$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/d08aa6cc-8a95-3103-a3f7-7471c8794eab.roa File: d08aa6cc-8a95-3103-a3f7-7471c8794eab.roa (raw, json) Hash identifier: D91wjDE7J9TN8ix9e+08h8hLDP9gy4j1SEsNTy7BDPI= Subject key identifier: FC:90:9B:49:54:66:AC:93:B7:95:8F:E6:76:60:82:0A:74:F8:CD:0E Certificate issuer: /CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e Certificate serial: 010D0C9F432858491ED6DE37BA0FAAB87C539278 Authority key identifier: 8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/d08aa6cc-8a95-3103-a3f7-7471c8794eab.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 210781 IP address blocks: 104.249.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:de:37:ba:0f:aa:b8:7c:53:92:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=0bd79af9-281c-4d9f-80af-52894f352811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:02:2a:b4:e0:06:51:46:f4:d0:ef:b9:19:ea: b5:d9:ed:e3:7c:ce:53:13:27:98:a0:f0:eb:23:c4: 53:e0:96:6a:c2:b8:91:3c:7c:a4:23:e6:a7:46:99: 51:eb:56:53:e5:db:a5:1a:ac:bd:74:40:c7:db:04: aa:9a:29:64:78:e4:fb:e5:c2:85:a0:44:04:22:ef: 7a:e3:2e:60:37:33:78:be:ac:43:f6:aa:dc:cb:c6: cb:b9:1c:4f:08:10:31:93:5c:b0:02:b9:c7:20:19: a6:98:55:94:98:bc:d5:7b:a0:ca:9d:20:31:65:c3: 9b:33:9e:a5:51:ba:ce:4d:30:07:5a:d6:11:ca:3f: b7:f4:26:36:d0:ed:1d:7f:b4:16:bb:8c:cc:6b:e5: 7e:ef:e3:15:41:9d:4d:f9:5b:2c:96:67:ef:22:9a: cf:ec:0d:d2:3b:13:74:f8:aa:b0:c2:95:b7:4b:c6: 6d:7d:38:72:4d:57:c9:61:e8:f3:e7:6e:70:d0:4b: 2f:4d:94:a8:43:95:bc:3b:8f:4a:18:ab:4c:82:0b: a7:24:0b:76:16:3d:e7:c0:58:09:28:c0:04:01:1b: c3:f4:a7:28:05:e6:eb:cd:6e:cf:ea:03:99:fa:04: 50:66:3d:90:bd:f9:d4:99:b6:fa:2f:3c:d2:a1:47: 94:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:90:9B:49:54:66:AC:93:B7:95:8F:E6:76:60:82:0A:74:F8:CD:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/d08aa6cc-8a95-3103-a3f7-7471c8794eab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl X509v3 Authority Key Identifier: keyid:8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer sbgp-ipAddrBlock: critical IPv4: 104.249.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:65:20:19:18:f1:31:56:53:f0:e2:dd:b6:87:5a:14:8e:aa: ff:8b:1c:e2:bc:95:92:e8:09:59:17:8d:1c:08:5c:bd:d9:79: f3:fa:2a:3d:a6:25:16:ce:9e:59:10:ad:05:e6:81:b6:16:b9: 02:53:02:69:66:b3:83:7b:e0:fa:70:43:24:ee:95:6d:95:23: d9:98:19:09:24:91:c5:1b:9a:92:47:02:e5:41:d4:09:db:1e: ed:33:62:60:38:9a:b0:c9:79:8a:6b:5f:0e:e9:9b:ee:5e:18: f1:da:3c:ba:29:4a:0f:55:31:25:26:9e:f1:23:50:b1:27:76: 7b:51:cd:80:b6:58:8a:4b:97:26:9f:b6:21:84:5a:6a:03:de: 01:49:84:c9:d7:61:fc:ff:86:5c:58:44:c6:55:22:4e:57:e8: 2a:49:e9:ef:f7:64:59:1d:66:e5:2e:28:e1:61:33:52:8e:4b: fe:47:ea:5d:ac:a6:d6:15:a8:c2:67:e4:a9:5d:c2:c5:09:95: 7e:30:72:80:a3:0d:0d:7c:bc:41:27:ae:bc:9e:ac:4e:ff:c6: 59:fe:97:42:e2:3f:24:ad:be:65:cf:e4:a3:cd:d0:3d:a5:79: d3:b8:50:25:f4:86:bb:6b:96:63:26:91:72:b7:9f:b5:4c:9e: 3a:43:24:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1t43ug+quHxTkngwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE3ZmY1Y2MtZThhZS00MGY4LWJjYjktMzkwODEwZWI4 MjFlMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk MGJkNzlhZjktMjgxYy00ZDlmLTgwYWYtNTI4OTRmMzUyODExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgIqtOAGUUb00O+5Geq12e3jfM5TEyeYoPDr I8RT4JZqwriRPHykI+anRplR61ZT5dulGqy9dEDH2wSqmilkeOT75cKFoEQEIu96 4y5gNzN4vqxD9qrcy8bLuRxPCBAxk1ywArnHIBmmmFWUmLzVe6DKnSAxZcObM56l UbrOTTAHWtYRyj+39CY20O0df7QWu4zMa+V+7+MVQZ1N+VsslmfvIprP7A3SOxN0 +KqwwpW3S8ZtfThyTVfJYejz525w0EsvTZSoQ5W8O49KGKtMggunJAt2Fj3nwFgJ KMAEARvD9KcoBebrzW7P6gOZ+gRQZj2QvfnUmbb6LzzSoUeUjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyQm0lUZqyTt5WP5nZgggp0+M0OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdm ZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4MTBlYjgyMWUvZDA4YWE2Y2MtOGE5NS0z MTAzLWEzZjctNzQ3MWM4Nzk0ZWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWE3ZmY1Y2MtZThhZS00MGY4LWJj YjktMzkwODEwZWI4MjFlLzFhN2ZmNWNjLWU4YWUtNDBmOC1iY2I5LTM5MDgxMGVi ODIxZS5jcmwwHwYDVR0jBBgwFoAUjcqIVSKcOh2gFz9eNrHSpw0vYCYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdmZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4 MTBlYjgyMWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPmsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdlIBkY8TFWU/Di3baHWhSOqv+LHOK8lZLoCVkXjRwIXL3ZefP6Kj2m JRbOnlkQrQXmgbYWuQJTAmlms4N74PpwQyTulW2VI9mYGQkkkcUbmpJHAuVB1Anb Hu0zYmA4mrDJeYprXw7pm+5eGPHaPLopSg9VMSUmnvEjULEndntRzYC2WIpLlyaf tiGEWmoD3gFJhMnXYfz/hlxYRMZVIk5X6CpJ6e/3ZFkdZuUuKOFhM1KOS/5H6l2s ptYVqMJn5KldwsUJlX4wcoCjDQ18vEEnrryerE7/xln+l0LiPyStvmXP5KPN0D2l edO4UCX0hrtrlmMmkXK3n7VMnjpDJBI= -----END CERTIFICATE-----Generated at Wed Apr 9 09:12:44 2025 by rpki-client