$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9d2999d7-a1bb-3446-acf4-a09d095fef48.roa File: 9d2999d7-a1bb-3446-acf4-a09d095fef48.roa (raw, json) Hash identifier: tLZOL/a6BdUHCZBj828gGm2o/CqOvG632CZssL6T0p8= Subject key identifier: 6B:C1:CE:0B:A3:F0:6A:54:25:65:A4:6A:82:39:C2:C7:4E:4F:4E:E1 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858490B4C225D67EF4EA7DA061C40 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9d2999d7-a1bb-3446-acf4-a09d095fef48.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 19437 IP address blocks: 104.254.238.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:22:5d:67:ef:4e:a7:da:06:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=a2337a03-1897-49be-9d29-55561ee288b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:52:85:c4:d5:8f:d8:b7:46:24:f6:34:82:3e: 6b:0a:8b:75:25:d5:5f:c3:76:cc:f8:75:86:68:70: 35:df:db:f1:c2:0f:a6:33:79:97:5f:4d:eb:37:86: 4d:b1:c6:35:ae:00:9d:ec:c8:51:02:20:ec:18:a4: 57:7c:e7:9b:61:25:16:6c:e2:d0:a0:76:1c:15:cc: 47:6d:61:0a:39:81:3f:fa:b3:7a:da:06:2d:96:e3: 54:f3:85:b4:11:ce:e0:c7:48:2d:d4:4c:26:a7:4b: 40:f6:29:5e:ea:73:47:67:0e:ce:37:1f:31:cf:e4: 8c:c4:7e:74:ad:50:5e:c2:0c:25:0b:5f:98:18:4e: 99:37:e0:7f:a2:95:20:82:37:f2:78:0e:07:12:8d: 3b:b0:66:7b:4a:01:95:54:d9:da:74:d8:f6:77:2b: e4:12:3d:6b:e0:81:4b:de:19:f6:01:e2:99:64:8d: fb:69:c9:91:f0:86:08:62:63:1c:95:e6:a2:0e:9c: dc:89:66:c0:10:68:83:65:9e:a1:ca:4a:e4:5b:db: 37:5d:b5:28:17:38:04:36:c2:b7:1a:37:40:c7:bd: de:b7:ee:64:90:59:38:05:d6:05:3e:48:e0:f9:ab: bf:e4:47:80:a2:6c:7d:74:9c:22:ff:a4:e2:9e:30: 68:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C1:CE:0B:A3:F0:6A:54:25:65:A4:6A:82:39:C2:C7:4E:4F:4E:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9d2999d7-a1bb-3446-acf4-a09d095fef48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 104.254.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:e8:07:a1:9b:35:72:67:f7:2f:50:21:c8:af:07:34:50:68: f5:00:f6:07:ab:15:00:3a:e0:23:29:18:94:8d:d5:e7:85:3d: 74:a5:08:70:8d:c8:73:d5:9e:b4:da:05:c5:a2:ea:54:31:e2: ce:63:bb:a8:4a:ba:8c:df:d0:bb:d2:95:6a:94:83:4e:a3:df: ba:b1:fd:b1:8e:dc:86:0e:cf:89:f8:ca:66:8f:32:b2:20:bb: 9e:58:2f:db:5c:20:1d:9d:13:77:05:d3:9a:d5:6c:c1:30:e1: dc:3d:ba:bb:42:cc:a0:20:ac:40:02:7f:d2:25:2c:b1:eb:91: f2:27:19:2e:65:04:cb:72:06:d9:50:f1:c5:6e:53:c6:b2:06: f0:d8:c5:64:c0:5f:e6:b1:e2:fe:46:4c:f3:06:3c:d2:19:29: ea:47:30:6f:c6:3f:2b:26:f8:7c:48:1b:45:0f:af:41:04:ce: 3e:a4:5e:94:66:31:55:c7:b3:87:80:f0:53:20:31:38:ce:d4: 76:68:d6:dc:40:6a:65:b8:2a:02:41:46:87:cc:73:8a:1c:00: c5:fc:5f:a7:20:9d:44:97:f4:2c:47:87:9d:5c:36:5d:a7:3a: 55:55:0f:bf:cc:bd:4e:b6:13:df:d5:fe:e0:29:b8:53:79:cf: aa:6f:40:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTCJdZ+9Op9oGHEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk YTIzMzdhMDMtMTg5Ny00OWJlLTlkMjktNTU1NjFlZTI4OGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFKFxNWP2LdGJPY0gj5rCot1JdVfw3bM+HWG aHA139vxwg+mM3mXX03rN4ZNscY1rgCd7MhRAiDsGKRXfOebYSUWbOLQoHYcFcxH bWEKOYE/+rN62gYtluNU84W0Ec7gx0gt1Ewmp0tA9ile6nNHZw7ONx8xz+SMxH50 rVBewgwlC1+YGE6ZN+B/opUggjfyeA4HEo07sGZ7SgGVVNnadNj2dyvkEj1r4IFL 3hn2AeKZZI37acmR8IYIYmMcleaiDpzciWbAEGiDZZ6hykrkW9s3XbUoFzgENsK3 GjdAx73et+5kkFk4BdYFPkjg+au/5EeAomx9dJwi/6TinjBoiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvBzguj8GpUJWWkaoI5wsdOT07hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvOWQyOTk5ZDctYTFiYi0z NDQ2LWFjZjQtYTA5ZDA5NWZlZjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP7uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEToB6GbNXJn9y9QIcivBzRQaPUA9gerFQA64CMpGJSN1eeFPXSlCHCN yHPVnrTaBcWi6lQx4s5ju6hKuozf0LvSlWqUg06j37qx/bGO3IYOz4n4ymaPMrIg u55YL9tcIB2dE3cF05rVbMEw4dw9urtCzKAgrEACf9IlLLHrkfInGS5lBMtyBtlQ 8cVuU8ayBvDYxWTAX+ax4v5GTPMGPNIZKepHMG/GPysm+HxIG0UPr0EEzj6kXpRm MVXHs4eA8FMgMTjO1HZo1txAamW4KgJBRofMc4ocAMX8X6cgnUSX9CxHh51cNl2n OlVVD7/MvU62E9/V/uApuFN5z6pvQMw= -----END CERTIFICATE-----Generated at Sun Apr 6 08:22:33 2025 by rpki-client