$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab/30639e22-62de-31fe-a7e8-90514fad41ce.roa File: 30639e22-62de-31fe-a7e8-90514fad41ce.roa (raw, json) Hash identifier: 9mERJTfJMHCzh9gYE7QQTB1TUaO5tUuYc3BYCyJmdac= Subject key identifier: 61:42:88:79:78:27:E9:71:41:82:78:69:36:29:71:42:FB:E1:A3:BB Certificate issuer: /CN=dac9cb7f-b46d-477e-8698-95f66c423aab Certificate serial: 010D0C9F43285848C2B650062F8E5205A88DE6C0 Authority key identifier: A9:64:71:5B:F3:C2:52:FB:05:C5:52:3B:AE:67:29:68:CB:6E:37:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab/30639e22-62de-31fe-a7e8-90514fad41ce.roa Signing time: Mon 03 Feb 2025 14:00:52 +0000 ROA not before: Mon 03 Feb 2025 14:00:52 +0000 ROA not after: Sun 04 May 2025 13:00:52 +0000 asID: 211640 IP address blocks: 104.247.116.0/24 maxlen: 24 2602:f93a::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab/dac9cb7f-b46d-477e-8698-95f66c423aab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab/dac9cb7f-b46d-477e-8698-95f66c423aab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:b6:50:06:2f:8e:52:05:a8:8d:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dac9cb7f-b46d-477e-8698-95f66c423aab Validity Not Before: Feb 3 14:00:52 2025 GMT Not After : May 4 13:00:52 2025 GMT Subject: CN=e6ff587d-6545-4c38-9b69-999208aa8001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6a:77:4d:a2:61:f2:33:0e:44:b7:82:20:4d: c4:5e:8c:af:3a:f1:79:20:7b:7d:fb:d6:8c:e2:74: e0:f7:a2:3b:6b:3c:59:13:ab:af:3f:a4:ec:34:05: da:32:b1:c7:8e:8d:3a:59:00:10:4a:84:68:af:aa: a0:55:a5:2d:ff:b1:26:7e:f0:1d:fa:4b:2d:cb:83: d0:77:8e:4d:50:b8:d5:1b:8b:f5:dc:fd:e1:af:c0: 23:8a:0e:df:e7:7a:0a:03:4c:d6:36:32:55:b3:4a: f1:a7:1a:d0:6d:17:b6:47:15:31:90:de:68:ee:c4: 75:c4:26:6d:c4:9a:f4:62:ca:60:c9:35:21:71:94: 49:8a:d3:a9:66:8b:19:7e:55:e5:a2:86:e4:0a:d4: 97:55:2e:15:34:0f:41:e7:0c:71:6a:3c:00:84:59: b3:db:ac:c9:94:db:5c:5e:a0:a4:d7:ae:a8:29:63: 3a:a2:c7:df:cd:b1:2c:4c:cc:fe:ae:7c:91:da:dd: 15:8a:9e:d9:67:db:ac:71:ee:02:e7:0c:9b:54:ad: 57:4d:6f:ad:80:3d:bf:1d:64:e7:8a:0c:20:2b:f8: f6:89:fb:19:48:75:ce:ff:3b:25:58:b3:52:ed:46: cf:f0:15:39:83:fb:22:ee:61:85:9e:d0:4e:fc:16: b0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:42:88:79:78:27:E9:71:41:82:78:69:36:29:71:42:FB:E1:A3:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab/30639e22-62de-31fe-a7e8-90514fad41ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab/dac9cb7f-b46d-477e-8698-95f66c423aab.crl X509v3 Authority Key Identifier: keyid:A9:64:71:5B:F3:C2:52:FB:05:C5:52:3B:AE:67:29:68:CB:6E:37:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab.cer sbgp-ipAddrBlock: critical IPv4: 104.247.116.0/24 IPv6: 2602:f93a::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:a9:7a:89:28:32:77:d0:0a:4e:8b:3a:01:3f:87:b6:1d:ec: f0:95:2e:95:a5:8e:86:c7:15:29:b5:32:66:04:e6:c0:1d:ac: 88:d8:ae:71:c2:11:2c:f6:e5:eb:6a:eb:ef:6e:91:91:21:8b: bf:7e:17:7e:9b:56:24:b2:28:be:df:b0:b0:5b:aa:59:ef:25: 83:d6:e8:83:0c:67:7d:cd:7f:9f:f6:9c:90:e5:06:10:a7:bc: a3:59:06:a9:2f:05:9c:06:4a:51:32:0e:77:98:cc:3e:78:8a: a0:3c:7a:9c:79:c2:e0:08:b4:4a:f7:60:e6:79:97:88:c3:ee: 89:25:94:69:79:92:df:02:da:99:fd:37:45:a8:ac:78:c1:be: 8c:0a:f2:6c:62:82:7a:48:3c:af:f1:ef:fc:f7:28:fd:7a:47: da:df:c0:70:90:53:ae:38:01:be:d7:2e:73:00:35:64:76:ea: 62:4c:1c:8b:df:ad:7e:16:2a:2b:6f:f6:13:4c:38:af:d9:f4: 16:97:36:9f:ed:23:d7:4c:06:d8:f7:42:d3:e2:21:cd:f3:e2: f5:e4:7a:00:ac:f3:db:a5:24:29:c2:3b:1d:72:f4:88:1d:2c: fa:e9:c2:72:a4:cc:27:58:45:62:c9:76:c3:75:03:e0:06:53: 65:8f:03:54 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEjCtlAGL45SBaiN5sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFjOWNiN2YtYjQ2ZC00NzdlLTg2OTgtOTVmNjZjNDIz YWFiMB4XDTI1MDIwMzE0MDA1MloXDTI1MDUwNDEzMDA1MlowLzEtMCsGA1UEAxMk ZTZmZjU4N2QtNjU0NS00YzM4LTliNjktOTk5MjA4YWE4MDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWp3TaJh8jMORLeCIE3EXoyvOvF5IHt9+9aM 4nTg96I7azxZE6uvP6TsNAXaMrHHjo06WQAQSoRor6qgVaUt/7EmfvAd+ksty4PQ d45NULjVG4v13P3hr8Ajig7f53oKA0zWNjJVs0rxpxrQbRe2RxUxkN5o7sR1xCZt xJr0YspgyTUhcZRJitOpZosZflXloobkCtSXVS4VNA9B5wxxajwAhFmz26zJlNtc XqCk166oKWM6osffzbEsTMz+rnyR2t0Vip7ZZ9usce4C5wybVK1XTW+tgD2/HWTn igwgK/j2ifsZSHXO/zslWLNS7UbP8BU5g/si7mGFntBO/BawwwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFGFCiHl4J+lxQYJ4aTYpcUL74aO7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kYWM5 Y2I3Zi1iNDZkLTQ3N2UtODY5OC05NWY2NmM0MjNhYWIvMzA2MzllMjItNjJkZS0z MWZlLWE3ZTgtOTA1MTRmYWQ0MWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZGFjOWNiN2YtYjQ2ZC00NzdlLTg2 OTgtOTVmNjZjNDIzYWFiL2RhYzljYjdmLWI0NmQtNDc3ZS04Njk4LTk1ZjY2YzQy M2FhYi5jcmwwHwYDVR0jBBgwFoAUqWRxW/PCUvsFxVI7rmcpaMtuN3AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kYWM5Y2I3Zi1iNDZkLTQ3N2UtODY5OC05NWY2 NmM0MjNhYWIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAaPd0MA4E AgACMAgDBgQmAvk6ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBXqXqJKDJ30ApOizoBP4e2HezwlS6VpY6G xxUptTJmBObAHayI2K5xwhEs9uXrauvvbpGRIYu/fhd+m1Yksii+37CwW6pZ7yWD 1uiDDGd9zX+f9pyQ5QYQp7yjWQapLwWcBkpRMg53mMw+eIqgPHqcecLgCLRK92Dm eZeIw+6JJZRpeZLfAtqZ/TdFqKx4wb6MCvJsYoJ6SDyv8e/89yj9ekfa38BwkFOu OAG+1y5zADVkdupiTByL361+Fiorb/YTTDiv2fQWlzaf7SPXTAbY90LT4iHN8+L1 5HoArPPbpSQpwjsdcvSIHSz66cJypMwnWEViyXbDdQPgBlNljwNU -----END CERTIFICATE-----Generated at Fri Apr 4 16:15:22 2025 by rpki-client