$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/77ae744a-6c1c-35cf-9d0d-3e57effa766d.roa File: 77ae744a-6c1c-35cf-9d0d-3e57effa766d.roa (raw, json) Hash identifier: R2gyuD8mnzbO6+f6X6a/aZOjTN3E7IqFT2/RchP+V88= Subject key identifier: 3A:9A:8A:83:5B:44:DF:47:99:20:55:90:21:C8:03:83:E6:40:E9:AE Certificate issuer: /CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f Certificate serial: 010D0C9F432858493ED3D3A0DF8A147451C6E2C0 Authority key identifier: 3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/77ae744a-6c1c-35cf-9d0d-3e57effa766d.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 20278 IP address blocks: 104.128.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:d3:a0:df:8a:14:74:51:c6:e2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=66e32a27-a6e8-43bc-9295-8d088eebf062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f7:96:42:a7:7a:01:4a:d1:f0:66:88:97:48: 5f:d6:fb:a1:71:f4:86:c9:7e:d6:e8:97:7b:eb:24: cf:f9:bc:36:35:26:82:68:9f:8d:69:27:f6:dd:dc: de:1a:92:a4:32:39:04:15:29:2a:67:dd:77:9b:bf: 30:27:7e:6a:0a:de:1d:b2:d7:df:3e:4d:25:bd:7f: fa:2c:15:92:6a:e5:a4:c2:5b:18:f0:4a:cb:3d:73: dc:90:96:4f:8b:50:fd:63:51:42:0b:da:e2:07:04: 95:48:c2:8e:51:4f:38:a6:54:92:d2:05:64:39:18: 0c:4e:77:ee:8a:65:b1:00:5b:d3:38:02:43:58:69: 74:b9:b3:4c:47:50:18:ec:3e:cd:d9:c5:10:e1:fc: 02:e3:b3:06:61:5e:09:71:67:10:11:10:dd:9b:1c: 79:86:87:65:24:5b:3f:40:69:16:37:bf:b3:a5:03: e4:5c:b4:2f:48:89:72:9c:1a:01:5e:cd:ad:f0:b7: 8d:a7:52:74:bf:93:ed:08:3a:a9:92:76:15:d2:48: 15:3e:ae:3d:54:f7:18:a8:cc:7e:b8:89:3d:78:50: 34:a3:eb:5f:38:d9:d5:f9:bd:04:c1:b2:60:4f:ab: 52:f4:c0:e4:22:7b:92:37:bb:4b:f6:66:6d:f2:92: ef:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:9A:8A:83:5B:44:DF:47:99:20:55:90:21:C8:03:83:E6:40:E9:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/77ae744a-6c1c-35cf-9d0d-3e57effa766d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl X509v3 Authority Key Identifier: keyid:3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer sbgp-ipAddrBlock: critical IPv4: 104.128.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:84:ae:80:97:df:04:2e:f9:b5:f0:09:83:51:88:73:0f:33: 03:2c:c1:93:d2:d2:75:04:68:cf:f4:be:46:bf:28:d5:7d:e1: fc:55:07:96:b1:28:46:b4:e2:8b:f9:55:ea:25:fc:9f:bf:a9: 7a:d2:21:7d:3c:6f:5b:ba:36:39:7d:27:44:fb:6c:a2:88:10: 15:5b:c6:a5:3d:97:3b:55:02:aa:fe:59:47:c5:d0:50:3e:a3: e7:84:d3:ba:7d:e3:32:ac:05:99:67:e0:ef:82:1b:75:85:3f: 4f:a8:ec:a9:ad:0a:8b:6c:9c:af:7b:29:15:0d:53:40:a1:1d: aa:7f:d5:71:8c:e3:91:79:dd:90:28:e8:14:61:45:72:9f:ce: b6:cd:d5:81:5b:c0:b6:03:57:1d:b6:16:5b:26:f2:36:9c:cb: 09:2e:69:97:51:3f:28:98:f1:31:33:c7:1b:67:ef:ed:5d:00: 8d:6b:b9:3a:da:70:46:dd:45:00:d0:1c:dc:22:ab:ba:1a:df: 65:15:44:01:e9:f4:1b:02:46:13:de:cb:d7:ea:76:8a:b8:f1: 02:02:30:f5:92:81:8c:10:45:35:96:2f:43:1c:c4:82:90:04: c8:51:ae:14:d9:4d:f6:83:d7:d7:a2:d1:59:b3:9b:8b:90:5f: 22:e9:d1:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+09Og34oUdFHG4sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNiOTg2MTYtZTRmOC00Yzc2LTg0MTAtY2I0YjZkOTNj ODVmMB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk NjZlMzJhMjctYTZlOC00M2JjLTkyOTUtOGQwODhlZWJmMDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPeWQqd6AUrR8GaIl0hf1vuhcfSGyX7W6Jd7 6yTP+bw2NSaCaJ+NaSf23dzeGpKkMjkEFSkqZ913m78wJ35qCt4dstffPk0lvX/6 LBWSauWkwlsY8ErLPXPckJZPi1D9Y1FCC9riBwSVSMKOUU84plSS0gVkORgMTnfu imWxAFvTOAJDWGl0ubNMR1AY7D7N2cUQ4fwC47MGYV4JcWcQERDdmxx5hodlJFs/ QGkWN7+zpQPkXLQvSIlynBoBXs2t8LeNp1J0v5PtCDqpknYV0kgVPq49VPcYqMx+ uIk9eFA0o+tfONnV+b0EwbJgT6tS9MDkInuSN7tL9mZt8pLviQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqaioNbRN9HmSBVkCHIA4PmQOmuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hM2I5 ODYxNi1lNGY4LTRjNzYtODQxMC1jYjRiNmQ5M2M4NWYvNzdhZTc0NGEtNmMxYy0z NWNmLTlkMGQtM2U1N2VmZmE3NjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTNiOTg2MTYtZTRmOC00Yzc2LTg0 MTAtY2I0YjZkOTNjODVmL2EzYjk4NjE2LWU0ZjgtNGM3Ni04NDEwLWNiNGI2ZDkz Yzg1Zi5jcmwwHwYDVR0jBBgwFoAUO+HB9azWjjCuxozloUMTYHSe2F4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hM2I5ODYxNi1lNGY4LTRjNzYtODQxMC1jYjRi NmQ5M2M4NWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIC8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuEroCX3wQu+bXwCYNRiHMPMwMswZPS0nUEaM/0vka/KNV94fxVB5ax KEa04ov5Veol/J+/qXrSIX08b1u6Njl9J0T7bKKIEBVbxqU9lztVAqr+WUfF0FA+ o+eE07p94zKsBZln4O+CG3WFP0+o7KmtCotsnK97KRUNU0ChHap/1XGM45F53ZAo 6BRhRXKfzrbN1YFbwLYDVx22Flsm8jacywkuaZdRPyiY8TEzxxtn7+1dAI1ruTra cEbdRQDQHNwiq7oa32UVRAHp9BsCRhPey9fqdoq48QICMPWSgYwQRTWWL0McxIKQ BMhRrhTZTfaD19ei0Vmzm4uQXyLp0do= -----END CERTIFICATE-----Generated at Sun Apr 6 07:22:41 2025 by rpki-client