$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b450795-c4f1-35e1-91b3-a1ee5de2e375.roa File: 8b450795-c4f1-35e1-91b3-a1ee5de2e375.roa (raw, json) Hash identifier: 8P3PPS8U/j9YcW+33YKcsMkKyDGfWffherBHSbJPtPQ= Subject key identifier: D5:23:46:A8:8B:8A:2A:1D:E8:CA:08:E8:B2:71:09:74:06:18:51:BE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848467AC29E5EC0B16BD6D51FC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b450795-c4f1-35e1-91b3-a1ee5de2e375.roa Signing time: Sat 21 Dec 2024 02:00:39 +0000 ROA not before: Sat 21 Dec 2024 02:00:39 +0000 ROA not after: Fri 21 Mar 2025 01:00:39 +0000 asID: 16625 IP address blocks: 104.103.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:46:7a:c2:9e:5e:c0:b1:6b:d6:d5:1f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 21 02:00:39 2024 GMT Not After : Mar 21 01:00:39 2025 GMT Subject: CN=e4f03fed-3c23-4d33-990f-7561c3652605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ce:9e:36:00:b8:11:32:7b:f3:e6:0c:62:52: bc:b7:7b:7a:ef:55:af:23:5f:90:3c:0c:06:7d:60: 62:20:06:92:0d:f8:2e:3d:22:e7:16:0d:f5:35:76: 07:2b:d3:5c:1f:87:4b:7e:e1:c7:d5:fa:b8:65:c7: ee:9f:9c:b9:79:ee:15:2a:f0:b1:ce:14:f7:17:57: 8d:c9:60:8f:d1:a5:38:52:c8:8f:a3:26:21:9a:7e: 01:c3:4b:fb:15:78:bb:0c:7d:20:4b:5e:ec:aa:74: 16:83:70:c1:18:d3:c2:8a:25:59:b2:d4:3d:f4:cf: d0:89:76:57:c4:97:a0:24:2d:9f:d8:05:85:c9:0f: a9:96:b2:e1:da:79:71:d2:ee:a1:a7:6c:17:57:5f: 0b:81:d3:50:8e:59:20:15:76:ac:79:14:65:fe:1a: e6:55:d3:4d:45:a8:b1:8e:ab:c5:95:37:df:08:15: ed:17:22:1c:96:c0:d3:0d:03:45:11:f0:63:fe:5e: ba:85:a9:1a:0e:c3:47:e1:26:8e:3b:f7:4c:12:8d: 73:bc:34:44:d3:6e:a6:76:7a:3f:1b:b6:08:c4:09: 62:cb:7e:bb:b4:5b:91:c1:c8:2a:1e:5f:40:3e:12: 9f:e1:7c:b8:f6:bf:a9:40:e6:25:b9:09:f4:65:07: 91:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:23:46:A8:8B:8A:2A:1D:E8:CA:08:E8:B2:71:09:74:06:18:51:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b450795-c4f1-35e1-91b3-a1ee5de2e375.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.103.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:8b:d7:ec:63:b5:bc:11:5d:78:43:b9:92:65:60:d7:a6:ae: 68:9a:61:2d:de:77:5b:7b:5b:1e:08:25:f5:d3:63:7e:5f:c9: 3d:0d:08:98:c8:fa:f6:7a:6a:b3:5d:3f:e5:d0:ec:44:f1:f3: c9:30:5f:e8:ef:49:b2:ff:a2:9d:3c:68:c8:72:35:7d:a6:e9: ab:a7:45:14:d4:32:f9:c7:06:fa:f7:2e:af:06:26:e0:2a:52: 83:12:59:a9:01:c9:04:18:21:28:15:fb:6e:06:b3:83:f1:01: 12:aa:5d:4e:f2:71:e7:6d:78:61:68:96:89:ca:d1:9f:25:a5: 00:48:c9:0c:47:74:a3:a7:ee:14:43:60:c8:d4:49:55:ff:09: f2:2e:30:84:f9:04:62:dd:f4:0f:3e:d5:1f:0d:09:d1:54:21: 18:73:5a:01:eb:77:75:52:57:35:87:59:a9:ab:0d:31:ef:50: 76:62:20:31:13:ea:49:00:5c:2d:76:f8:c4:93:ed:9c:74:0d: 15:02:47:a6:54:29:be:48:16:11:dd:f2:e4:e5:a8:84:f3:7e: 23:a7:f4:d2:82:bf:3d:79:ef:25:09:a9:aa:b7:58:7f:75:b7: 56:95:e1:f6:52:6a:77:18:f2:a7:2b:ab:a6:aa:63:d5:3d:26: e3:12:03:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhGesKeXsCxa9bVH8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTIyMTAyMDAzOVoXDTI1MDMyMTAxMDAzOVowLzEtMCsGA1UEAxMk ZTRmMDNmZWQtM2MyMy00ZDMzLTk5MGYtNzU2MWMzNjUyNjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqc6eNgC4ETJ78+YMYlK8t3t671WvI1+QPAwG fWBiIAaSDfguPSLnFg31NXYHK9NcH4dLfuHH1fq4Zcfun5y5ee4VKvCxzhT3F1eN yWCP0aU4UsiPoyYhmn4Bw0v7FXi7DH0gS17sqnQWg3DBGNPCiiVZstQ99M/QiXZX xJegJC2f2AWFyQ+plrLh2nlx0u6hp2wXV18LgdNQjlkgFXaseRRl/hrmVdNNRaix jqvFlTffCBXtFyIclsDTDQNFEfBj/l66hakaDsNH4SaOO/dMEo1zvDRE026mdno/ G7YIxAliy367tFuRwcgqHl9APhKf4Xy49r+pQOYluQn0ZQeR3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUjRqiLiiod6MoI6LJxCXQGGFG+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGI0NTA3OTUtYzRmMS0z NWUxLTkxYjMtYTFlZTVkZTJlMzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaGewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKL1+xjtbwRXXhDuZJlYNemrmiaYS3ed1t7Wx4IJfXTY35fyT0NCJjI +vZ6arNdP+XQ7ETx88kwX+jvSbL/op08aMhyNX2m6aunRRTUMvnHBvr3Lq8GJuAq UoMSWakByQQYISgV+24Gs4PxARKqXU7ycedteGFolonK0Z8lpQBIyQxHdKOn7hRD YMjUSVX/CfIuMIT5BGLd9A8+1R8NCdFUIRhzWgHrd3VSVzWHWamrDTHvUHZiIDET 6kkAXC12+MST7Zx0DRUCR6ZUKb5IFhHd8uTlqITzfiOn9NKCvz157yUJqaq3WH91 t1aV4fZSancY8qcrq6aqY9U9JuMSA4k= -----END CERTIFICATE-----Generated at Sun Feb 16 21:04:25 2025 by rpki-client