$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/aaa0f512-6693-3968-9f7e-8a63d5f8b92d.roa File: aaa0f512-6693-3968-9f7e-8a63d5f8b92d.roa (raw, json) Hash identifier: 3EAUH4oUKzyx2GluHq5sJzG36+0/WHm9BVABGnbcKSM= Subject key identifier: 30:CF:FD:71:0E:51:46:C4:31:B7:E3:FE:9F:0C:DA:7D:29:A1:17:E5 Certificate issuer: /CN=61078829-6930-46b0-9ac8-91898d36b056 Certificate serial: 010D0C9F43285848A400C09D58DD584A8760D574 Authority key identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/aaa0f512-6693-3968-9f7e-8a63d5f8b92d.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 33548 IP address blocks: 104.247.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:c0:9d:58:dd:58:4a:87:60:d5:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61078829-6930-46b0-9ac8-91898d36b056 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=2df9f421-43fc-4dfb-8edc-ce24c1dac93f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4d:ce:49:e4:fe:3d:0b:8b:6c:b3:b0:00:9d: 90:f8:2e:2c:8d:c3:e0:f8:88:0e:45:d1:1f:8a:38: 15:75:39:f3:d8:5b:c4:99:d3:23:c4:30:ec:c2:c0: d8:10:ec:ba:b7:5a:a2:e0:8e:b5:98:67:d1:55:7b: 45:25:d1:06:89:17:fd:ba:80:3a:a7:fc:96:0e:e8: 4a:ad:71:df:30:57:4b:76:f5:c3:f9:77:9f:0e:fa: a5:8c:b8:bd:ee:31:f0:7c:c3:da:aa:d3:fa:55:84: 53:f7:82:06:8d:ba:57:46:48:d8:4e:0f:be:0c:c7: 8f:13:30:b7:71:49:ef:bd:48:40:19:d5:cc:5b:f8: 85:39:b2:55:64:b4:09:e3:0b:ad:d0:a3:94:c9:b7: 85:2b:86:08:b6:6a:23:9b:eb:89:99:e0:85:b6:49: 59:32:8d:4c:ac:33:ad:0b:12:c4:3b:02:05:1c:88: 60:24:ec:92:71:dc:e9:84:56:66:1b:37:eb:ce:b8: 49:90:46:ff:a7:7e:85:e3:7e:be:32:18:c1:3b:fe: 70:a3:1e:73:5b:5a:5b:f0:a2:f0:d1:b9:f4:22:12: 05:d2:d2:04:57:2f:27:60:3d:71:13:1f:a4:5d:e4: 55:9b:25:32:14:a2:bc:ce:56:40:2d:c1:49:e3:13: 51:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:CF:FD:71:0E:51:46:C4:31:B7:E3:FE:9F:0C:DA:7D:29:A1:17:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/aaa0f512-6693-3968-9f7e-8a63d5f8b92d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl X509v3 Authority Key Identifier: keyid:20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer sbgp-ipAddrBlock: critical IPv4: 104.247.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:32:78:8c:37:cf:30:3a:df:a5:27:5c:35:d8:3c:fa:e1:6b: fa:82:03:b7:9d:b9:36:51:39:34:dd:51:c1:4d:7b:b5:fa:e6: 51:18:40:43:66:f7:82:b2:7f:17:56:ae:5e:b0:a6:9a:32:5e: ad:3e:d2:bb:bf:70:fa:9b:48:da:30:5f:c8:fd:72:65:98:f1: 2f:99:d4:c1:fe:df:3f:37:f5:23:98:c0:5e:5e:47:28:50:92: b4:78:bb:13:ab:ef:62:6f:68:ad:08:2c:9c:76:c9:c5:76:64: ae:d4:7b:5e:df:8d:ef:41:f0:55:f4:46:aa:de:12:a2:5f:fc: e3:5b:ba:6b:85:86:94:60:bf:c5:e0:20:d8:82:76:03:c8:59: 6f:6d:59:ea:98:09:3b:04:e2:39:de:f6:1a:db:43:7e:5a:10: 29:f1:25:2e:60:24:25:ba:56:02:44:9e:b6:80:29:c0:46:2d: 0c:3b:f7:d4:85:63:68:94:7c:9d:43:94:f0:6f:38:b4:b8:e0: 16:33:a7:6e:38:66:0c:24:44:4a:71:d7:1a:0f:27:46:07:f3: e2:e8:71:d6:73:0c:10:94:f0:f3:f2:9e:e9:8e:31:61:cf:48: 9f:3b:71:fe:c4:31:50:2f:43:5f:c7:01:c5:df:29:ff:03:99: f7:b9:73:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikAMCdWN1YSodg1XQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjEwNzg4MjktNjkzMC00NmIwLTlhYzgtOTE4OThkMzZi MDU2MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk MmRmOWY0MjEtNDNmYy00ZGZiLThlZGMtY2UyNGMxZGFjOTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApE3OSeT+PQuLbLOwAJ2Q+C4sjcPg+IgORdEf ijgVdTnz2FvEmdMjxDDswsDYEOy6t1qi4I61mGfRVXtFJdEGiRf9uoA6p/yWDuhK rXHfMFdLdvXD+XefDvqljLi97jHwfMPaqtP6VYRT94IGjbpXRkjYTg++DMePEzC3 cUnvvUhAGdXMW/iFObJVZLQJ4wut0KOUybeFK4YItmojm+uJmeCFtklZMo1MrDOt CxLEOwIFHIhgJOyScdzphFZmGzfrzrhJkEb/p36F436+MhjBO/5wox5zW1pb8KLw 0bn0IhIF0tIEVy8nYD1xEx+kXeRVmyUyFKK8zlZALcFJ4xNRnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDP/XEOUUbEMbfj/p8M2n0poRflMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82MTA3 ODgyOS02OTMwLTQ2YjAtOWFjOC05MTg5OGQzNmIwNTYvYWFhMGY1MTItNjY5My0z OTY4LTlmN2UtOGE2M2Q1ZjhiOTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjEwNzg4MjktNjkzMC00NmIwLTlh YzgtOTE4OThkMzZiMDU2LzYxMDc4ODI5LTY5MzAtNDZiMC05YWM4LTkxODk4ZDM2 YjA1Ni5jcmwwHwYDVR0jBBgwFoAUIEXV2ie7S4lN1IK5ZqALwLa2VKAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82MTA3ODgyOS02OTMwLTQ2YjAtOWFjOC05MTg5 OGQzNmIwNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaPeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAyeIw3zzA636UnXDXYPPrha/qCA7eduTZROTTdUcFNe7X65lEYQENm 94KyfxdWrl6wppoyXq0+0ru/cPqbSNowX8j9cmWY8S+Z1MH+3z839SOYwF5eRyhQ krR4uxOr72JvaK0ILJx2ycV2ZK7Ue17fje9B8FX0RqreEqJf/ONbumuFhpRgv8Xg INiCdgPIWW9tWeqYCTsE4jne9hrbQ35aECnxJS5gJCW6VgJEnraAKcBGLQw799SF Y2iUfJ1DlPBvOLS44BYzp244ZgwkREpx1xoPJ0YH8+LocdZzDBCU8PPynumOMWHP SJ87cf7EMVAvQ1/HAcXfKf8Dmfe5cz4= -----END CERTIFICATE-----Generated at Fri Apr 4 16:21:48 2025 by rpki-client