$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/ae357901-63bf-3b7a-a7ed-8cfa2bc2f085.roa File: ae357901-63bf-3b7a-a7ed-8cfa2bc2f085.roa (raw, json) Hash identifier: PF0AZR5Mo7zQvr0DIDBHGh+PNKPxGBK3u9rZNF4OH4g= Subject key identifier: 73:6B:3F:86:D7:D2:E9:F4:B3:F1:64:B9:C6:62:94:0A:69:5A:8F:5F Certificate issuer: /CN=2775f7c3-c238-47d5-98c9-835a28d9095e Certificate serial: 010D0C9F432858492CAE92284C47FC1551256340 Authority key identifier: D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/ae357901-63bf-3b7a-a7ed-8cfa2bc2f085.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 401104 IP address blocks: 104.167.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:92:28:4c:47:fc:15:51:25:63:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2775f7c3-c238-47d5-98c9-835a28d9095e Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=44c3661d-e67b-4b96-935d-24433472f130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fa:01:37:bc:11:1a:9d:72:dd:07:f5:7d:d6: 46:51:de:d5:14:5a:ae:db:b4:04:7e:4d:4e:96:95: de:e2:98:38:7d:71:f1:fb:bd:ce:0f:54:a3:57:bc: dc:d4:39:5d:0b:50:66:5a:a8:2d:3d:67:aa:e3:2f: 40:b6:8b:9c:dc:34:fc:84:20:03:e6:54:f9:26:3c: 58:16:b5:78:43:0a:f8:58:d5:a4:01:4e:3c:dd:aa: 48:42:3b:38:11:c6:5a:2c:b8:6b:ed:4a:70:0c:00: 06:c5:2f:3e:2c:ce:23:09:18:60:39:4a:3a:5b:43: 0c:6c:10:62:1d:d8:82:24:18:76:b7:6d:8e:f0:d0: 2e:9f:b2:e6:32:76:fa:1c:c4:f2:64:4f:55:d8:c7: ad:aa:21:f3:12:c9:f5:fe:39:40:a2:09:7c:55:eb: 1b:d2:18:d4:b3:d1:68:15:ce:e6:7c:ad:12:45:77: d5:9d:12:90:7f:37:57:49:0e:ba:1a:60:fe:69:16: bf:4c:12:db:57:55:ae:00:3d:77:f0:80:a5:41:90: f1:ce:e6:83:6c:78:22:df:1f:03:a0:8a:ee:4a:81: 18:5d:90:f0:98:14:36:b5:f2:9b:e0:da:8d:4e:83: 9a:6a:5d:4c:16:5c:87:62:4c:91:dd:1a:04:02:f4: 91:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:6B:3F:86:D7:D2:E9:F4:B3:F1:64:B9:C6:62:94:0A:69:5A:8F:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/ae357901-63bf-3b7a-a7ed-8cfa2bc2f085.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.crl X509v3 Authority Key Identifier: keyid:D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer sbgp-ipAddrBlock: critical IPv4: 104.167.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:4a:59:e5:a1:a7:28:ef:2c:d4:2a:56:f4:3a:e9:24:c6:bd: f1:5a:5d:62:cf:64:f2:b6:6a:51:7e:7b:9f:2a:ca:87:96:70: d1:ab:74:d2:06:68:af:bd:b8:61:45:b0:e0:63:73:55:10:11: 1d:a7:d6:d8:9e:d7:88:19:19:ae:ab:19:1d:ff:5f:04:73:45: 79:63:4d:51:67:f3:99:b4:c1:c1:bb:b4:0d:b6:af:1b:59:21: f4:30:03:fa:2e:cc:2c:df:23:ee:3c:17:16:29:91:ff:84:7f: 8f:a9:5c:79:aa:4f:70:a9:69:17:62:e6:37:39:e5:48:6d:b8: e5:7a:ab:b1:bc:72:e9:d6:1d:d8:75:8d:0d:9a:2b:1f:20:e9: 34:fc:98:c1:e9:c5:66:5b:a4:58:1a:5e:c0:c7:98:3e:d5:59: bc:07:28:18:2f:03:28:b6:b1:f6:4e:78:60:28:60:cc:b6:cb: ae:9a:cc:08:c8:a9:f8:3f:5f:35:6e:7b:c8:a3:90:36:fc:58: b5:dd:e6:48:15:6c:8a:b9:27:70:b6:b2:a9:10:e9:67:a0:cf: 08:9f:d6:6d:13:2f:d5:2d:af:a8:d4:50:21:69:3e:6c:80:e2: c3:31:99:a9:18:c6:3b:ac:41:22:5b:9b:4d:be:0c:68:27:92: 7c:1b:0d:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrpIoTEf8FVElY0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjc3NWY3YzMtYzIzOC00N2Q1LTk4YzktODM1YTI4ZDkw OTVlMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NDRjMzY2MWQtZTY3Yi00Yjk2LTkzNWQtMjQ0MzM0NzJmMTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvoBN7wRGp1y3Qf1fdZGUd7VFFqu27QEfk1O lpXe4pg4fXHx+73OD1SjV7zc1DldC1BmWqgtPWeq4y9Atouc3DT8hCAD5lT5JjxY FrV4Qwr4WNWkAU483apIQjs4EcZaLLhr7UpwDAAGxS8+LM4jCRhgOUo6W0MMbBBi HdiCJBh2t22O8NAun7LmMnb6HMTyZE9V2MetqiHzEsn1/jlAogl8Vesb0hjUs9Fo Fc7mfK0SRXfVnRKQfzdXSQ66GmD+aRa/TBLbV1WuAD138IClQZDxzuaDbHgi3x8D oIruSoEYXZDwmBQ2tfKb4NqNToOaal1MFlyHYkyR3RoEAvSRgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNrP4bX0un0s/FkucZilAppWo9fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNzc1 ZjdjMy1jMjM4LTQ3ZDUtOThjOS04MzVhMjhkOTA5NWUvYWUzNTc5MDEtNjNiZi0z YjdhLWE3ZWQtOGNmYTJiYzJmMDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjc3NWY3YzMtYzIzOC00N2Q1LTk4 YzktODM1YTI4ZDkwOTVlLzI3NzVmN2MzLWMyMzgtNDdkNS05OGM5LTgzNWEyOGQ5 MDk1ZS5jcmwwHwYDVR0jBBgwFoAU0STfzH9bgNKN7P7ujM9SM461IUQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNzc1ZjdjMy1jMjM4LTQ3ZDUtOThjOS04MzVh MjhkOTA5NWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKfxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRKWeWhpyjvLNQqVvQ66STGvfFaXWLPZPK2alF+e58qyoeWcNGrdNIG aK+9uGFFsOBjc1UQER2n1tie14gZGa6rGR3/XwRzRXljTVFn85m0wcG7tA22rxtZ IfQwA/ouzCzfI+48FxYpkf+Ef4+pXHmqT3CpaRdi5jc55UhtuOV6q7G8cunWHdh1 jQ2aKx8g6TT8mMHpxWZbpFgaXsDHmD7VWbwHKBgvAyi2sfZOeGAoYMy2y66azAjI qfg/XzVue8ijkDb8WLXd5kgVbIq5J3C2sqkQ6Wegzwif1m0TL9Utr6jUUCFpPmyA 4sMxmakYxjusQSJbm02+DGgnknwbDUE= -----END CERTIFICATE-----Generated at Sun Apr 6 11:44:28 2025 by rpki-client