$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f9a3347-97d6-3587-af66-e8f3478398f2.roa File: 5f9a3347-97d6-3587-af66-e8f3478398f2.roa (raw, json) Hash identifier: GK8q7jbVqQmvLw8KLsGhbWllBd4g4Ec59xQEbOwOA0M= Subject key identifier: 7B:B1:B2:57:F4:60:22:6B:E2:C3:E5:13:77:AD:8E:F3:4C:28:12:08 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584858A06238666886F7941CD9E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f9a3347-97d6-3587-af66-e8f3478398f2.roa Signing time: Fri 27 Dec 2024 14:00:52 +0000 ROA not before: Fri 27 Dec 2024 14:00:52 +0000 ROA not after: Thu 27 Mar 2025 13:00:52 +0000 asID: 16625 IP address blocks: 104.123.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:58:a0:62:38:66:68:86:f7:94:1c:d9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 27 14:00:52 2024 GMT Not After : Mar 27 13:00:52 2025 GMT Subject: CN=b3007ac5-d315-4674-88fa-b7ff9121cbfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4c:04:f6:4f:40:f6:25:6f:54:26:86:6a:b6: c7:4a:98:1a:a8:1b:13:12:0f:e3:81:92:ee:98:0a: 5d:9a:29:e2:7f:35:09:d6:e3:1e:40:5c:3e:f6:fe: 2c:e6:15:e4:58:7e:3a:65:4e:05:e9:f3:bd:8d:82: ff:ce:83:3c:4c:82:00:b9:ae:54:1f:f6:6f:c6:d0: df:99:72:e4:e7:c0:81:f9:70:c8:f2:27:05:f1:63: 05:8f:82:90:ea:0e:32:ac:8d:e3:32:e7:0f:e8:52: 52:79:52:23:80:43:3e:b1:0e:c5:e5:ab:3d:ef:ca: c4:c8:dc:c9:7f:14:6b:dd:be:33:e7:4d:66:93:46: 9e:14:b3:ee:40:24:9c:fc:a1:d3:99:b1:96:66:54: d5:b0:e1:e4:cc:35:34:f5:9b:a3:72:50:c3:ea:1a: 3f:84:61:9c:94:20:6a:39:fc:86:07:9f:49:52:6f: 0e:92:dc:b0:18:22:af:2b:fd:06:8c:fa:1d:21:60: 1c:d5:43:21:41:a6:f0:f6:f6:29:49:21:4f:68:30: eb:4f:fb:98:75:46:8f:10:46:88:0e:de:51:7a:84: aa:7d:45:44:24:07:3f:95:95:c2:84:bc:a9:a6:3e: 0e:28:6a:b4:21:81:3b:61:f4:0e:45:8e:3d:e5:50: e4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B1:B2:57:F4:60:22:6B:E2:C3:E5:13:77:AD:8E:F3:4C:28:12:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f9a3347-97d6-3587-af66-e8f3478398f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.123.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:ea:05:91:cb:6e:29:94:d9:73:2d:2b:34:c4:3e:2e:bd:72: b2:f1:3f:b2:8d:c0:00:aa:4b:a0:e0:f0:73:86:d2:40:83:f3: cf:1e:89:d2:6b:12:7b:ba:cf:95:d7:cf:6b:30:b8:50:27:53: c8:e8:1b:e0:ac:55:f6:0b:92:fe:76:70:df:72:ea:39:bc:41: 49:ee:e4:b7:e4:4e:0f:dd:80:40:67:1f:4c:e1:98:c4:7c:0c: 8c:dd:6d:0b:8e:2a:93:cd:06:ce:7e:7c:ac:d5:04:ea:b1:27: cd:90:26:f6:e8:f4:96:9c:9e:70:71:a6:1b:15:1f:13:45:a1: d3:17:55:20:8f:00:5b:d4:98:8e:ae:50:51:2a:d2:e7:5b:06: de:f2:17:a8:d1:fc:59:78:39:5d:77:4d:27:03:ec:f4:75:65: b0:14:ad:81:84:ab:2f:73:59:f5:a9:f7:68:af:1e:d7:81:32: 3a:b0:f2:bf:29:d6:0e:df:d8:aa:1a:e1:99:37:43:a6:3b:15: 78:a6:83:78:0b:87:cc:68:0e:84:7e:f7:fb:be:f6:11:f3:0f: c5:ee:c4:4a:b6:84:62:f8:7c:06:ae:69:17:a0:f4:90:67:e9: 80:94:6c:ce:a1:f0:2a:e1:c8:c4:00:2f:73:58:fc:11:9e:c1: 3f:95:12:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhYoGI4ZmiG95Qc2eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk YjMwMDdhYzUtZDMxNS00Njc0LTg4ZmEtYjdmZjkxMjFjYmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EwE9k9A9iVvVCaGarbHSpgaqBsTEg/jgZLu mApdminifzUJ1uMeQFw+9v4s5hXkWH46ZU4F6fO9jYL/zoM8TIIAua5UH/ZvxtDf mXLk58CB+XDI8icF8WMFj4KQ6g4yrI3jMucP6FJSeVIjgEM+sQ7F5as978rEyNzJ fxRr3b4z501mk0aeFLPuQCSc/KHTmbGWZlTVsOHkzDU09ZujclDD6ho/hGGclCBq OfyGB59JUm8OktywGCKvK/0GjPodIWAc1UMhQabw9vYpSSFPaDDrT/uYdUaPEEaI Dt5ReoSqfUVEJAc/lZXChLyppj4OKGq0IYE7YfQORY495VDkmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHuxslf0YCJr4sPlE3etjvNMKBIIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWY5YTMzNDctOTdkNi0z NTg3LWFmNjYtZThmMzQ3ODM5OGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaHtYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/qBZHLbimU2XMtKzTEPi69crLxP7KNwACqS6Dg8HOG0kCD888eidJr Enu6z5XXz2swuFAnU8joG+CsVfYLkv52cN9y6jm8QUnu5LfkTg/dgEBnH0zhmMR8 DIzdbQuOKpPNBs5+fKzVBOqxJ82QJvbo9JacnnBxphsVHxNFodMXVSCPAFvUmI6u UFEq0udbBt7yF6jR/Fl4OV13TScD7PR1ZbAUrYGEqy9zWfWp92ivHteBMjqw8r8p 1g7f2Koa4Zk3Q6Y7FXimg3gLh8xoDoR+9/u+9hHzD8XuxEq2hGL4fAauaReg9JBn 6YCUbM6h8CrhyMQAL3NY/BGewT+VErY= -----END CERTIFICATE-----Generated at Sun Feb 16 20:53:15 2025 by rpki-client