$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/9fecacde-51a9-3dd5-82d6-8d7d58ccb0a1.roa File: 9fecacde-51a9-3dd5-82d6-8d7d58ccb0a1.roa (raw, json) Hash identifier: frv8RzxFH9GzBsuxy2Hg7EEV0GgC3YnOkjw3ITEWr8w= Subject key identifier: 2D:CA:8C:39:6C:54:CC:C9:5B:F3:E8:A0:16:1F:18:45:F6:EA:E5:39 Certificate issuer: /CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Certificate serial: 010D0C9F43285848E9CBEA859D728580BFCF2C80 Authority key identifier: BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/9fecacde-51a9-3dd5-82d6-8d7d58ccb0a1.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 14603 IP address blocks: 104.237.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:ea:85:9d:72:85:80:bf:cf:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=79246214-641b-472e-8cb5-abaac44da248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:55:bd:5b:be:81:ef:c0:54:3c:e5:98:5d:a0: 5a:9e:75:74:64:43:b4:d2:8b:75:70:10:17:7d:d0: fa:b7:0c:84:f2:04:18:c8:65:0d:bd:28:04:3d:2c: e3:d7:c5:4a:eb:5f:49:56:89:fe:1e:b9:e5:68:b8: 48:d9:f7:40:66:ee:c8:c8:17:4e:28:ac:38:e6:52: 34:a7:52:d0:8e:90:da:5d:2f:cb:be:ba:39:12:51: 94:6e:5f:35:3a:f4:5c:d2:25:67:8b:d0:b2:be:44: b1:5d:29:1a:e9:fe:03:24:ed:f1:9e:58:2b:c8:c6: e4:ef:0b:10:c5:80:85:e8:ae:0d:3b:6f:25:2b:b0: 34:b6:e7:a6:11:6b:ba:ed:3c:8d:d7:0e:21:b0:eb: d5:11:92:26:b3:fa:bc:23:b9:55:ee:b6:99:c9:b0: d1:63:e3:11:4d:81:f8:16:6d:43:34:8c:05:04:26: 4b:be:45:e1:54:ea:4c:71:3f:08:c0:5a:3f:99:9a: e7:64:2c:ed:38:07:90:bc:53:f5:b0:31:a1:10:6b: 5f:58:86:8b:90:34:43:f3:57:d4:98:18:8b:b3:e4: 95:c3:bb:1d:67:94:07:d3:91:84:f8:80:58:cb:e6: 9a:94:64:da:80:cc:65:4f:23:1c:08:98:ac:7b:56: 6d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CA:8C:39:6C:54:CC:C9:5B:F3:E8:A0:16:1F:18:45:F6:EA:E5:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/9fecacde-51a9-3dd5-82d6-8d7d58ccb0a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl X509v3 Authority Key Identifier: keyid:BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer sbgp-ipAddrBlock: critical IPv4: 104.237.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:1a:5e:d5:dc:fb:4a:33:34:7e:e7:5c:52:04:56:aa:3a:0e: 89:cf:06:de:72:0c:ab:2e:73:15:30:86:db:1a:e4:1c:39:b4: be:ec:b7:f4:3e:48:da:7b:c8:c7:0e:ae:47:9f:c5:0f:f7:d7: cb:c5:37:5a:dc:8f:8d:77:81:b0:8d:73:fd:89:83:f4:a3:1b: 0c:6f:09:db:55:fe:4c:9f:a3:aa:c2:26:7c:2f:63:24:17:1c: 36:82:44:43:9a:f3:a4:e1:14:1e:d3:2c:00:7b:73:8e:70:4a: ff:4d:ca:03:f5:54:89:bc:42:fd:9e:95:f9:00:40:b3:ac:4c: 7c:b6:59:27:10:e6:a8:e3:3e:87:2f:90:88:75:d3:3c:31:ec: 0e:1c:b3:b7:99:5a:a6:c2:df:29:b4:f4:25:3d:62:b1:ea:94: af:54:13:d9:62:f2:fc:70:dd:6d:12:45:e2:0e:a1:68:89:c8: 5c:b8:5f:0b:16:eb:60:a3:63:f3:6b:91:07:66:d9:36:9a:e9: d2:44:1b:d2:f8:dc:56:ec:85:b0:18:77:a2:1a:4c:1b:b0:8c: 22:5f:9a:44:9e:50:79:3f:51:44:04:37:f8:c0:ee:64:06:6f: 33:53:be:f7:69:16:c1:7a:7a:31:8e:16:78:96:23:70:bd:ab: ab:bb:f3:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy+qFnXKFgL/PLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUxZTU1YzEtYWQ4Zi00YjE4LWEwMGUtMGE4ZGYxYmVj MTU1MB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk NzkyNDYyMTQtNjQxYi00NzJlLThjYjUtYWJhYWM0NGRhMjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFW9W76B78BUPOWYXaBannV0ZEO00ot1cBAX fdD6twyE8gQYyGUNvSgEPSzj18VK619JVon+HrnlaLhI2fdAZu7IyBdOKKw45lI0 p1LQjpDaXS/Lvro5ElGUbl81OvRc0iVni9CyvkSxXSka6f4DJO3xnlgryMbk7wsQ xYCF6K4NO28lK7A0tuemEWu67TyN1w4hsOvVEZIms/q8I7lV7raZybDRY+MRTYH4 Fm1DNIwFBCZLvkXhVOpMcT8IwFo/mZrnZCztOAeQvFP1sDGhEGtfWIaLkDRD81fU mBiLs+SVw7sdZ5QH05GE+IBYy+aalGTagMxlTyMcCJise1ZtkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3KjDlsVMzJW/PooBYfGEX26uU5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NTFl NTVjMS1hZDhmLTRiMTgtYTAwZS0wYThkZjFiZWMxNTUvOWZlY2FjZGUtNTFhOS0z ZGQ1LTgyZDYtOGQ3ZDU4Y2NiMGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDUxZTU1YzEtYWQ4Zi00YjE4LWEw MGUtMGE4ZGYxYmVjMTU1LzQ1MWU1NWMxLWFkOGYtNGIxOC1hMDBlLTBhOGRmMWJl YzE1NS5jcmwwHwYDVR0jBBgwFoAUu5jk8Qfoypch1BHov4c3CYbe8KcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80NTFlNTVjMS1hZDhmLTRiMTgtYTAwZS0wYThk ZjFiZWMxNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaO0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkaXtXc+0ozNH7nXFIEVqo6DonPBt5yDKsucxUwhtsa5Bw5tL7st/Q+ SNp7yMcOrkefxQ/318vFN1rcj413gbCNc/2Jg/SjGwxvCdtV/kyfo6rCJnwvYyQX HDaCREOa86ThFB7TLAB7c45wSv9NygP1VIm8Qv2elfkAQLOsTHy2WScQ5qjjPocv kIh10zwx7A4cs7eZWqbC3ym09CU9YrHqlK9UE9li8vxw3W0SReIOoWiJyFy4XwsW 62CjY/NrkQdm2Taa6dJEG9L43FbshbAYd6IaTBuwjCJfmkSeUHk/UUQEN/jA7mQG bzNTvvdpFsF6ejGOFniWI3C9q6u780E= -----END CERTIFICATE-----Generated at Fri Apr 4 15:56:18 2025 by rpki-client