMDgtYjEzMjdlYTk3MDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaMjYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADICB7lMQEWz5cZ/kuvtNA4QkrrSPxIy++d8dQnroFOZ+CRIBbX7vE3X wRjva91ieNO1M/rVCKBH1A8FJ0uL9BCpquDnc5XvQS5K+FCGZkpFbGagahbc+6GM peFxjX9xmN+htjAGupEuZwt4ve+deJbto6hzYBlyPfuyT19HPh65EsiMjg+iHWhQ Tqip+ohHBKrcd8wefYT7iBw6evGcxdh9Nf5VRRFNBlqvNet8IEF1zP64kYgFNKNX pWS/UOKI12w4PO6p2FhXSwQCsRA2AhAQCRh9iKXRcIVI3wGqsrGBlelL0o9XIXL+ tG/XR/nQM7nrz68sP+ngydtdeBrmnKE= -----END CERTIFICATE-----Generated at Fri Mar 14 13:13:34 2025 by rpki-client