$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/295e6495-4792-3797-a2bf-51461c90e961.roa File: 295e6495-4792-3797-a2bf-51461c90e961.roa (raw, json) Hash identifier: ANOtDVxLXKOKQhYjCgr0G2j5TFYB0MiBB8ZmeXaJSqw= Subject key identifier: 88:2F:D8:3E:1C:FF:50:55:AF:37:1C:18:51:9E:B0:95:96:55:F3:8F Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F43285848A830B0B165B88616C5DAEC80 Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/295e6495-4792-3797-a2bf-51461c90e961.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 40342 IP address blocks: 104.200.216.0/24 maxlen: 24 104.200.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:b0:b1:65:b8:86:16:c5:da:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=f7103167-90ef-4749-bb4a-7348763a13c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:91:ba:e1:73:20:7e:df:3c:c7:9f:79:27:2b: 4b:f2:15:4b:67:06:13:d1:37:2a:6f:c0:bd:fe:c2: f1:e6:78:10:d2:c7:f9:6f:8f:11:fb:eb:17:a7:ab: c6:cc:c1:8c:0a:a8:dc:70:81:db:97:db:24:15:b5: 08:02:1e:2b:b0:6e:fc:e6:76:a6:72:3e:a3:f2:f7: c2:93:eb:0f:1d:dc:24:d7:cf:5a:76:61:55:cd:c3: 4d:00:62:ce:cc:84:9a:15:11:e4:d7:c8:81:06:b1: a8:d2:59:46:73:71:f4:11:ca:59:22:62:69:8b:89: ad:d8:46:4a:9b:6d:18:5b:be:c8:8c:c7:a8:a1:fa: 49:e2:57:ae:60:c3:f3:ca:2f:51:86:69:95:80:da: c0:e6:7e:dd:ab:8a:b7:7c:d4:9c:d3:a0:df:6b:bc: d7:f2:1f:12:12:a3:49:d8:e5:93:2d:b9:5b:54:22: 32:e8:80:1f:b1:04:b0:ec:e1:a7:41:3f:f2:71:6e: f2:c0:5c:af:cf:50:13:bf:15:5e:2e:a9:9c:2e:c1: a1:3e:15:76:fc:f1:fc:66:aa:66:09:e2:72:03:e0: 67:1a:9f:56:37:b3:f2:4f:60:ba:45:6b:cc:33:ff: 8d:e3:20:7e:66:d2:eb:d6:a7:9c:12:fd:30:b3:df: 85:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2F:D8:3E:1C:FF:50:55:AF:37:1C:18:51:9E:B0:95:96:55:F3:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/295e6495-4792-3797-a2bf-51461c90e961.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 104.200.216.0/24 104.200.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:3b:68:e0:0c:8c:5e:1b:24:fe:77:7a:f0:67:13:62:5e:84: 11:c5:95:1c:c4:16:c7:a1:06:7b:30:fd:c9:56:d0:b7:4d:f6: a7:75:ac:b1:e7:ec:b8:72:d0:d1:8b:26:bc:06:41:f9:5a:3f: e0:a7:b8:6b:fa:08:23:78:4e:d6:e3:2a:3a:b0:48:b7:72:42: a0:35:dc:8c:08:5b:2e:90:d3:a1:e2:f5:4b:10:0b:c6:44:1e: 04:95:77:ae:70:26:67:51:c7:26:7c:01:6f:50:20:14:e9:18: 25:53:de:04:d9:84:34:68:27:97:4c:01:9b:71:81:e7:a0:04: cc:66:a9:99:b3:7d:db:2e:72:f1:16:11:46:86:9a:4a:23:d6: d4:96:a4:22:48:fe:d7:9b:99:fe:0a:7c:ed:74:82:ed:40:73: f1:98:e3:9d:b3:bf:d0:b7:81:a5:f0:91:d1:3f:ce:f0:5e:e9: 4a:71:b8:b0:3e:4a:55:07:94:e7:dc:f7:f0:a4:cb:73:d9:af: d6:7b:45:1b:ba:b3:6b:e9:d0:39:ab:fb:b0:7f:4e:1c:b0:b7: 38:27:54:45:cc:8d:9b:6f:03:32:71:b5:25:8f:0e:81:b6:96: 3f:ab:c7:f5:de:46:da:84:ba:37:5a:8a:d9:c4:73:c9:8a:34: b9:5b:19:3a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEioMLCxZbiGFsXa7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk ZjcxMDMxNjctOTBlZi00NzQ5LWJiNGEtNzM0ODc2M2ExM2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZG64XMgft88x595JytL8hVLZwYT0Tcqb8C9 /sLx5ngQ0sf5b48R++sXp6vGzMGMCqjccIHbl9skFbUIAh4rsG785namcj6j8vfC k+sPHdwk189admFVzcNNAGLOzISaFRHk18iBBrGo0llGc3H0EcpZImJpi4mt2EZK m20YW77IjMeoofpJ4leuYMPzyi9RhmmVgNrA5n7dq4q3fNSc06Dfa7zX8h8SEqNJ 2OWTLblbVCIy6IAfsQSw7OGnQT/ycW7ywFyvz1ATvxVeLqmcLsGhPhV2/PH8Zqpm CeJyA+BnGp9WN7PyT2C6RWvMM/+N4yB+ZtLr1qecEv0ws9+FsQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFIgv2D4c/1BVrzccGFGesJWWVfOPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvMjk1ZTY0OTUtNDc5Mi0z Nzk3LWEyYmYtNTE0NjFjOTBlOTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaMjYAwQC aMjcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKM7aOAMjF4bJP53evBnE2JehBHFlRzEFsehBnsw/clW0LdN 9qd1rLHn7Lhy0NGLJrwGQflaP+CnuGv6CCN4TtbjKjqwSLdyQqA13IwIWy6Q06Hi 9UsQC8ZEHgSVd65wJmdRxyZ8AW9QIBTpGCVT3gTZhDRoJ5dMAZtxgeegBMxmqZmz fdsucvEWEUaGmkoj1tSWpCJI/tebmf4KfO10gu1Ac/GY452zv9C3gaXwkdE/zvBe 6UpxuLA+SlUHlOfc9/Cky3PZr9Z7RRu6s2vp0Dmr+7B/ThywtzgnVEXMjZtvAzJx tSWPDoG2lj+rx/XeRtqEujdaitnEc8mKNLlbGTo= -----END CERTIFICATE-----Generated at Sun Apr 6 17:19:34 2025 by rpki-client