$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d038a22a-d160-38e9-a62c-53c1e9887556.roa File: d038a22a-d160-38e9-a62c-53c1e9887556.roa (raw, json) Hash identifier: T2RdRj76XICJA12pm80MGIEIl6dTV22O8A4Kn3EAWB0= Subject key identifier: D8:9C:F0:60:87:11:57:89:F3:04:0C:74:81:B4:B3:25:9F:13:7C:30 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F432858490296F786403D8A884B228E60 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d038a22a-d160-38e9-a62c-53c1e9887556.roa Signing time: Wed 26 Feb 2025 11:09:37 +0000 ROA not before: Wed 26 Feb 2025 11:09:37 +0000 ROA not after: Tue 27 May 2025 10:09:37 +0000 asID: 30036 IP address blocks: 104.201.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:96:f7:86:40:3d:8a:88:4b:22:8e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 26 11:09:37 2025 GMT Not After : May 27 10:09:37 2025 GMT Subject: CN=2a9c88dc-8efe-4c75-99f5-eb2e91890922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ae:d8:15:b3:2c:5e:10:bf:6b:34:9f:9b:b1: 3d:83:77:4f:4a:05:24:a4:3a:2c:c0:90:94:c2:f5: 1a:e0:77:c9:75:47:7e:8b:3a:cd:f6:bf:ca:84:a2: 0b:ad:20:d2:28:1a:c7:3b:c3:a2:18:8c:ce:8e:2d: 7a:71:e2:be:1c:a1:00:96:9b:5a:3a:b7:ee:3e:45: b7:e4:1a:13:8f:08:bf:ac:62:16:9f:b2:75:a2:98: 6a:91:d9:60:d2:72:b0:6f:67:e0:81:22:b8:93:29: 17:49:01:92:5e:8c:5d:02:f5:c2:e5:b9:e8:f9:9b: a0:d5:cf:ef:95:6d:53:1c:79:e7:a6:cf:8c:31:e4: 80:af:45:95:dd:48:4f:b6:5a:9c:b8:77:1f:d0:76: 67:8e:8f:26:69:32:28:15:f2:20:9d:71:18:4a:54: d0:0a:6d:11:7c:f5:49:0d:e2:e0:c3:41:46:db:19: ca:1d:2d:0c:20:f0:f8:22:c6:6a:9e:46:ed:f7:e1: 3b:1d:dd:3a:c0:10:7d:f2:8c:86:6a:73:69:87:a9: 63:a6:08:59:68:86:48:37:58:7c:f9:b6:6a:72:c6: c0:5a:c5:24:5e:a2:d8:36:61:9e:33:0e:1e:d1:ba: 1c:68:10:5a:2d:7b:fb:95:21:8d:2c:b4:9d:a8:c9: 0a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:9C:F0:60:87:11:57:89:F3:04:0C:74:81:B4:B3:25:9F:13:7C:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d038a22a-d160-38e9-a62c-53c1e9887556.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 104.201.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:44:bd:3d:bc:93:12:e9:48:fd:90:52:d0:8a:e4:43:5c:70: e8:03:b0:bd:1b:ee:89:12:d8:7a:f5:9d:f6:fe:17:d8:8d:ef: 82:15:99:b5:8d:a1:24:57:37:33:7a:b6:29:b5:64:1a:b9:2b: 1e:d5:68:89:10:c3:90:56:a1:ca:67:35:ad:6f:e2:5d:5e:4b: 09:d6:c7:49:ba:26:31:75:08:90:ac:66:66:3a:e6:72:32:e6: 49:a4:56:7a:ad:94:f3:78:6f:30:30:f5:ed:0a:9a:82:ab:94: e9:fb:c9:dd:ef:f7:30:7c:95:96:c6:a3:9f:c4:b8:34:db:38: b6:91:7d:87:77:73:17:b9:20:45:7c:cf:2f:94:3a:3a:60:32: 6d:e1:6f:84:2e:f2:c3:f2:dc:6e:70:23:91:69:ca:49:43:4c: 15:af:63:f7:45:ca:a3:06:ec:3a:c6:a8:86:12:c8:69:27:e0: 9d:0f:47:7c:5b:0f:b0:be:75:c2:09:5f:03:03:a5:99:e4:ec: 56:fb:5c:48:60:c0:36:35:23:0a:d0:ad:15:a8:6f:f5:4e:2f: 50:97:38:61:59:50:12:1c:ec:d0:00:2c:05:2f:86:b1:b4:5e: 41:42:93:68:b3:b4:30:6c:79:e1:dc:5d:38:59:30:19:db:ea: 9b:92:ad:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkClveGQD2KiEsijmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIyNjExMDkzN1oXDTI1MDUyNzEwMDkzN1owLzEtMCsGA1UEAxMk MmE5Yzg4ZGMtOGVmZS00Yzc1LTk5ZjUtZWIyZTkxODkwOTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1a7YFbMsXhC/azSfm7E9g3dPSgUkpDoswJCU wvUa4HfJdUd+izrN9r/KhKILrSDSKBrHO8OiGIzOji16ceK+HKEAlptaOrfuPkW3 5BoTjwi/rGIWn7J1ophqkdlg0nKwb2fggSK4kykXSQGSXoxdAvXC5bno+Zug1c/v lW1THHnnps+MMeSAr0WV3UhPtlqcuHcf0HZnjo8maTIoFfIgnXEYSlTQCm0RfPVJ DeLgw0FG2xnKHS0MIPD4IsZqnkbt9+E7Hd06wBB98oyGanNph6ljpghZaIZIN1h8 +bZqcsbAWsUkXqLYNmGeMw4e0bocaBBaLXv7lSGNLLSdqMkKpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNic8GCHEVeJ8wQMdIG0syWfE3wwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDAzOGEyMmEtZDE2MC0z OGU5LWE2MmMtNTNjMWU5ODg3NTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMlPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9EvT28kxLpSP2QUtCK5ENccOgDsL0b7okS2Hr1nfb+F9iN74IVmbWN oSRXNzN6tim1ZBq5Kx7VaIkQw5BWocpnNa1v4l1eSwnWx0m6JjF1CJCsZmY65nIy 5kmkVnqtlPN4bzAw9e0KmoKrlOn7yd3v9zB8lZbGo5/EuDTbOLaRfYd3cxe5IEV8 zy+UOjpgMm3hb4Qu8sPy3G5wI5FpyklDTBWvY/dFyqMG7DrGqIYSyGkn4J0PR3xb D7C+dcIJXwMDpZnk7Fb7XEhgwDY1IwrQrRWob/VOL1CXOGFZUBIc7NAALAUvhrG0 XkFCk2iztDBseeHcXThZMBnb6puSrZA= -----END CERTIFICATE-----Generated at Tue Apr 8 23:51:22 2025 by rpki-client