$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/84cde4f4-6b3a-32b4-8547-230c540ead1d.roa File: 84cde4f4-6b3a-32b4-8547-230c540ead1d.roa (raw, json) Hash identifier: Y0VzJ/FRo4Hago6VNokHk4oSz3UtKetGq7nzih1i1+A= Subject key identifier: 27:95:3A:46:E5:6A:CD:08:4F:B9:0F:7F:91:15:60:9E:27:76:23:7D Certificate issuer: /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Certificate serial: 010D0C9F4328584953C41AC044EEA99C2E098F80 Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/84cde4f4-6b3a-32b4-8547-230c540ead1d.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 23470 IP address blocks: 104.238.204.0/24 maxlen: 24 104.238.205.0/24 maxlen: 24 104.238.206.0/24 maxlen: 24 104.238.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:1a:c0:44:ee:a9:9c:2e:09:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=35fe28b2-16a7-4f39-9d3f-7a2db133a68b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:25:73:ca:32:92:fc:6d:e5:37:60:0f:19:f8: 92:b3:88:3d:a9:94:c7:9a:b0:50:cc:0f:b3:b8:a4: d1:32:d4:cb:63:c3:42:f6:8f:5c:a7:5d:56:16:82: 15:7f:b1:f5:fd:5e:32:bb:7e:a2:05:a0:d4:05:e2: 84:7f:8d:81:32:83:b0:2f:9d:3b:5d:11:ac:16:f0: 71:e5:63:be:a1:69:4d:c3:b3:3f:4a:b6:6c:cb:6d: e0:85:24:44:14:27:e5:c0:ff:fe:96:e9:fd:15:95: 71:e2:8a:00:6f:d3:be:ac:3b:8c:c1:0f:30:8d:e9: 0f:99:14:bf:85:d5:b4:29:95:1d:54:00:83:c3:1a: 7b:c8:66:bd:ba:a7:cb:f8:f3:59:b7:2b:12:10:56: ee:79:ea:96:2a:2e:31:d8:7f:5b:03:fb:a0:32:21: cd:89:39:9a:2b:b3:52:b4:23:8a:88:c2:cb:3b:5d: 9b:14:ed:7a:ba:a6:51:1b:da:b2:b9:c4:be:58:e2: 12:50:9b:cc:4d:e1:97:be:f3:63:b6:04:c3:86:dc: 97:1d:c5:33:1b:fd:04:cd:dd:0d:6a:9d:62:c4:ae: 31:81:ee:97:a1:75:d6:f0:54:01:36:a1:cf:88:0e: ae:41:13:09:c6:51:79:89:72:b4:82:27:af:22:4f: 04:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:95:3A:46:E5:6A:CD:08:4F:B9:0F:7F:91:15:60:9E:27:76:23:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/84cde4f4-6b3a-32b4-8547-230c540ead1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl X509v3 Authority Key Identifier: keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer sbgp-ipAddrBlock: critical IPv4: 104.238.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:d6:dc:f6:bc:9c:66:2c:0f:30:a5:04:07:03:d0:7f:bd:75: 89:ed:92:be:39:62:26:85:ee:72:a8:21:d8:da:c1:a3:3c:a1: 93:c8:9a:e9:b0:1f:02:be:53:cf:62:e5:a4:cd:c1:aa:97:ae: 13:b1:f9:3a:23:fe:6d:00:4c:7c:98:fa:b3:02:55:62:3e:2a: 51:c6:fb:8d:af:30:c3:72:e3:40:85:e5:7d:f2:5e:44:51:3b: e4:dc:49:61:97:91:f9:be:0d:60:4e:c5:0c:d7:1e:cd:c4:cd: b3:04:dd:01:0f:16:9c:32:ac:70:3f:8f:79:ad:4d:45:0c:6f: f9:c4:d6:b9:4b:f6:35:11:75:ed:4a:f9:1a:65:11:0a:88:47: 64:d2:45:e6:92:3d:e9:02:20:3b:70:58:f8:99:6a:6e:a4:2a: f2:31:6c:61:35:44:0d:ce:2b:8e:26:7f:bf:76:73:06:d5:aa: da:0e:ef:a0:0e:8a:89:50:5f:f6:45:90:d3:4b:10:81:48:da: eb:c7:43:9e:9f:d2:33:d7:7e:f5:78:9b:1e:96:9c:4c:7d:26: 46:ad:90:96:cd:60:67:32:50:bf:b6:59:da:07:95:16:d8:98: 14:62:88:d2:48:ee:f7:11:01:61:f5:4d:2a:fa:77:55:be:2e: ad:1a:99:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxBrARO6pnC4Jj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM2OWIzMjEtNjliYy00MWM0LWE2ZTEtMzQ5MWRiZmMy NTQ0MB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk MzVmZTI4YjItMTZhNy00ZjM5LTlkM2YtN2EyZGIxMzNhNjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSVzyjKS/G3lN2APGfiSs4g9qZTHmrBQzA+z uKTRMtTLY8NC9o9cp11WFoIVf7H1/V4yu36iBaDUBeKEf42BMoOwL507XRGsFvBx 5WO+oWlNw7M/SrZsy23ghSREFCflwP/+lun9FZVx4ooAb9O+rDuMwQ8wjekPmRS/ hdW0KZUdVACDwxp7yGa9uqfL+PNZtysSEFbueeqWKi4x2H9bA/ugMiHNiTmaK7NS tCOKiMLLO12bFO16uqZRG9qyucS+WOISUJvMTeGXvvNjtgTDhtyXHcUzG/0Ezd0N ap1ixK4xge6XoXXW8FQBNqHPiA6uQRMJxlF5iXK0gievIk8EqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeVOkblas0IT7kPf5EVYJ4ndiN9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5 YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkxZGJmYzI1NDQvODRjZGU0ZjQtNmIzYS0z MmI0LTg1NDctMjMwYzU0MGVhZDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWM2OWIzMjEtNjliYy00MWM0LWE2 ZTEtMzQ5MWRiZmMyNTQ0LzljNjliMzIxLTY5YmMtNDFjNC1hNmUxLTM0OTFkYmZj MjU0NC5jcmwwHwYDVR0jBBgwFoAUHjmb1lU0mBF67zRaH+8vJwq9KawwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkx ZGJmYzI1NDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaO7MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHW3Pa8nGYsDzClBAcD0H+9dYntkr45YiaF7nKoIdjawaM8oZPImumw HwK+U89i5aTNwaqXrhOx+Toj/m0ATHyY+rMCVWI+KlHG+42vMMNy40CF5X3yXkRR O+TcSWGXkfm+DWBOxQzXHs3EzbME3QEPFpwyrHA/j3mtTUUMb/nE1rlL9jURde1K +RplEQqIR2TSReaSPekCIDtwWPiZam6kKvIxbGE1RA3OK44mf792cwbVqtoO76AO iolQX/ZFkNNLEIFI2uvHQ56f0jPXfvV4mx6WnEx9JkatkJbNYGcyUL+2WdoHlRbY mBRiiNJI7vcRAWH1TSr6d1W+Lq0amVY= -----END CERTIFICATE-----Generated at Sat Apr 12 04:56:54 2025 by rpki-client