$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/7b406d0d-800e-33ab-9506-76e8dba9b5e4.roa File: 7b406d0d-800e-33ab-9506-76e8dba9b5e4.roa (raw, json) Hash identifier: 7CNapOk2XPsJcb0nTsNTisPDyzlA3m/UaxzZMfYw7jM= Subject key identifier: C3:81:67:87:DD:9A:DF:2E:1E:9E:79:A2:F1:63:01:5E:20:54:3E:CB Certificate issuer: /CN=0b078f7a-8bc4-46c3-b9cb-7330775a780b Certificate serial: 010D0C9F432858492CAE7DCF3FD41AD1DA598200 Authority key identifier: B7:6E:3C:7F:B8:C4:10:8A:E7:BE:50:34:EC:0A:23:E3:CC:5E:EC:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/7b406d0d-800e-33ab-9506-76e8dba9b5e4.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 174 IP address blocks: 104.247.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:7d:cf:3f:d4:1a:d1:da:59:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b078f7a-8bc4-46c3-b9cb-7330775a780b Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=53920c89-06a0-4f98-a55a-a1d3bf1fe15f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9d:67:3b:8f:be:2f:a7:58:3a:f0:4f:c4:1e: f9:be:e1:0e:90:f1:da:b7:25:2b:6d:87:2f:3a:17: 96:12:3e:47:3b:62:20:f7:cd:d4:95:7e:c3:a9:e9: 5d:c2:4e:52:0a:bb:a9:82:c7:72:ba:57:19:3a:5a: 0a:6f:a8:0c:93:9e:f8:1e:a7:91:6d:37:1c:36:32: 91:bf:cd:78:96:a4:e7:83:1b:58:94:b1:75:23:3f: be:b7:7d:76:63:50:48:f9:ea:86:67:ac:65:84:35: 9d:8a:40:51:0a:f1:68:4a:aa:53:37:a9:5c:9c:e8: cb:3c:26:af:69:f3:01:c1:40:5b:63:42:c4:32:d1: 07:04:55:82:df:fc:b0:b5:14:ec:9c:aa:40:48:c7: 52:0c:41:47:53:02:c9:d7:71:12:d6:47:66:ec:0f: 79:61:0d:8f:74:35:30:f3:05:8c:59:e5:95:35:5a: b0:02:f3:0a:7b:ae:18:4a:c6:df:47:4f:8e:11:af: 05:8e:2c:cc:5b:e2:f4:3c:47:5b:39:76:94:cf:1a: 16:ec:0d:7f:95:2b:8e:b6:78:e4:f6:c3:94:b8:21: 4f:25:ee:7e:cf:58:f2:60:71:81:27:56:fd:5f:55: f8:1c:a3:43:8d:07:6d:9a:74:43:27:c2:29:a5:a4: 62:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:81:67:87:DD:9A:DF:2E:1E:9E:79:A2:F1:63:01:5E:20:54:3E:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/7b406d0d-800e-33ab-9506-76e8dba9b5e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.crl X509v3 Authority Key Identifier: keyid:B7:6E:3C:7F:B8:C4:10:8A:E7:BE:50:34:EC:0A:23:E3:CC:5E:EC:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer sbgp-ipAddrBlock: critical IPv4: 104.247.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:4f:2b:9d:37:53:13:ce:d1:5d:c4:10:04:ea:f6:8e:c1:f0: df:b9:04:a3:0f:c3:8c:51:39:54:9c:6d:17:40:fc:64:dc:f7: de:b7:2e:5c:66:a6:7c:4c:84:8c:6d:44:ec:69:ba:e6:3e:27: ae:ab:ad:d6:eb:b7:6c:f8:8e:1f:ff:1d:3a:b3:f4:f7:93:28: b6:c4:f7:68:a1:f7:81:0f:1d:04:18:24:da:a1:ed:4b:1d:1b: e5:73:ec:74:ff:f3:6c:16:50:67:f9:57:b3:a2:fb:23:71:92: d3:3e:a9:9d:49:4a:24:f8:54:59:4c:0e:4f:52:8c:6c:46:de: 0e:27:13:c7:e9:75:af:e0:52:8e:62:18:c7:e3:38:e0:08:06: 8a:4e:d3:e7:a4:61:0f:4a:57:61:26:13:6d:b0:02:ca:c0:19: 8c:c1:5f:26:d2:cd:38:ed:31:b7:2c:ab:09:c1:67:22:96:18: 8f:5c:a0:9d:fe:80:76:5a:ae:d3:c7:fa:9e:97:2b:99:08:73: f2:c6:a1:39:21:ab:84:8c:33:e0:02:70:38:3c:74:67:50:68: 69:b6:38:52:a7:ab:62:6a:70:b0:9d:22:15:45:ec:01:f4:7f: bb:99:01:e9:49:3c:cf:ab:53:c2:16:7c:fb:17:8d:33:b5:2d: d5:dc:12:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrn3PP9Qa0dpZggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGIwNzhmN2EtOGJjNC00NmMzLWI5Y2ItNzMzMDc3NWE3 ODBiMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NTM5MjBjODktMDZhMC00Zjk4LWE1NWEtYTFkM2JmMWZlMTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmp1nO4++L6dYOvBPxB75vuEOkPHatyUrbYcv OheWEj5HO2Ig983UlX7Dqeldwk5SCrupgsdyulcZOloKb6gMk574HqeRbTccNjKR v814lqTngxtYlLF1Iz++t312Y1BI+eqGZ6xlhDWdikBRCvFoSqpTN6lcnOjLPCav afMBwUBbY0LEMtEHBFWC3/ywtRTsnKpASMdSDEFHUwLJ13ES1kdm7A95YQ2PdDUw 8wWMWeWVNVqwAvMKe64YSsbfR0+OEa8FjizMW+L0PEdbOXaUzxoW7A1/lSuOtnjk 9sOUuCFPJe5+z1jyYHGBJ1b9X1X4HKNDjQdtmnRDJ8IppaRi5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOBZ4fdmt8uHp55ovFjAV4gVD7LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYjA3 OGY3YS04YmM0LTQ2YzMtYjljYi03MzMwNzc1YTc4MGIvN2I0MDZkMGQtODAwZS0z M2FiLTk1MDYtNzZlOGRiYTliNWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGIwNzhmN2EtOGJjNC00NmMzLWI5 Y2ItNzMzMDc3NWE3ODBiLzBiMDc4ZjdhLThiYzQtNDZjMy1iOWNiLTczMzA3NzVh NzgwYi5jcmwwHwYDVR0jBBgwFoAUt248f7jEEIrnvlA07Aoj48xe7PEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYjA3OGY3YS04YmM0LTQ2YzMtYjljYi03MzMw Nzc1YTc4MGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPd1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKBPK503UxPO0V3EEATq9o7B8N+5BKMPw4xROVScbRdA/GTc9963Llxm pnxMhIxtROxpuuY+J66rrdbrt2z4jh//HTqz9PeTKLbE92ih94EPHQQYJNqh7Usd G+Vz7HT/82wWUGf5V7Oi+yNxktM+qZ1JSiT4VFlMDk9SjGxG3g4nE8fpda/gUo5i GMfjOOAIBopO0+ekYQ9KV2EmE22wAsrAGYzBXybSzTjtMbcsqwnBZyKWGI9coJ3+ gHZartPH+p6XK5kIc/LGoTkhq4SMM+ACcDg8dGdQaGm2OFKnq2JqcLCdIhVF7AH0 f7uZAelJPM+rU8IWfPsXjTO1LdXcElw= -----END CERTIFICATE-----Generated at Fri Mar 14 13:56:54 2025 by rpki-client