$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/c8d15b7c-8c87-3ef4-aa66-1f83de4e04f7.roa File: c8d15b7c-8c87-3ef4-aa66-1f83de4e04f7.roa (raw, json) Hash identifier: 3LMwXG3sVANFDYfJKAIwXWLHHmfh2no9XYiRyh4wxe0= Subject key identifier: B8:5F:5E:1B:74:26:08:72:13:47:A4:08:35:A9:89:76:74:BC:86:9E Certificate issuer: /CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Certificate serial: 010D0C9F43285848BD20E3A4B366E697FFA6C980 Authority key identifier: BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/c8d15b7c-8c87-3ef4-aa66-1f83de4e04f7.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 104.237.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:20:e3:a4:b3:66:e6:97:ff:a6:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=1438e9da-9744-4a7b-83ed-6405b5efc2aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ef:2b:74:ce:36:af:3b:82:39:82:eb:b9:67: 22:9c:9a:d3:0f:e3:8d:43:ce:cd:cd:ab:48:63:f2: 9f:2d:14:c5:b8:bf:3d:15:0e:a2:03:38:29:8f:1f: 6a:4f:36:68:de:c8:dd:3a:fd:50:1a:ab:af:50:17: 53:e5:98:0a:ac:4e:2c:d7:c4:d8:b4:8a:7b:0c:5f: 11:a7:8c:a5:ce:fe:b4:b5:5e:fd:c6:f3:b4:fc:60: f1:03:91:a1:8e:3f:33:4e:bd:ca:d3:bc:5e:27:d9: 4e:39:cb:20:a6:0b:2d:5d:1f:90:50:fb:62:1a:fc: cf:b9:4a:87:b0:86:7b:68:57:7e:8b:76:2f:dc:85: 46:02:f1:8c:86:0d:37:74:64:ea:f3:04:2a:84:67: 54:b2:55:d9:c0:df:d4:3a:29:16:06:a4:ec:f6:a4: 3c:97:33:fe:de:0e:d9:71:5f:d2:74:6d:9b:e0:46: 64:b5:12:a3:6c:9e:26:4d:3a:92:92:f8:26:8d:18: fc:f4:37:d8:7a:00:16:32:a5:10:59:89:2b:f9:8d: f2:67:2c:00:67:00:1a:75:2d:0a:8c:c6:f2:2a:0d: b7:6a:2f:5d:e0:f9:74:36:41:c7:05:86:5e:32:b1: 2f:af:ab:fc:f3:fd:93:6e:ce:0f:d6:1d:cc:86:ce: c9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:5F:5E:1B:74:26:08:72:13:47:A4:08:35:A9:89:76:74:BC:86:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/c8d15b7c-8c87-3ef4-aa66-1f83de4e04f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl X509v3 Authority Key Identifier: keyid:BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer sbgp-ipAddrBlock: critical IPv4: 104.237.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:d6:4d:fa:c0:ad:bf:e9:9a:5b:4f:92:3c:ab:e8:1c:56:88: 29:7a:32:a1:d0:c4:1e:0d:c2:95:47:f5:50:6f:2b:79:c7:10: 82:67:0b:71:54:df:12:45:ea:d8:9e:56:f7:17:56:ba:ac:a5: 5e:9b:fb:f4:f5:75:9b:ab:cd:a0:52:e2:f4:e5:3b:05:66:50: 93:c6:95:6a:41:98:1d:73:cc:49:52:db:58:f2:57:79:cc:16: 26:bc:16:3d:74:0b:d9:d3:23:4f:a5:e6:e0:0d:cb:b0:a0:b4: 30:8e:4f:59:2b:47:b6:38:5c:60:3d:d3:44:70:d2:66:ce:b0: ec:f2:1e:6d:67:fb:6d:d6:16:28:8b:24:c8:e7:84:35:7e:65: cd:ef:6d:a5:e5:34:2e:ce:56:78:ac:d5:eb:4c:33:fa:c0:c5: d0:f1:c9:0c:d5:3c:09:87:7c:1e:f7:a2:dc:f2:47:01:c6:26: c6:9a:16:d3:f4:e1:eb:38:57:be:a5:35:c6:87:0e:b9:3e:db: 22:f7:a5:95:cf:b5:45:d5:93:60:4c:13:1e:4a:b9:6b:a5:4c: db:df:f0:02:05:57:dc:bd:f8:d2:02:ef:c5:a1:2e:6a:ec:71: 05:ce:87:dd:fb:06:47:95:fb:cb:d8:43:18:17:70:ad:0f:6c: 96:55:1d:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IOOks2bml/+myYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUxZTU1YzEtYWQ4Zi00YjE4LWEwMGUtMGE4ZGYxYmVj MTU1MB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk MTQzOGU5ZGEtOTc0NC00YTdiLTgzZWQtNjQwNWI1ZWZjMmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+8rdM42rzuCOYLruWcinJrTD+ONQ87NzatI Y/KfLRTFuL89FQ6iAzgpjx9qTzZo3sjdOv1QGquvUBdT5ZgKrE4s18TYtIp7DF8R p4ylzv60tV79xvO0/GDxA5Ghjj8zTr3K07xeJ9lOOcsgpgstXR+QUPtiGvzPuUqH sIZ7aFd+i3Yv3IVGAvGMhg03dGTq8wQqhGdUslXZwN/UOikWBqTs9qQ8lzP+3g7Z cV/SdG2b4EZktRKjbJ4mTTqSkvgmjRj89DfYegAWMqUQWYkr+Y3yZywAZwAadS0K jMbyKg23ai9d4Pl0NkHHBYZeMrEvr6v88/2Tbs4P1h3Mhs7JAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhfXht0JghyE0ekCDWpiXZ0vIaeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NTFl NTVjMS1hZDhmLTRiMTgtYTAwZS0wYThkZjFiZWMxNTUvYzhkMTViN2MtOGM4Ny0z ZWY0LWFhNjYtMWY4M2RlNGUwNGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDUxZTU1YzEtYWQ4Zi00YjE4LWEw MGUtMGE4ZGYxYmVjMTU1LzQ1MWU1NWMxLWFkOGYtNGIxOC1hMDBlLTBhOGRmMWJl YzE1NS5jcmwwHwYDVR0jBBgwFoAUu5jk8Qfoypch1BHov4c3CYbe8KcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80NTFlNTVjMS1hZDhmLTRiMTgtYTAwZS0wYThk ZjFiZWMxNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO0qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3WTfrArb/pmltPkjyr6BxWiCl6MqHQxB4NwpVH9VBvK3nHEIJnC3FU 3xJF6tieVvcXVrqspV6b+/T1dZurzaBS4vTlOwVmUJPGlWpBmB1zzElS21jyV3nM Fia8Fj10C9nTI0+l5uANy7CgtDCOT1krR7Y4XGA900Rw0mbOsOzyHm1n+23WFiiL JMjnhDV+Zc3vbaXlNC7OVnis1etMM/rAxdDxyQzVPAmHfB73otzyRwHGJsaaFtP0 4es4V76lNcaHDrk+2yL3pZXPtUXVk2BMEx5KuWulTNvf8AIFV9y9+NIC78WhLmrs cQXOh937BkeV+8vYQxgXcK0PbJZVHdQ= -----END CERTIFICATE-----Generated at Fri Apr 4 15:56:19 2025 by rpki-client