$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/034976f2-b73d-31c2-a41d-907be371012c.roa File: 034976f2-b73d-31c2-a41d-907be371012c.roa (raw, json) Hash identifier: 1JZcYs/bkeIVHLVhAT9FqKVQJR3ZZBQgbik5tFtWNg4= Subject key identifier: 45:53:B8:F9:76:61:3E:BD:38:18:24:0C:EC:12:CF:2D:05:59:21:95 Certificate issuer: /CN=0c3cf342-4337-44bf-ac45-d0772ad75854 Certificate serial: 010D0C9F43285848C2B64FD10C26B8F938CEA3C0 Authority key identifier: 33:E5:6D:7B:B8:6A:FB:59:72:2D:35:F7:95:9D:2A:87:95:1F:95:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/034976f2-b73d-31c2-a41d-907be371012c.roa Signing time: Mon 03 Feb 2025 14:00:52 +0000 ROA not before: Mon 03 Feb 2025 14:00:52 +0000 ROA not after: Sun 04 May 2025 13:00:52 +0000 asID: 49791 IP address blocks: 104.167.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:b6:4f:d1:0c:26:b8:f9:38:ce:a3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c3cf342-4337-44bf-ac45-d0772ad75854 Validity Not Before: Feb 3 14:00:52 2025 GMT Not After : May 4 13:00:52 2025 GMT Subject: CN=b2a692a6-cf90-47df-b626-8bacdf7cb745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:37:e5:ea:76:28:10:36:cd:05:ee:09:29:f7: 45:25:91:21:24:1f:48:f6:b3:ea:dd:29:a0:21:34: fc:f0:b6:1c:29:c0:87:b6:b7:03:64:4a:db:74:f6: a6:d7:2f:08:19:25:1d:f5:ec:9f:92:d8:2e:e4:11: 41:d5:cf:a5:09:b1:c6:ba:f8:9c:a5:7e:54:a2:96: 0c:55:86:47:a2:f8:0e:83:93:da:92:6b:49:25:0d: 65:a8:a4:f3:1b:b8:89:67:d4:f0:49:7b:69:69:e9: bd:0d:50:df:3a:c1:c9:a5:13:61:4a:51:cf:c9:28: f7:d4:01:67:cf:3f:d7:8a:45:70:f5:1c:9a:f9:e7: 10:7b:c9:d4:4d:17:7d:86:bf:e7:33:36:2a:dc:8f: 39:76:95:78:c4:c1:dd:4e:cb:c1:e1:19:76:16:1b: 1a:10:a1:53:87:22:55:09:13:45:2a:30:75:6b:bb: 59:ed:7b:91:50:58:61:c6:a8:83:cc:8a:a3:49:2e: 3d:97:72:3f:70:d9:41:f7:db:12:88:82:75:a6:fd: b3:1a:5b:0c:3f:05:29:14:59:16:3f:51:2d:68:37: 9c:b5:47:e8:53:2c:30:d3:23:52:6e:c9:86:a2:ae: de:a2:b0:0a:2c:7b:f4:59:0b:a8:bd:fb:9b:b7:1b: 53:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:53:B8:F9:76:61:3E:BD:38:18:24:0C:EC:12:CF:2D:05:59:21:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/034976f2-b73d-31c2-a41d-907be371012c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.crl X509v3 Authority Key Identifier: keyid:33:E5:6D:7B:B8:6A:FB:59:72:2D:35:F7:95:9D:2A:87:95:1F:95:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer sbgp-ipAddrBlock: critical IPv4: 104.167.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:f6:d6:40:aa:b7:1a:b3:2c:ff:c9:e3:4e:4c:fd:7e:7b:73: 21:58:36:43:cf:8b:37:cc:31:cf:2d:b0:09:37:d2:e9:98:fc: b5:a8:99:81:3d:7c:7d:d2:5e:c0:28:95:b6:55:46:93:a1:b2: a5:df:88:a4:3c:36:73:5f:fa:93:36:d6:04:25:46:b9:84:9c: 29:17:c2:ed:0a:41:20:c0:9a:1c:77:e3:b2:0e:1f:07:32:b7: 24:eb:21:63:bf:80:c9:88:a3:56:a7:13:59:3d:8f:09:64:d7: 8f:21:47:85:21:12:81:35:d5:75:84:93:61:16:30:46:38:d2: b9:fe:c0:28:05:f2:9b:ed:57:fe:d2:42:32:78:17:08:7a:2b: 67:46:35:1d:a3:06:e4:ea:47:a6:eb:82:43:d6:82:d3:ff:28: 47:ca:69:19:54:9f:0c:f0:9c:13:38:d5:8b:40:49:1f:f6:f3: cd:58:22:19:50:83:c3:f2:11:07:2b:b7:4e:4a:1c:b6:24:24: a0:bb:72:d7:2a:bd:99:fa:a7:ba:b1:fb:e5:e5:80:38:40:f0: fa:bc:d5:e8:dd:38:a5:55:92:71:7a:1d:9e:d8:61:ef:95:2c: b9:aa:6c:ea:12:7c:7e:e0:0c:ed:5d:2d:0a:5d:1a:ce:c6:3d: 68:2e:65:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCtk/RDCa4+TjOo8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMzY2YzNDItNDMzNy00NGJmLWFjNDUtZDA3NzJhZDc1 ODU0MB4XDTI1MDIwMzE0MDA1MloXDTI1MDUwNDEzMDA1MlowLzEtMCsGA1UEAxMk YjJhNjkyYTYtY2Y5MC00N2RmLWI2MjYtOGJhY2RmN2NiNzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjfl6nYoEDbNBe4JKfdFJZEhJB9I9rPq3Smg ITT88LYcKcCHtrcDZErbdPam1y8IGSUd9eyfktgu5BFB1c+lCbHGuvicpX5UopYM VYZHovgOg5PakmtJJQ1lqKTzG7iJZ9TwSXtpaem9DVDfOsHJpRNhSlHPySj31AFn zz/XikVw9Rya+ecQe8nUTRd9hr/nMzYq3I85dpV4xMHdTsvB4Rl2FhsaEKFThyJV CRNFKjB1a7tZ7XuRUFhhxqiDzIqjSS49l3I/cNlB99sSiIJ1pv2zGlsMPwUpFFkW P1EtaDectUfoUyww0yNSbsmGoq7eorAKLHv0WQuovfubtxtTdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVTuPl2YT69OBgkDOwSzy0FWSGVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYzNj ZjM0Mi00MzM3LTQ0YmYtYWM0NS1kMDc3MmFkNzU4NTQvMDM0OTc2ZjItYjczZC0z MWMyLWE0MWQtOTA3YmUzNzEwMTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGMzY2YzNDItNDMzNy00NGJmLWFj NDUtZDA3NzJhZDc1ODU0LzBjM2NmMzQyLTQzMzctNDRiZi1hYzQ1LWQwNzcyYWQ3 NTg1NC5jcmwwHwYDVR0jBBgwFoAUM+Vte7hq+1lyLTX3lZ0qh5UflWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYzNjZjM0Mi00MzM3LTQ0YmYtYWM0NS1kMDc3 MmFkNzU4NTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaKfEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJj21kCqtxqzLP/J405M/X57cyFYNkPPizfMMc8tsAk30umY/LWomYE9 fH3SXsAolbZVRpOhsqXfiKQ8NnNf+pM21gQlRrmEnCkXwu0KQSDAmhx347IOHwcy tyTrIWO/gMmIo1anE1k9jwlk148hR4UhEoE11XWEk2EWMEY40rn+wCgF8pvtV/7S QjJ4Fwh6K2dGNR2jBuTqR6brgkPWgtP/KEfKaRlUnwzwnBM41YtASR/2881YIhlQ g8PyEQcrt05KHLYkJKC7ctcqvZn6p7qx++XlgDhA8Pq81ejdOKVVknF6HZ7YYe+V LLmqbOoSfH7gDO1dLQpdGs7GPWguZbQ= -----END CERTIFICATE-----Generated at Sun Apr 6 06:04:53 2025 by rpki-client