$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a76a38d7-efa4-3450-9774-2046e431cfb8.roa File: a76a38d7-efa4-3450-9774-2046e431cfb8.roa (raw, json) Hash identifier: CTZ61PXwdRh3WqtXoCSbF6RLr3k+Rh6+u42iuzirc4c= Subject key identifier: EA:2D:0D:CB:24:07:F7:0D:BE:AB:DB:35:97:09:AE:AC:47:CF:1B:A9 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285848C150CF627E3D1A1740B07E00 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a76a38d7-efa4-3450-9774-2046e431cfb8.roa Signing time: Mon 03 Feb 2025 02:00:39 +0000 ROA not before: Mon 03 Feb 2025 02:00:39 +0000 ROA not after: Sun 04 May 2025 01:00:39 +0000 asID: 931 IP address blocks: 104.249.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c1:50:cf:62:7e:3d:1a:17:40:b0:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Feb 3 02:00:39 2025 GMT Not After : May 4 01:00:39 2025 GMT Subject: CN=9a32b09a-4860-4daf-bbbc-f2d072a5c020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7e:e6:2c:ae:0e:e3:4c:a2:27:9d:f6:ff:30: 30:39:d7:64:d5:f2:35:5f:e7:04:7c:25:9e:c7:7b: 2b:13:6a:38:ec:22:41:e9:ce:6b:a7:e9:ce:13:cd: f5:13:5b:d4:30:95:91:0a:59:93:d2:41:9c:1c:86: 2f:a3:e0:a9:a7:18:9b:73:5e:25:4d:6e:4d:2e:23: 14:66:c1:74:af:66:e9:89:9f:74:1b:86:80:01:fc: 7c:19:0d:fe:bd:d3:06:93:ba:35:eb:3e:35:43:68: 84:08:81:41:fa:73:19:11:e1:54:1a:ed:e8:d4:81: 33:c8:d4:5b:3d:11:cc:ef:a6:da:28:18:f4:a0:ad: 98:03:04:46:0b:3a:be:b8:cd:2a:f3:bd:12:89:c7: 0e:78:c6:6f:2a:50:68:93:2c:7a:bb:aa:23:3c:30: 30:fa:2f:f4:52:5e:28:7e:e1:2c:19:33:da:3b:17: 7f:d3:ef:98:b8:bd:f4:ee:8a:7f:8b:dc:97:e8:10: 2d:a3:7c:10:79:8f:61:1d:2c:23:ca:2a:ea:e5:fb: c3:a9:67:00:6c:1b:e5:29:16:82:2d:34:7e:c8:8c: c9:72:62:b5:f9:77:05:4a:5e:3a:e8:dd:3f:7c:7a: b8:90:b4:ad:2b:1f:9f:58:b2:89:18:20:3d:09:01: 34:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:2D:0D:CB:24:07:F7:0D:BE:AB:DB:35:97:09:AE:AC:47:CF:1B:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a76a38d7-efa4-3450-9774-2046e431cfb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 104.249.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:64:a6:57:92:14:92:08:b7:dd:26:a4:80:95:1f:fd:f3:b3: 8a:30:cd:33:70:e8:fc:d8:bd:2e:79:68:45:b6:ef:c9:d0:ab: 48:b4:5b:f6:ea:3e:6e:cc:9e:2e:f9:6d:bb:80:0a:95:45:7b: 86:02:bb:75:32:5f:b4:b6:35:ae:ef:94:47:77:4f:fc:cd:e5: c6:76:33:6a:e6:3d:f8:0a:22:ae:27:11:6d:6a:4e:e8:25:bd: ab:4a:5f:7c:b5:3b:1a:d3:18:b0:dc:74:8c:e2:d5:88:44:97: eb:6e:70:f9:8c:0e:1a:4b:12:14:11:6c:bd:bc:99:7c:fa:3f: be:68:2f:96:e3:ae:31:71:4d:34:95:d3:eb:aa:bb:a5:a4:d6: a3:5c:9a:ff:c4:95:98:cb:fe:c0:77:ee:74:a8:a6:3a:00:a6: db:2a:1a:68:ce:0e:cc:6c:d5:0c:42:d1:d1:57:9d:9e:15:6c: 12:de:c1:b3:67:63:a3:e1:75:9d:8d:ae:17:10:6e:4d:89:de: cf:de:f5:25:45:0c:e4:7d:d4:4e:8b:15:be:6e:c7:95:b2:5b: f4:06:e7:dc:b4:d4:6f:ff:6b:14:de:48:7b:b1:36:f3:74:3e: 71:85:de:12:7e:12:50:fe:cf:c9:c0:99:db:3a:7d:8f:e4:d7: 2f:e3:e0:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUM9ifj0aF0CwfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk OWEzMmIwOWEtNDg2MC00ZGFmLWJiYmMtZjJkMDcyYTVjMDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1n7mLK4O40yiJ532/zAwOddk1fI1X+cEfCWe x3srE2o47CJB6c5rp+nOE831E1vUMJWRClmT0kGcHIYvo+Cppxibc14lTW5NLiMU ZsF0r2bpiZ90G4aAAfx8GQ3+vdMGk7o16z41Q2iECIFB+nMZEeFUGu3o1IEzyNRb PRHM76baKBj0oK2YAwRGCzq+uM0q870SiccOeMZvKlBokyx6u6ojPDAw+i/0Ul4o fuEsGTPaOxd/0++YuL307op/i9yX6BAto3wQeY9hHSwjyirq5fvDqWcAbBvlKRaC LTR+yIzJcmK1+XcFSl466N0/fHq4kLStKx+fWLKJGCA9CQE0uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOotDcskB/cNvqvbNZcJrqxHzxupMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvYTc2YTM4ZDctZWZhNC0z NDUwLTk3NzQtMjA0NmU0MzFjZmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPmDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhkpleSFJIIt90mpICVH/3zs4owzTNw6PzYvS55aEW278nQq0i0W/bq Pm7Mni75bbuACpVFe4YCu3UyX7S2Na7vlEd3T/zN5cZ2M2rmPfgKIq4nEW1qTugl vatKX3y1OxrTGLDcdIzi1YhEl+tucPmMDhpLEhQRbL28mXz6P75oL5bjrjFxTTSV 0+uqu6Wk1qNcmv/ElZjL/sB37nSopjoAptsqGmjODsxs1QxC0dFXnZ4VbBLewbNn Y6PhdZ2NrhcQbk2J3s/e9SVFDOR91E6LFb5ux5WyW/QG59y01G//axTeSHuxNvN0 PnGF3hJ+ElD+z8nAmds6fY/k1y/j4CY= -----END CERTIFICATE-----Generated at Mon Apr 7 10:55:48 2025 by rpki-client