$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/29387d14-5369-3841-8b55-747cef9985b6.roa File: 29387d14-5369-3841-8b55-747cef9985b6.roa (raw, json) Hash identifier: Vqi4z15lmoNEMQNL/egnqfkXdTihFIMSM4SaOLYIWco= Subject key identifier: F9:84:7C:06:1E:30:99:17:44:5A:60:8E:0C:DC:1B:1D:9E:B3:14:C7 Certificate issuer: /CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279 Certificate serial: 010D0C9F432858482A8FD903CFFBC80B8273A800 Authority key identifier: C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/29387d14-5369-3841-8b55-747cef9985b6.roa Signing time: Wed 11 Dec 2024 02:00:38 +0000 ROA not before: Wed 11 Dec 2024 02:00:38 +0000 ROA not after: Tue 11 Mar 2025 01:00:38 +0000 asID: 46562 IP address blocks: 104.200.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2a:8f:d9:03:cf:fb:c8:0b:82:73:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279 Validity Not Before: Dec 11 02:00:38 2024 GMT Not After : Mar 11 01:00:38 2025 GMT Subject: CN=b00d9d01-634a-413a-9e84-aeb432afa2d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:da:e7:ab:1e:18:93:25:b5:ca:9c:b3:56:ad: 70:35:33:29:13:4a:6f:ba:e1:dd:6a:12:07:f0:48: b0:8a:b2:e4:82:fc:dc:9d:60:70:4f:c3:79:60:7f: ab:ee:64:ce:0b:59:5c:8e:31:61:59:ed:6d:bd:71: cb:43:02:55:75:78:04:0f:eb:95:b5:a5:86:f5:c2: 66:d8:08:e9:9b:77:8d:2e:57:1b:3a:ce:b3:56:c2: b9:d2:db:74:ab:91:b3:44:be:f6:8d:f2:a2:f5:30: b4:4f:9b:76:4b:4f:4e:7d:ae:77:fd:db:ff:89:a8: cb:b9:ba:e4:32:56:7f:f8:99:da:87:ca:14:30:df: 63:dc:18:d7:23:38:1f:70:b7:58:a5:9f:47:a0:9b: 98:3b:92:8c:4b:6d:eb:29:d3:de:c3:13:62:e8:83: 0d:cc:42:9d:ba:ad:c5:a9:98:2a:e8:c4:d4:68:b3: 3d:96:bd:4c:75:46:ab:90:01:de:a0:fe:c9:9e:a6: de:61:97:00:98:67:c5:6d:6f:2b:7b:0c:06:7b:a2: f0:d7:74:0f:65:1d:1e:d4:4c:4e:2e:91:ac:08:75: 1b:b0:df:44:58:ce:6c:f8:ae:fa:c3:d5:74:a2:46: 87:51:89:85:ab:bd:0e:73:a0:06:cc:a3:26:05:2f: 2d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:84:7C:06:1E:30:99:17:44:5A:60:8E:0C:DC:1B:1D:9E:B3:14:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/29387d14-5369-3841-8b55-747cef9985b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl X509v3 Authority Key Identifier: keyid:C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer sbgp-ipAddrBlock: critical IPv4: 104.200.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:8b:34:29:84:2e:e1:d0:6c:26:71:f6:86:14:d5:48:ac:2c: f3:de:54:08:09:b7:bf:8b:66:f0:78:f4:54:c3:b1:c6:93:82: eb:05:98:ee:c1:ce:f8:e4:94:e2:10:42:8e:f3:76:5f:a6:18: 87:4c:4c:e0:bd:b6:f7:4b:40:47:0a:83:90:e5:ff:c3:8c:33: 3f:fa:ba:c5:0c:74:1d:23:41:ed:62:ec:66:9a:48:be:4c:b3: 2d:e7:d5:5b:d6:be:e3:fd:4e:3b:53:55:5c:a1:c0:bb:5e:f2: aa:e4:34:3c:80:a8:9f:dd:ec:be:4d:75:9a:91:bc:f9:af:7c: 39:70:e6:ce:a6:4e:bf:2c:81:7a:95:37:e7:8b:23:b5:2f:93: 21:58:4a:d7:41:0c:e0:18:61:cb:cf:ea:3e:3b:f7:e1:24:b2: d5:46:6e:cf:95:92:b5:1b:b0:a7:ba:71:b9:2a:0c:a8:f0:e2: f8:91:d7:24:18:0f:0c:31:e5:41:bb:9f:65:e9:71:f1:bd:9c: 1b:ec:13:2a:c4:c5:3c:14:3d:b5:e6:3c:28:ae:7a:0b:02:7d: f6:3e:00:e4:38:c9:1e:63:c0:0c:be:fa:a1:30:cc:24:cc:5e: bc:d5:8d:50:98:a2:d6:da:9c:3c:f9:02:a2:10:ff:6b:5e:97: 4b:f4:4b:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgqj9kDz/vIC4JzqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDUzMjNkYWMtYTE1ZC00ZjgyLWE3MGItMzBlMWE0Y2Ex Mjc5MB4XDTI0MTIxMTAyMDAzOFoXDTI1MDMxMTAxMDAzOFowLzEtMCsGA1UEAxMk YjAwZDlkMDEtNjM0YS00MTNhLTllODQtYWViNDMyYWZhMmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9rnqx4YkyW1ypyzVq1wNTMpE0pvuuHdahIH 8EiwirLkgvzcnWBwT8N5YH+r7mTOC1lcjjFhWe1tvXHLQwJVdXgED+uVtaWG9cJm 2Ajpm3eNLlcbOs6zVsK50tt0q5GzRL72jfKi9TC0T5t2S09Ofa53/dv/iajLubrk MlZ/+Jnah8oUMN9j3BjXIzgfcLdYpZ9HoJuYO5KMS23rKdPewxNi6IMNzEKduq3F qZgq6MTUaLM9lr1MdUarkAHeoP7JnqbeYZcAmGfFbW8rewwGe6Lw13QPZR0e1ExO LpGsCHUbsN9EWM5s+K76w9V0okaHUYmFq70Oc6AGzKMmBS8tqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmEfAYeMJkXRFpgjgzcGx2esxTHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNTMy M2RhYy1hMTVkLTRmODItYTcwYi0zMGUxYTRjYTEyNzkvMjkzODdkMTQtNTM2OS0z ODQxLThiNTUtNzQ3Y2VmOTk4NWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDUzMjNkYWMtYTE1ZC00ZjgyLWE3 MGItMzBlMWE0Y2ExMjc5L2Q1MzIzZGFjLWExNWQtNGY4Mi1hNzBiLTMwZTFhNGNh MTI3OS5jcmwwHwYDVR0jBBgwFoAUyDY3c/UqyujL65IZblyvIFXxGr4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNTMyM2RhYy1hMTVkLTRmODItYTcwYi0zMGUx YTRjYTEyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaMiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL2LNCmELuHQbCZx9oYU1UisLPPeVAgJt7+LZvB49FTDscaTgusFmO7B zvjklOIQQo7zdl+mGIdMTOC9tvdLQEcKg5Dl/8OMMz/6usUMdB0jQe1i7GaaSL5M sy3n1VvWvuP9TjtTVVyhwLte8qrkNDyAqJ/d7L5NdZqRvPmvfDlw5s6mTr8sgXqV N+eLI7UvkyFYStdBDOAYYcvP6j479+EkstVGbs+VkrUbsKe6cbkqDKjw4viR1yQY Dwwx5UG7n2XpcfG9nBvsEyrExTwUPbXmPCiuegsCffY+AOQ4yR5jwAy++qEwzCTM XrzVjVCYotbanDz5AqIQ/2tel0v0Swg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:31 2025 by rpki-client