$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/41d5735c-bf44-3d40-b55c-71b48a44901f.roa File: 41d5735c-bf44-3d40-b55c-71b48a44901f.roa (raw, json) Hash identifier: i0xDxaLnwwUyD19hAy5HnuYcDFlbmHPd9PHgGsOqaEE= Subject key identifier: 35:28:0F:0B:50:0F:8D:5E:F1:DE:EC:CB:42:6B:50:A6:7F:2B:27:D7 Certificate issuer: /CN=7c1b0964-bd9c-4931-a53d-e2a434bc2af0 Certificate serial: 010D0C9F4328584940394CB5439552E885386980 Authority key identifier: 66:6F:7E:8C:15:5F:8C:94:34:06:21:1B:FB:BC:4D:C1:6C:D8:85:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/41d5735c-bf44-3d40-b55c-71b48a44901f.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 40230 IP address blocks: 104.143.48.0/20 maxlen: 24 199.247.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:4c:b5:43:95:52:e8:85:38:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c1b0964-bd9c-4931-a53d-e2a434bc2af0 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=fa85ffad-a9e3-451c-8faf-0c52705c91a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b3:a3:f8:01:41:15:cd:c1:dc:2b:d9:19:81: d3:a4:9f:74:58:22:76:2d:bd:4a:55:b8:5d:f2:38: 41:e9:7b:49:ae:82:25:c3:0b:90:47:2c:18:ae:fc: 81:52:7b:0d:ec:dc:d3:fc:30:a8:7e:f4:78:3a:d2: 5e:e8:35:b0:a9:31:1d:b9:3a:70:45:6f:69:f1:ce: 0d:f6:07:98:65:7d:15:ca:e2:0f:8a:42:cd:3a:4c: cf:47:5e:bf:a6:da:3a:c3:23:c4:c6:15:eb:10:7a: be:d0:ca:57:a1:50:ce:f5:00:c4:dd:61:f8:11:d3: 89:45:5d:1a:f5:73:e4:36:dd:a9:55:2e:22:25:e4: 32:83:6a:40:1e:05:ca:ef:8a:ca:ab:f1:24:f5:f5: 73:36:15:af:2a:9c:68:66:8c:bf:47:26:25:e0:69: 30:98:ff:94:c4:c5:a8:bc:43:37:59:ca:b3:79:52: e2:47:05:4b:3e:c6:01:23:7f:99:69:41:56:88:3a: e0:9c:97:da:c5:c2:1a:19:fd:30:f6:c9:68:c5:11: ad:bf:ee:67:96:c3:9f:c8:45:a2:ca:92:99:35:a8: 53:bf:fe:a8:08:85:7a:6e:27:26:f4:d0:d5:b9:5d: e0:d5:e3:b3:85:fa:ca:2d:56:e4:54:cf:2b:82:6d: 55:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:28:0F:0B:50:0F:8D:5E:F1:DE:EC:CB:42:6B:50:A6:7F:2B:27:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/41d5735c-bf44-3d40-b55c-71b48a44901f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.crl X509v3 Authority Key Identifier: keyid:66:6F:7E:8C:15:5F:8C:94:34:06:21:1B:FB:BC:4D:C1:6C:D8:85:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer sbgp-ipAddrBlock: critical IPv4: 104.143.48.0/20 199.247.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:6d:0c:6a:98:61:2a:03:26:18:29:05:55:e7:a9:1a:aa:60: 66:53:1d:9b:0a:6b:c8:ef:ff:a0:56:ac:b6:48:01:63:ef:62: cf:62:09:3d:be:02:f2:9d:fd:cf:f1:68:f1:8e:ef:ae:f7:ed: 33:63:8b:42:b3:71:36:74:b3:bb:65:d5:00:a5:fe:38:eb:42: fd:2f:0c:e4:d5:ae:a9:56:83:d2:71:ee:e9:c1:09:f9:7d:1d: 69:9b:1e:9f:92:d9:70:46:4e:94:4e:95:0b:31:4e:62:72:22: e2:50:db:58:56:86:4a:ab:dc:55:7f:90:d7:94:81:ba:e5:e5: c9:77:63:72:6d:c6:8a:c8:73:f0:82:54:2a:47:6f:80:dd:0d: 22:cc:64:57:f7:cf:3e:14:5a:1d:f6:f9:67:34:b8:ba:b4:c5: f6:5b:23:91:b5:23:f7:d0:6b:bf:c4:8b:fd:37:3c:95:8d:e7: 6e:18:af:f3:83:cb:1e:f8:0c:5b:26:c9:98:b6:98:86:1c:d6: 2c:d0:37:87:5e:0b:27:36:49:d3:1a:fe:2f:12:9b:c8:37:3d: 18:ac:20:07:22:17:c2:63:03:0e:00:50:15:ef:56:dd:5a:9b: 4f:53:80:5a:b2:81:98:8b:7a:94:c9:23:d3:3d:72:58:34:9a: fb:bf:9f:fd -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWElAOUy1Q5VS6IU4aYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2MxYjA5NjQtYmQ5Yy00OTMxLWE1M2QtZTJhNDM0YmMy YWYwMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk ZmE4NWZmYWQtYTllMy00NTFjLThmYWYtMGM1MjcwNWM5MWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLOj+AFBFc3B3CvZGYHTpJ90WCJ2Lb1KVbhd 8jhB6XtJroIlwwuQRywYrvyBUnsN7NzT/DCofvR4OtJe6DWwqTEduTpwRW9p8c4N 9geYZX0VyuIPikLNOkzPR16/pto6wyPExhXrEHq+0MpXoVDO9QDE3WH4EdOJRV0a 9XPkNt2pVS4iJeQyg2pAHgXK74rKq/Ek9fVzNhWvKpxoZoy/RyYl4GkwmP+UxMWo vEM3WcqzeVLiRwVLPsYBI3+ZaUFWiDrgnJfaxcIaGf0w9sloxRGtv+5nlsOfyEWi ypKZNahTv/6oCIV6bicm9NDVuV3g1eOzhfrKLVbkVM8rgm1VAwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDUoDwtQD41e8d7sy0JrUKZ/KyfXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YzFi MDk2NC1iZDljLTQ5MzEtYTUzZC1lMmE0MzRiYzJhZjAvNDFkNTczNWMtYmY0NC0z ZDQwLWI1NWMtNzFiNDhhNDQ5MDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2MxYjA5NjQtYmQ5Yy00OTMxLWE1 M2QtZTJhNDM0YmMyYWYwLzdjMWIwOTY0LWJkOWMtNDkzMS1hNTNkLWUyYTQzNGJj MmFmMC5jcmwwHwYDVR0jBBgwFoAUZm9+jBVfjJQ0BiEb+7xNwWzYhYUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YzFiMDk2NC1iZDljLTQ5MzEtYTUzZC1lMmE0 MzRiYzJhZjAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEaI8wAwQD x/eQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFdtDGqYYSoDJhgpBVXnqRqqYGZTHZsKa8jv/6BWrLZIAWPv Ys9iCT2+AvKd/c/xaPGO76737TNji0KzcTZ0s7tl1QCl/jjrQv0vDOTVrqlWg9Jx 7unBCfl9HWmbHp+S2XBGTpROlQsxTmJyIuJQ21hWhkqr3FV/kNeUgbrl5cl3Y3Jt xorIc/CCVCpHb4DdDSLMZFf3zz4UWh32+Wc0uLq0xfZbI5G1I/fQa7/Ei/03PJWN 524Yr/ODyx74DFsmyZi2mIYc1izQN4deCyc2SdMa/i8Sm8g3PRisIAciF8JjAw4A UBXvVt1am09TgFqygZiLepTJI9M9clg0mvu/n/0= -----END CERTIFICATE-----Generated at Sat Apr 12 14:48:26 2025 by rpki-client