$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/e59419c7-f2cd-369a-8fd3-eb62f0eca867.roa File: e59419c7-f2cd-369a-8fd3-eb62f0eca867.roa (raw, json) Hash identifier: eBLTQdHmZdUl1mE+ojvXIB6lTOeUpCqj5zBXSc9vx6k= Subject key identifier: 74:07:4C:3C:7E:46:F4:C9:93:7B:4B:CD:66:95:5F:DE:F5:60:09:8D Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285848C150D128405D7D4EADCD0000 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/e59419c7-f2cd-369a-8fd3-eb62f0eca867.roa Signing time: Mon 03 Feb 2025 02:00:39 +0000 ROA not before: Mon 03 Feb 2025 02:00:39 +0000 ROA not after: Sun 04 May 2025 01:00:39 +0000 asID: 213122 IP address blocks: 104.224.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c1:50:d1:28:40:5d:7d:4e:ad:cd:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Feb 3 02:00:39 2025 GMT Not After : May 4 01:00:39 2025 GMT Subject: CN=c44d3b13-a06d-4632-9112-9068c3769e49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3b:bb:55:e5:3d:4f:d3:0f:79:cb:56:b8:7b: 3c:3e:08:7a:f1:35:67:67:fe:f4:ea:bc:48:1f:b2: b3:ba:ca:e6:96:0c:53:cf:08:11:36:a3:fe:a7:73: 77:c6:0a:a0:7b:05:49:a2:cf:9b:f5:f7:59:4c:f9: cd:d7:0b:76:78:1d:82:ea:25:24:d7:4c:ab:34:4c: f1:51:7a:b8:d6:58:d8:33:80:11:be:4c:98:27:78: e4:a0:8d:ac:d6:dd:bd:f1:c7:a8:8d:d7:23:9d:12: 6f:9c:b2:19:3e:6a:4f:cb:65:d9:c0:f7:53:39:41: 70:ac:84:1f:28:91:7f:e1:1b:26:38:18:93:9b:ed: bf:51:d8:13:88:b7:2d:00:99:87:5d:80:a3:f5:c5: 50:bd:37:7e:02:f8:72:9f:a9:d4:e8:54:12:26:9b: 58:7d:96:c6:f9:d0:dd:4c:a6:4e:50:66:9f:69:14: 8b:78:0d:e6:95:5e:7e:b4:b7:63:3e:fb:15:f7:54: 10:8a:80:11:d5:44:b0:00:8d:f1:5e:f0:1a:4d:0d: ea:61:5a:84:cb:c7:4f:4d:d6:d1:a7:a2:56:95:c7: 67:e6:04:4f:b7:c0:7d:c1:a7:52:f7:f0:14:e2:7b: f6:a4:7a:a7:83:b9:dc:1a:d1:b8:e2:93:54:fb:06: 9e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:07:4C:3C:7E:46:F4:C9:93:7B:4B:CD:66:95:5F:DE:F5:60:09:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/e59419c7-f2cd-369a-8fd3-eb62f0eca867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 104.224.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:ed:43:d0:f4:06:dd:9d:37:49:47:30:39:1a:8f:15:60:76: 2f:bc:1c:4b:58:d4:9f:ee:93:ad:4b:9e:f4:60:f0:3e:4d:e1: 1a:36:2b:a2:a3:82:5b:bd:26:06:40:e4:53:f6:49:b3:72:a9: 73:1f:cf:58:3c:00:0b:b3:e0:65:d9:6e:95:86:cb:34:7b:38: 0d:20:99:e2:b9:19:cb:08:5a:e8:6a:d0:b9:31:6a:4a:e8:da: ff:4e:44:b8:2a:15:cd:b9:8f:66:e5:aa:eb:f9:c0:db:9b:24: de:bc:bf:85:6b:7d:c7:7d:51:d6:c4:d5:23:b8:31:2b:74:68: e6:f0:58:45:62:5a:b0:2a:02:e3:6b:84:2e:f6:b1:1a:9f:b4: 80:1a:cd:46:f8:2e:a5:ea:7d:ae:1e:14:c5:4e:58:6a:52:f3: 1f:60:a9:90:94:74:fb:d4:a9:fd:00:e2:87:05:48:1e:8f:f5: d2:64:64:1a:5e:8a:da:eb:3d:af:01:c9:59:3f:a5:d0:65:39: 99:0c:21:38:8f:ca:77:5e:53:ac:22:66:90:b1:04:28:34:6c: f4:36:ef:de:f0:2b:20:e3:f7:75:3f:45:57:ea:dc:c9:10:0d: dc:e7:8f:b8:84:f9:14:c9:5a:9c:7f:29:dc:4f:90:36:0f:61: 54:6a:ee:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUNEoQF19Tq3NAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk YzQ0ZDNiMTMtYTA2ZC00NjMyLTkxMTItOTA2OGMzNzY5ZTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzu7VeU9T9MPectWuHs8Pgh68TVnZ/706rxI H7KzusrmlgxTzwgRNqP+p3N3xgqgewVJos+b9fdZTPnN1wt2eB2C6iUk10yrNEzx UXq41ljYM4ARvkyYJ3jkoI2s1t298ceojdcjnRJvnLIZPmpPy2XZwPdTOUFwrIQf KJF/4RsmOBiTm+2/UdgTiLctAJmHXYCj9cVQvTd+Avhyn6nU6FQSJptYfZbG+dDd TKZOUGafaRSLeA3mlV5+tLdjPvsV91QQioAR1USwAI3xXvAaTQ3qYVqEy8dPTdbR p6JWlcdn5gRPt8B9wadS9/AU4nv2pHqng7ncGtG44pNU+waeEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQHTDx+RvTJk3tLzWaVX971YAmNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvZTU5NDE5YzctZjJjZC0z NjlhLThmZDMtZWI2MmYwZWNhODY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOAfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvtQ9D0Bt2dN0lHMDkajxVgdi+8HEtY1J/uk61LnvRg8D5N4Ro2K6Kj glu9JgZA5FP2SbNyqXMfz1g8AAuz4GXZbpWGyzR7OA0gmeK5GcsIWuhq0Lkxakro 2v9ORLgqFc25j2blquv5wNubJN68v4Vrfcd9UdbE1SO4MSt0aObwWEViWrAqAuNr hC72sRqftIAazUb4LqXqfa4eFMVOWGpS8x9gqZCUdPvUqf0A4ocFSB6P9dJkZBpe itrrPa8ByVk/pdBlOZkMITiPyndeU6wiZpCxBCg0bPQ2797wKyDj93U/RVfq3MkQ Ddznj7iE+RTJWpx/KdxPkDYPYVRq7m8= -----END CERTIFICATE-----Generated at Sat Apr 5 18:50:48 2025 by rpki-client