$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c2d9c047-3e7e-35e4-addf-2616c2e71b94.roa File: c2d9c047-3e7e-35e4-addf-2616c2e71b94.roa (raw, json) Hash identifier: RFz7Q699STvn5XYtyNJ7CGGid7eSesQ3Tj7O5R/AFRc= Subject key identifier: 1A:68:6C:FE:D4:25:7C:D3:92:F3:86:24:AA:D0:41:B5:22:A2:C5:C1 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584953C44B9748C97097DE080780 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c2d9c047-3e7e-35e4-addf-2616c2e71b94.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 62651 IP address blocks: 104.36.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:4b:97:48:c9:70:97:de:08:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=594e9e52-a09a-4600-8f3b-1b3e8d1b9028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ec:d5:a9:5a:d9:eb:9a:a7:4c:0b:de:09:bf: 05:75:44:e9:d3:49:ca:ff:d8:0c:da:7c:e1:83:81: 63:cb:25:0c:74:52:86:61:0b:45:1e:ee:9c:fa:9a: ea:8e:4a:4c:d4:0e:06:d4:5a:4e:ef:fd:d0:c6:1f: 97:43:74:a2:a9:7f:af:a3:9d:2f:ff:4d:d0:cd:bb: 09:d0:b7:be:07:c5:45:7e:08:ef:ad:da:72:93:97: 9e:cf:54:49:95:3b:c2:8b:cd:e4:34:51:5e:13:54: 99:0d:8f:39:14:53:c3:aa:81:11:a3:ce:76:68:31: cd:05:fb:4b:c6:50:a5:ae:d8:13:9a:db:31:99:3e: 9b:7c:7c:88:8f:69:2e:4b:c4:a7:6b:46:22:ae:c3: d5:95:24:1b:82:35:fc:d4:2d:2b:5a:c2:8a:b1:51: d9:88:f7:b4:03:8a:b2:11:99:80:a7:90:47:a2:64: 0d:c0:db:28:8d:7f:d3:cf:b2:4e:57:d6:d2:c4:8b: 82:b7:05:90:63:1d:bc:a0:3f:a9:a6:b3:4f:a0:ab: ab:9f:fc:9e:bc:2f:25:22:bc:bd:08:44:ac:03:33: 83:23:22:fd:91:ba:64:9c:9a:8a:86:16:26:f7:de: 50:ce:a8:b5:02:29:5d:c0:b5:49:5b:5d:f0:7a:09: a4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:68:6C:FE:D4:25:7C:D3:92:F3:86:24:AA:D0:41:B5:22:A2:C5:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c2d9c047-3e7e-35e4-addf-2616c2e71b94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 104.36.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:e6:d7:09:16:6d:c9:21:47:6a:da:c5:4c:16:52:c3:1d:0c: 8b:83:3e:17:b8:df:86:cc:17:e6:1e:3d:2f:d7:e2:1b:27:d4: b0:db:0c:9e:1d:35:82:fe:17:a2:93:1d:16:18:d5:cc:14:26: a9:45:a6:64:dd:db:9a:d0:76:e9:99:2b:f6:8f:8f:61:23:c9: 1f:04:7d:18:fc:dd:fb:83:7f:7a:66:c2:b3:d3:81:35:18:3d: c2:56:26:b6:6e:9d:ac:35:39:85:b6:4f:ce:c1:55:da:55:ae: 3f:8f:24:1c:a4:4a:b6:ee:05:8d:5f:75:88:6b:90:22:e4:52: b4:6b:29:5f:b9:26:1f:a8:ff:35:27:95:f8:64:fa:70:92:3c: c1:8c:78:f2:0c:67:7d:72:37:ce:b2:72:43:b9:f9:15:2d:30: 8e:bd:ce:50:62:a4:32:d1:10:bd:ed:b1:0c:cb:82:39:3d:89: 12:67:bc:21:8b:8d:83:96:61:24:73:ca:59:e0:ff:40:d4:d2: 75:bb:bb:2c:84:f3:10:ca:8d:58:9b:21:74:9e:2d:dd:db:00: 87:7c:db:be:ed:65:52:0c:fa:94:71:e6:e8:b4:89:da:26:ad: 6d:a5:9c:3f:85:26:f3:df:e3:56:f6:14:da:b7:ce:94:45:77: c8:de:e6:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxEuXSMlwl94IB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk NTk0ZTllNTItYTA5YS00NjAwLThmM2ItMWIzZThkMWI5MDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouzVqVrZ65qnTAveCb8FdUTp00nK/9gM2nzh g4FjyyUMdFKGYQtFHu6c+prqjkpM1A4G1FpO7/3Qxh+XQ3SiqX+vo50v/03QzbsJ 0Le+B8VFfgjvrdpyk5eez1RJlTvCi83kNFFeE1SZDY85FFPDqoERo852aDHNBftL xlClrtgTmtsxmT6bfHyIj2kuS8Sna0YirsPVlSQbgjX81C0rWsKKsVHZiPe0A4qy EZmAp5BHomQNwNsojX/Tz7JOV9bSxIuCtwWQYx28oD+pprNPoKurn/yevC8lIry9 CESsAzODIyL9kbpknJqKhhYm995Qzqi1AildwLVJW13wegmkhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpobP7UJXzTkvOGJKrQQbUiosXBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvYzJkOWMwNDctM2U3ZS0z NWU0LWFkZGYtMjYxNmMyZTcxYjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaCS0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvm1wkWbckhR2raxUwWUsMdDIuDPhe434bMF+YePS/X4hsn1LDbDJ4d NYL+F6KTHRYY1cwUJqlFpmTd25rQdumZK/aPj2EjyR8EfRj83fuDf3pmwrPTgTUY PcJWJrZunaw1OYW2T87BVdpVrj+PJBykSrbuBY1fdYhrkCLkUrRrKV+5Jh+o/zUn lfhk+nCSPMGMePIMZ31yN86yckO5+RUtMI69zlBipDLREL3tsQzLgjk9iRJnvCGL jYOWYSRzylng/0DU0nW7uyyE8xDKjVibIXSeLd3bAId8277tZVIM+pRx5ui0idom rW2lnD+FJvPf41b2FNq3zpRFd8je5kk= -----END CERTIFICATE-----Generated at Sat Apr 5 16:41:49 2025 by rpki-client