$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ee3821bf-3e5b-32e3-aa31-b949e21eb26d.roa File: ee3821bf-3e5b-32e3-aa31-b949e21eb26d.roa (raw, json) Hash identifier: TsnrIrjDzSsHcj/3QdMjGJ+VPE68t/D0KGMJrvOgqbA= Subject key identifier: 9A:5D:9A:CC:25:F9:64:1C:6C:83:FD:56:F1:6E:47:C6:C2:29:F9:1A Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7 Certificate serial: 010D0C9F43285848BFEBB5E14B2B965889881620 Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ee3821bf-3e5b-32e3-aa31-b949e21eb26d.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 36040 IP address blocks: 104.237.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:b5:e1:4b:2b:96:58:89:88:16:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=54821f7b-c0bc-4a50-870c-d24ed7f61121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6e:67:97:90:f4:2f:9c:c2:9a:46:ef:9b:25: d9:eb:83:27:a9:fb:f7:bd:e9:b9:e7:43:16:57:56: 6e:22:a8:55:a3:7c:fe:4b:22:92:b5:6f:4c:fd:fe: d7:56:16:00:01:92:b4:0f:8c:d4:8b:22:d5:14:52: a9:5b:db:e3:f7:28:fa:dc:27:a4:47:8a:f2:a5:e4: 0c:29:77:5c:f3:eb:1d:57:48:eb:0f:58:de:a5:01: ca:5e:9d:5c:2b:21:63:b8:4f:63:d2:4c:4b:7d:56: 5e:44:df:66:b4:b4:5a:c0:c9:ca:1f:03:b0:61:5a: 14:f0:18:c3:4c:6d:28:49:5f:9f:8c:28:10:16:eb: 6d:8e:5d:4f:81:9f:84:3d:cf:c4:f8:4a:28:c8:f0: ec:8c:24:42:b5:a8:75:cd:0b:a0:cb:81:86:fa:73: d7:4c:36:c8:5b:c0:5e:c4:b5:8d:2c:8e:ee:08:c9: 48:67:9b:4d:ae:e8:0a:be:8b:4e:23:3d:78:c0:83: a2:2f:5f:13:5f:9c:1a:93:85:bd:12:8e:e1:f1:f9: 87:e7:70:5b:2d:5f:9d:d0:bf:cc:8e:89:63:50:b4: e0:5c:75:43:90:58:24:da:13:a9:16:40:4a:da:8f: 93:23:e8:87:c8:cb:00:fa:38:7b:09:af:b5:45:17: c7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5D:9A:CC:25:F9:64:1C:6C:83:FD:56:F1:6E:47:C6:C2:29:F9:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ee3821bf-3e5b-32e3-aa31-b949e21eb26d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl X509v3 Authority Key Identifier: keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer sbgp-ipAddrBlock: critical IPv4: 104.237.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:3b:f8:8f:77:67:c6:62:ea:03:d3:4c:4c:5e:a1:60:03:b2: ba:57:34:f1:9f:ea:89:20:00:02:52:88:af:6d:58:6a:9f:c7: e5:27:25:6f:ec:d0:73:97:70:b0:bc:f6:85:79:13:a4:79:be: 4b:bd:c6:61:c3:0f:3b:7a:1c:bb:41:ac:98:2f:33:0b:75:46: d1:44:7f:31:72:90:5d:91:6b:fe:0b:18:4c:85:b4:8f:16:d3: 32:ea:ed:9f:f8:30:17:60:81:b4:1a:43:e5:7f:17:5d:3a:07: c8:a3:b1:b9:bd:87:7a:2b:3a:21:6f:df:06:a5:0f:12:01:92: e7:7c:ae:70:04:6d:4a:4f:e9:9f:d1:38:db:6a:07:11:fe:2e: f3:52:5d:39:1f:61:cf:4e:72:a3:90:69:61:d7:90:b6:e0:ef: db:16:92:ff:e7:43:33:aa:32:b5:3c:b2:61:42:f2:b2:5e:0e: 42:55:48:20:69:5c:fd:a6:1e:c3:04:95:7a:88:5a:29:30:43: eb:9d:8f:4d:08:a2:cd:2e:8f:05:3e:62:74:34:cd:25:c4:1d: 02:36:c2:5b:34:b4:20:4d:37:39:60:e9:00:9e:b0:af:af:15: 11:99:4e:29:e9:de:a3:35:2f:9d:58:e3:74:23:d9:e9:64:8b: 72:e8:c6:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/67XhSyuWWImIFiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3 MmI3MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk NTQ4MjFmN2ItYzBiYy00YTUwLTg3MGMtZDI0ZWQ3ZjYxMTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj25nl5D0L5zCmkbvmyXZ64Mnqfv3vem550MW V1ZuIqhVo3z+SyKStW9M/f7XVhYAAZK0D4zUiyLVFFKpW9vj9yj63CekR4rypeQM KXdc8+sdV0jrD1jepQHKXp1cKyFjuE9j0kxLfVZeRN9mtLRawMnKHwOwYVoU8BjD TG0oSV+fjCgQFuttjl1PgZ+EPc/E+EooyPDsjCRCtah1zQugy4GG+nPXTDbIW8Be xLWNLI7uCMlIZ5tNrugKvotOIz14wIOiL18TX5wak4W9Eo7h8fmH53BbLV+d0L/M joljULTgXHVDkFgk2hOpFkBK2o+TI+iHyMsA+jh7Ca+1RRfHmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpdmswl+WQcbIP9VvFuR8bCKfkaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvZWUzODIxYmYtM2U1Yi0z MmUzLWFhMzEtYjk0OWUyMWViMjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0 NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2 ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaO2wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADY7+I93Z8Zi6gPTTExeoWADsrpXNPGf6okgAAJSiK9tWGqfx+UnJW/s 0HOXcLC89oV5E6R5vku9xmHDDzt6HLtBrJgvMwt1RtFEfzFykF2Ra/4LGEyFtI8W 0zLq7Z/4MBdggbQaQ+V/F106B8ijsbm9h3orOiFv3walDxIBkud8rnAEbUpP6Z/R ONtqBxH+LvNSXTkfYc9OcqOQaWHXkLbg79sWkv/nQzOqMrU8smFC8rJeDkJVSCBp XP2mHsMElXqIWikwQ+udj00Ios0ujwU+YnQ0zSXEHQI2wls0tCBNNzlg6QCesK+v FRGZTinp3qM1L51Y43Qj2elki3LoxkA= -----END CERTIFICATE-----Generated at Mon Apr 7 07:12:43 2025 by rpki-client