$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e290f5e-d6ba-33d3-9a1c-a55583a2aea4.roa File: 0e290f5e-d6ba-33d3-9a1c-a55583a2aea4.roa (raw, json) Hash identifier: 63JLcE3U/YS4LfXpqNXZR/INkCCQnmVMrxF/3810o+M= Subject key identifier: 0E:7D:66:EA:1D:1E:52:AA:8D:95:B7:E2:05:17:70:61:A1:BB:0B:F8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584855D5A58472DF74C92BA03380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e290f5e-d6ba-33d3-9a1c-a55583a2aea4.roa Signing time: Thu 26 Dec 2024 14:00:52 +0000 ROA not before: Thu 26 Dec 2024 14:00:52 +0000 ROA not after: Wed 26 Mar 2025 13:00:52 +0000 asID: 16625 IP address blocks: 104.83.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:55:d5:a5:84:72:df:74:c9:2b:a0:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 26 14:00:52 2024 GMT Not After : Mar 26 13:00:52 2025 GMT Subject: CN=f27dd77a-5511-4067-9a0d-10e541d0b967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c2:c6:e9:90:44:c2:98:36:ef:12:8c:ba:36: a2:20:9a:b6:6d:86:34:5e:45:83:b4:2e:72:68:3d: 09:99:7e:57:08:b8:92:94:35:f1:64:90:88:b9:e5: ec:ad:6f:e7:29:ca:69:7b:54:7f:31:3a:03:8f:33: 3b:ef:6e:fb:76:8c:12:16:42:d9:ca:cd:e4:ec:25: a7:fb:d2:82:f7:fb:e9:2b:2a:35:09:f1:72:61:1d: f5:37:7a:86:8a:65:32:5c:1f:68:51:b9:34:12:2c: dc:ed:01:69:1b:78:a0:b3:c3:63:ba:0c:95:1e:df: 29:5e:22:5e:7e:83:42:b6:4c:1f:8a:d0:1b:ab:c1: bd:01:c7:e9:2c:00:eb:01:8b:87:14:aa:f8:a1:8a: 73:7a:3d:60:d7:00:42:79:b6:09:28:42:6b:6c:98: 9f:a3:89:b6:72:23:92:51:d1:74:6b:67:24:16:3a: 14:b7:b9:6c:11:fe:67:76:6b:fc:74:2d:76:44:0d: 2a:05:dc:32:b6:7d:89:47:12:91:a3:20:65:d3:35: 0b:85:39:69:60:83:ed:24:f1:88:6c:8a:7b:d9:8e: 1e:3b:13:4c:c0:fa:12:e3:0d:05:fb:b3:c7:d3:4e: 4d:91:48:d8:31:00:a2:72:60:c0:7f:59:b8:95:87: d2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:7D:66:EA:1D:1E:52:AA:8D:95:B7:E2:05:17:70:61:A1:BB:0B:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e290f5e-d6ba-33d3-9a1c-a55583a2aea4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.83.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:0e:21:8c:f5:84:d0:7e:fb:28:c3:9b:77:29:19:49:e8:cd: c4:66:30:23:95:02:48:24:1f:22:00:02:e8:bb:40:fa:8e:db: 2b:18:13:7b:e4:ce:f1:06:93:5a:29:33:60:a9:2c:1b:79:0c: ab:7c:ba:14:50:ba:90:bf:4f:da:e3:78:a8:c7:f4:d0:d0:95: 6f:dc:16:5a:d7:80:e6:17:95:2d:f7:38:1b:be:5f:f6:4b:ce: 31:22:e6:1e:9b:66:18:21:e6:b9:72:db:ba:94:7b:7c:e6:17: fc:41:c1:56:50:08:3c:35:08:ce:e5:09:a7:5e:b2:2d:40:f4: d5:3c:f4:e5:4e:b3:bf:23:f8:82:cc:f0:ec:03:2c:5f:46:57: ca:7c:0c:70:23:c8:49:12:77:7a:82:87:37:1c:5d:d6:e0:8c: e7:e5:d6:e6:8d:06:e6:e6:96:a3:66:b4:1d:fd:01:db:69:10: 9f:a3:02:05:83:89:43:7a:fa:7d:46:20:96:23:d3:d3:6a:5e: b1:bf:ce:9f:4a:ec:df:bf:c5:f2:78:af:87:35:18:e5:61:fd: 56:6c:1e:5b:94:8e:e4:d1:ff:16:30:f4:6a:a8:e4:7a:1d:61: b2:24:81:69:a4:51:1f:32:b0:7c:77:d0:a7:2a:de:a5:6d:94: b5:b9:15:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhV1aWEct90ySugM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTIyNjE0MDA1MloXDTI1MDMyNjEzMDA1MlowLzEtMCsGA1UEAxMk ZjI3ZGQ3N2EtNTUxMS00MDY3LTlhMGQtMTBlNTQxZDBiOTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8LG6ZBEwpg27xKMujaiIJq2bYY0XkWDtC5y aD0JmX5XCLiSlDXxZJCIueXsrW/nKcppe1R/MToDjzM77277dowSFkLZys3k7CWn +9KC9/vpKyo1CfFyYR31N3qGimUyXB9oUbk0Eizc7QFpG3igs8NjugyVHt8pXiJe foNCtkwfitAbq8G9AcfpLADrAYuHFKr4oYpzej1g1wBCebYJKEJrbJifo4m2ciOS UdF0a2ckFjoUt7lsEf5ndmv8dC12RA0qBdwytn2JRxKRoyBl0zULhTlpYIPtJPGI bIp72Y4eOxNMwPoS4w0F+7PH005NkUjYMQCicmDAf1m4lYfSEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA59ZuodHlKqjZW34gUXcGGhuwv4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGUyOTBmNWUtZDZiYS0z M2QzLTlhMWMtYTU1NTgzYTJhZWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaFMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoOIYz1hNB++yjDm3cpGUnozcRmMCOVAkgkHyIAAui7QPqO2ysYE3vk zvEGk1opM2CpLBt5DKt8uhRQupC/T9rjeKjH9NDQlW/cFlrXgOYXlS33OBu+X/ZL zjEi5h6bZhgh5rly27qUe3zmF/xBwVZQCDw1CM7lCadesi1A9NU89OVOs78j+ILM 8OwDLF9GV8p8DHAjyEkSd3qChzccXdbgjOfl1uaNBubmlqNmtB39AdtpEJ+jAgWD iUN6+n1GIJYj09NqXrG/zp9K7N+/xfJ4r4c1GOVh/VZsHluUjuTR/xYw9Gqo5Hod YbIkgWmkUR8ysHx30Kcq3qVtlLW5Ff8= -----END CERTIFICATE-----Generated at Sun Feb 16 20:52:24 2025 by rpki-client