$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/f746411c-82dc-320f-833f-056441f592f0.roa File: f746411c-82dc-320f-833f-056441f592f0.roa (raw, json) Hash identifier: J939Mg6f4FerJBGqVA16jyKcSI/kLXgZ8trT3OssAgs= Subject key identifier: 5A:02:53:E4:A7:B5:9D:1E:A7:34:FB:95:5E:33:44:1A:7A:A2:87:E5 Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F43285848BE86302D78B7F6021082C580 Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/f746411c-82dc-320f-833f-056441f592f0.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 40342 IP address blocks: 104.200.218.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:30:2d:78:b7:f6:02:10:82:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=032ad69d-8e14-4d6a-8378-acba7148ef05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cf:11:16:de:c3:bc:27:45:72:b4:5d:a8:9b: b7:50:ab:25:98:63:39:c9:9d:6a:eb:b3:99:ce:bf: 11:b0:81:ea:2f:86:e0:3c:ee:36:04:dc:93:22:35: 0b:77:84:dc:e6:4e:92:63:e1:97:c4:78:47:70:b4: a7:74:69:c2:44:06:03:bf:bf:64:01:7b:48:91:c8: 7a:f1:d7:61:77:c0:de:da:cd:2b:ca:8f:6c:fb:ec: a6:db:03:8d:9a:8e:8d:c5:13:61:3e:04:5c:f0:ea: f3:e6:65:66:ad:75:03:19:57:f3:12:99:33:5f:b3: 7b:e6:5d:d4:aa:24:fa:06:55:d1:dd:c4:89:a1:b5: ed:c5:c4:e4:50:b8:dd:5b:99:98:3e:02:26:08:5b: 57:f7:d4:96:ad:9b:b5:d5:6e:d7:91:0f:cd:4b:39: da:c4:df:ff:b3:6a:54:ff:89:54:80:6f:0a:50:9a: 00:e4:c2:44:1a:c2:b7:d0:ee:fd:7e:b2:3a:94:d3: 8e:ee:47:50:a5:be:3c:7a:f2:f1:7b:da:97:d6:60: 44:01:22:6c:8f:4c:14:14:80:c0:1e:9a:3a:4b:17: c9:0b:d1:fd:b7:e0:cf:f5:3c:32:53:17:a2:f2:54: 6b:a7:7d:4e:10:31:a0:69:b7:8c:d0:86:87:50:9d: 90:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:02:53:E4:A7:B5:9D:1E:A7:34:FB:95:5E:33:44:1A:7A:A2:87:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/f746411c-82dc-320f-833f-056441f592f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 104.200.218.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:4a:c3:dd:0b:fa:97:61:d2:3a:61:9c:2e:2b:5a:a1:60:7f: 51:a9:75:b5:5d:7e:41:ab:49:7a:5a:41:91:47:f7:1a:4b:16: 26:76:a4:22:e4:ee:b6:c8:e0:22:6e:80:36:62:b8:be:af:1a: 11:51:be:04:16:1e:38:84:05:24:5d:93:06:25:61:0b:21:a2: 28:8d:44:b9:90:f3:c6:7d:4e:e3:e4:3e:57:6a:c9:df:70:d3: 9a:93:24:22:21:07:b6:a7:f9:c3:a9:5c:7e:4b:3b:cd:22:20: 2b:fe:9f:85:60:d7:1e:cf:ce:71:88:d6:5e:f6:db:0f:a3:56: 92:52:ad:d8:a6:e3:a7:3f:86:c5:08:a2:a3:42:4b:ea:cb:4c: 4f:18:fc:26:5e:35:c5:da:22:32:5f:9f:1c:6a:85:e3:38:08: 15:72:b6:b8:0e:33:5d:50:0a:16:0b:e9:19:d5:37:23:14:10: ae:ec:3d:c4:45:ae:2e:ca:26:39:32:3b:a7:50:91:90:60:71: 6d:b2:e3:a5:0b:89:99:10:4d:ed:37:e6:f1:9f:aa:ab:fd:63: cf:2f:94:0a:54:d1:3c:3d:47:28:2f:9f:15:8f:13:a7:a0:46: 87:e1:1b:a5:f4:44:87:85:a7:ce:49:1c:f6:56:77:ca:4c:a3: 79:78:9c:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hjAteLf2AhCCxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk MDMyYWQ2OWQtOGUxNC00ZDZhLTgzNzgtYWNiYTcxNDhlZjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArc8RFt7DvCdFcrRdqJu3UKslmGM5yZ1q67OZ zr8RsIHqL4bgPO42BNyTIjULd4Tc5k6SY+GXxHhHcLSndGnCRAYDv79kAXtIkch6 8ddhd8De2s0ryo9s++ym2wONmo6NxRNhPgRc8Orz5mVmrXUDGVfzEpkzX7N75l3U qiT6BlXR3cSJobXtxcTkULjdW5mYPgImCFtX99SWrZu11W7XkQ/NSznaxN//s2pU /4lUgG8KUJoA5MJEGsK30O79frI6lNOO7kdQpb48evLxe9qX1mBEASJsj0wUFIDA Hpo6SxfJC9H9t+DP9TwyUxei8lRrp31OEDGgabeM0IaHUJ2QfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoCU+SntZ0epzT7lV4zRBp6ooflMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvZjc0NjQxMWMtODJkYy0z MjBmLTgzM2YtMDU2NDQxZjU5MmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaMjaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZKw90L+pdh0jphnC4rWqFgf1GpdbVdfkGrSXpaQZFH9xpLFiZ2pCLk 7rbI4CJugDZiuL6vGhFRvgQWHjiEBSRdkwYlYQshoiiNRLmQ88Z9TuPkPldqyd9w 05qTJCIhB7an+cOpXH5LO80iICv+n4Vg1x7PznGI1l722w+jVpJSrdim46c/hsUI oqNCS+rLTE8Y/CZeNcXaIjJfnxxqheM4CBVytrgOM11QChYL6RnVNyMUEK7sPcRF ri7KJjkyO6dQkZBgcW2y46ULiZkQTe035vGfqqv9Y88vlApU0Tw9RygvnxWPE6eg RofhG6X0RIeFp85JHPZWd8pMo3l4nLQ= -----END CERTIFICATE-----Generated at Sun Apr 6 17:03:38 2025 by rpki-client