$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3e73c06b-902f-3599-accc-26c4dac8766a.roa File: 3e73c06b-902f-3599-accc-26c4dac8766a.roa (raw, json) Hash identifier: ku6ZrJbhrpqU2EUpALf3OsePM2mFnN+L0bL/zmD9FgY= Subject key identifier: 16:22:88:45:32:56:4D:E3:9A:51:DA:12:8B:1A:54:35:0F:A2:4F:60 Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F432858496E4989474648987587792A00 Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3e73c06b-902f-3599-accc-26c4dac8766a.roa Signing time: Sun 06 Apr 2025 01:00:47 +0000 ROA not before: Sun 06 Apr 2025 01:00:47 +0000 ROA not after: Sat 05 Jul 2025 01:00:47 +0000 asID: 40342 IP address blocks: 104.200.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6e:49:89:47:46:48:98:75:87:79:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: Apr 6 01:00:47 2025 GMT Not After : Jul 5 01:00:47 2025 GMT Subject: CN=e1d9e6ef-950f-4007-91d7-2fe8e43b5a02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:59:81:12:30:98:35:3e:23:af:c9:d5:a4:10: ca:e6:81:fb:c4:f7:e0:59:23:97:1f:cc:8f:86:8b: 39:f1:fd:3f:43:8e:32:7f:71:14:6c:c1:d8:a8:c5: 44:2d:1d:f0:76:01:ad:e5:99:ba:a7:2b:49:70:d4: 9f:41:0b:0b:a4:13:35:e7:c8:41:7d:1f:ae:82:16: f2:1c:83:b8:7b:99:fa:4a:19:85:58:3f:60:2e:69: 96:1f:37:d9:43:0c:3f:83:db:4b:a1:63:b6:05:28: 82:97:37:99:92:b6:06:a5:be:cc:50:0c:7e:2d:a6: 11:5e:04:ec:7a:da:be:b5:4e:90:8a:77:c6:fa:e1: b4:24:05:28:73:81:b1:e2:ce:ce:d5:4a:88:40:fd: d3:b2:e3:76:11:53:ab:bd:0f:46:04:66:ff:c5:11: 22:ea:c6:fc:8c:62:9b:d9:be:c0:f6:63:96:4f:7a: f6:12:ec:45:7e:3d:d4:3c:16:a7:aa:5b:3d:42:9a: 0e:a9:1f:c8:51:9d:5e:d7:16:c4:b4:42:66:35:35: 69:8e:e6:b7:82:d2:fb:54:31:e0:cb:fa:7c:5d:d2: 95:47:e6:9a:a4:b6:1e:05:e3:2c:73:36:48:49:42: e0:1e:5d:dd:b9:b4:ae:06:4f:60:2f:5a:e4:7f:4a: 20:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:22:88:45:32:56:4D:E3:9A:51:DA:12:8B:1A:54:35:0F:A2:4F:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3e73c06b-902f-3599-accc-26c4dac8766a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 104.200.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:28:32:62:7c:5d:e5:d4:b3:c9:57:ee:d1:ef:10:ea:f1:73: a8:1d:b9:f6:98:1f:04:bd:dc:08:4f:47:d9:98:c7:d0:86:d8: 5e:a0:9c:82:42:49:77:bf:26:7c:76:c6:f9:c5:b0:4a:55:17: e2:67:c8:51:b3:10:4e:66:eb:d8:d1:3d:13:4f:a0:84:73:7b: 85:0d:a9:56:3e:de:7c:53:56:60:5d:ec:1d:11:ef:26:a9:03: da:cc:53:1b:f7:37:6e:68:60:53:a8:e3:35:eb:4b:46:d6:0e: f5:61:a8:8c:3c:fe:2a:29:4b:a5:2e:6d:22:81:05:f9:cd:30: ec:07:a6:77:aa:4b:47:b5:c3:c4:82:dc:fa:0e:88:94:80:b8: 90:04:30:4d:b0:a3:44:28:5b:2d:5e:6b:5f:4d:8b:69:0e:e8: ac:29:56:df:c3:1c:83:47:c0:a2:31:bf:fa:5a:26:b3:c1:55: 06:7f:7c:45:cc:da:98:cd:e6:19:0b:c6:95:80:73:d7:8e:10: 22:cc:da:f2:35:24:15:05:17:85:dc:94:70:f8:f6:5e:68:12: 58:31:33:be:bf:42:24:c6:32:7f:bf:63:99:47:4c:be:a2:74: f6:64:d0:0e:08:47:f8:31:a6:a8:39:2c:7b:8d:ef:f1:7a:a0: cd:c2:bb:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEluSYlHRkiYdYd5KgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI1MDQwNjAxMDA0N1oXDTI1MDcwNTAxMDA0N1owLzEtMCsGA1UEAxMk ZTFkOWU2ZWYtOTUwZi00MDA3LTkxZDctMmZlOGU0M2I1YTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VmBEjCYNT4jr8nVpBDK5oH7xPfgWSOXH8yP hos58f0/Q44yf3EUbMHYqMVELR3wdgGt5Zm6pytJcNSfQQsLpBM158hBfR+ughby HIO4e5n6ShmFWD9gLmmWHzfZQww/g9tLoWO2BSiClzeZkrYGpb7MUAx+LaYRXgTs etq+tU6QinfG+uG0JAUoc4Gx4s7O1UqIQP3TsuN2EVOrvQ9GBGb/xREi6sb8jGKb 2b7A9mOWT3r2EuxFfj3UPBanqls9QpoOqR/IUZ1e1xbEtEJmNTVpjua3gtL7VDHg y/p8XdKVR+aapLYeBeMsczZISULgHl3dubSuBk9gL1rkf0ogAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYiiEUyVk3jmlHaEosaVDUPok9gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvM2U3M2MwNmItOTAyZi0z NTk5LWFjY2MtMjZjNGRhYzg3NjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMjZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwoMmJ8XeXUs8lX7tHvEOrxc6gdufaYHwS93AhPR9mYx9CG2F6gnIJC SXe/Jnx2xvnFsEpVF+JnyFGzEE5m69jRPRNPoIRze4UNqVY+3nxTVmBd7B0R7yap A9rMUxv3N25oYFOo4zXrS0bWDvVhqIw8/iopS6UubSKBBfnNMOwHpneqS0e1w8SC 3PoOiJSAuJAEME2wo0QoWy1ea19Ni2kO6KwpVt/DHINHwKIxv/paJrPBVQZ/fEXM 2pjN5hkLxpWAc9eOECLM2vI1JBUFF4XclHD49l5oElgxM76/QiTGMn+/Y5lHTL6i dPZk0A4IR/gxpqg5LHuN7/F6oM3Cu/I= -----END CERTIFICATE-----Generated at Sun Apr 6 23:05:46 2025 by rpki-client