$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5a95456-83f7-3981-a0b9-515831d8b3f9.roa File: d5a95456-83f7-3981-a0b9-515831d8b3f9.roa (raw, json) Hash identifier: lLQiL2+bVGaac7KvquRS0qtRs5TNO5n09QtTaDBz6Hc= Subject key identifier: DA:F2:F6:BF:F7:CE:D5:D4:7E:2B:67:0E:AC:09:C4:AA:D4:E2:A4:31 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584855D5A4E36B8BA97DA25021F0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5a95456-83f7-3981-a0b9-515831d8b3f9.roa Signing time: Thu 26 Dec 2024 14:00:52 +0000 ROA not before: Thu 26 Dec 2024 14:00:52 +0000 ROA not after: Wed 26 Mar 2025 13:00:52 +0000 asID: 16625 IP address blocks: 104.82.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:55:d5:a4:e3:6b:8b:a9:7d:a2:50:21:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 26 14:00:52 2024 GMT Not After : Mar 26 13:00:52 2025 GMT Subject: CN=7bc5bbad-d016-42d8-b7a8-c31303d72361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ba:11:ea:85:32:c0:66:eb:08:d7:03:ee:20: 47:bc:4c:c3:28:8d:bf:a7:31:12:4c:a9:87:13:f1: b0:1f:0e:4d:e4:ff:4e:51:13:5c:ba:8c:37:b3:e0: e4:00:81:01:e6:35:6d:0f:f7:43:16:4a:9e:0f:40: b3:fc:3c:34:a2:28:7d:46:2a:5c:43:e2:e1:0e:8d: 83:00:2f:b8:62:b4:c1:75:d1:5e:dc:b4:87:50:9e: e9:08:4b:4a:b5:da:05:97:c1:12:06:af:f9:31:1e: 51:5a:7c:1d:28:2b:44:72:84:2f:53:34:cc:e2:5a: 20:6e:37:00:bc:f8:b5:d1:28:aa:e4:54:fe:b5:75: 05:12:eb:a5:9a:78:b4:28:4b:71:93:58:37:ce:d0: cf:35:b0:f8:83:02:66:96:c0:09:d7:0a:5a:64:68: a3:9a:85:21:2e:89:c7:b3:f8:c2:84:56:4d:1d:6d: 39:76:fc:62:1f:e9:15:48:0c:8b:57:d2:fa:53:ac: 9c:dd:57:29:73:4e:bf:6d:08:ba:0d:c7:1a:fc:1c: c2:c4:4e:39:5b:15:fa:d0:c9:9a:b0:8d:e4:29:6e: 8b:31:3c:2a:e1:f4:d7:2e:85:d0:5e:e8:17:bf:91: 15:89:b5:9c:da:0e:d4:82:04:0a:79:b0:51:1b:4c: c4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F2:F6:BF:F7:CE:D5:D4:7E:2B:67:0E:AC:09:C4:AA:D4:E2:A4:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5a95456-83f7-3981-a0b9-515831d8b3f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.82.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:3f:dd:1a:f4:84:65:d6:1f:89:50:87:81:83:10:3d:e7:00: 40:bb:6c:d7:d5:9a:a1:d4:11:13:26:bd:02:16:56:97:67:c8: 55:ac:e0:2d:1b:a6:5f:a6:d3:09:c0:17:f4:4f:d6:3b:d1:3d: 3e:38:0d:26:3f:83:b4:7d:e1:12:a1:68:b3:39:8d:e4:d4:f4: 3e:1d:0f:7a:d9:bc:0b:ba:87:65:f9:cd:19:c9:d4:e4:00:85: f9:57:ac:22:c4:b4:08:77:f3:56:f0:e6:fd:fb:0c:65:32:52: 1c:be:9a:61:0c:25:6d:38:40:61:bf:ae:4b:43:6a:4d:1f:11: bd:6d:74:79:84:da:7e:be:2e:37:bf:1c:d4:18:a2:bd:25:a8: 1c:34:ac:64:1f:10:f3:eb:c4:91:2e:64:87:c5:68:9c:9a:14: 69:56:d8:b5:2e:ca:41:b1:b0:42:e9:f1:03:35:d9:67:f8:50: fd:35:bc:73:89:eb:a9:9a:d4:23:b8:c8:e0:f9:ff:ce:f2:ef: 40:80:be:a7:53:2e:0b:2e:c3:c6:36:30:82:bf:b0:95:a2:b2: 91:0a:7d:47:bf:1c:34:e7:a4:b9:0e:42:80:7d:71:e0:bf:ad: 16:2e:92:fe:73:7e:7d:2a:d3:73:dd:40:64:33:2b:53:f4:95: 31:24:fa:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhV1aTja4upfaJQIfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTIyNjE0MDA1MloXDTI1MDMyNjEzMDA1MlowLzEtMCsGA1UEAxMk N2JjNWJiYWQtZDAxNi00MmQ4LWI3YTgtYzMxMzAzZDcyMzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmroR6oUywGbrCNcD7iBHvEzDKI2/pzESTKmH E/GwHw5N5P9OURNcuow3s+DkAIEB5jVtD/dDFkqeD0Cz/Dw0oih9RipcQ+LhDo2D AC+4YrTBddFe3LSHUJ7pCEtKtdoFl8ESBq/5MR5RWnwdKCtEcoQvUzTM4logbjcA vPi10Siq5FT+tXUFEuulmni0KEtxk1g3ztDPNbD4gwJmlsAJ1wpaZGijmoUhLonH s/jChFZNHW05dvxiH+kVSAyLV9L6U6yc3Vcpc06/bQi6Dcca/BzCxE45WxX60Mma sI3kKW6LMTwq4fTXLoXQXugXv5EVibWc2g7UggQKebBRG0zEtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNry9r/3ztXUfitnDqwJxKrU4qQxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDVhOTU0NTYtODNmNy0z OTgxLWEwYjktNTE1ODMxZDhiM2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaFJIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABU/3Rr0hGXWH4lQh4GDED3nAEC7bNfVmqHUERMmvQIWVpdnyFWs4C0b pl+m0wnAF/RP1jvRPT44DSY/g7R94RKhaLM5jeTU9D4dD3rZvAu6h2X5zRnJ1OQA hflXrCLEtAh381bw5v37DGUyUhy+mmEMJW04QGG/rktDak0fEb1tdHmE2n6+Lje/ HNQYor0lqBw0rGQfEPPrxJEuZIfFaJyaFGlW2LUuykGxsELp8QM12Wf4UP01vHOJ 66ma1CO4yOD5/87y70CAvqdTLgsuw8Y2MIK/sJWispEKfUe/HDTnpLkOQoB9ceC/ rRYukv5zfn0q03PdQGQzK1P0lTEk+jI= -----END CERTIFICATE-----Generated at Sun Feb 16 20:52:58 2025 by rpki-client