$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c3c37db-3991-3675-bbfc-bd674a27c192.roa File: 3c3c37db-3991-3675-bbfc-bd674a27c192.roa (raw, json) Hash identifier: dExRbp7OuZyjb4BvQQ41G58cgsvYhNLnH5jddlxv4Zk= Subject key identifier: B2:EF:85:58:63:97:BF:1F:7D:C2:43:4C:AB:92:64:0F:0B:32:4F:9B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848530B0B49E2B031FBA1CB2400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c3c37db-3991-3675-bbfc-bd674a27c192.roa Signing time: Wed 25 Dec 2024 14:00:52 +0000 ROA not before: Wed 25 Dec 2024 14:00:52 +0000 ROA not after: Tue 25 Mar 2025 13:00:52 +0000 asID: 6762 IP address blocks: 104.77.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:53:0b:0b:49:e2:b0:31:fb:a1:cb:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 25 14:00:52 2024 GMT Not After : Mar 25 13:00:52 2025 GMT Subject: CN=82201e85-b78d-478f-9fce-59f082fc722e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f4:3d:b4:f7:20:78:16:11:2f:6b:c1:c9:0e: 86:c3:e3:99:c8:ad:d1:c5:fc:d3:33:5d:84:8e:56: 52:c4:af:3c:a1:42:a4:99:6d:cb:94:15:5b:9c:fd: e7:d2:7e:ca:b3:fe:46:8e:4b:43:45:ca:c9:43:94: c0:4f:f0:d5:fd:74:71:aa:fa:1f:9b:f7:22:52:2b: 47:99:15:3a:1a:d1:21:7c:01:4b:14:b3:23:05:99: f6:de:8b:49:0d:2c:15:44:85:bd:7d:27:5b:15:a7: d5:8d:9e:07:7a:a4:a4:6b:ae:37:63:d9:3e:c6:8b: 40:0f:98:d3:20:c9:0a:81:bc:a5:ef:3b:81:a7:f4: 1c:a8:66:6c:92:dd:b4:6b:65:2f:53:54:f9:9b:f2: 3e:16:a8:f6:97:6f:21:43:df:82:59:03:25:e2:9f: 37:b1:d3:c7:0e:ee:1a:ae:16:46:99:57:4b:8f:a3: 81:33:e6:03:7e:d8:df:8a:57:ab:1a:72:74:3d:44: 83:b5:41:91:77:4a:ea:46:fe:dd:27:74:00:50:51: c4:52:1b:36:35:28:9d:91:f8:22:1a:39:60:8c:46: d6:bb:6a:2c:70:4d:87:7a:b7:8c:5a:18:d2:a1:49: 07:f6:a6:cd:96:12:b8:9e:9e:0e:bf:07:f3:c6:01: a7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:EF:85:58:63:97:BF:1F:7D:C2:43:4C:AB:92:64:0F:0B:32:4F:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c3c37db-3991-3675-bbfc-bd674a27c192.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.77.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:f2:97:6c:af:83:bd:fd:88:6a:70:70:1b:49:46:60:18:c4: 90:91:7a:76:1c:f5:8c:8e:6c:02:7c:18:9e:50:33:b0:2a:d5: 16:e7:15:5d:e6:2d:60:1c:c0:4e:3a:0d:92:69:0f:44:4e:1f: bb:e6:d1:26:50:4b:59:e8:43:ec:24:3c:8c:8e:cf:2c:ca:5e: 0e:ef:a4:25:b0:79:eb:24:5e:23:42:3a:e6:45:40:d1:5b:aa: 08:11:17:b2:ee:20:ee:04:10:32:2c:0a:a4:01:19:76:33:43: ed:fd:91:bf:91:52:4b:ad:04:26:65:66:8f:84:ee:41:53:d2: 33:b8:bf:0f:2d:92:ba:a1:2d:30:6a:a6:7d:6b:7d:44:b2:35: b4:f1:24:a4:76:d0:7a:29:83:ee:d1:ba:7d:67:6f:d3:93:19: ce:27:f3:cb:5e:9e:74:26:7f:f2:fa:28:5c:fc:11:e9:b8:ff: 48:83:38:a3:4b:f9:e8:ab:2d:3b:86:cd:13:f7:23:d7:d6:68: 4d:99:6f:ee:2e:17:e6:7f:6f:b2:9f:c9:da:c7:59:85:27:9a: f2:0e:a8:22:fc:74:f4:10:4d:76:a8:46:e5:79:6d:b8:e6:7b: f5:11:e1:77:78:19:1e:9d:43:db:c9:ec:96:89:78:16:72:77: dd:3f:8d:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhTCwtJ4rAx+6HLJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTIyNTE0MDA1MloXDTI1MDMyNTEzMDA1MlowLzEtMCsGA1UEAxMk ODIyMDFlODUtYjc4ZC00NzhmLTlmY2UtNTlmMDgyZmM3MjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPQ9tPcgeBYRL2vByQ6Gw+OZyK3RxfzTM12E jlZSxK88oUKkmW3LlBVbnP3n0n7Ks/5GjktDRcrJQ5TAT/DV/XRxqvofm/ciUitH mRU6GtEhfAFLFLMjBZn23otJDSwVRIW9fSdbFafVjZ4HeqSka643Y9k+xotAD5jT IMkKgbyl7zuBp/QcqGZskt20a2UvU1T5m/I+Fqj2l28hQ9+CWQMl4p83sdPHDu4a rhZGmVdLj6OBM+YDftjfilerGnJ0PUSDtUGRd0rqRv7dJ3QAUFHEUhs2NSidkfgi GjlgjEbWu2oscE2HereMWhjSoUkH9qbNlhK4np4OvwfzxgGncQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLvhVhjl78ffcJDTKuSZA8LMk+bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2MzYzM3ZGItMzk5MS0z Njc1LWJiZmMtYmQ2NzRhMjdjMTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaE25MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3yl2yvg739iGpwcBtJRmAYxJCRenYc9YyObAJ8GJ5QM7Aq1RbnFV3m LWAcwE46DZJpD0ROH7vm0SZQS1noQ+wkPIyOzyzKXg7vpCWweeskXiNCOuZFQNFb qggRF7LuIO4EEDIsCqQBGXYzQ+39kb+RUkutBCZlZo+E7kFT0jO4vw8tkrqhLTBq pn1rfUSyNbTxJKR20Hopg+7Run1nb9OTGc4n88tennQmf/L6KFz8Eem4/0iDOKNL +eirLTuGzRP3I9fWaE2Zb+4uF+Z/b7KfydrHWYUnmvIOqCL8dPQQTXaoRuV5bbjm e/UR4Xd4GR6dQ9vJ7JaJeBZyd90/jaQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:45 2025 by rpki-client