$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/10efc89a-37bc-334c-99a6-377bcd91ae70.roa File: 10efc89a-37bc-334c-99a6-377bcd91ae70.roa (raw, json) Hash identifier: E5Ws/IquU3A/WzoXOp3+wp92DpvPBHOK4gDXZ/NS0y8= Subject key identifier: 24:A4:9E:45:7C:FF:66:11:8A:72:F4:ED:28:24:0E:18:03:50:D3:9E Certificate issuer: /CN=369643f4-a849-4a0c-af2a-677957de74bc Certificate serial: 010D0C9F432858491246A9396FEAFB28276C72C0 Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/10efc89a-37bc-334c-99a6-377bcd91ae70.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 398395 IP address blocks: 104.128.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:a9:39:6f:ea:fb:28:27:6c:72:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=7d352371-ec08-4bb6-a18a-6bc223032078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d4:82:36:08:5f:39:d8:92:a6:ee:32:1e:fa: 16:c4:a4:ce:a1:a0:2b:07:cd:d9:7c:54:f2:d5:0e: 2f:6e:28:bd:66:59:d1:0d:d0:41:8d:60:35:1e:63: 09:c4:ad:c1:ca:bc:97:db:96:d6:df:51:88:a9:04: de:c1:9d:f7:3a:97:4f:6a:45:cd:ea:80:7f:21:fe: 87:6a:3d:64:42:03:0c:4d:1e:ab:74:88:ea:43:ec: 75:34:84:4e:b2:5b:71:67:df:ad:16:7c:52:1f:c8: 87:a4:15:75:f6:dc:9d:ab:f4:12:b1:62:db:6f:4c: 4f:1c:fb:f3:17:4c:58:69:17:06:00:8b:87:17:0b: cd:d2:4b:7f:bb:a6:b8:d5:fe:4f:01:68:6f:9f:6d: 3a:19:df:66:3b:a7:f6:0c:b8:5a:67:ac:81:84:16: 0b:31:33:aa:96:6a:67:7d:28:42:b5:85:99:c0:0b: e2:39:78:6b:1b:7b:b1:03:80:60:c2:13:41:27:f0: d7:8c:fd:3c:b3:39:9c:62:e2:b3:f0:b1:6e:bb:88: e2:28:46:ca:5c:31:27:96:e0:19:03:f3:29:7d:df: c9:19:85:db:ae:c3:53:7d:3c:04:7b:a0:46:f6:ef: 50:3b:cf:bf:ef:3d:b5:86:11:22:13:41:c1:3b:01: 84:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A4:9E:45:7C:FF:66:11:8A:72:F4:ED:28:24:0E:18:03:50:D3:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/10efc89a-37bc-334c-99a6-377bcd91ae70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl X509v3 Authority Key Identifier: keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer sbgp-ipAddrBlock: critical IPv4: 104.128.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:fc:ac:a5:99:69:19:6a:e8:16:ea:65:38:5f:1a:ef:17:6c: 2b:19:32:10:ef:96:73:49:ad:11:f3:41:4b:4c:4b:52:d3:9b: 12:3f:94:6c:11:63:56:78:86:9d:51:a1:97:8e:0a:21:0c:3d: 5f:ae:1a:5d:2c:c1:83:d3:92:4e:42:18:6a:70:64:09:05:e3: f2:48:1b:48:53:09:0a:0d:91:2c:6b:d7:e5:fc:85:1b:47:42: e8:20:62:fb:83:a5:8a:e8:dc:26:6e:51:84:6a:0c:14:95:4d: eb:8f:d2:20:14:5e:7c:f7:d4:56:27:ec:27:47:2b:22:01:32: bb:2a:c0:11:04:61:97:ef:b2:d8:2b:98:14:44:9b:0a:c5:ce: 6e:7d:30:11:f7:27:92:70:1d:65:fb:27:a9:b7:3e:68:57:60: 1c:bf:6e:f7:24:cf:3b:bd:9d:0c:ac:11:00:ac:39:c0:76:1f: b8:4e:6a:99:f3:ce:b0:62:89:78:cd:6c:29:b2:22:88:6e:b2: 62:49:16:a8:fe:04:2c:8b:65:48:53:3a:b4:5a:8e:01:15:2a: 04:e6:d0:0e:f3:83:b6:c4:6c:71:b9:a8:3e:ab:e9:59:1e:5a: cc:f6:88:b3:c3:60:74:96:e4:3b:2d:5b:0b:4c:35:5c:c7:8d: 53:bd:3d:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRqk5b+r7KCdscsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY5NjQzZjQtYTg0OS00YTBjLWFmMmEtNjc3OTU3ZGU3 NGJjMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk N2QzNTIzNzEtZWMwOC00YmI2LWExOGEtNmJjMjIzMDMyMDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdSCNghfOdiSpu4yHvoWxKTOoaArB83ZfFTy 1Q4vbii9ZlnRDdBBjWA1HmMJxK3ByryX25bW31GIqQTewZ33OpdPakXN6oB/If6H aj1kQgMMTR6rdIjqQ+x1NIROsltxZ9+tFnxSH8iHpBV19tydq/QSsWLbb0xPHPvz F0xYaRcGAIuHFwvN0kt/u6a41f5PAWhvn206Gd9mO6f2DLhaZ6yBhBYLMTOqlmpn fShCtYWZwAviOXhrG3uxA4BgwhNBJ/DXjP08szmcYuKz8LFuu4jiKEbKXDEnluAZ A/Mpfd/JGYXbrsNTfTwEe6BG9u9QO8+/7z21hhEiE0HBOwGEpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSknkV8/2YRinL07SgkDhgDUNOeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2 NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5NTdkZTc0YmMvMTBlZmM4OWEtMzdiYy0z MzRjLTk5YTYtMzc3YmNkOTFhZTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY5NjQzZjQtYTg0OS00YTBjLWFm MmEtNjc3OTU3ZGU3NGJjLzM2OTY0M2Y0LWE4NDktNGEwYy1hZjJhLTY3Nzk1N2Rl NzRiYy5jcmwwHwYDVR0jBBgwFoAUeE6WxYfl6+Xkw5CXV0KgfPfdnKkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5 NTdkZTc0YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIDoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHb8rKWZaRlq6BbqZThfGu8XbCsZMhDvlnNJrRHzQUtMS1LTmxI/lGwR Y1Z4hp1RoZeOCiEMPV+uGl0swYPTkk5CGGpwZAkF4/JIG0hTCQoNkSxr1+X8hRtH QuggYvuDpYro3CZuUYRqDBSVTeuP0iAUXnz31FYn7CdHKyIBMrsqwBEEYZfvstgr mBREmwrFzm59MBH3J5JwHWX7J6m3PmhXYBy/bvckzzu9nQysEQCsOcB2H7hOapnz zrBiiXjNbCmyIohusmJJFqj+BCyLZUhTOrRajgEVKgTm0A7zg7bEbHG5qD6r6Vke Wsz2iLPDYHSW5DstWwtMNVzHjVO9PdQ= -----END CERTIFICATE-----Generated at Fri Mar 14 08:41:25 2025 by rpki-client