$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/cf64dd3f-c7b9-3d06-b121-e72c561a89da.roa File: cf64dd3f-c7b9-3d06-b121-e72c561a89da.roa (raw, json) Hash identifier: kvfvwsdfOX7TY8Lf+pY7APY0P9HngqshhHupAeZeHN4= Subject key identifier: 68:72:65:1D:47:85:10:8E:5E:06:02:AD:C8:58:48:6E:12:1B:E2:53 Certificate issuer: /CN=b32ded34-63dd-4272-9a22-5524e5e4ab15 Certificate serial: 010D0C9F43285848100A8750688A9BDEED742EC0 Authority key identifier: 95:F6:91:74:F3:9D:AA:FF:0E:3E:47:55:39:37:38:C3:90:74:6B:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/cf64dd3f-c7b9-3d06-b121-e72c561a89da.roa Signing time: Sun 01 Dec 2024 14:00:51 +0000 ROA not before: Sun 01 Dec 2024 14:00:51 +0000 ROA not after: Sat 01 Mar 2025 14:00:51 +0000 asID: 14618 IP address blocks: 104.171.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/b32ded34-63dd-4272-9a22-5524e5e4ab15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/b32ded34-63dd-4272-9a22-5524e5e4ab15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:10:0a:87:50:68:8a:9b:de:ed:74:2e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b32ded34-63dd-4272-9a22-5524e5e4ab15 Validity Not Before: Dec 1 14:00:51 2024 GMT Not After : Mar 1 14:00:51 2025 GMT Subject: CN=ff46573c-7c20-465f-9142-bcc302eaf534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5d:f0:72:da:a3:73:60:00:21:f4:e8:97:77: 2f:6d:c1:be:be:c2:31:b0:91:ac:91:60:db:9f:4e: be:5a:97:68:d1:d4:f4:a4:09:80:ca:64:5a:07:dd: f6:db:e3:49:2e:07:56:5a:e8:63:03:98:0f:32:73: d8:80:36:2d:24:2e:78:45:50:f2:72:33:91:84:06: b1:a0:95:93:12:10:26:27:28:69:c8:eb:a7:87:29: 1a:cc:ea:03:6c:3b:ff:72:6f:eb:f3:87:75:d3:e0: 24:d6:53:c2:b1:24:04:42:5a:68:79:3c:72:34:d1: 09:55:ef:63:00:60:eb:61:53:76:70:2c:ff:ed:23: 96:a9:15:d0:80:0e:fd:19:42:87:47:25:d5:8a:72: 39:a1:bd:78:ae:1d:c0:29:29:d2:cf:fc:40:13:4d: f0:af:85:ec:ec:cd:e2:ec:d3:33:6e:46:82:ae:b2: 66:4a:2f:75:76:bb:c0:03:e3:5a:3a:68:6c:ad:1a: ad:cc:c4:ab:7d:7f:31:53:54:82:43:99:54:4a:dd: b9:bb:ba:8b:e8:58:85:51:56:1a:45:32:fb:6d:2b: 58:36:53:62:bf:6b:3e:17:09:c2:3c:33:7e:df:bb: 80:83:cc:d9:28:0d:17:d4:02:1c:89:c5:e1:5d:23: d5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:72:65:1D:47:85:10:8E:5E:06:02:AD:C8:58:48:6E:12:1B:E2:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/cf64dd3f-c7b9-3d06-b121-e72c561a89da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/b32ded34-63dd-4272-9a22-5524e5e4ab15.crl X509v3 Authority Key Identifier: keyid:95:F6:91:74:F3:9D:AA:FF:0E:3E:47:55:39:37:38:C3:90:74:6B:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15.cer sbgp-ipAddrBlock: critical IPv4: 104.171.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:c5:63:76:f4:ae:14:67:1a:56:a1:9b:52:2a:06:1e:8e:b2: 2a:81:ed:0d:b5:90:98:e7:80:92:1e:d9:6a:80:6a:3c:b4:2b: a7:34:41:21:c8:f8:ac:cf:aa:2d:a1:57:eb:e4:9a:b9:1d:19: 6d:46:22:43:d6:cf:d2:fc:9d:c9:69:30:ff:74:1c:ff:1a:23: ae:0c:ad:35:9d:d4:5b:11:2c:85:0a:12:bf:50:f2:7d:fc:a1: f0:05:42:15:50:66:6a:56:93:bd:aa:5e:a6:05:76:e1:cb:74: 45:f9:ad:f5:26:8e:4c:c6:f5:7e:3e:ab:31:82:52:f0:9b:45: 42:33:7b:10:88:99:70:b2:94:75:06:c9:ad:7e:69:88:ce:47: 0a:6c:39:96:14:47:75:0d:87:84:dd:a9:2d:71:25:c8:50:e4: ec:60:ac:9b:bd:9c:97:d7:45:86:c9:9e:fe:10:14:05:e6:16: a9:c8:4c:f2:67:04:1b:50:d1:a4:05:2c:96:28:d1:6b:b8:38: 5e:a6:00:32:1f:fe:f3:58:54:39:74:b4:f6:3f:27:9e:9e:1b: 67:59:17:03:a6:72:fe:ad:50:2e:eb:56:a2:53:af:3d:00:6a: ed:b1:86:70:68:45:e3:7d:cf:d4:1b:23:76:f8:0f:74:1e:eb: ce:ad:3f:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgQCodQaIqb3u10LsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjMyZGVkMzQtNjNkZC00MjcyLTlhMjItNTUyNGU1ZTRh YjE1MB4XDTI0MTIwMTE0MDA1MVoXDTI1MDMwMTE0MDA1MVowLzEtMCsGA1UEAxMk ZmY0NjU3M2MtN2MyMC00NjVmLTkxNDItYmNjMzAyZWFmNTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyV3wctqjc2AAIfTol3cvbcG+vsIxsJGskWDb n06+Wpdo0dT0pAmAymRaB9322+NJLgdWWuhjA5gPMnPYgDYtJC54RVDycjORhAax oJWTEhAmJyhpyOunhykazOoDbDv/cm/r84d10+Ak1lPCsSQEQlpoeTxyNNEJVe9j AGDrYVN2cCz/7SOWqRXQgA79GUKHRyXVinI5ob14rh3AKSnSz/xAE03wr4Xs7M3i 7NMzbkaCrrJmSi91drvAA+NaOmhsrRqtzMSrfX8xU1SCQ5lUSt25u7qL6FiFUVYa RTL7bStYNlNiv2s+FwnCPDN+37uAg8zZKA0X1AIcicXhXSPVYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhyZR1HhRCOXgYCrchYSG4SG+JTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMzJk ZWQzNC02M2RkLTQyNzItOWEyMi01NTI0ZTVlNGFiMTUvY2Y2NGRkM2YtYzdiOS0z ZDA2LWIxMjEtZTcyYzU2MWE4OWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjMyZGVkMzQtNjNkZC00MjcyLTlh MjItNTUyNGU1ZTRhYjE1L2IzMmRlZDM0LTYzZGQtNDI3Mi05YTIyLTU1MjRlNWU0 YWIxNS5jcmwwHwYDVR0jBBgwFoAUlfaRdPOdqv8OPkdVOTc4w5B0a5kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMzJkZWQzNC02M2RkLTQyNzItOWEyMi01NTI0 ZTVlNGFiMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKvGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPFY3b0rhRnGlahm1IqBh6OsiqB7Q21kJjngJIe2WqAajy0K6c0QSHI +KzPqi2hV+vkmrkdGW1GIkPWz9L8nclpMP90HP8aI64MrTWd1FsRLIUKEr9Q8n38 ofAFQhVQZmpWk72qXqYFduHLdEX5rfUmjkzG9X4+qzGCUvCbRUIzexCImXCylHUG ya1+aYjORwpsOZYUR3UNh4TdqS1xJchQ5OxgrJu9nJfXRYbJnv4QFAXmFqnITPJn BBtQ0aQFLJYo0Wu4OF6mADIf/vNYVDl0tPY/J56eG2dZFwOmcv6tUC7rVqJTrz0A au2xhnBoReN9z9QbI3b4D3Qe686tPwg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:01 2025 by rpki-client