$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3cf72d00-9afc-3db7-930c-e64eddb2dd2c.roa File: 3cf72d00-9afc-3db7-930c-e64eddb2dd2c.roa (raw, json) Hash identifier: IKtR+NfnqEN7InHx7r/34g12sfOGmJluoOivmrV4Vs4= Subject key identifier: 63:08:25:A8:98:DF:6D:25:37:20:06:00:1F:1A:18:35:1B:65:F7:0A Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F4328584973CFE794246B655A91EE2240 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3cf72d00-9afc-3db7-930c-e64eddb2dd2c.roa Signing time: Tue 08 Apr 2025 00:30:41 +0000 ROA not before: Tue 08 Apr 2025 00:30:41 +0000 ROA not after: Mon 07 Jul 2025 00:30:41 +0000 asID: 834 IP address blocks: 104.129.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:cf:e7:94:24:6b:65:5a:91:ee:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Apr 8 00:30:41 2025 GMT Not After : Jul 7 00:30:41 2025 GMT Subject: CN=a61f19a2-db3f-4b54-b756-621dbe4914bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ef:1e:28:34:fd:c5:2d:22:89:51:b7:dd:16: 2c:42:d3:92:69:5e:e9:36:5c:0d:df:bb:0d:43:73: 24:d6:f2:f1:a6:20:1b:36:b9:07:ca:e7:48:85:95: 8a:c2:a3:18:74:e0:83:73:b7:80:39:dd:1e:8c:86: e0:a9:1f:9d:5e:95:42:ec:8e:33:45:96:98:c3:39: 53:ec:e5:65:ab:e1:62:00:43:23:63:01:84:73:38: 72:a5:ea:da:81:c2:51:03:4c:88:54:80:b8:ca:67: 1c:0a:6b:48:b5:fb:de:3e:90:c9:c5:f1:3c:82:ef: 65:92:b9:89:23:8a:c3:38:e9:1d:a8:22:04:1b:8c: 68:eb:4d:a0:11:58:b3:62:81:92:98:20:5e:50:e1: 7b:92:69:41:44:71:86:e0:64:02:cc:f0:85:5e:da: f1:33:b4:d6:be:11:c4:b4:0c:f7:70:92:c1:38:21: e3:d0:6c:b5:04:8c:6b:b8:aa:e0:d9:a2:b2:18:24: f1:54:74:94:53:ea:1b:15:7e:d0:fa:71:c7:17:39: 62:01:e1:6f:b8:6e:a2:c0:ed:05:62:f1:1b:06:06: 70:20:fd:8e:ed:d0:6f:9a:fb:9a:25:ed:9a:56:3a: e2:63:0e:18:d4:76:ee:94:39:33:4b:a2:ae:da:3b: 4f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:08:25:A8:98:DF:6D:25:37:20:06:00:1F:1A:18:35:1B:65:F7:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3cf72d00-9afc-3db7-930c-e64eddb2dd2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 104.129.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:c8:1c:e9:d7:cc:f8:ac:2e:bb:03:e4:13:62:bc:33:60:84: c5:b3:af:c2:71:30:09:59:b9:23:5a:a3:e6:32:32:0f:c1:b5: d7:d2:aa:f4:27:3e:21:8f:80:21:66:b0:45:e5:27:00:ab:cd: 36:4a:dc:30:6d:87:b6:56:1b:b2:ec:3b:3a:2a:f3:a5:be:9c: f0:9b:af:ce:c5:a5:2d:67:d3:94:b9:ae:70:c6:13:2c:aa:42: 6b:c4:bc:a5:18:86:d3:0d:33:b1:71:83:b4:94:0c:9e:18:e1: 7b:cf:b4:28:e4:af:57:63:0f:ac:f8:48:13:83:99:10:41:e3: 01:8d:98:3d:94:e5:f6:ec:e7:ee:82:6b:58:88:9f:45:aa:6c: cc:b5:5b:7a:74:9e:36:f9:a6:aa:64:2e:a3:cd:c1:11:6c:7a: 63:0c:94:f7:05:83:d2:ba:3e:45:4b:35:03:aa:7e:7f:b8:f5: 91:1b:8b:cc:47:48:d7:2a:7f:de:f9:ed:66:6a:d9:8c:84:6e: a1:d8:41:e3:9d:f1:0d:ae:84:70:28:f3:7b:2b:fa:5e:2e:de: a6:1e:2b:e1:15:4d:ea:e4:62:f8:54:17:2d:10:e0:27:ea:d7: 2e:32:9c:48:21:cd:59:7d:77:a5:ed:6b:63:1c:23:33:35:f6: 4a:f4:83:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElzz+eUJGtlWpHuIkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI1MDQwODAwMzA0MVoXDTI1MDcwNzAwMzA0MVowLzEtMCsGA1UEAxMk YTYxZjE5YTItZGIzZi00YjU0LWI3NTYtNjIxZGJlNDkxNGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+8eKDT9xS0iiVG33RYsQtOSaV7pNlwN37sN Q3Mk1vLxpiAbNrkHyudIhZWKwqMYdOCDc7eAOd0ejIbgqR+dXpVC7I4zRZaYwzlT 7OVlq+FiAEMjYwGEczhyperagcJRA0yIVIC4ymccCmtItfvePpDJxfE8gu9lkrmJ I4rDOOkdqCIEG4xo602gEVizYoGSmCBeUOF7kmlBRHGG4GQCzPCFXtrxM7TWvhHE tAz3cJLBOCHj0Gy1BIxruKrg2aKyGCTxVHSUU+obFX7Q+nHHFzliAeFvuG6iwO0F YvEbBgZwIP2O7dBvmvuaJe2aVjriYw4Y1HbulDkzS6Ku2jtPkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMIJaiY320lNyAGAB8aGDUbZfcKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvM2NmNzJkMDAtOWFmYy0z ZGI3LTkzMGMtZTY0ZWRkYjJkZDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIH5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbIHOnXzPisLrsD5BNivDNghMWzr8JxMAlZuSNao+YyMg/BtdfSqvQn PiGPgCFmsEXlJwCrzTZK3DBth7ZWG7LsOzoq86W+nPCbr87FpS1n05S5rnDGEyyq QmvEvKUYhtMNM7Fxg7SUDJ4Y4XvPtCjkr1djD6z4SBODmRBB4wGNmD2U5fbs5+6C a1iIn0WqbMy1W3p0njb5pqpkLqPNwRFsemMMlPcFg9K6PkVLNQOqfn+49ZEbi8xH SNcqf9757WZq2YyEbqHYQeOd8Q2uhHAo83sr+l4u3qYeK+EVTerkYvhUFy0Q4Cfq 1y4ynEghzVl9d6Xta2McIzM19kr0g74= -----END CERTIFICATE-----Generated at Wed Apr 16 14:44:12 2025 by rpki-client