$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b258975a-6556-3580-9b9f-d3a7c7ed3b58.roa File: b258975a-6556-3580-9b9f-d3a7c7ed3b58.roa (raw, json) Hash identifier: tgjnFPdw3yykD7MdSmxrBNcZ/iadBx1dlYaMEdLE1nc= Subject key identifier: 97:92:F5:FE:D6:0A:FA:FB:EF:9F:59:AA:BA:41:47:94:BD:F8:1E:B2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858489E6B677740E245942AB7FCC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b258975a-6556-3580-9b9f-d3a7c7ed3b58.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 63949 IP address blocks: 172.104.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:67:77:40:e2:45:94:2a:b7:fc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=646891aa-0011-4834-becb-5bc8749e4ab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:94:3a:b6:d8:88:cb:58:2b:c9:24:b4:22:7e: 5d:5c:77:84:4e:f3:97:d3:e7:18:88:d9:88:6f:3a: 5e:63:8e:1a:be:2f:bc:a6:21:de:30:ea:7c:a7:05: 10:9e:db:e0:12:b8:b4:75:c6:48:d1:e8:12:55:d5: 71:ee:52:44:5c:81:87:09:ed:c2:58:79:b5:a9:4f: 4c:06:e0:3f:96:01:92:7a:38:62:d4:7e:71:9f:bc: e1:a8:e6:12:6b:b8:23:cb:41:00:a8:33:db:58:7c: 72:7e:8a:fd:a0:37:f6:b1:a9:37:fa:b6:4b:a0:28: 47:32:54:7a:d6:8e:7a:26:b5:dc:41:24:91:b7:c6: 80:6b:b4:00:7c:5d:7e:3c:7f:0a:ba:4c:e7:4f:1d: 45:d2:05:64:6e:41:72:51:09:c3:c9:b7:71:97:cc: 1c:63:44:91:55:95:08:ff:07:58:bc:8d:ae:3c:b7: 58:5e:15:a6:77:eb:21:01:ec:bf:10:1e:bc:29:a3: c7:c2:3a:50:a1:23:2c:6e:80:1e:4d:5f:5a:41:cb: 19:3a:91:bf:a6:88:3a:76:60:4f:1a:8c:38:7f:a8: 10:8c:36:2c:fe:a3:2a:ec:19:d2:45:81:f3:05:a7: 14:69:10:8e:6c:04:0a:fe:8e:64:c6:1f:22:7c:37: 6d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:92:F5:FE:D6:0A:FA:FB:EF:9F:59:AA:BA:41:47:94:BD:F8:1E:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b258975a-6556-3580-9b9f-d3a7c7ed3b58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.104.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:36:bb:c7:83:c8:7d:ee:6c:bf:44:c0:9c:23:9d:68:ef:c5: dd:b1:34:43:2f:dc:ce:d3:7e:97:f9:24:b8:e0:d3:fa:7c:01: 1a:08:90:0d:94:e2:51:08:31:cd:da:4e:9a:ab:09:d0:2f:29: 8e:80:36:b4:7b:8f:80:62:08:8c:50:8e:10:90:61:6e:16:1e: 61:e4:f3:76:d6:8d:f6:27:9f:9c:8a:6b:56:ba:f4:7a:b1:b7: 6e:6c:c8:b3:84:35:8c:4a:c4:c4:48:de:c3:70:c7:cd:40:c8: 55:ba:5d:60:c1:1e:9a:c3:a7:3c:e0:82:c7:5a:26:91:0b:09: 3a:3a:71:99:ed:c8:69:7f:da:b8:1c:e9:09:06:5a:67:9a:48: 14:23:29:62:d4:1b:a8:90:a9:5d:c8:ba:cc:8d:69:e0:58:d9: ba:e6:7b:13:74:d2:36:5d:3d:06:7f:11:bd:38:84:ca:85:a2: db:52:50:c3:6b:a2:53:45:f3:fe:fc:d1:7a:78:ed:67:1c:0b: a3:14:3a:34:25:02:b2:73:44:b2:5e:ad:cb:25:88:67:54:e0: 92:6b:ab:68:1a:bd:07:a6:8e:ae:a6:e4:3d:26:6e:a1:7f:33: 1d:0e:7b:18:eb:94:7d:42:7a:a6:69:4c:22:23:47:ea:9d:fd: a7:46:52:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea2d3QOJFlCq3/MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NjQ2ODkxYWEtMDAxMS00ODM0LWJlY2ItNWJjODc0OWU0YWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZQ6ttiIy1grySS0In5dXHeETvOX0+cYiNmI bzpeY44avi+8piHeMOp8pwUQntvgEri0dcZI0egSVdVx7lJEXIGHCe3CWHm1qU9M BuA/lgGSejhi1H5xn7zhqOYSa7gjy0EAqDPbWHxyfor9oDf2sak3+rZLoChHMlR6 1o56JrXcQSSRt8aAa7QAfF1+PH8KukznTx1F0gVkbkFyUQnDybdxl8wcY0SRVZUI /wdYvI2uPLdYXhWmd+shAey/EB68KaPHwjpQoSMsboAeTV9aQcsZOpG/pog6dmBP Gow4f6gQjDYs/qMq7BnSRYHzBacUaRCObAQK/o5kxh8ifDdtNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJeS9f7WCvr7759ZqrpBR5S9+B6yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjI1ODk3NWEtNjU1Ni0z NTgwLTliOWYtZDNhN2M3ZWQzYjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErGgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGc2u8eDyH3ubL9EwJwjnWjvxd2xNEMv3M7Tfpf5JLjg0/p8ARoIkA2U 4lEIMc3aTpqrCdAvKY6ANrR7j4BiCIxQjhCQYW4WHmHk83bWjfYnn5yKa1a69Hqx t25syLOENYxKxMRI3sNwx81AyFW6XWDBHprDpzzggsdaJpELCTo6cZntyGl/2rgc 6QkGWmeaSBQjKWLUG6iQqV3IusyNaeBY2brmexN00jZdPQZ/Eb04hMqFottSUMNr olNF8/780Xp47WccC6MUOjQlArJzRLJercsliGdU4JJrq2gavQemjq6m5D0mbqF/ Mx0OexjrlH1CeqZpTCIjR+qd/adGUiI= -----END CERTIFICATE-----Generated at Sun Feb 16 20:25:20 2025 by rpki-client