$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff7f6926-1e76-31e4-94fb-f4dd7e12a199.roa File: ff7f6926-1e76-31e4-94fb-f4dd7e12a199.roa (raw, json) Hash identifier: Aj8UvNiCwiNjc5bX9+oT/Kd30oYqRKcfhUoBK3/kFME= Subject key identifier: 4B:88:C7:93:3B:C0:6D:A2:5E:AB:F2:9D:B4:56:20:CC:C1:81:C5:C5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584855D5AA97562D07E063A79600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff7f6926-1e76-31e4-94fb-f4dd7e12a199.roa Signing time: Thu 26 Dec 2024 14:00:52 +0000 ROA not before: Thu 26 Dec 2024 14:00:52 +0000 ROA not after: Wed 26 Mar 2025 13:00:52 +0000 asID: 16625 IP address blocks: 104.90.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:55:d5:aa:97:56:2d:07:e0:63:a7:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 26 14:00:52 2024 GMT Not After : Mar 26 13:00:52 2025 GMT Subject: CN=024b38ee-2de5-483d-80a3-ef92f435be8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:82:7e:31:ed:cb:8e:38:12:01:c3:b3:fe:93: 05:c6:bd:a8:6e:4f:bd:4f:c6:75:45:63:e2:35:2b: 08:48:2e:8a:be:07:4f:9a:46:3f:96:32:cb:bb:11: 57:07:a8:bb:5a:88:65:80:26:32:9f:c8:61:bb:49: 98:bd:09:86:47:8b:c4:71:af:f8:27:e7:31:ca:52: 07:bc:fd:52:0c:96:d7:b5:ad:65:7d:24:37:d7:27: e2:66:63:de:1a:74:96:b0:c4:8e:5e:be:41:3d:08: fd:87:1d:b3:ba:9e:6d:f7:9f:f2:34:a5:85:b7:c7: 4d:34:8b:4f:21:85:3a:78:84:80:9a:76:84:4c:63: e9:dd:ca:ef:07:e6:55:8b:a7:7a:85:08:e9:15:fd: 5e:69:eb:9a:85:e8:97:67:1a:77:02:ca:f5:d5:15: 28:8d:83:c9:52:dc:a4:fa:68:99:c7:e9:5e:c6:6b: 57:dc:9b:b1:96:08:a8:e9:fc:74:dc:53:58:05:85: 46:75:fc:2f:5d:f0:af:ab:5a:58:45:2a:9a:e0:0c: 35:65:f5:2d:71:36:5e:ad:ed:f3:4b:d4:59:00:48: 5e:9e:b1:f9:45:3b:06:f4:05:90:0f:4e:f1:27:65: 38:6d:e7:f5:5c:d3:ea:4f:87:1e:3d:2d:83:3d:dd: 5e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:88:C7:93:3B:C0:6D:A2:5E:AB:F2:9D:B4:56:20:CC:C1:81:C5:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff7f6926-1e76-31e4-94fb-f4dd7e12a199.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.90.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:c5:55:a8:fa:a1:d5:f8:f5:34:4c:1b:cf:54:70:9b:73:02: f5:54:36:9f:c5:1a:60:32:4d:4c:75:e4:f8:8f:4f:d4:19:0b: 63:ee:81:ab:71:81:8a:2d:82:b7:6d:bc:8a:ec:f2:d1:a7:fe: 75:a7:6d:3b:8a:ad:f9:ad:0f:58:24:17:c6:95:81:2d:20:fb: 6a:e8:f1:05:50:72:c5:49:e4:d0:a4:93:1c:21:63:1a:18:d6: fd:c0:a3:f4:4d:bc:3d:96:1e:c5:db:da:0d:87:d7:88:87:2e: 21:10:77:04:b3:df:23:5b:a6:11:a9:94:56:2c:b2:89:7b:74: 39:c5:ac:04:45:b7:a1:54:c5:ad:74:1f:27:16:4a:33:03:79: 1a:3a:00:35:4e:b2:10:31:41:9c:e9:ad:87:1b:55:25:22:eb: b5:71:04:70:d1:59:e3:6d:cf:14:1e:89:08:3e:22:ef:a4:49: 6f:35:b2:3f:05:a1:f1:ea:92:0d:f7:d8:01:0e:a0:50:c6:79: 8e:9f:03:fa:ad:9f:db:3e:8a:03:4b:0a:cd:f6:10:34:49:3a: 78:4e:e1:6a:85:22:33:62:61:d3:61:11:5a:80:d3:4c:94:48: 36:80:c8:8a:6e:76:67:60:f8:3c:33:a0:65:6e:a8:19:62:ca: 63:c5:e8:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhV1aqXVi0H4GOnlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTIyNjE0MDA1MloXDTI1MDMyNjEzMDA1MlowLzEtMCsGA1UEAxMk MDI0YjM4ZWUtMmRlNS00ODNkLTgwYTMtZWY5MmY0MzViZThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoJ+Me3LjjgSAcOz/pMFxr2obk+9T8Z1RWPi NSsISC6KvgdPmkY/ljLLuxFXB6i7WohlgCYyn8hhu0mYvQmGR4vEca/4J+cxylIH vP1SDJbXta1lfSQ31yfiZmPeGnSWsMSOXr5BPQj9hx2zup5t95/yNKWFt8dNNItP IYU6eISAmnaETGPp3crvB+ZVi6d6hQjpFf1eaeuaheiXZxp3Asr11RUojYPJUtyk +miZx+lexmtX3Juxlgio6fx03FNYBYVGdfwvXfCvq1pYRSqa4Aw1ZfUtcTZere3z S9RZAEhenrH5RTsG9AWQD07xJ2U4bef1XNPqT4cePS2DPd1eMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEuIx5M7wG2iXqvynbRWIMzBgcXFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmY3ZjY5MjYtMWU3Ni0z MWU0LTk0ZmItZjRkZDdlMTJhMTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaFrIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDFVaj6odX49TRMG89UcJtzAvVUNp/FGmAyTUx15PiPT9QZC2Pugatx gYotgrdtvIrs8tGn/nWnbTuKrfmtD1gkF8aVgS0g+2ro8QVQcsVJ5NCkkxwhYxoY 1v3Ao/RNvD2WHsXb2g2H14iHLiEQdwSz3yNbphGplFYssol7dDnFrARFt6FUxa10 HycWSjMDeRo6ADVOshAxQZzprYcbVSUi67VxBHDRWeNtzxQeiQg+Iu+kSW81sj8F ofHqkg332AEOoFDGeY6fA/qtn9s+igNLCs32EDRJOnhO4WqFIjNiYdNhEVqA00yU SDaAyIpudmdg+DwzoGVuqBliymPF6C0= -----END CERTIFICATE-----Generated at Sun Feb 16 21:03:09 2025 by rpki-client