$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/834a3b57-5c33-37e2-a602-f694461eb7c5.roa File: 834a3b57-5c33-37e2-a602-f694461eb7c5.roa (raw, json) Hash identifier: 4CYaQTq7/iw8gjcNsP+FX/BBzwWh8AsAMFvCF2DDprA= Subject key identifier: 6F:E5:09:A9:CC:7A:6F:4D:63:87:89:50:0F:DE:46:E0:05:1B:09:08 Certificate issuer: /CN=b32ded34-63dd-4272-9a22-5524e5e4ab15 Certificate serial: 010D0C9F43285848EF615F88AE61628699B25600 Authority key identifier: 95:F6:91:74:F3:9D:AA:FF:0E:3E:47:55:39:37:38:C3:90:74:6B:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/834a3b57-5c33-37e2-a602-f694461eb7c5.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 104.171.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/b32ded34-63dd-4272-9a22-5524e5e4ab15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/b32ded34-63dd-4272-9a22-5524e5e4ab15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:5f:88:ae:61:62:86:99:b2:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b32ded34-63dd-4272-9a22-5524e5e4ab15 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=b80d4bd4-66dd-4261-90d4-2c0a264a8033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4b:f1:dd:6c:d9:89:2e:87:c8:b9:20:a1:87: e4:ec:c2:fa:65:5f:e1:64:78:b7:33:7f:f5:c9:88: ec:6f:be:9e:d9:9a:d9:03:c7:3b:59:de:1e:e5:f9: 73:c0:96:cd:53:4d:06:db:cd:48:96:e5:2b:55:84: 13:f5:fc:39:f8:d7:24:56:31:6f:99:b7:ab:70:66: 0d:b1:cf:c2:13:72:b3:62:1d:f4:8a:cd:72:94:ab: 81:f1:63:db:c9:e0:44:c7:e1:33:b1:15:2c:d0:43: fb:e2:e2:f4:19:1e:c7:9c:75:c7:08:e9:47:ef:03: 4b:31:12:7c:f0:88:c7:cd:fd:bb:9d:1d:3c:55:be: cd:a0:9f:92:ab:d6:49:1a:23:77:75:5f:a6:40:25: e0:6d:6f:3d:ec:ff:f4:c5:83:b9:0a:70:71:a8:36: 23:4e:ca:b0:fc:51:c2:a1:9e:b8:97:08:b1:88:c2: 0a:de:a4:00:07:32:d2:44:34:64:7e:02:f0:e9:a3: 80:2e:ed:af:cc:d3:60:38:f3:7a:b8:3d:ca:90:41: 4a:c4:72:bb:73:22:c3:dc:9f:71:9a:a7:7c:e0:a7: 8c:8e:91:91:e9:bc:8f:08:ee:c9:0a:bf:82:d5:85: 00:11:57:49:b0:ed:30:cb:22:8e:26:3c:c3:9c:89: 25:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E5:09:A9:CC:7A:6F:4D:63:87:89:50:0F:DE:46:E0:05:1B:09:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/834a3b57-5c33-37e2-a602-f694461eb7c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/b32ded34-63dd-4272-9a22-5524e5e4ab15.crl X509v3 Authority Key Identifier: keyid:95:F6:91:74:F3:9D:AA:FF:0E:3E:47:55:39:37:38:C3:90:74:6B:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15.cer sbgp-ipAddrBlock: critical IPv4: 104.171.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:5e:2b:e9:2e:7c:22:8a:ce:43:77:72:31:65:b4:29:c6:aa: c6:2a:fc:3f:92:76:16:f7:4c:ea:07:da:e4:9e:03:97:31:77: f6:91:50:4a:20:52:ff:69:ad:25:0c:76:c4:70:a8:da:b2:e8: fc:73:ed:91:a9:56:7e:6d:f2:e1:49:3f:de:34:c7:94:1c:74: c7:bc:ea:0e:34:2c:a5:55:f1:c7:3a:b1:a0:61:31:88:50:8a: 55:a4:ae:5e:9d:a7:b0:89:bd:07:9b:35:de:65:f0:4d:10:14: 53:36:4e:61:69:e6:7e:7a:f3:3d:fc:59:63:0f:6f:92:7c:e5: f2:a5:78:bf:eb:49:e5:9a:ad:9b:66:76:4d:97:7e:fe:9d:44: 46:2f:0c:c2:83:21:a9:09:b3:e0:1e:28:42:d8:16:a0:a0:1e: 48:a8:fb:7e:6a:25:9b:e9:32:86:cf:af:17:f7:bd:d4:3f:ee: 1b:59:d8:41:29:e1:0b:cc:39:96:c8:c8:36:3d:98:fa:51:aa: 23:32:df:4f:5f:f9:35:fa:18:d6:d7:21:df:66:51:49:ff:fb: 7c:ca:9c:7e:c9:b3:e3:20:2b:eb:b2:da:85:d3:07:c1:ae:08: 77:6b:b9:04:08:19:fb:2b:67:b8:e0:47:ce:e8:71:66:7a:34: 5a:82:cb:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYV+IrmFihpmyVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjMyZGVkMzQtNjNkZC00MjcyLTlhMjItNTUyNGU1ZTRh YjE1MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk YjgwZDRiZDQtNjZkZC00MjYxLTkwZDQtMmMwYTI2NGE4MDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0vx3WzZiS6HyLkgoYfk7ML6ZV/hZHi3M3/1 yYjsb76e2ZrZA8c7Wd4e5flzwJbNU00G281IluUrVYQT9fw5+NckVjFvmbercGYN sc/CE3KzYh30is1ylKuB8WPbyeBEx+EzsRUs0EP74uL0GR7HnHXHCOlH7wNLMRJ8 8IjHzf27nR08Vb7NoJ+Sq9ZJGiN3dV+mQCXgbW897P/0xYO5CnBxqDYjTsqw/FHC oZ64lwixiMIK3qQABzLSRDRkfgLw6aOALu2vzNNgOPN6uD3KkEFKxHK7cyLD3J9x mqd84KeMjpGR6byPCO7JCr+C1YUAEVdJsO0wyyKOJjzDnIklIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/lCanMem9NY4eJUA/eRuAFGwkIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMzJk ZWQzNC02M2RkLTQyNzItOWEyMi01NTI0ZTVlNGFiMTUvODM0YTNiNTctNWMzMy0z N2UyLWE2MDItZjY5NDQ2MWViN2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjMyZGVkMzQtNjNkZC00MjcyLTlh MjItNTUyNGU1ZTRhYjE1L2IzMmRlZDM0LTYzZGQtNDI3Mi05YTIyLTU1MjRlNWU0 YWIxNS5jcmwwHwYDVR0jBBgwFoAUlfaRdPOdqv8OPkdVOTc4w5B0a5kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMzJkZWQzNC02M2RkLTQyNzItOWEyMi01NTI0 ZTVlNGFiMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKvGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEReK+kufCKKzkN3cjFltCnGqsYq/D+Sdhb3TOoH2uSeA5cxd/aRUEog Uv9prSUMdsRwqNqy6Pxz7ZGpVn5t8uFJP940x5QcdMe86g40LKVV8cc6saBhMYhQ ilWkrl6dp7CJvQebNd5l8E0QFFM2TmFp5n568z38WWMPb5J85fKleL/rSeWarZtm dk2Xfv6dREYvDMKDIakJs+AeKELYFqCgHkio+35qJZvpMobPrxf3vdQ/7htZ2EEp 4QvMOZbIyDY9mPpRqiMy309f+TX6GNbXId9mUUn/+3zKnH7Js+MgK+uy2oXTB8Gu CHdruQQIGfsrZ7jgR87ocWZ6NFqCy7Y= -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:12 2025 by rpki-client