$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f9387bad-8838-3016-b390-a6d3c8979deb.roa File: f9387bad-8838-3016-b390-a6d3c8979deb.roa (raw, json) Hash identifier: nkBimvYYSmxMVyt25Bk2DZ46UA+7aE1xoxZafa44HpA= Subject key identifier: 6E:75:33:01:83:B1:7B:74:6C:AC:D6:92:34:BC:CB:79:F1:90:31:57 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C26054C6B5553E25BD11A200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f9387bad-8838-3016-b390-a6d3c8979deb.roa Signing time: Mon 03 Feb 2025 11:07:48 +0000 ROA not before: Mon 03 Feb 2025 11:07:48 +0000 ROA not after: Sun 04 May 2025 10:07:48 +0000 asID: 30036 IP address blocks: 104.166.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:60:54:c6:b5:55:3e:25:bd:11:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 3 11:07:48 2025 GMT Not After : May 4 10:07:48 2025 GMT Subject: CN=e31ad54e-f4e6-4d38-b414-83345cffabaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:14:02:96:10:1f:43:67:98:31:d7:23:66:d4: 13:2d:2e:8d:fd:ac:7d:47:ac:9e:b5:1f:56:1d:43: 3f:17:2b:43:88:51:15:66:08:15:76:61:3f:62:c3: 0c:f7:fc:7f:bf:79:c9:e9:07:7a:5f:14:f5:16:9c: 8d:a2:3d:31:68:9e:0a:b7:cd:24:56:f4:ed:5d:97: 06:46:63:c3:20:ca:28:40:19:99:b4:5c:9b:f7:b1: a5:fa:ec:09:0e:c3:1d:24:fc:98:b7:60:1e:72:7e: d3:7b:65:15:3c:00:85:25:b4:e8:4c:18:f8:f4:00: 37:6c:d3:87:76:1e:8e:dd:4b:08:a6:95:81:74:46: 1b:8d:64:fa:1c:23:21:bf:33:35:51:65:c1:81:40: c5:73:4d:5f:07:88:e0:30:91:8d:cb:3d:c3:75:4b: bf:88:03:36:a1:c9:1e:72:54:82:3c:68:4c:3f:be: 6a:73:69:f2:af:65:b5:0f:15:38:75:db:50:e4:6b: 3c:75:40:dc:f1:65:cb:28:ca:c8:6b:bc:73:c7:55: c1:13:d0:cb:8a:42:4d:5d:de:17:02:c5:a7:c3:3c: 4b:ce:39:e5:7c:d0:9b:3a:34:42:66:48:87:12:11: b7:80:84:37:9f:6d:6c:56:a5:45:71:90:49:33:62: 48:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:75:33:01:83:B1:7B:74:6C:AC:D6:92:34:BC:CB:79:F1:90:31:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f9387bad-8838-3016-b390-a6d3c8979deb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 104.166.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:d6:97:ff:b1:1b:68:ae:c6:84:2c:0c:6c:34:2c:e1:0e:2f: e9:b7:88:95:64:67:ef:02:22:2c:ff:64:d5:96:f9:11:29:0b: df:56:91:c4:71:7e:d3:5c:f6:2a:89:a8:21:be:44:88:56:68: eb:e2:b4:4e:48:04:d5:51:5f:61:a8:45:b0:ca:52:a7:de:48: 3e:c2:35:3d:27:c8:5e:3a:05:0b:92:ab:54:e9:31:80:a5:7b: d3:52:cf:c3:f9:e5:d5:27:17:93:55:9f:fd:8d:da:a8:9a:6d: 02:e6:29:00:e9:e4:3e:ef:00:71:34:9c:0d:37:7b:0e:f5:3e: 7e:de:e1:b0:a1:37:09:bc:f9:9f:a6:56:7b:de:3b:38:fe:ed: 83:44:32:b7:c0:34:1b:57:58:11:78:07:d6:e5:7e:33:0b:e1: 2c:2d:42:e9:b2:99:ec:0f:3e:38:b1:ef:65:0f:0c:96:3a:1b: c9:cd:37:c8:75:d6:18:dc:d3:66:d3:73:ff:85:5d:21:06:48: 81:4d:62:96:da:7e:2b:19:da:5b:3c:e0:00:3a:58:96:f3:1d: 47:ee:72:6f:25:cf:1b:e9:74:4b:55:9e:2c:81:54:12:d2:cd: 35:ba:be:c4:f9:cf:4f:c8:0f:c5:14:9c:a3:9f:2f:e3:d9:b0: db:56:18:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCYFTGtVU+Jb0RogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwMzExMDc0OFoXDTI1MDUwNDEwMDc0OFowLzEtMCsGA1UEAxMk ZTMxYWQ1NGUtZjRlNi00ZDM4LWI0MTQtODMzNDVjZmZhYmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxQClhAfQ2eYMdcjZtQTLS6N/ax9R6yetR9W HUM/FytDiFEVZggVdmE/YsMM9/x/v3nJ6Qd6XxT1FpyNoj0xaJ4Kt80kVvTtXZcG RmPDIMooQBmZtFyb97Gl+uwJDsMdJPyYt2Aecn7Te2UVPACFJbToTBj49AA3bNOH dh6O3UsIppWBdEYbjWT6HCMhvzM1UWXBgUDFc01fB4jgMJGNyz3DdUu/iAM2ocke clSCPGhMP75qc2nyr2W1DxU4ddtQ5Gs8dUDc8WXLKMrIa7xzx1XBE9DLikJNXd4X AsWnwzxLzjnlfNCbOjRCZkiHEhG3gIQ3n21sVqVFcZBJM2JI6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG51MwGDsXt0bKzWkjS8y3nxkDFXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjkzODdiYWQtODgzOC0z MDE2LWIzOTAtYTZkM2M4OTc5ZGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaKbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvWl/+xG2iuxoQsDGw0LOEOL+m3iJVkZ+8CIiz/ZNWW+REpC99WkcRx ftNc9iqJqCG+RIhWaOvitE5IBNVRX2GoRbDKUqfeSD7CNT0nyF46BQuSq1TpMYCl e9NSz8P55dUnF5NVn/2N2qiabQLmKQDp5D7vAHE0nA03ew71Pn7e4bChNwm8+Z+m VnveOzj+7YNEMrfANBtXWBF4B9blfjML4SwtQumymewPPjix72UPDJY6G8nNN8h1 1hjc02bTc/+FXSEGSIFNYpbafisZ2ls84AA6WJbzHUfucm8lzxvpdEtVniyBVBLS zTW6vsT5z0/ID8UUnKOfL+PZsNtWGJY= -----END CERTIFICATE-----Generated at Sun Apr 6 05:58:37 2025 by rpki-client