$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/bef8e0a6-d538-3d7c-81b3-a8db221d35db.roa File: bef8e0a6-d538-3d7c-81b3-a8db221d35db.roa (raw, json) Hash identifier: YEbuW5BOjASB2NGlZYNCnaiZWkhWJFfFSs4XiAnlk4c= Subject key identifier: 9C:8F:E0:8C:C0:69:CD:22:63:EC:86:70:A2:5E:7A:23:56:65:88:FB Certificate issuer: /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Certificate serial: 010D0C9F4328584953C41ACEE191E143123E66C0 Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/bef8e0a6-d538-3d7c-81b3-a8db221d35db.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 23470 IP address blocks: 104.238.220.0/24 maxlen: 24 104.238.221.0/24 maxlen: 24 104.238.222.0/24 maxlen: 24 104.238.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:1a:ce:e1:91:e1:43:12:3e:66:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=cbaf8314-9276-4025-8b30-ff01ec301b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f2:2e:da:5b:a6:cd:8d:3c:9a:fe:51:3b:4b: c2:56:80:be:97:c6:8f:26:5d:2e:71:6a:1d:ce:c4: 2a:e7:26:d1:9d:92:b2:92:02:17:8b:0f:dd:21:74: 17:af:a1:dc:98:2b:08:f9:8a:18:07:1b:32:e8:32: 64:97:f9:be:ab:fc:b3:09:c8:3d:d8:88:8c:c8:7a: 91:2a:a9:a3:fa:9a:dc:11:22:e9:b2:86:bf:0e:ad: 34:11:de:8d:9f:8c:9d:0f:9d:b8:ec:00:10:65:ed: f5:bf:42:73:b7:7b:18:5b:56:b2:c6:2a:a2:2a:14: fe:88:71:d3:91:71:d7:71:be:0c:38:a5:f0:4e:e8: f3:e3:e8:5b:37:6c:59:da:c3:bf:c2:c2:9c:2e:4c: b9:c0:56:0c:27:99:80:61:e3:c4:61:63:0b:1b:1b: ae:3e:b8:9e:5d:18:18:ab:f8:4d:82:38:31:da:74: ea:a4:b0:0e:10:c0:f8:5f:54:a7:f8:bd:20:4e:12: ba:da:80:fa:86:af:7f:94:eb:2c:b1:66:a8:9a:82: dd:9b:85:ff:92:30:b2:d1:a6:ec:30:5f:2b:0a:ba: 64:76:fd:0f:44:1c:62:38:c5:f4:17:4e:07:90:89: ac:fd:f3:7b:30:93:f4:ae:e5:bd:f7:19:d2:11:78: e8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:8F:E0:8C:C0:69:CD:22:63:EC:86:70:A2:5E:7A:23:56:65:88:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/bef8e0a6-d538-3d7c-81b3-a8db221d35db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl X509v3 Authority Key Identifier: keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer sbgp-ipAddrBlock: critical IPv4: 104.238.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:0f:0a:a9:b6:77:2e:ef:5e:e0:64:a0:ba:f4:02:e0:70:d7: d1:2b:7c:4e:57:b8:26:c0:c4:d8:e3:82:79:7a:0d:ec:9e:9b: f2:e1:ed:bf:d7:68:9c:fa:30:a5:4f:36:3f:30:e2:ea:82:be: 45:be:9e:00:31:5d:9e:0d:cf:25:71:82:94:c8:98:28:6c:19: 85:c1:c2:d7:75:5d:3d:3e:17:d4:ad:41:9f:3e:6a:bc:7c:0f: ea:81:d3:4d:6b:b5:b8:33:0f:86:a9:c6:d5:30:52:f0:6f:9f: 97:39:ae:f3:87:2d:c6:87:db:99:dd:9f:fc:f8:06:65:a4:a7: f0:c6:da:9c:db:7e:19:a7:98:4f:39:97:25:44:74:99:54:ad: 0c:63:d5:3c:04:35:f2:68:dc:da:71:04:7f:6c:d9:2f:63:5b: fd:aa:a1:5b:9e:9c:fd:4c:c9:1b:2b:b6:64:42:98:a8:9a:10: 2b:6d:bf:5a:46:c0:33:7b:95:15:e2:39:20:7d:87:52:70:6a: e2:f0:c9:1a:ed:6b:72:61:b5:43:f0:ca:7f:18:e7:60:44:cd: 32:08:40:3f:8c:a0:1f:d5:48:75:39:31:d7:94:8e:b3:d9:11: 64:d6:45:65:02:90:ac:a4:45:bc:32:bb:8d:2d:6d:fd:3a:b8: 1a:2f:80:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxBrO4ZHhQxI+ZsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM2OWIzMjEtNjliYy00MWM0LWE2ZTEtMzQ5MWRiZmMy NTQ0MB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk Y2JhZjgzMTQtOTI3Ni00MDI1LThiMzAtZmYwMWVjMzAxYjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/Iu2lumzY08mv5RO0vCVoC+l8aPJl0ucWod zsQq5ybRnZKykgIXiw/dIXQXr6HcmCsI+YoYBxsy6DJkl/m+q/yzCcg92IiMyHqR Kqmj+prcESLpsoa/Dq00Ed6Nn4ydD5247AAQZe31v0Jzt3sYW1ayxiqiKhT+iHHT kXHXcb4MOKXwTujz4+hbN2xZ2sO/wsKcLky5wFYMJ5mAYePEYWMLGxuuPrieXRgY q/hNgjgx2nTqpLAOEMD4X1Sn+L0gThK62oD6hq9/lOsssWaomoLdm4X/kjCy0abs MF8rCrpkdv0PRBxiOMX0F04HkIms/fN7MJP0ruW99xnSEXjoSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyP4IzAac0iY+yGcKJeeiNWZYj7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5 YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkxZGJmYzI1NDQvYmVmOGUwYTYtZDUzOC0z ZDdjLTgxYjMtYThkYjIyMWQzNWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWM2OWIzMjEtNjliYy00MWM0LWE2 ZTEtMzQ5MWRiZmMyNTQ0LzljNjliMzIxLTY5YmMtNDFjNC1hNmUxLTM0OTFkYmZj MjU0NC5jcmwwHwYDVR0jBBgwFoAUHjmb1lU0mBF67zRaH+8vJwq9KawwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkx ZGJmYzI1NDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaO7cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4PCqm2dy7vXuBkoLr0AuBw19ErfE5XuCbAxNjjgnl6Deyem/Lh7b/X aJz6MKVPNj8w4uqCvkW+ngAxXZ4NzyVxgpTImChsGYXBwtd1XT0+F9StQZ8+arx8 D+qB001rtbgzD4apxtUwUvBvn5c5rvOHLcaH25ndn/z4BmWkp/DG2pzbfhmnmE85 lyVEdJlUrQxj1TwENfJo3NpxBH9s2S9jW/2qoVuenP1MyRsrtmRCmKiaECttv1pG wDN7lRXiOSB9h1JwauLwyRrta3JhtUPwyn8Y52BEzTIIQD+MoB/VSHU5MdeUjrPZ EWTWRWUCkKykRbwyu40tbf06uBovgGA= -----END CERTIFICATE-----Generated at Sat Apr 12 04:51:08 2025 by rpki-client