$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/e2c5f2b5-a6e0-3d19-8f9f-a37dbee569c2.roa File: e2c5f2b5-a6e0-3d19-8f9f-a37dbee569c2.roa (raw, json) Hash identifier: rBwrygD57XO9yVcpzet/R6KFnd3j9xYdsGNg8PsC0tY= Subject key identifier: 40:4E:91:9D:8B:BE:66:C1:C0:C4:76:88:97:5B:0E:90:76:93:19:10 Certificate issuer: /CN=b09eeed3-3c84-4892-89ae-0ce139a9ca4a Certificate serial: 010D0C9F432858489A3B4CA093615467D56296C0 Authority key identifier: 65:6D:DC:8C:64:FE:51:A7:CF:6F:01:44:7E:5D:6B:44:20:DE:B2:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/e2c5f2b5-a6e0-3d19-8f9f-a37dbee569c2.roa Signing time: Mon 20 Jan 2025 02:00:40 +0000 ROA not before: Mon 20 Jan 2025 02:00:40 +0000 ROA not after: Sun 20 Apr 2025 01:00:40 +0000 asID: 32145 IP address blocks: 104.249.184.0/22 maxlen: 24 170.39.220.0/22 maxlen: 24 192.107.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9a:3b:4c:a0:93:61:54:67:d5:62:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b09eeed3-3c84-4892-89ae-0ce139a9ca4a Validity Not Before: Jan 20 02:00:40 2025 GMT Not After : Apr 20 01:00:40 2025 GMT Subject: CN=c1370118-a630-4db5-9cd1-605282ad2113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fc:80:58:6a:97:01:0e:ed:32:77:43:8b:fe: ff:4b:6a:6a:e7:77:7d:f6:92:f0:10:e0:b0:e1:ea: b9:c3:78:ae:40:aa:05:00:45:d2:1b:2b:28:de:c0: 19:b4:ce:16:ca:cd:d9:62:25:55:ce:16:51:0f:e5: 4d:a8:38:4d:6c:99:76:55:5b:8f:ae:d0:36:31:43: 80:7f:b5:f3:69:7c:87:6b:5f:23:64:85:85:6a:50: 3f:f9:29:15:84:41:9a:c7:aa:d6:95:bd:07:78:a1: dd:55:f9:2e:40:42:36:cd:e7:9f:e8:08:47:da:8c: 4b:3f:e1:10:d4:64:a2:8f:ae:d3:2d:a2:d6:89:ca: ce:a7:eb:c7:ad:db:73:e0:b5:c2:e6:4e:2d:48:78: 8e:b8:7b:bc:53:da:61:93:0d:cb:a6:ea:28:80:2f: a6:04:7e:c4:41:4d:dd:9f:5e:f9:27:b3:c1:5f:35: 78:30:13:64:4b:63:fa:83:89:c9:a4:86:42:50:47: 05:67:76:6c:c9:50:ba:78:37:44:57:0d:d9:d1:b6: 0f:7f:58:e5:31:ca:e4:4d:da:18:b5:77:8d:9c:75: 56:7e:c3:d2:3c:0d:46:8b:0a:3b:a5:8f:bb:c4:bf: 8f:13:44:64:82:b9:6e:35:23:c9:82:64:f5:bc:12: 72:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:4E:91:9D:8B:BE:66:C1:C0:C4:76:88:97:5B:0E:90:76:93:19:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/e2c5f2b5-a6e0-3d19-8f9f-a37dbee569c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.crl X509v3 Authority Key Identifier: keyid:65:6D:DC:8C:64:FE:51:A7:CF:6F:01:44:7E:5D:6B:44:20:DE:B2:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.cer sbgp-ipAddrBlock: critical IPv4: 104.249.184.0/22 170.39.220.0/22 192.107.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:96:ca:f8:4f:88:0b:e4:24:1f:99:c5:9f:40:7c:64:ff:fc: 19:e9:fe:b7:bc:ef:a5:56:5d:ff:e9:54:89:fa:96:1b:ca:de: 7b:7b:1c:77:37:d6:c0:bb:36:ea:2f:0d:6a:c8:ee:90:dc:fd: 13:df:bc:f4:cf:72:b7:0f:20:44:23:f6:60:d6:67:0d:75:f3: 86:66:68:94:65:dd:d1:f6:f7:8f:18:7a:3d:a6:e8:67:81:8a: f7:1b:e4:3e:c2:ce:46:3a:a8:5c:ab:f8:7e:ab:f6:9d:5b:1e: 94:ea:53:03:11:bd:cb:e7:bc:ee:2c:2f:89:ac:88:2f:54:95: 15:3a:d4:90:e1:19:aa:6d:7d:30:ac:ba:3b:29:96:4a:63:59: 91:49:3c:96:7a:3c:3e:65:2c:df:72:06:ff:ee:a4:83:1a:e4: ce:ec:99:32:19:75:c4:bb:cf:47:f1:00:a7:62:2f:aa:77:47: ae:ce:47:b8:fe:34:51:7d:1d:69:7e:be:fc:81:37:26:2a:f0: bd:b9:dc:5a:46:29:8f:44:ad:e0:37:42:ea:73:b2:a8:95:9f: 48:b2:0a:c3:2d:63:e4:d0:41:87:b3:05:9c:b0:cd:7a:f4:58: 1a:92:ad:79:ab:cf:33:72:21:6b:3d:25:84:13:1c:4e:83:b3: 07:8b:e6:17 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEiaO0ygk2FUZ9VilsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjA5ZWVlZDMtM2M4NC00ODkyLTg5YWUtMGNlMTM5YTlj YTRhMB4XDTI1MDEyMDAyMDA0MFoXDTI1MDQyMDAxMDA0MFowLzEtMCsGA1UEAxMk YzEzNzAxMTgtYTYzMC00ZGI1LTljZDEtNjA1MjgyYWQyMTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/yAWGqXAQ7tMndDi/7/S2pq53d99pLwEOCw 4eq5w3iuQKoFAEXSGyso3sAZtM4Wys3ZYiVVzhZRD+VNqDhNbJl2VVuPrtA2MUOA f7XzaXyHa18jZIWFalA/+SkVhEGax6rWlb0HeKHdVfkuQEI2zeef6AhH2oxLP+EQ 1GSij67TLaLWicrOp+vHrdtz4LXC5k4tSHiOuHu8U9phkw3LpuoogC+mBH7EQU3d n175J7PBXzV4MBNkS2P6g4nJpIZCUEcFZ3ZsyVC6eDdEVw3Z0bYPf1jlMcrkTdoY tXeNnHVWfsPSPA1Giwo7pY+7xL+PE0RkgrluNSPJgmT1vBJy2wIDAQABo4IDYTCC A10wHQYDVR0OBBYEFEBOkZ2LvmbBwMR2iJdbDpB2kxkQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMDll ZWVkMy0zYzg0LTQ4OTItODlhZS0wY2UxMzlhOWNhNGEvZTJjNWYyYjUtYTZlMC0z ZDE5LThmOWYtYTM3ZGJlZTU2OWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjA5ZWVlZDMtM2M4NC00ODkyLTg5 YWUtMGNlMTM5YTljYTRhL2IwOWVlZWQzLTNjODQtNDg5Mi04OWFlLTBjZTEzOWE5 Y2E0YS5jcmwwHwYDVR0jBBgwFoAUZW3cjGT+UafPbwFEfl1rRCDesvowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMDllZWVkMy0zYzg0LTQ4OTItODlhZS0wY2Ux MzlhOWNhNGEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCaPm4AwQC qifcAwQBwGt4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEKWyvhPiAvkJB+ZxZ9AfGT//Bnp/re876VWXf/p VIn6lhvK3nt7HHc31sC7NuovDWrI7pDc/RPfvPTPcrcPIEQj9mDWZw1184ZmaJRl 3dH2948Yej2m6GeBivcb5D7CzkY6qFyr+H6r9p1bHpTqUwMRvcvnvO4sL4msiC9U lRU61JDhGaptfTCsujsplkpjWZFJPJZ6PD5lLN9yBv/upIMa5M7smTIZdcS7z0fx AKdiL6p3R67OR7j+NFF9HWl+vvyBNyYq8L253FpGKY9EreA3QupzsqiVn0iyCsMt Y+TQQYezBZywzXr0WBqSrXmrzzNyIWs9JYQTHE6DsweL5hc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:11 2025 by rpki-client