$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/6deddc91-1e80-3cbe-aa0c-aac1448de702.roa File: 6deddc91-1e80-3cbe-aa0c-aac1448de702.roa (raw, json) Hash identifier: 7pGWzVgGRdgQSDC792QTUMtseU/byD0ZaVS6KfUnBqU= Subject key identifier: 59:5E:1C:33:3F:67:17:58:CE:85:86:B9:60:8E:7D:DD:03:8B:50:73 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285848C150D0E8CDF260D2CB691D20 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/6deddc91-1e80-3cbe-aa0c-aac1448de702.roa Signing time: Mon 03 Feb 2025 02:00:39 +0000 ROA not before: Mon 03 Feb 2025 02:00:39 +0000 ROA not after: Sun 04 May 2025 01:00:39 +0000 asID: 213122 IP address blocks: 104.224.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c1:50:d0:e8:cd:f2:60:d2:cb:69:1d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Feb 3 02:00:39 2025 GMT Not After : May 4 01:00:39 2025 GMT Subject: CN=3cac8a3d-4f17-4f73-a89c-1eefc666a833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2d:38:a8:5a:81:a9:54:f0:34:77:90:c0:91: 53:0f:eb:29:e9:c4:76:55:9d:84:c0:a2:d4:85:6c: bd:23:86:bc:1a:0d:81:ab:eb:1d:93:50:68:83:5e: 5f:e6:a0:21:26:94:45:87:56:f3:e5:db:51:23:d2: f2:bf:cc:99:e1:a8:24:4e:63:c8:f3:bc:b7:b2:59: de:9a:f4:68:39:75:c0:1a:aa:4c:e2:47:05:d8:23: 62:bf:b7:8b:53:4c:44:a7:a4:25:5a:69:1e:46:b3: 5b:80:a6:40:64:66:23:3c:81:e2:55:9d:30:22:f5: 99:a0:f3:7b:4d:0c:3a:32:af:e4:02:c0:af:e4:a4: 19:04:a3:10:c8:a2:61:62:a5:b4:2c:e6:a6:27:c5: 9b:33:b7:c6:5d:e9:72:62:07:eb:a5:ee:58:2d:62: 3b:b1:48:fa:05:09:a8:40:4c:1a:27:86:b9:3b:8e: 40:6d:00:6c:80:1f:eb:df:82:21:87:34:09:82:fc: 70:16:5b:a0:28:02:15:9d:0f:3f:bf:9a:d6:e6:51: 8c:bf:08:ab:d0:58:76:6f:b2:b2:15:1d:a7:6d:0d: 58:db:a6:08:79:b0:be:a6:06:74:30:a6:27:17:8b: b8:a8:95:7f:60:c7:52:e9:78:41:e5:1c:0b:b2:06: e2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:5E:1C:33:3F:67:17:58:CE:85:86:B9:60:8E:7D:DD:03:8B:50:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/6deddc91-1e80-3cbe-aa0c-aac1448de702.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 104.224.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:2e:76:57:61:05:5a:23:b2:93:d9:ee:a3:51:04:13:38:2b: 6f:12:5a:1c:c9:1a:8a:1d:fb:a7:4e:fe:67:c7:78:bd:6a:aa: 70:f8:6e:20:95:c5:fd:06:1c:75:7c:13:a7:42:f0:ff:89:0d: a1:0b:cc:c5:67:ea:19:81:79:5b:49:05:93:d3:65:89:d4:87: 3b:45:c3:89:db:45:e0:d5:a4:e0:1c:b3:c9:99:a8:03:6c:9c: d2:bf:4b:65:f8:d4:3e:2a:97:b2:e5:22:8e:13:45:c9:01:8e: 2f:9e:30:fb:79:e3:d5:64:68:ee:43:63:3b:fc:b6:0b:c1:61: 1f:fd:85:3c:11:ea:32:71:46:62:16:45:39:38:32:68:e3:17: 0f:df:33:63:03:34:00:76:82:d7:a8:56:1b:e3:81:af:e3:d0: b1:44:90:6e:06:00:b2:cb:ed:63:58:6e:f7:3a:c0:d9:02:2b: 14:1d:ca:a5:b5:34:40:ca:74:38:56:e2:d0:55:f6:7a:ce:3e: d0:57:59:88:be:59:de:6c:f0:2f:2d:f3:c1:26:e6:ef:43:03: 2f:22:46:d9:d5:3f:f3:41:1a:70:85:80:2a:90:86:ef:28:35: 65:36:b2:df:26:de:9e:e3:e2:25:10:49:c3:22:90:d3:23:7c: ca:ad:c9:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUNDozfJg0stpHSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk M2NhYzhhM2QtNGYxNy00ZjczLWE4OWMtMWVlZmM2NjZhODMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwi04qFqBqVTwNHeQwJFTD+sp6cR2VZ2EwKLU hWy9I4a8Gg2Bq+sdk1Bog15f5qAhJpRFh1bz5dtRI9Lyv8yZ4agkTmPI87y3slne mvRoOXXAGqpM4kcF2CNiv7eLU0xEp6QlWmkeRrNbgKZAZGYjPIHiVZ0wIvWZoPN7 TQw6Mq/kAsCv5KQZBKMQyKJhYqW0LOamJ8WbM7fGXelyYgfrpe5YLWI7sUj6BQmo QEwaJ4a5O45AbQBsgB/r34IhhzQJgvxwFlugKAIVnQ8/v5rW5lGMvwir0Fh2b7Ky FR2nbQ1Y26YIebC+pgZ0MKYnF4u4qJV/YMdS6XhB5RwLsgbihwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFleHDM/ZxdYzoWGuWCOfd0Di1BzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNmRlZGRjOTEtMWU4MC0z Y2JlLWFhMGMtYWFjMTQ0OGRlNzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4udldhBVojspPZ7qNRBBM4K28SWhzJGood+6dO/mfHeL1qqnD4biCV xf0GHHV8E6dC8P+JDaELzMVn6hmBeVtJBZPTZYnUhztFw4nbReDVpOAcs8mZqANs nNK/S2X41D4ql7LlIo4TRckBji+eMPt549VkaO5DYzv8tgvBYR/9hTwR6jJxRmIW RTk4MmjjFw/fM2MDNAB2gteoVhvjga/j0LFEkG4GALLL7WNYbvc6wNkCKxQdyqW1 NEDKdDhW4tBV9nrOPtBXWYi+Wd5s8C8t88Em5u9DAy8iRtnVP/NBGnCFgCqQhu8o NWU2st8m3p7j4iUQScMikNMjfMqtyZ0= -----END CERTIFICATE-----Generated at Sat Apr 5 18:36:45 2025 by rpki-client