$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/394eaf77-d41e-3522-87b9-2b6b368cebf3.roa File: 394eaf77-d41e-3522-87b9-2b6b368cebf3.roa (raw, json) Hash identifier: QfvCG2re9eblxA5SnF+5D1+EiX7ke0TEFW2UnGCizYs= Subject key identifier: 04:66:5B:27:79:BE:E4:E7:09:5E:9D:D7:F1:16:57:80:F6:92:29:93 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858489E6B66E5F9D7F7F56389FA00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/394eaf77-d41e-3522-87b9-2b6b368cebf3.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 63949 IP address blocks: 104.200.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:66:e5:f9:d7:f7:f5:63:89:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=b3ec8945-bd77-412a-9f07-77d9f2ee1d89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d6:a7:1d:a5:21:ba:b6:40:56:45:2e:78:09: e9:fc:88:62:ea:09:2f:1d:4f:83:0e:3c:44:bc:ce: 1d:a3:81:4a:00:b2:90:fc:ba:8b:63:8a:e5:67:70: 17:b0:61:11:27:32:d9:01:4e:da:03:c6:56:9b:bc: 1a:35:dc:90:ce:50:58:a4:f3:92:f3:04:99:ed:ac: cb:61:8c:e6:e6:78:f2:b2:d1:07:93:3d:89:7c:5f: 44:38:84:06:6f:34:c5:2c:e7:13:bf:f5:fe:0f:73: dc:6a:72:7e:66:5c:49:7e:ee:fe:99:de:15:bd:f1: 85:ee:24:1e:e0:ac:62:4f:3c:ae:a6:13:68:44:e0: b6:74:4c:bc:13:7f:94:40:7d:c6:6c:4f:65:79:90: 2b:d4:52:fb:05:e5:85:cf:50:b1:62:c4:30:3f:27: 8f:75:a8:e3:20:18:95:f1:18:00:97:03:c1:26:de: 32:a5:3d:10:5a:b9:d5:b7:3d:f5:58:3a:2d:99:7f: de:42:f7:04:ed:05:88:bc:e3:e5:ff:a1:ae:d9:64: 74:b8:23:6a:cb:11:dd:9b:77:f2:e5:42:a1:4c:4b: 2a:8c:a9:50:3e:c8:d4:d1:09:3d:20:af:02:cb:5a: c7:3b:f4:86:15:79:07:73:d6:db:a3:59:6c:2a:6c: 9c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:66:5B:27:79:BE:E4:E7:09:5E:9D:D7:F1:16:57:80:F6:92:29:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/394eaf77-d41e-3522-87b9-2b6b368cebf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.200.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:2f:d2:4b:05:bf:1b:25:73:9c:3b:64:9e:2d:33:9d:52:23: 64:6b:9d:f2:d0:d7:ec:66:00:6c:43:ab:0a:64:6a:57:03:85: 31:8b:9a:6e:67:7d:f6:9b:ee:bc:02:d1:0e:82:52:49:a9:65: 7b:84:c9:a8:b5:8a:21:92:fc:d7:28:06:62:3c:df:92:77:6b: ed:39:c5:e9:98:72:e3:13:01:39:19:df:19:1f:0e:6b:2f:07: 20:8a:2c:d3:0e:b2:48:d3:98:ee:57:97:b4:de:e1:9b:7e:1c: 01:54:b2:dd:1f:d5:b3:e2:ea:43:fa:80:ef:82:1d:53:02:80: 90:a9:77:8f:a3:14:73:da:b4:6d:83:8c:f3:ab:80:1b:2d:8b: 3a:65:82:01:a7:47:33:37:92:fe:96:b8:c3:bc:3d:31:80:92: 24:0d:8f:93:86:ee:0b:7f:6b:d5:a4:c0:6d:6c:8c:8b:18:6d: 3b:e7:25:93:55:e4:e1:c0:d4:d2:6f:2c:54:70:77:12:69:e2: a0:53:6e:b6:3d:2c:ff:86:94:3d:54:f7:5f:8a:db:a9:dd:fe: aa:ef:bd:96:8a:f6:57:46:cb:b3:f1:dc:3a:78:3a:06:68:95: 08:33:1a:92:64:86:ca:8a:3f:4e:60:a4:61:85:92:69:10:d0: bf:5f:08:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea2bl+df39WOJ+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YjNlYzg5NDUtYmQ3Ny00MTJhLTlmMDctNzdkOWYyZWUxZDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNanHaUhurZAVkUueAnp/Ihi6gkvHU+DDjxE vM4do4FKALKQ/LqLY4rlZ3AXsGERJzLZAU7aA8ZWm7waNdyQzlBYpPOS8wSZ7azL YYzm5njystEHkz2JfF9EOIQGbzTFLOcTv/X+D3PcanJ+ZlxJfu7+md4VvfGF7iQe 4KxiTzyuphNoROC2dEy8E3+UQH3GbE9leZAr1FL7BeWFz1CxYsQwPyePdajjIBiV 8RgAlwPBJt4ypT0QWrnVtz31WDotmX/eQvcE7QWIvOPl/6Gu2WR0uCNqyxHdm3fy 5UKhTEsqjKlQPsjU0Qk9IK8Cy1rHO/SGFXkHc9bbo1lsKmycBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARmWyd5vuTnCV6d1/EWV4D2kimTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzk0ZWFmNzctZDQxZS0z NTIyLTg3YjktMmI2YjM2OGNlYmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYv0ksFvxslc5w7ZJ4tM51SI2RrnfLQ1+xmAGxDqwpkalcDhTGLmm5n ffab7rwC0Q6CUkmpZXuEyai1iiGS/NcoBmI835J3a+05xemYcuMTATkZ3xkfDmsv ByCKLNMOskjTmO5Xl7Te4Zt+HAFUst0f1bPi6kP6gO+CHVMCgJCpd4+jFHPatG2D jPOrgBstizplggGnRzM3kv6WuMO8PTGAkiQNj5OG7gt/a9WkwG1sjIsYbTvnJZNV 5OHA1NJvLFRwdxJp4qBTbrY9LP+GlD1U91+K26nd/qrvvZaK9ldGy7Px3Dp4OgZo lQgzGpJkhsqKP05gpGGFkmkQ0L9fCC0= -----END CERTIFICATE-----Generated at Sun Feb 16 20:35:44 2025 by rpki-client