$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/453ca86f-265f-305d-a6a1-203e03a97f05.roa File: 453ca86f-265f-305d-a6a1-203e03a97f05.roa (raw, json) Hash identifier: WRrYryf1Jfi5IhQJLk69k/8AHxzlw08r3CPOwHwR+j8= Subject key identifier: 5B:8D:D1:C7:CF:4B:3C:7D:B7:6D:31:25:5B:AD:04:20:29:B6:7F:B2 Certificate issuer: /CN=35be4068-f7e5-404b-9693-dcff4b2e8f95 Certificate serial: 010D0C9F4328584851A57AAD1CA1B40D80DB18E0 Authority key identifier: C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/453ca86f-265f-305d-a6a1-203e03a97f05.roa Signing time: Wed 25 Dec 2024 02:00:38 +0000 ROA not before: Wed 25 Dec 2024 02:00:38 +0000 ROA not after: Tue 25 Mar 2025 01:00:38 +0000 asID: 64236 IP address blocks: 104.254.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:51:a5:7a:ad:1c:a1:b4:0d:80:db:18:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35be4068-f7e5-404b-9693-dcff4b2e8f95 Validity Not Before: Dec 25 02:00:38 2024 GMT Not After : Mar 25 01:00:38 2025 GMT Subject: CN=339c1fe0-8b05-4c37-b316-99631ff9b0ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:af:f9:86:64:6e:a3:ad:09:a4:7c:cc:17:ce: 8f:d7:ea:7e:69:43:e8:c7:3f:2c:24:b8:76:eb:10: bd:99:84:a9:23:6a:14:0d:20:e3:3a:a1:fa:04:4b: b9:35:6c:10:ab:18:48:6e:41:c3:5f:99:85:87:a1: 81:ac:c3:e5:68:f7:0d:7d:d4:2f:0a:cd:89:ce:41: 80:48:10:36:0e:3f:92:3b:2a:6b:1c:51:eb:94:18: 64:34:1e:3e:4d:8b:9f:cd:c9:24:e3:cc:5d:02:94: 68:81:3b:f3:70:ea:a8:83:0d:66:ad:60:df:e1:e1: f8:8c:1d:ec:ba:5f:01:e0:3e:19:39:34:62:12:b5: 08:3c:67:7e:d2:02:3e:8c:2d:a6:de:db:ae:27:b7: 97:e8:ee:c9:6d:23:70:b5:57:8e:18:81:9b:1f:7e: d6:ce:d3:84:a6:d7:ca:95:88:49:79:ac:27:22:5b: 22:a8:5a:30:5d:80:9e:cc:e7:eb:48:20:ea:31:3f: e9:a1:45:21:3b:21:de:b2:20:53:ad:34:17:e3:bb: 38:48:9d:cc:eb:aa:46:0e:a0:8f:15:af:5c:55:78: b7:00:09:31:f9:3d:48:63:00:d4:ab:d1:36:22:91: db:68:80:b8:11:e2:88:6f:94:dd:a9:11:74:65:fc: 93:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:8D:D1:C7:CF:4B:3C:7D:B7:6D:31:25:5B:AD:04:20:29:B6:7F:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/453ca86f-265f-305d-a6a1-203e03a97f05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl X509v3 Authority Key Identifier: keyid:C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer sbgp-ipAddrBlock: critical IPv4: 104.254.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:0c:71:e1:30:ee:a0:65:2c:ee:8e:1c:c8:22:02:8a:3d:2c: 38:54:a4:6d:38:49:9d:fa:b8:6b:da:d2:40:75:aa:8c:4c:d1: 43:81:f2:14:78:7c:e1:d1:59:2d:7a:35:f5:6b:21:d9:4c:ed: 40:e5:a3:26:32:13:2a:bc:b4:15:62:c0:f6:db:31:9d:f0:6e: d0:e8:17:70:00:f8:fb:eb:62:99:da:5a:8d:18:22:4a:dd:0e: 0b:4e:bb:f6:81:c4:08:38:bd:a8:4d:81:83:2b:ff:b5:72:51: 46:19:c2:af:49:a8:3d:eb:86:1b:c7:9e:96:a1:08:32:a2:88: 9c:ad:c2:e2:07:ac:d4:0f:56:bf:bb:54:3b:e4:64:2e:30:8f: e4:56:d6:38:a9:3e:93:86:28:93:b5:53:b3:93:4e:86:a6:7c: ef:7c:df:48:f7:2f:a1:19:40:7e:a6:54:d8:a5:eb:e5:e1:20: 03:73:16:e1:4c:ac:ce:a4:b1:6c:5c:31:f4:6e:7c:c4:67:2b: 11:54:dd:11:ac:c2:64:92:62:24:2f:2b:82:cd:f4:fa:86:f1: 7f:bf:c0:ee:1f:19:a0:87:99:6a:27:4a:53:e8:cc:7d:90:f2: 66:26:18:11:d9:20:3a:90:a0:ab:72:41:f2:3b:29:90:b1:52: ac:b2:4a:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhRpXqtHKG0DYDbGOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZTQwNjgtZjdlNS00MDRiLTk2OTMtZGNmZjRiMmU4 Zjk1MB4XDTI0MTIyNTAyMDAzOFoXDTI1MDMyNTAxMDAzOFowLzEtMCsGA1UEAxMk MzM5YzFmZTAtOGIwNS00YzM3LWIzMTYtOTk2MzFmZjliMGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6/5hmRuo60JpHzMF86P1+p+aUPoxz8sJLh2 6xC9mYSpI2oUDSDjOqH6BEu5NWwQqxhIbkHDX5mFh6GBrMPlaPcNfdQvCs2JzkGA SBA2Dj+SOyprHFHrlBhkNB4+TYufzckk48xdApRogTvzcOqogw1mrWDf4eH4jB3s ul8B4D4ZOTRiErUIPGd+0gI+jC2m3tuuJ7eX6O7JbSNwtVeOGIGbH37WztOEptfK lYhJeawnIlsiqFowXYCezOfrSCDqMT/poUUhOyHesiBTrTQX47s4SJ3M66pGDqCP Fa9cVXi3AAkx+T1IYwDUq9E2IpHbaIC4EeKIb5TdqRF0ZfyTeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuN0cfPSzx9t20xJVutBCAptn+yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zNWJl NDA2OC1mN2U1LTQwNGItOTY5My1kY2ZmNGIyZThmOTUvNDUzY2E4NmYtMjY1Zi0z MDVkLWE2YTEtMjAzZTAzYTk3ZjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzViZTQwNjgtZjdlNS00MDRiLTk2 OTMtZGNmZjRiMmU4Zjk1LzM1YmU0MDY4LWY3ZTUtNDA0Yi05NjkzLWRjZmY0YjJl OGY5NS5jcmwwHwYDVR0jBBgwFoAUx5tNJUqL+1JPO26W0tgCYtGpB88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zNWJlNDA2OC1mN2U1LTQwNGItOTY5My1kY2Zm NGIyZThmOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaP4YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgMceEw7qBlLO6OHMgiAoo9LDhUpG04SZ36uGva0kB1qoxM0UOB8hR4 fOHRWS16NfVrIdlM7UDloyYyEyq8tBViwPbbMZ3wbtDoF3AA+PvrYpnaWo0YIkrd DgtOu/aBxAg4vahNgYMr/7VyUUYZwq9JqD3rhhvHnpahCDKiiJytwuIHrNQPVr+7 VDvkZC4wj+RW1jipPpOGKJO1U7OTToamfO9830j3L6EZQH6mVNil6+XhIANzFuFM rM6ksWxcMfRufMRnKxFU3RGswmSSYiQvK4LN9PqG8X+/wO4fGaCHmWonSlPozH2Q 8mYmGBHZIDqQoKtyQfI7KZCxUqyySmQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:52:15 2025 by rpki-client