$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/8df1d45d-f0f6-331a-aa48-9c48058a3859.roa File: 8df1d45d-f0f6-331a-aa48-9c48058a3859.roa (raw, json) Hash identifier: qzfuJRzxgT3i4ZWcXveAG+HanXthuomXK/UdrTj83q4= Subject key identifier: 47:C5:83:7F:2F:20:9F:97:E1:7B:FD:FE:FC:5F:A0:DC:B8:06:ED:17 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285848C150D13EFDB0F715E7B3B470 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/8df1d45d-f0f6-331a-aa48-9c48058a3859.roa Signing time: Mon 03 Feb 2025 02:00:39 +0000 ROA not before: Mon 03 Feb 2025 02:00:39 +0000 ROA not after: Sun 04 May 2025 01:00:39 +0000 asID: 213122 IP address blocks: 104.249.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c1:50:d1:3e:fd:b0:f7:15:e7:b3:b4:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Feb 3 02:00:39 2025 GMT Not After : May 4 01:00:39 2025 GMT Subject: CN=2e2c74b3-8d56-48ee-a855-c74f93289b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:28:5b:30:3e:bd:12:40:8e:e3:6d:13:c7:dd: 9d:9f:57:99:30:22:57:f8:c9:22:44:16:1c:6f:77: 3b:9d:61:0c:49:18:f3:2c:14:9c:f8:11:b3:3e:ee: 54:e3:97:5b:ec:e6:c5:9c:32:bd:d9:ea:96:ce:14: a2:64:f5:53:d9:e8:ff:11:39:d1:5b:a5:55:57:ff: 6a:d1:73:de:4b:1c:14:f5:b3:e8:08:c0:94:7d:07: 3d:fd:05:5a:a6:85:c2:08:28:36:b9:60:2b:88:f9: c5:af:4a:54:82:0d:a6:f9:bb:3d:21:ed:bb:17:88: b8:60:89:f6:51:4b:7e:2b:3a:51:d1:32:2f:8b:9f: 1f:b4:82:42:40:9a:67:88:57:b1:f8:2a:26:41:0d: 45:f5:19:31:94:99:98:8c:70:2b:f4:a6:74:eb:6e: 03:83:be:b0:8d:cc:ab:92:42:53:41:a5:30:00:43: 34:5e:c5:8f:a7:1a:44:ac:ad:5f:c7:c1:ae:08:22: 86:70:e5:d7:14:11:79:d4:96:13:a0:2c:12:53:45: 83:80:d2:3c:9a:57:57:fa:1d:24:aa:fe:ca:85:f2: d6:5d:2f:71:26:71:4e:85:a5:5f:b1:5e:bc:c8:65: 7c:e7:00:c4:50:62:e0:dc:14:c3:0b:42:d2:6c:d1: af:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C5:83:7F:2F:20:9F:97:E1:7B:FD:FE:FC:5F:A0:DC:B8:06:ED:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/8df1d45d-f0f6-331a-aa48-9c48058a3859.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 104.249.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:f8:c0:0b:9e:6e:c5:1c:1e:72:33:4d:b7:43:a0:21:83:2b: d8:2e:2f:ae:62:ca:a5:1a:26:8d:68:11:a0:1f:02:46:2d:b2: b7:96:23:78:65:43:10:9a:54:a3:34:30:96:88:ea:fb:fd:4a: 7b:0f:6b:fc:df:2b:cd:37:9d:1e:44:b5:83:0e:ed:14:46:e5: fe:be:df:f1:99:40:e7:2a:6a:17:ab:e7:07:c8:67:ad:4f:4c: 45:49:a0:a2:50:66:6c:5e:52:53:a9:9e:77:62:b4:5c:f9:df: bc:41:59:60:15:cc:bb:3a:e1:2d:fe:75:19:8d:4c:12:ae:41: ff:7e:f4:ee:14:50:1d:6c:dd:34:4c:22:c5:7b:c6:6f:62:78: 45:b0:78:27:99:75:11:28:c8:fe:35:31:a8:31:42:80:53:8c: 08:f7:84:35:65:c7:5f:de:16:06:9e:fa:04:af:cd:58:b7:c3: 5f:2d:cb:4d:2c:2f:83:ae:09:91:b0:c7:d8:69:97:6e:4a:be: d2:78:2f:85:2a:37:2a:56:a4:c4:51:f8:a8:9e:b4:5b:49:be: 8d:01:ac:17:07:c6:ee:92:fc:d5:05:27:40:0f:3e:ba:0b:b9: 7d:4d:2b:dc:47:e6:a5:9f:26:c4:d1:5b:b8:a2:b3:e8:9f:36: 89:f1:c9:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUNE+/bD3FeeztHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk MmUyYzc0YjMtOGQ1Ni00OGVlLWE4NTUtYzc0ZjkzMjg5YjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyhbMD69EkCO420Tx92dn1eZMCJX+MkiRBYc b3c7nWEMSRjzLBSc+BGzPu5U45db7ObFnDK92eqWzhSiZPVT2ej/ETnRW6VVV/9q 0XPeSxwU9bPoCMCUfQc9/QVapoXCCCg2uWAriPnFr0pUgg2m+bs9Ie27F4i4YIn2 UUt+KzpR0TIvi58ftIJCQJpniFex+ComQQ1F9RkxlJmYjHAr9KZ0624Dg76wjcyr kkJTQaUwAEM0XsWPpxpErK1fx8GuCCKGcOXXFBF51JYToCwSU0WDgNI8mldX+h0k qv7KhfLWXS9xJnFOhaVfsV68yGV85wDEUGLg3BTDC0LSbNGvqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfFg38vIJ+X4Xv9/vxfoNy4Bu0XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvOGRmMWQ0NWQtZjBmNi0z MzFhLWFhNDgtOWM0ODA1OGEzODU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGD4wAuebsUcHnIzTbdDoCGDK9guL65iyqUaJo1oEaAfAkYtsreWI3hl QxCaVKM0MJaI6vv9SnsPa/zfK803nR5EtYMO7RRG5f6+3/GZQOcqaher5wfIZ61P TEVJoKJQZmxeUlOpnnditFz537xBWWAVzLs64S3+dRmNTBKuQf9+9O4UUB1s3TRM IsV7xm9ieEWweCeZdREoyP41MagxQoBTjAj3hDVlx1/eFgae+gSvzVi3w18ty00s L4OuCZGwx9hpl25KvtJ4L4UqNypWpMRR+KietFtJvo0BrBcHxu6S/NUFJ0APProL uX1NK9xH5qWfJsTRW7iis+ifNonxySk= -----END CERTIFICATE-----Generated at Sat Apr 5 20:49:38 2025 by rpki-client