$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/643b1254-d7f1-376e-9ab7-2d0174638962.roa File: 643b1254-d7f1-376e-9ab7-2d0174638962.roa (raw, json) Hash identifier: Rxr1GsNQRNe4BEFRQbITiTYn5A+EwqYS6O8YPBO99+k= Subject key identifier: F5:BC:0A:91:6D:C2:E8:F9:7D:9A:A4:41:71:52:20:4C:41:8A:A3:4F Certificate issuer: /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Certificate serial: 010D0C9F43285848A29B4CA850074AE32BEB4180 Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/643b1254-d7f1-376e-9ab7-2d0174638962.roa Signing time: Thu 23 Jan 2025 02:00:40 +0000 ROA not before: Thu 23 Jan 2025 02:00:40 +0000 ROA not after: Wed 23 Apr 2025 01:00:40 +0000 asID: 397423 IP address blocks: 104.245.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:9b:4c:a8:50:07:4a:e3:2b:eb:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Validity Not Before: Jan 23 02:00:40 2025 GMT Not After : Apr 23 01:00:40 2025 GMT Subject: CN=26db0cb0-9b1b-47e0-acc3-b120ec369c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:16:12:66:ec:fb:8e:f9:15:b4:d6:50:c7:89: 24:c8:42:1e:5f:57:83:f3:18:ae:bb:ec:8a:c8:ee: 60:4e:80:33:67:72:02:79:bd:80:d1:11:dd:5c:78: 07:e4:83:3f:96:b3:b8:b5:2a:95:a7:c8:f4:0f:d9: dd:99:dc:d2:56:a9:47:3e:39:3c:0f:87:80:3f:25: 8a:8d:9b:aa:51:a9:47:55:e3:5a:40:0c:1b:af:17: 59:20:19:5c:61:3f:2c:de:53:7b:b0:e5:ea:d1:78: 86:54:46:5c:a7:f2:fe:f2:83:75:26:d4:cf:f2:75: 0e:5c:61:b2:7a:8a:54:13:11:bf:90:fe:9e:83:77: ad:78:b7:1b:b8:33:7e:55:89:be:de:b5:86:89:da: e4:45:8f:1d:ab:4b:b7:14:99:2a:3f:7b:e1:8d:76: 45:28:7d:1a:0a:7a:37:23:94:42:5c:3e:ea:b0:51: 26:aa:91:61:74:6a:a5:a9:08:f3:2f:b6:a6:26:f7: 98:a9:bc:a3:0f:1a:d1:b3:33:1c:bb:a7:ee:d3:5a: e2:99:de:6b:74:ec:90:8c:fd:c3:02:d4:f7:25:fa: e5:f0:52:f4:15:4a:b0:d9:18:1d:9f:1f:28:f1:fa: ee:b1:88:f4:58:c2:f8:cd:81:0b:58:a4:99:80:9b: c2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:BC:0A:91:6D:C2:E8:F9:7D:9A:A4:41:71:52:20:4C:41:8A:A3:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/643b1254-d7f1-376e-9ab7-2d0174638962.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl X509v3 Authority Key Identifier: keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer sbgp-ipAddrBlock: critical IPv4: 104.245.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:72:12:90:41:39:6c:42:b9:42:75:83:6c:b2:cf:67:37:6c: b0:d7:c7:99:86:cc:ad:d2:e4:6d:72:65:5e:ea:63:49:bc:9f: 5c:73:44:e6:09:29:52:36:98:85:74:dc:d8:24:16:a4:37:e7: 19:e3:dc:fa:8e:b9:b1:6c:95:1e:89:a1:4d:5c:55:f8:cc:03: 97:45:b0:dc:dd:fd:62:3f:7c:30:c6:32:78:a6:c3:e2:e5:ab: b6:03:ae:08:d2:53:fb:27:22:f5:49:fc:24:35:9b:3c:de:1a: ff:91:3f:b8:83:09:a6:ad:f1:f1:d6:1f:12:66:df:dd:fe:fa: 19:07:aa:e5:a1:c3:f1:4e:5a:70:54:fe:cc:15:56:96:dc:23: af:ae:d0:53:c1:d6:2c:54:a4:be:73:4c:4d:66:02:1f:e2:11: 8e:34:fb:68:2f:39:d3:5e:14:fb:16:d4:1d:e2:37:e5:12:35: cc:0f:5e:0a:b6:6c:b6:de:4c:4b:b8:bb:8c:bf:c0:e9:a5:26: 6b:a6:9f:8e:b9:8d:f4:21:5e:a3:15:cb:82:4c:be:3b:e7:67: 65:90:41:2f:cc:5f:23:e0:8c:8b:d9:56:bd:8b:1f:bd:9a:86: d5:53:e6:f8:9e:14:df:6d:f6:34:9e:6a:02:d5:18:5e:ff:31: eb:b2:57:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiim0yoUAdK4yvrQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YWFmMTEtMWM3NC00OTZlLTk5YzYtNjE1MmNiMjky Yjg2MB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk MjZkYjBjYjAtOWIxYi00N2UwLWFjYzMtYjEyMGVjMzY5Yzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRYSZuz7jvkVtNZQx4kkyEIeX1eD8xiuu+yK yO5gToAzZ3ICeb2A0RHdXHgH5IM/lrO4tSqVp8j0D9ndmdzSVqlHPjk8D4eAPyWK jZuqUalHVeNaQAwbrxdZIBlcYT8s3lN7sOXq0XiGVEZcp/L+8oN1JtTP8nUOXGGy eopUExG/kP6eg3eteLcbuDN+VYm+3rWGidrkRY8dq0u3FJkqP3vhjXZFKH0aCno3 I5RCXD7qsFEmqpFhdGqlqQjzL7amJveYqbyjDxrRszMcu6fu01rimd5rdOyQjP3D AtT3Jfrl8FL0FUqw2Rgdnx8o8frusYj0WML4zYELWKSZgJvCswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPW8CpFtwuj5fZqkQXFSIExBiqNPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlh YWYxMS0xYzc0LTQ5NmUtOTljNi02MTUyY2IyOTJiODYvNjQzYjEyNTQtZDdmMS0z NzZlLTlhYjctMmQwMTc0NjM4OTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YWFmMTEtMWM3NC00OTZlLTk5 YzYtNjE1MmNiMjkyYjg2LzVkOWFhZjExLTFjNzQtNDk2ZS05OWM2LTYxNTJjYjI5 MmI4Ni5jcmwwHwYDVR0jBBgwFoAUvf1qpElM4JfqWhVE4pRpobkfBIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlhYWYxMS0xYzc0LTQ5NmUtOTljNi02MTUy Y2IyOTJiODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPX0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKtyEpBBOWxCuUJ1g2yyz2c3bLDXx5mGzK3S5G1yZV7qY0m8n1xzROYJ KVI2mIV03NgkFqQ35xnj3PqOubFslR6JoU1cVfjMA5dFsNzd/WI/fDDGMnimw+Ll q7YDrgjSU/snIvVJ/CQ1mzzeGv+RP7iDCaat8fHWHxJm393++hkHquWhw/FOWnBU /swVVpbcI6+u0FPB1ixUpL5zTE1mAh/iEY40+2gvOdNeFPsW1B3iN+USNcwPXgq2 bLbeTEu4u4y/wOmlJmumn465jfQhXqMVy4JMvjvnZ2WQQS/MXyPgjIvZVr2LH72a htVT5vieFN9t9jSeagLVGF7/MeuyV7g= -----END CERTIFICATE-----Generated at Sat Apr 12 00:37:16 2025 by rpki-client