$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3159cdb7-3f31-33e3-b91f-2e6db52c7c6c.roa File: 3159cdb7-3f31-33e3-b91f-2e6db52c7c6c.roa (raw, json) Hash identifier: +fVpsexwNvqG1RnTVaqfpqJwCOa9rLyRGrTXZGsNgCI= Subject key identifier: A0:4C:9F:A2:12:10:FB:8D:07:06:E0:59:98:27:D4:58:7B:51:42:5B Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858490B4C1D6A873C4E77C1D2C800 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3159cdb7-3f31-33e3-b91f-2e6db52c7c6c.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 20454 IP address blocks: 104.254.232.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:1d:6a:87:3c:4e:77:c1:d2:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=8f3e4012-9df1-46fc-a57f-aed64c37152c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ec:ad:bd:1d:ff:8b:f1:30:3c:cd:f1:29:33: de:62:b9:5a:70:b7:81:0c:93:d1:af:bc:cd:d3:d5: 1e:5e:69:14:d1:1f:c5:14:60:f9:56:6e:4d:db:1d: 7a:c7:b3:91:cb:cd:b0:23:a3:d9:23:9a:a8:87:80: e1:fa:1e:c8:68:6f:5d:fc:70:d1:c9:15:5d:90:b8: b3:2a:11:a3:8f:a3:42:7e:42:2f:98:c6:ef:4f:67: 8e:7b:d2:e2:ee:cf:b7:c7:23:07:18:55:25:6c:81: fe:3b:c3:b4:5c:0b:d0:97:8f:c3:ca:b4:15:ab:50: c5:eb:e9:e1:aa:17:13:81:eb:ce:42:f3:c1:e8:fe: 72:32:0d:eb:f3:a1:09:f1:8c:83:ed:76:25:82:e0: 88:bd:8c:34:12:1d:83:74:86:d3:b8:51:62:45:da: 2b:64:68:19:2c:8b:9f:dd:28:f9:be:bf:ec:09:21: 85:b2:82:f9:b9:f0:97:fc:84:b9:27:51:b5:68:b2: 9d:09:f1:23:1a:2e:4c:d4:fa:9b:65:cd:59:8d:b3: c0:fa:8a:e8:37:aa:6b:13:ba:40:ff:09:ab:ae:c4: 2e:0f:27:d0:91:31:2b:3b:da:59:e8:ab:fb:3f:23: 0a:22:9e:f5:3a:c7:db:8c:fd:a0:2e:4e:37:d8:7e: 8b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:4C:9F:A2:12:10:FB:8D:07:06:E0:59:98:27:D4:58:7B:51:42:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3159cdb7-3f31-33e3-b91f-2e6db52c7c6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 104.254.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:aa:22:78:82:ba:61:a7:fe:b5:a8:9e:3b:a6:ce:59:b7:65: 50:e7:68:dc:27:c1:c4:ad:5e:bb:0f:22:ac:53:7c:df:66:dd: e6:69:58:cd:7b:fd:4c:34:43:51:b0:cb:c3:ee:82:68:39:d2: 44:d0:59:ed:0e:b7:7a:9e:7d:db:e9:f6:46:11:15:41:96:ec: 38:ef:e8:d1:d0:fa:54:93:d2:6f:f3:48:c9:ae:c7:b2:0d:b2: 0c:3b:21:70:c7:46:34:4a:cf:8a:ff:87:69:e8:44:d9:35:4a: 88:5e:c9:e7:cd:19:ee:19:41:75:20:42:19:60:01:98:46:25: a4:a3:47:73:dc:2f:2e:8e:d4:1c:1c:56:be:bb:c8:40:ed:ab: 6e:fd:52:94:82:76:84:40:ae:d4:ca:2b:f0:0c:82:53:41:99: ba:5c:36:16:09:20:2f:9c:8e:cc:8b:f4:0c:b0:c4:a6:d7:eb: 4b:82:29:0d:02:ed:f8:77:71:ae:7c:f3:9d:6b:45:86:08:bc: 5a:d1:f0:cd:c9:00:ef:e0:a7:22:d8:7a:a0:49:94:72:3c:73: 86:2a:9b:2a:36:63:a3:ca:17:85:74:21:52:65:17:d3:b4:29: a7:4b:78:f4:ba:f6:b8:77:68:56:eb:46:db:db:d7:00:95:95: b8:32:50:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTB1qhzxOd8HSyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk OGYzZTQwMTItOWRmMS00NmZjLWE1N2YtYWVkNjRjMzcxNTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+ytvR3/i/EwPM3xKTPeYrlacLeBDJPRr7zN 09UeXmkU0R/FFGD5Vm5N2x16x7ORy82wI6PZI5qoh4Dh+h7IaG9d/HDRyRVdkLiz KhGjj6NCfkIvmMbvT2eOe9Li7s+3xyMHGFUlbIH+O8O0XAvQl4/DyrQVq1DF6+nh qhcTgevOQvPB6P5yMg3r86EJ8YyD7XYlguCIvYw0Eh2DdIbTuFFiRdorZGgZLIuf 3Sj5vr/sCSGFsoL5ufCX/IS5J1G1aLKdCfEjGi5M1PqbZc1ZjbPA+oroN6prE7pA /wmrrsQuDyfQkTErO9pZ6Kv7PyMKIp71OsfbjP2gLk432H6L2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBMn6ISEPuNBwbgWZgn1Fh7UUJbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMzE1OWNkYjctM2YzMS0z M2UzLWI5MWYtMmU2ZGI1MmM3YzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP7oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+qIniCumGn/rWonjumzlm3ZVDnaNwnwcStXrsPIqxTfN9m3eZpWM17 /Uw0Q1Gwy8Pugmg50kTQWe0Ot3qefdvp9kYRFUGW7Djv6NHQ+lST0m/zSMmux7IN sgw7IXDHRjRKz4r/h2noRNk1SoheyefNGe4ZQXUgQhlgAZhGJaSjR3PcLy6O1Bwc Vr67yEDtq279UpSCdoRArtTKK/AMglNBmbpcNhYJIC+cjsyL9AywxKbX60uCKQ0C 7fh3ca58851rRYYIvFrR8M3JAO/gpyLYeqBJlHI8c4Yqmyo2Y6PKF4V0IVJlF9O0 KadLePS69rh3aFbrRtvb1wCVlbgyUDM= -----END CERTIFICATE-----Generated at Sat Apr 5 07:29:06 2025 by rpki-client