$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/b224300c-3b32-3d76-b40d-f74af8467b14.roa File: b224300c-3b32-3d76-b40d-f74af8467b14.roa (raw, json) Hash identifier: NNCyJTa1/pLBXsVkit4MiMNFmSwHZW+tCV5tAfrHJoI= Subject key identifier: 21:EE:90:AD:D3:59:48:84:2A:F4:E2:4D:3C:F6:69:E5:A0:CE:C1:54 Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7 Certificate serial: 010D0C9F43285848BFEBD6088D329906236AA060 Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/b224300c-3b32-3d76-b40d-f74af8467b14.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 36040 IP address blocks: 104.237.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:d6:08:8d:32:99:06:23:6a:a0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=430a866f-4a30-4dfc-b2b5-8b50c2e61692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:18:43:3a:96:9f:30:85:7b:6a:f3:4e:61:90: 29:eb:71:85:c8:0b:5b:a4:b1:b2:cf:0d:19:4d:d1: 3c:f4:81:81:cf:0d:a0:1a:7b:55:b5:83:f5:5e:0a: 73:d8:dc:e7:0b:dd:de:69:f7:24:22:40:6b:66:64: 43:af:5e:39:75:17:62:40:70:e9:ea:e5:2a:4f:2e: 06:5e:04:a5:f0:de:5d:3f:2e:f0:0c:eb:78:91:55: f0:56:b1:1c:6e:29:d4:59:e8:0b:7d:12:07:a6:77: 2f:7a:dc:8a:9d:11:66:dd:4b:e1:e2:52:e9:3d:a2: 2f:0f:d9:be:3a:ff:ce:f3:ca:8b:2a:bb:c0:c2:31: a9:12:49:cb:c5:ce:15:0d:ae:eb:17:75:7b:0b:3e: bc:c9:25:78:c4:8f:aa:be:4e:12:af:e4:f9:5b:2a: 3a:55:2a:5a:e1:d7:15:00:88:8f:40:08:43:e8:4b: d8:dd:1f:4e:6b:0f:ba:d0:7c:1e:8d:97:87:a3:d9: 1b:f4:bd:64:f3:92:8b:b0:9e:9a:ba:ec:94:5a:ea: 2f:c6:30:b8:e5:a0:6c:d3:b0:30:ba:19:37:1c:bb: 9d:5a:dd:d2:a2:21:98:87:3e:8d:71:be:dc:2e:1b: 6c:75:c1:18:4d:90:62:24:dd:cf:50:30:a7:2c:89: 3a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:EE:90:AD:D3:59:48:84:2A:F4:E2:4D:3C:F6:69:E5:A0:CE:C1:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/b224300c-3b32-3d76-b40d-f74af8467b14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl X509v3 Authority Key Identifier: keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer sbgp-ipAddrBlock: critical IPv4: 104.237.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:46:34:e0:be:b3:69:f3:81:69:2a:bc:9a:da:b2:d3:5f:3f: 4f:3c:8b:df:ec:28:2a:1d:66:69:6b:65:4b:66:18:4e:14:05: d5:56:3c:1c:b9:c4:cf:d2:4b:9b:68:9c:70:6e:72:de:54:c5: aa:49:26:0d:6e:64:51:60:08:a5:df:83:05:e5:cb:02:27:39: fc:f0:e5:a7:46:6b:b3:7f:e4:4a:3b:96:6c:f9:f9:9f:4b:57: 30:e7:b1:0b:ea:0c:b1:d3:44:e6:cb:4b:7d:ff:e8:2f:2c:2b: cf:ab:9b:69:f1:b1:d5:fb:86:17:c8:ee:53:82:ad:f1:e6:f6: e7:f9:a2:04:ba:30:8c:ee:1e:36:39:99:61:e4:84:b9:e4:c3: 07:c7:e4:ea:2f:67:23:e5:7a:89:e2:44:00:fb:91:1e:4e:9f: 39:ec:20:0a:d8:cf:09:81:e3:88:2e:39:54:69:bf:43:ab:7c: d4:33:81:30:03:98:d6:fd:86:3d:57:2f:4a:72:1d:2a:01:92: 48:d0:ef:00:48:83:53:84:84:58:67:be:73:17:79:f9:d2:0c: f6:65:2e:83:ec:72:4b:b0:76:47:83:ca:c5:37:e5:6e:7a:8a: 40:81:14:56:cf:10:60:7a:27:54:88:35:04:aa:b0:14:fc:cd: 1f:33:5d:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/69YIjTKZBiNqoGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3 MmI3MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk NDMwYTg2NmYtNGEzMC00ZGZjLWIyYjUtOGI1MGMyZTYxNjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBhDOpafMIV7avNOYZAp63GFyAtbpLGyzw0Z TdE89IGBzw2gGntVtYP1Xgpz2NznC93eafckIkBrZmRDr145dRdiQHDp6uUqTy4G XgSl8N5dPy7wDOt4kVXwVrEcbinUWegLfRIHpncvetyKnRFm3Uvh4lLpPaIvD9m+ Ov/O88qLKrvAwjGpEknLxc4VDa7rF3V7Cz68ySV4xI+qvk4Sr+T5Wyo6VSpa4dcV AIiPQAhD6EvY3R9Oaw+60HwejZeHo9kb9L1k85KLsJ6auuyUWuovxjC45aBs07Aw uhk3HLudWt3SoiGYhz6Ncb7cLhtsdcEYTZBiJN3PUDCnLIk6lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHukK3TWUiEKvTiTTz2aeWgzsFUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvYjIyNDMwMGMtM2IzMi0z ZDc2LWI0MGQtZjc0YWY4NDY3YjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0 NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2 ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO2gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERGNOC+s2nzgWkqvJrastNfP088i9/sKCodZmlrZUtmGE4UBdVWPBy5 xM/SS5tonHBuct5UxapJJg1uZFFgCKXfgwXlywInOfzw5adGa7N/5Eo7lmz5+Z9L VzDnsQvqDLHTRObLS33/6C8sK8+rm2nxsdX7hhfI7lOCrfHm9uf5ogS6MIzuHjY5 mWHkhLnkwwfH5OovZyPleoniRAD7kR5OnznsIArYzwmB44guOVRpv0OrfNQzgTAD mNb9hj1XL0pyHSoBkkjQ7wBIg1OEhFhnvnMXefnSDPZlLoPsckuwdkeDysU35W56 ikCBFFbPEGB6J1SINQSqsBT8zR8zXWQ= -----END CERTIFICATE-----Generated at Mon Apr 7 09:27:40 2025 by rpki-client