$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e807cc0-8c79-3459-9cc2-cdbfa70a78da.roa File: 8e807cc0-8c79-3459-9cc2-cdbfa70a78da.roa (raw, json) Hash identifier: uBRXlmEPTFB8V1kf24T2s8NWX0ia2Zxzsevibz6HK/U= Subject key identifier: EE:88:2D:63:9C:8B:A0:8B:9F:40:B9:5F:E0:0C:4B:8C:C5:0A:E1:A4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848530B0BA605CC3C17FD99AD00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e807cc0-8c79-3459-9cc2-cdbfa70a78da.roa Signing time: Wed 25 Dec 2024 14:00:52 +0000 ROA not before: Wed 25 Dec 2024 14:00:52 +0000 ROA not after: Tue 25 Mar 2025 13:00:52 +0000 asID: 16625 IP address blocks: 104.78.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:53:0b:0b:a6:05:cc:3c:17:fd:99:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 25 14:00:52 2024 GMT Not After : Mar 25 13:00:52 2025 GMT Subject: CN=d8986f43-269d-418f-a249-15b5ed16e235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d2:5d:0c:87:45:ce:04:13:fe:de:35:84:6c: f3:67:19:da:1c:aa:f0:9d:cc:dd:77:10:25:dc:04: f9:0a:47:dd:59:8d:5f:70:9e:44:83:4c:b5:36:2c: 07:5c:dc:81:91:c7:42:4c:35:5b:d2:b9:3c:c8:88: 68:1e:18:d1:b3:be:db:53:77:4a:f4:2d:84:ba:86: b0:38:2f:da:b7:ff:41:e0:59:fd:95:14:06:1e:5d: ed:4b:5f:80:0e:8a:5f:3d:73:4d:4c:15:e2:ca:40: c8:1f:46:21:4b:4f:be:81:98:6f:2d:77:a9:84:06: de:f6:7b:01:9e:63:aa:6b:b9:b9:a6:de:65:fa:be: 74:ec:4a:96:4a:62:d2:73:40:26:12:4b:06:d9:5d: 2a:aa:9b:65:ce:98:97:13:46:48:f6:5c:26:53:33: 9c:4c:e4:08:8e:9c:e0:62:5f:72:c0:e2:70:f7:28: 29:80:f7:63:d5:47:5e:88:15:20:e0:1b:61:d2:6a: 23:72:9a:ba:02:64:b3:6d:f9:c6:96:f2:17:1c:12: 20:2a:90:47:6b:7e:7c:ce:de:cf:62:82:a7:89:ac: 39:40:e1:8e:02:43:28:68:5b:cc:fd:20:d0:35:0a: 37:9b:bd:a4:3d:1c:15:5c:42:c6:19:1e:38:6f:81: 85:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:88:2D:63:9C:8B:A0:8B:9F:40:B9:5F:E0:0C:4B:8C:C5:0A:E1:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e807cc0-8c79-3459-9cc2-cdbfa70a78da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.78.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:56:c1:d0:c1:6a:d8:e7:ac:47:2b:89:81:02:a9:fe:2b:97: 19:08:b5:fe:05:ec:15:5c:d0:3a:91:30:31:82:5c:16:d0:c7: 24:1b:b1:2b:3f:e9:1e:96:2e:21:ce:57:63:1e:0d:cf:82:68: c0:03:f6:8d:e3:9f:bb:21:e4:99:af:bf:f0:4b:25:5b:e8:9e: 47:9b:63:fd:3a:d8:0d:81:f8:cb:fb:d1:ca:9c:59:f2:79:42: 5a:1b:38:d8:de:76:d0:17:7b:d3:32:2d:e5:e8:b8:38:93:ac: 1f:ff:12:58:be:37:7d:ae:80:b0:63:37:0e:06:2a:6d:66:1e: 4e:ec:38:ba:a0:5b:7b:b8:7f:d3:88:82:a3:32:fd:0b:09:f6: 1c:10:5f:08:a6:c6:f0:d6:23:89:d5:67:f3:1a:e2:31:da:30: 87:d7:30:64:f8:57:37:b9:43:ba:c5:13:ff:26:0b:91:10:af: 50:ea:79:d2:01:aa:48:55:05:5b:88:c3:bb:b7:ee:b9:7b:ed: f5:75:29:89:e4:78:9a:20:ed:6f:cb:17:d7:9d:2a:13:8c:8b: 50:03:c1:58:90:b3:a5:60:0d:40:19:fc:59:24:0b:0c:44:23: 2d:3c:8e:e7:ea:0e:aa:4b:a1:29:38:3e:d3:03:88:d5:8d:ae: 24:7c:a9:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhTCwumBcw8F/2ZrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTIyNTE0MDA1MloXDTI1MDMyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDg5ODZmNDMtMjY5ZC00MThmLWEyNDktMTViNWVkMTZlMjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidJdDIdFzgQT/t41hGzzZxnaHKrwnczddxAl 3AT5CkfdWY1fcJ5Eg0y1NiwHXNyBkcdCTDVb0rk8yIhoHhjRs77bU3dK9C2Euoaw OC/at/9B4Fn9lRQGHl3tS1+ADopfPXNNTBXiykDIH0YhS0++gZhvLXephAbe9nsB nmOqa7m5pt5l+r507EqWSmLSc0AmEksG2V0qqptlzpiXE0ZI9lwmUzOcTOQIjpzg Yl9ywOJw9ygpgPdj1UdeiBUg4Bth0mojcpq6AmSzbfnGlvIXHBIgKpBHa358zt7P YoKniaw5QOGOAkMoaFvM/SDQNQo3m72kPRwVXELGGR44b4GF0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6ILWOci6CLn0C5X+AMS4zFCuGkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGU4MDdjYzAtOGM3OS0z NDU5LTljYzItY2RiZmE3MGE3OGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaE68MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJWwdDBatjnrEcriYECqf4rlxkItf4F7BVc0DqRMDGCXBbQxyQbsSs/ 6R6WLiHOV2MeDc+CaMAD9o3jn7sh5Jmvv/BLJVvonkebY/062A2B+Mv70cqcWfJ5 QlobONjedtAXe9MyLeXouDiTrB//Eli+N32ugLBjNw4GKm1mHk7sOLqgW3u4f9OI gqMy/QsJ9hwQXwimxvDWI4nVZ/Ma4jHaMIfXMGT4Vze5Q7rFE/8mC5EQr1DqedIB qkhVBVuIw7u37rl77fV1KYnkeJog7W/LF9edKhOMi1ADwViQs6VgDUAZ/FkkCwxE Iy08jufqDqpLoSk4PtMDiNWNriR8qVc= -----END CERTIFICATE-----Generated at Sun Feb 16 21:08:39 2025 by rpki-client