$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/e31d6b6a-ba7b-38f9-b9aa-6116a7546606.roa File: e31d6b6a-ba7b-38f9-b9aa-6116a7546606.roa (raw, json) Hash identifier: /XmtjI+KuFiJbvAIJ8L/plyRpRgX9sHllMPL0u21brs= Subject key identifier: 71:28:97:BC:E1:38:39:D7:19:CC:F2:4C:10:78:63:08:E3:B9:71:F8 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858490B4C224F4CF935C134382F80 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/e31d6b6a-ba7b-38f9-b9aa-6116a7546606.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 19437 IP address blocks: 104.254.233.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:22:4f:4c:f9:35:c1:34:38:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=210ad66c-4e16-45b7-a4c9-af4adf081d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:df:cb:32:ed:fa:42:fc:df:69:d3:32:7d:82: c3:a5:43:6b:11:5b:7b:cb:79:b5:ee:a4:08:36:51: db:d5:8a:12:6a:80:88:5d:9c:a3:59:65:cf:1c:1b: a7:6d:c8:e5:8e:44:59:8b:a6:ae:66:51:e6:08:00: 86:d4:ed:1c:6c:8b:aa:0c:73:66:bf:07:68:b0:fa: ee:13:0e:a1:69:27:ca:cd:be:82:4e:5e:fa:82:82: cb:72:55:07:eb:2b:23:7a:b4:b6:5f:b5:2c:a9:60: 44:17:3c:af:79:f0:bb:12:82:3b:e9:68:ba:d8:b7: 46:46:39:eb:cf:ef:ac:06:43:be:2e:1b:de:ba:61: 4f:ed:c9:e4:3c:a1:03:17:fa:5a:21:92:d7:1b:b4: b1:4d:78:7d:65:a9:b1:21:18:40:a7:99:11:43:63: 0a:0e:4d:57:1f:4b:88:83:dd:d5:e2:89:b6:9d:d7: 12:1e:d8:05:d8:ba:92:0a:a8:1c:23:7d:51:9d:85: 64:0c:eb:68:c8:ba:4e:18:f4:51:cd:bb:66:e4:8f: ac:52:21:a3:99:72:7f:fa:4d:6b:25:12:f2:37:cc: 2b:6b:53:72:6d:f3:93:c2:51:7a:b8:c2:7e:9c:f7: c6:80:3c:23:a6:a5:91:ba:91:e0:f7:90:5b:98:0c: a3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:28:97:BC:E1:38:39:D7:19:CC:F2:4C:10:78:63:08:E3:B9:71:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/e31d6b6a-ba7b-38f9-b9aa-6116a7546606.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 104.254.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:38:e1:09:bd:8b:36:68:7c:8b:44:c3:4c:8c:c0:95:dd:2e: 89:2c:b2:a2:4b:e8:60:e9:e2:3b:1a:5c:c0:75:41:61:56:bd: 09:c1:fd:b7:ef:9a:28:b3:87:49:ec:cf:b0:64:c2:d4:0a:d9: aa:84:60:45:14:44:ab:e6:1c:1c:07:c1:a0:cd:55:4c:c0:ea: f6:8d:8b:04:04:77:77:2f:69:7b:78:18:7a:2c:1b:34:3b:2d: 20:e8:e6:5a:74:e3:09:36:6e:43:e2:bf:23:0a:fe:6d:0d:ae: ef:25:7a:1c:df:a5:a4:5c:d3:74:57:d7:fc:10:5c:92:29:b5: e8:99:39:7b:5c:7d:8e:55:f5:d2:2d:65:79:81:e1:b8:ee:00: 48:28:92:04:5f:1e:08:7a:82:b7:7d:72:7a:40:d4:aa:4a:2d: b9:5c:c9:13:42:9d:a4:02:1c:9d:f8:2d:cc:9d:ba:8b:49:f6: 54:72:e2:76:00:f2:dc:71:fd:6a:69:3e:d0:6f:c6:b1:bc:aa: c0:6d:d6:c0:14:10:a7:11:47:a1:99:ab:9f:c3:94:98:40:03: 25:ae:9d:8b:bd:6a:5a:b9:02:3e:46:4e:b6:af:71:4b:c6:09: c1:aa:32:a2:fc:8f:d3:27:ba:e2:8b:de:86:41:3f:ec:ae:98: 55:27:cc:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTCJPTPk1wTQ4L4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk MjEwYWQ2NmMtNGUxNi00NWI3LWE0YzktYWY0YWRmMDgxZDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzd/LMu36QvzfadMyfYLDpUNrEVt7y3m17qQI NlHb1YoSaoCIXZyjWWXPHBunbcjljkRZi6auZlHmCACG1O0cbIuqDHNmvwdosPru Ew6haSfKzb6CTl76goLLclUH6ysjerS2X7UsqWBEFzyvefC7EoI76Wi62LdGRjnr z++sBkO+LhveumFP7cnkPKEDF/paIZLXG7SxTXh9ZamxIRhAp5kRQ2MKDk1XH0uI g93V4om2ndcSHtgF2LqSCqgcI31RnYVkDOtoyLpOGPRRzbtm5I+sUiGjmXJ/+k1r JRLyN8wra1NybfOTwlF6uMJ+nPfGgDwjpqWRupHg95BbmAyjNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEol7zhODnXGczyTBB4YwjjuXH4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZTMxZDZiNmEtYmE3Yi0z OGY5LWI5YWEtNjExNmE3NTQ2NjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP7pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHM44Qm9izZofItEw0yMwJXdLokssqJL6GDp4jsaXMB1QWFWvQnB/bfv miizh0nsz7BkwtQK2aqEYEUURKvmHBwHwaDNVUzA6vaNiwQEd3cvaXt4GHosGzQ7 LSDo5lp04wk2bkPivyMK/m0Nru8lehzfpaRc03RX1/wQXJIpteiZOXtcfY5V9dIt ZXmB4bjuAEgokgRfHgh6grd9cnpA1KpKLblcyRNCnaQCHJ34LcyduotJ9lRy4nYA 8txx/WppPtBvxrG8qsBt1sAUEKcRR6GZq5/DlJhAAyWunYu9alq5Aj5GTravcUvG CcGqMqL8j9MnuuKL3oZBP+yumFUnzDQ= -----END CERTIFICATE-----Generated at Sun Apr 6 08:34:07 2025 by rpki-client