$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/f2ad73f3-0f80-3cc2-9399-881a9101068b.roa File: f2ad73f3-0f80-3cc2-9399-881a9101068b.roa (raw, json) Hash identifier: HwTqDercRb3EEwdz4/Evn/wI1quYtvvagTwIKl8ByOA= Subject key identifier: E9:92:A1:51:6C:C4:6F:5E:53:BA:71:EB:2C:31:46:78:EE:CD:D5:3E Certificate issuer: /CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1 Certificate serial: 010D0C9F43285849244E8434CC84429110D14C80 Authority key identifier: 11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/f2ad73f3-0f80-3cc2-9399-881a9101068b.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 14860 IP address blocks: 104.255.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:84:34:cc:84:42:91:10:d1:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=e996d39b-d633-470b-ab70-5f3ead519b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fd:13:eb:cf:e0:ba:bd:43:09:0f:19:69:09: 96:05:cb:1c:7a:34:e5:9d:c5:e6:e5:e4:4a:76:f0: b1:63:b2:66:8f:a4:88:9d:9e:c5:8d:ac:83:be:67: b3:7c:05:d9:e0:d5:68:ff:75:ed:9b:fe:e6:71:5e: 0b:07:d6:b4:e5:7f:61:dc:51:28:67:c6:b7:e4:36: 7a:32:2d:72:f7:64:91:94:a3:d2:e7:f8:b1:9c:69: 7a:2e:51:99:e0:22:c6:bd:7f:21:42:15:08:8a:e8: ba:15:0a:99:f5:dd:f5:4c:31:f5:70:f5:47:06:1e: 0b:09:7b:da:22:14:49:94:dd:68:0a:6d:5d:e9:8f: 23:f7:75:f2:ef:e3:ac:45:f9:1c:28:55:45:92:ac: e9:79:65:27:b0:39:4d:a7:95:f4:0e:78:6c:3d:65: d5:eb:d7:c5:a8:c7:76:1a:d6:61:63:03:e4:aa:a1: 2a:65:22:c4:94:dd:b6:3c:d7:9e:5b:10:e6:7b:03: 51:fb:0f:73:7b:fa:04:e3:7e:9d:19:70:1d:b1:15: 2e:a0:bc:5c:ff:ad:d5:8e:7b:d0:c7:1f:cf:52:54: b6:5a:6e:f0:a0:c0:ef:72:ff:39:4a:a1:43:3a:ea: 09:ee:04:63:be:a3:04:71:37:69:fc:26:1e:e4:3d: 7a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:92:A1:51:6C:C4:6F:5E:53:BA:71:EB:2C:31:46:78:EE:CD:D5:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/f2ad73f3-0f80-3cc2-9399-881a9101068b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl X509v3 Authority Key Identifier: keyid:11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer sbgp-ipAddrBlock: critical IPv4: 104.255.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:fb:c7:cc:c0:7f:08:96:ba:70:6a:48:f5:03:bb:cc:a8:ef: 14:58:1f:c8:51:35:82:d6:1e:fe:24:72:98:39:51:9a:33:eb: 4c:76:8c:3e:d8:84:36:27:3d:d0:26:c8:4c:98:1b:0e:ee:8e: b1:25:ee:b5:d6:53:a6:7b:d2:2e:58:aa:12:65:ed:41:fc:4f: b3:e9:cc:f5:87:36:45:d9:98:ad:65:73:9b:44:23:46:9b:62: e1:9f:d9:1d:6f:d8:92:c6:25:ed:f4:d6:58:07:f8:eb:ce:2a: c5:79:92:e7:58:29:1a:57:7b:bc:34:3c:9e:70:b3:6c:cd:f0: ef:35:c0:b1:4a:b4:34:28:87:a8:35:34:59:96:e3:6e:03:ca: 20:7d:56:c5:6c:85:d9:d2:88:ad:69:46:b6:ea:c3:ac:1e:93: 54:24:80:3e:28:0f:70:9f:87:c8:ab:17:ad:45:3f:ed:c8:b8: 57:58:c3:bb:cc:59:41:78:55:db:a9:02:87:56:5f:3e:09:a1: 36:8a:29:85:c2:eb:48:3c:c8:dd:73:c9:12:f7:01:28:29:9f: ba:7f:38:6c:8a:9f:0b:20:2c:13:3b:3d:be:84:17:89:a0:1d: 34:fc:f5:4d:5f:13:10:ea:cc:68:13:1d:b8:f3:cf:43:42:c2: 54:e7:c6:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkToQ0zIRCkRDRTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxMGZlNzUtOTgxZi00YTNjLWI3N2EtMjhlMjM1YmVk OWYxMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk ZTk5NmQzOWItZDYzMy00NzBiLWFiNzAtNWYzZWFkNTE5YjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/0T68/gur1DCQ8ZaQmWBcscejTlncXm5eRK dvCxY7Jmj6SInZ7FjayDvmezfAXZ4NVo/3Xtm/7mcV4LB9a05X9h3FEoZ8a35DZ6 Mi1y92SRlKPS5/ixnGl6LlGZ4CLGvX8hQhUIiui6FQqZ9d31TDH1cPVHBh4LCXva IhRJlN1oCm1d6Y8j93Xy7+OsRfkcKFVFkqzpeWUnsDlNp5X0DnhsPWXV69fFqMd2 GtZhYwPkqqEqZSLElN22PNeeWxDmewNR+w9ze/oE436dGXAdsRUuoLxc/63VjnvQ xx/PUlS2Wm7woMDvcv85SqFDOuoJ7gRjvqMEcTdp/CYe5D16wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmSoVFsxG9eU7px6ywxRnjuzdU+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjEw ZmU3NS05ODFmLTRhM2MtYjc3YS0yOGUyMzViZWQ5ZjEvZjJhZDczZjMtMGY4MC0z Y2MyLTkzOTktODgxYTkxMDEwNjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYxMGZlNzUtOTgxZi00YTNjLWI3 N2EtMjhlMjM1YmVkOWYxL2JmMTBmZTc1LTk4MWYtNGEzYy1iNzdhLTI4ZTIzNWJl ZDlmMS5jcmwwHwYDVR0jBBgwFoAUEV4BnEx9mLt1kmRbjdsLOL4Rd7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjEwZmU3NS05ODFmLTRhM2MtYjc3YS0yOGUy MzViZWQ5ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaP9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEj7x8zAfwiWunBqSPUDu8yo7xRYH8hRNYLWHv4kcpg5UZoz60x2jD7Y hDYnPdAmyEyYGw7ujrEl7rXWU6Z70i5YqhJl7UH8T7PpzPWHNkXZmK1lc5tEI0ab YuGf2R1v2JLGJe301lgH+OvOKsV5kudYKRpXe7w0PJ5ws2zN8O81wLFKtDQoh6g1 NFmW424DyiB9VsVshdnSiK1pRrbqw6wek1QkgD4oD3Cfh8irF61FP+3IuFdYw7vM WUF4VdupAodWXz4JoTaKKYXC60g8yN1zyRL3ASgpn7p/OGyKnwsgLBM7Pb6EF4mg HTT89U1fExDqzGgTHbjzz0NCwlTnxtw= -----END CERTIFICATE-----Generated at Sun Apr 6 17:04:32 2025 by rpki-client