$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/2a9f1de8-5c57-323b-af9a-2f5ed8ca7d37.roa File: 2a9f1de8-5c57-323b-af9a-2f5ed8ca7d37.roa (raw, json) Hash identifier: oEaSx7+c4Y+uH4QuC1Vq9qjuNhsKP2TstnzJkjBykgY= Subject key identifier: 2A:A5:E7:74:5D:36:65:D8:E8:1F:83:73:BF:5F:DC:CD:5D:7B:B3:4B Certificate issuer: /CN=0b078f7a-8bc4-46c3-b9cb-7330775a780b Certificate serial: 010D0C9F432858492CAE854DC38436EA6605C800 Authority key identifier: B7:6E:3C:7F:B8:C4:10:8A:E7:BE:50:34:EC:0A:23:E3:CC:5E:EC:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/2a9f1de8-5c57-323b-af9a-2f5ed8ca7d37.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 1299 IP address blocks: 104.247.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:85:4d:c3:84:36:ea:66:05:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b078f7a-8bc4-46c3-b9cb-7330775a780b Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=c3573442-1824-416f-bb87-6b9fe3f52016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9f:28:c6:0b:c3:71:e1:21:d5:b7:cf:cc:52: 13:b8:da:6b:53:0b:9d:ed:53:07:ca:13:86:a2:e4: f7:7b:70:af:92:71:92:9c:90:c7:75:91:b3:71:95: 14:ec:a4:a4:a0:b9:da:b4:a1:2f:33:d2:76:7a:21: 54:35:ee:da:80:1b:b0:c3:0a:6e:ef:ca:93:b9:57: ab:93:57:e2:f1:8c:2e:54:ec:5b:c8:83:a4:bf:67: b0:a8:06:70:ef:c6:bc:e9:b5:6e:56:3c:87:b1:cc: bd:9f:1f:a1:f2:ee:db:55:a9:40:e1:f0:f7:ed:b9: a9:0a:99:ec:0a:28:fd:38:6b:ef:7b:c9:67:8e:d6: 7b:4b:96:8d:9e:09:69:79:be:2f:66:37:40:11:08: 82:b3:16:84:8d:6c:ff:42:9d:cd:03:5f:40:c2:2b: 04:81:b4:a3:ba:49:1e:ad:56:09:30:d6:bb:97:e8: 7b:c3:5c:f6:71:62:d5:98:06:4a:0b:73:06:ce:25: 8e:51:a7:b0:04:ad:c3:c4:7c:5d:46:35:95:ed:8a: f0:a2:77:56:ff:e5:a8:d6:bc:ec:bf:ef:b9:c0:28: 0f:6d:14:80:48:77:68:db:a7:d5:89:74:f3:d1:03: 46:49:8a:46:a1:72:4d:fe:84:97:1c:fc:87:05:6e: c2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A5:E7:74:5D:36:65:D8:E8:1F:83:73:BF:5F:DC:CD:5D:7B:B3:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/2a9f1de8-5c57-323b-af9a-2f5ed8ca7d37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.crl X509v3 Authority Key Identifier: keyid:B7:6E:3C:7F:B8:C4:10:8A:E7:BE:50:34:EC:0A:23:E3:CC:5E:EC:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer sbgp-ipAddrBlock: critical IPv4: 104.247.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:be:f7:5e:36:8a:8c:12:50:00:10:e4:19:9e:02:f3:67:6b: 81:04:fa:32:3b:fe:eb:02:07:b5:24:ae:90:49:a5:e0:22:ca: 11:42:b4:45:1c:81:28:aa:91:68:5d:5a:6d:08:e0:cf:6e:ac: fa:69:80:c1:30:26:c1:59:f2:a2:0f:10:2f:78:48:8d:49:b5: ce:7a:ba:44:9d:50:3d:2d:aa:f9:77:77:eb:fb:88:8e:5a:8a: 75:e5:2e:dd:7b:dc:8d:47:47:ce:77:96:e3:cc:a1:f4:de:20: ce:2e:28:56:25:d3:73:3d:bc:50:9a:ab:de:da:81:66:b0:88: 77:d5:21:73:88:69:75:0f:ab:99:0a:d4:56:c6:75:ce:0a:6e: 33:e9:a8:88:a0:8f:94:41:61:27:d3:2a:ac:bf:3d:23:eb:ca: b2:38:de:ff:8a:34:7b:c1:f3:47:d2:4c:43:98:e4:47:34:1d: 81:fa:10:81:3d:bc:54:cc:11:38:e5:a8:21:ca:fa:47:8a:15: 80:ef:eb:f2:ef:7e:49:75:58:5f:58:79:4f:5f:97:97:f8:85: b2:c2:3b:7c:55:1e:6c:20:50:c9:e4:44:68:14:52:65:a8:42: 20:17:fc:6d:a0:bd:e1:c4:bf:66:95:30:e9:40:87:e9:eb:8f: f3:1b:17:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksroVNw4Q26mYFyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGIwNzhmN2EtOGJjNC00NmMzLWI5Y2ItNzMzMDc3NWE3 ODBiMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YzM1NzM0NDItMTgyNC00MTZmLWJiODctNmI5ZmUzZjUyMDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ8oxgvDceEh1bfPzFITuNprUwud7VMHyhOG ouT3e3CvknGSnJDHdZGzcZUU7KSkoLnatKEvM9J2eiFUNe7agBuwwwpu78qTuVer k1fi8YwuVOxbyIOkv2ewqAZw78a86bVuVjyHscy9nx+h8u7bValA4fD37bmpCpns Cij9OGvve8lnjtZ7S5aNnglpeb4vZjdAEQiCsxaEjWz/Qp3NA19AwisEgbSjukke rVYJMNa7l+h7w1z2cWLVmAZKC3MGziWOUaewBK3DxHxdRjWV7YrwondW/+Wo1rzs v++5wCgPbRSASHdo26fViXTz0QNGSYpGoXJN/oSXHPyHBW7CgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCql53RdNmXY6B+Dc79f3M1de7NLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYjA3 OGY3YS04YmM0LTQ2YzMtYjljYi03MzMwNzc1YTc4MGIvMmE5ZjFkZTgtNWM1Ny0z MjNiLWFmOWEtMmY1ZWQ4Y2E3ZDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGIwNzhmN2EtOGJjNC00NmMzLWI5 Y2ItNzMzMDc3NWE3ODBiLzBiMDc4ZjdhLThiYzQtNDZjMy1iOWNiLTczMzA3NzVh NzgwYi5jcmwwHwYDVR0jBBgwFoAUt248f7jEEIrnvlA07Aoj48xe7PEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYjA3OGY3YS04YmM0LTQ2YzMtYjljYi03MzMw Nzc1YTc4MGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPd1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJG+9142iowSUAAQ5BmeAvNna4EE+jI7/usCB7UkrpBJpeAiyhFCtEUc gSiqkWhdWm0I4M9urPppgMEwJsFZ8qIPEC94SI1Jtc56ukSdUD0tqvl3d+v7iI5a inXlLt173I1HR853luPMofTeIM4uKFYl03M9vFCaq97agWawiHfVIXOIaXUPq5kK 1FbGdc4KbjPpqIigj5RBYSfTKqy/PSPryrI43v+KNHvB80fSTEOY5Ec0HYH6EIE9 vFTMETjlqCHK+keKFYDv6/Lvfkl1WF9YeU9fl5f4hbLCO3xVHmwgUMnkRGgUUmWo QiAX/G2gveHEv2aVMOlAh+nrj/MbF4E= -----END CERTIFICATE-----Generated at Fri Mar 14 09:57:42 2025 by rpki-client