$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/aa3f6ada-b81e-38c2-8f47-d8ef55f67410.roa File: aa3f6ada-b81e-38c2-8f47-d8ef55f67410.roa (raw, json) Hash identifier: QWR5w9BAkmuuHj00giB43yTt/x3bvrq7onWRy4noZjg= Subject key identifier: 30:17:B1:39:55:9C:AE:8B:BC:94:D4:67:54:E2:52:C4:58:C1:A7:26 Certificate issuer: /CN=2775f7c3-c238-47d5-98c9-835a28d9095e Certificate serial: 010D0C9F43285848EF6141C23020D374186465C0 Authority key identifier: D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/aa3f6ada-b81e-38c2-8f47-d8ef55f67410.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 398355 IP address blocks: 104.167.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:41:c2:30:20:d3:74:18:64:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2775f7c3-c238-47d5-98c9-835a28d9095e Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=7e0c7ed6-36ce-4287-b039-53031171dac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a5:64:93:af:ad:2c:f4:dc:89:51:db:59:a8: c1:84:6b:a4:52:16:47:b8:93:4d:21:64:b9:18:37: dd:41:5e:a1:6a:6e:02:e9:03:77:8f:ba:72:e0:b6: 34:59:a3:bc:6a:e0:34:44:f4:9e:05:cd:2c:61:6b: 7e:3d:25:28:fb:e0:57:d2:87:c4:2a:08:0c:22:b6: 27:1f:b3:10:a5:ed:13:27:3b:1f:71:3f:3f:30:1a: dc:2a:bc:13:7d:2c:08:f1:25:01:3f:56:2c:80:01: da:b1:34:e3:bd:83:ef:47:f3:a2:d0:bb:44:91:12: d5:d2:8c:bc:c7:9e:dc:1b:bb:a5:c1:e6:96:d1:fa: f4:7a:cc:88:f2:5e:78:51:11:52:3a:db:93:90:ef: c6:0d:9c:18:a5:e0:ed:98:22:de:96:d0:5c:b3:e4: 96:ae:77:16:a5:8c:dd:24:b6:35:77:37:51:f1:74: 8c:7a:56:ce:82:dd:ef:aa:dc:96:49:8c:e3:22:ea: 17:a0:da:7f:5c:c3:80:ec:a3:c8:1c:72:dc:41:fc: db:b5:98:38:f9:4b:34:cf:fc:db:e9:99:7e:e2:94: b6:cd:e8:9d:7f:78:99:2a:ed:85:67:97:43:d7:8e: cb:85:24:82:2d:4d:0f:9e:77:1d:89:36:e8:17:d5: 65:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:17:B1:39:55:9C:AE:8B:BC:94:D4:67:54:E2:52:C4:58:C1:A7:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/aa3f6ada-b81e-38c2-8f47-d8ef55f67410.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.crl X509v3 Authority Key Identifier: keyid:D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer sbgp-ipAddrBlock: critical IPv4: 104.167.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:28:47:32:00:7b:67:b3:95:cb:53:b7:d8:ae:dc:5a:79:11: d5:3b:19:75:89:04:2c:09:ea:46:17:1f:ad:18:9d:49:9b:a0: a6:82:40:37:91:02:45:c5:d6:9f:57:23:0e:6f:1b:9a:9d:be: 1c:28:96:0d:3b:c2:77:db:59:cb:c0:1f:ad:1e:6a:04:e1:93: 08:2d:06:88:a7:23:d7:6e:ef:ee:5d:26:95:ca:1f:6b:33:5c: 9f:e7:ed:9b:94:8b:4b:8d:e1:24:92:89:d1:ec:dd:7f:db:a7: ef:ef:37:b0:6c:dd:1d:49:6f:34:76:5d:9d:e0:9b:a1:69:b8: ed:ae:fc:3c:79:0e:ad:57:26:a1:25:c8:ab:83:7f:df:c8:18: 43:6a:b8:a6:b9:91:0f:6e:13:d6:05:fc:43:b1:1b:ea:e5:2b: 50:7e:2a:b4:b6:78:ac:10:9b:f0:d5:f2:25:c5:c9:d8:bc:8a: 2e:c9:d9:25:26:6f:9d:e6:9d:bb:bf:58:34:71:1b:3d:97:c7: 42:43:78:51:84:b5:32:bd:f3:f9:09:9d:71:99:23:42:6a:50: 35:69:46:ea:dc:fc:37:5d:14:7c:43:5c:46:1f:70:bd:e1:aa: 4f:ad:4c:fb:66:fa:fe:40:3e:c5:5b:d3:5f:44:f5:19:65:7b: 96:08:e1:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYUHCMCDTdBhkZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjc3NWY3YzMtYzIzOC00N2Q1LTk4YzktODM1YTI4ZDkw OTVlMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk N2UwYzdlZDYtMzZjZS00Mjg3LWIwMzktNTMwMzExNzFkYWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKVkk6+tLPTciVHbWajBhGukUhZHuJNNIWS5 GDfdQV6ham4C6QN3j7py4LY0WaO8auA0RPSeBc0sYWt+PSUo++BX0ofEKggMIrYn H7MQpe0TJzsfcT8/MBrcKrwTfSwI8SUBP1YsgAHasTTjvYPvR/Oi0LtEkRLV0oy8 x57cG7ulweaW0fr0esyI8l54URFSOtuTkO/GDZwYpeDtmCLeltBcs+SWrncWpYzd JLY1dzdR8XSMelbOgt3vqtyWSYzjIuoXoNp/XMOA7KPIHHLcQfzbtZg4+Us0z/zb 6Zl+4pS2zeidf3iZKu2FZ5dD147LhSSCLU0PnncdiTboF9VlGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDAXsTlVnK6LvJTUZ1TiUsRYwacmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNzc1 ZjdjMy1jMjM4LTQ3ZDUtOThjOS04MzVhMjhkOTA5NWUvYWEzZjZhZGEtYjgxZS0z OGMyLThmNDctZDhlZjU1ZjY3NDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjc3NWY3YzMtYzIzOC00N2Q1LTk4 YzktODM1YTI4ZDkwOTVlLzI3NzVmN2MzLWMyMzgtNDdkNS05OGM5LTgzNWEyOGQ5 MDk1ZS5jcmwwHwYDVR0jBBgwFoAU0STfzH9bgNKN7P7ujM9SM461IUQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNzc1ZjdjMy1jMjM4LTQ3ZDUtOThjOS04MzVh MjhkOTA5NWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKfyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJooRzIAe2ezlctTt9iu3Fp5EdU7GXWJBCwJ6kYXH60YnUmboKaCQDeR AkXF1p9XIw5vG5qdvhwolg07wnfbWcvAH60eagThkwgtBoinI9du7+5dJpXKH2sz XJ/n7ZuUi0uN4SSSidHs3X/bp+/vN7Bs3R1JbzR2XZ3gm6FpuO2u/Dx5Dq1XJqEl yKuDf9/IGENquKa5kQ9uE9YF/EOxG+rlK1B+KrS2eKwQm/DV8iXFydi8ii7J2SUm b53mnbu/WDRxGz2Xx0JDeFGEtTK98/kJnXGZI0JqUDVpRurc/DddFHxDXEYfcL3h qk+tTPtm+v5APsVb019E9Rlle5YI4Z0= -----END CERTIFICATE-----Generated at Sun Apr 6 17:48:07 2025 by rpki-client