$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f005327f-246f-30ed-8e50-a91fdd190a16.roa File: f005327f-246f-30ed-8e50-a91fdd190a16.roa (raw, json) Hash identifier: tegYphd2HOjxGNjTPsSkaBnFaCLP8XZvjpGCVzH+S7U= Subject key identifier: 05:0B:B7:9D:2F:69:B5:0C:8D:92:7C:20:5E:AA:CC:71:E4:8D:75:70 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285848C150D152842F54B99FA20E60 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f005327f-246f-30ed-8e50-a91fdd190a16.roa Signing time: Mon 03 Feb 2025 02:00:39 +0000 ROA not before: Mon 03 Feb 2025 02:00:39 +0000 ROA not after: Sun 04 May 2025 01:00:39 +0000 asID: 213122 IP address blocks: 104.249.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c1:50:d1:52:84:2f:54:b9:9f:a2:0e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Feb 3 02:00:39 2025 GMT Not After : May 4 01:00:39 2025 GMT Subject: CN=0d6ae307-87d6-4502-8beb-b48962d2dde2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a3:94:48:14:a0:36:01:2b:1d:5f:44:21:79: a4:2e:24:b8:fd:5b:86:b9:f6:29:96:cd:b2:44:95: 3d:40:e4:79:6c:87:98:74:49:fb:04:5d:c6:f0:3a: 4e:75:d5:1c:02:c0:3d:df:4c:b9:a9:18:60:d1:52: 25:24:7c:6a:c1:54:58:98:00:cd:04:85:21:24:14: 72:fa:fa:54:cd:4c:2a:90:51:c5:82:31:d7:51:85: d3:f2:70:ac:81:16:ff:74:7f:80:40:e3:aa:43:9c: bb:a0:44:fe:5d:df:d5:cc:2e:a0:cf:a4:1c:bd:79: b9:c8:d0:1d:dd:14:17:30:9e:f5:9e:e6:fc:65:b6: 29:72:e7:51:f2:b6:60:b0:b2:fb:e9:de:e4:d8:91: ca:e1:cb:2f:7d:65:96:87:a3:ea:66:29:b4:e5:93: b3:d4:f1:5c:fb:9a:68:57:b4:b9:e0:7f:d6:d6:f4: 1a:78:ef:5f:27:93:50:20:9f:0c:e9:2d:ff:83:16: e4:f6:70:37:a1:09:a9:92:41:51:de:53:9b:ed:96: 8d:7c:cc:4c:9c:93:f4:f7:7c:a2:30:5a:06:88:4b: aa:7d:ac:ba:b1:2d:e0:bb:9d:4d:5e:40:99:fc:9d: b3:8f:f0:af:ce:3f:33:93:28:32:ed:4e:30:18:1a: 8d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:0B:B7:9D:2F:69:B5:0C:8D:92:7C:20:5E:AA:CC:71:E4:8D:75:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f005327f-246f-30ed-8e50-a91fdd190a16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 104.249.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:3e:6e:43:7d:d7:c7:46:2d:b7:e2:a7:f5:79:8f:fe:4a:0c: 62:f3:81:40:34:4a:29:d1:cf:08:d0:f3:5a:45:1b:73:df:bd: 9f:62:20:7a:83:a4:8a:11:c7:d0:49:a8:85:c4:d4:b7:0d:e1: 82:b4:10:8d:11:2b:40:01:c2:b7:58:53:7f:97:56:65:48:bc: 6b:9d:73:5d:1b:93:73:36:2e:1c:c4:42:92:a3:09:6c:1a:e9: 99:13:98:cb:b4:c6:91:5e:a6:76:28:cd:c4:dc:8c:77:e2:6d: a8:97:2a:82:b3:f4:25:8c:da:8b:18:cf:47:4e:fd:18:e1:81: f5:e5:d9:91:00:86:04:fd:01:c7:a8:aa:81:bf:8c:a6:9a:e4: 57:04:17:08:a8:3a:57:ba:f0:94:8a:89:bf:6a:f3:30:a5:70: 17:e9:1f:3d:f3:27:6e:86:a5:0e:3a:00:80:b3:74:15:fc:2f: 4b:5a:a0:3e:57:db:f4:05:54:30:da:4f:f0:24:04:21:25:8d: 28:d5:ce:7f:1c:a3:41:5b:0b:67:9f:6c:8b:39:b8:ba:f8:45: 71:de:a1:1a:35:f9:a8:ed:88:e7:25:b9:07:9b:e2:05:9e:f6: ab:70:b7:cf:b0:18:36:c1:38:f4:db:b2:3e:9f:28:97:5b:e0: 61:f5:e6:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUNFShC9UuZ+iDmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk MGQ2YWUzMDctODdkNi00NTAyLThiZWItYjQ4OTYyZDJkZGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6OUSBSgNgErHV9EIXmkLiS4/VuGufYpls2y RJU9QOR5bIeYdEn7BF3G8DpOddUcAsA930y5qRhg0VIlJHxqwVRYmADNBIUhJBRy +vpUzUwqkFHFgjHXUYXT8nCsgRb/dH+AQOOqQ5y7oET+Xd/VzC6gz6QcvXm5yNAd 3RQXMJ71nub8ZbYpcudR8rZgsLL76d7k2JHK4csvfWWWh6PqZim05ZOz1PFc+5po V7S54H/W1vQaeO9fJ5NQIJ8M6S3/gxbk9nA3oQmpkkFR3lOb7ZaNfMxMnJP093yi MFoGiEuqfay6sS3gu51NXkCZ/J2zj/Cvzj8zkygy7U4wGBqNwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAULt50vabUMjZJ8IF6qzHHkjXVwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvZjAwNTMyN2YtMjQ2Zi0z MGVkLThlNTAtYTkxZmRkMTkwYTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPmCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQ+bkN918dGLbfip/V5j/5KDGLzgUA0SinRzwjQ81pFG3PfvZ9iIHqD pIoRx9BJqIXE1LcN4YK0EI0RK0ABwrdYU3+XVmVIvGudc10bk3M2LhzEQpKjCWwa 6ZkTmMu0xpFepnYozcTcjHfibaiXKoKz9CWM2osYz0dO/RjhgfXl2ZEAhgT9Aceo qoG/jKaa5FcEFwioOle68JSKib9q8zClcBfpHz3zJ26GpQ46AICzdBX8L0taoD5X 2/QFVDDaT/AkBCEljSjVzn8co0FbC2efbIs5uLr4RXHeoRo1+ajtiOcluQeb4gWe 9qtwt8+wGDbBOPTbsj6fKJdb4GH15j0= -----END CERTIFICATE-----Generated at Sat Apr 5 21:39:55 2025 by rpki-client