$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/0a18cb35-1200-3de5-91cf-435418df7565.roa File: 0a18cb35-1200-3de5-91cf-435418df7565.roa (raw, json) Hash identifier: Jvks7S7LgbmTz4bgyIzKg2LXEyWo3+Ysn8UhpShONBo= Subject key identifier: B6:4B:B3:88:74:4C:CD:D3:B0:A1:15:FF:8F:D7:B0:9E:98:0A:40:5B Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F432858492CAE99617081F1597059A980 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/0a18cb35-1200-3de5-91cf-435418df7565.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 21743 IP address blocks: 104.247.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:99:61:70:81:f1:59:70:59:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=f9b6c4a9-92c8-4716-9ff4-6646f370ae44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b0:c7:ed:f7:e9:cd:de:69:5e:a0:76:75:ae: 26:7a:81:e5:c7:be:54:23:3f:44:07:68:73:01:f6: 53:a1:a2:e1:e4:5c:9d:f2:8d:55:76:56:28:57:4b: f3:e4:b3:42:af:03:34:8c:56:87:77:32:7c:fc:fb: dd:92:c9:29:b9:a8:7d:ea:a6:24:2e:15:8a:ea:4b: 6d:f9:13:8a:a4:3b:c0:30:15:1b:60:39:1b:81:b6: 0f:9b:35:7a:c7:24:d4:72:50:2b:c5:c7:5e:87:a6: 52:40:2c:4d:f7:ab:f0:f2:d3:f6:d6:19:ab:cb:c9: 9b:81:3d:aa:df:d2:0e:c4:f9:83:77:05:9c:1c:e9: 63:aa:db:3d:e1:4d:72:8e:27:66:4f:21:be:6b:5e: ee:bb:55:1b:d8:44:18:0e:4e:ae:42:e3:90:18:d8: 87:78:b1:a7:45:f5:6b:91:e4:da:09:8b:19:05:a4: b8:0e:02:4e:9d:28:89:a2:b9:e6:9f:db:00:be:d0: 4b:00:de:05:9e:0a:83:01:f2:c4:e7:51:e0:8b:8b: aa:3e:28:f9:59:c5:24:ab:8f:5f:16:11:d6:8e:64: cb:d1:83:75:a6:73:27:f9:ae:1f:6f:b1:23:28:9b: 58:47:f0:10:0b:83:50:b4:4b:7b:ca:72:1b:fb:3e: 3b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:4B:B3:88:74:4C:CD:D3:B0:A1:15:FF:8F:D7:B0:9E:98:0A:40:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/0a18cb35-1200-3de5-91cf-435418df7565.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 104.247.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:62:cf:90:cc:da:75:49:aa:21:aa:01:43:dd:e0:3e:e3:97: c8:6d:e3:10:80:dd:4c:80:2e:f5:30:81:4d:55:95:1e:02:c4: d1:98:84:2e:50:b6:20:f6:0e:1e:29:b3:f4:e1:cb:21:08:59: 57:8b:e7:75:e1:cf:ac:6b:7f:7e:32:3b:ec:42:2f:25:35:73: b2:d4:6b:b3:c4:0b:a4:d1:aa:b2:90:1d:7c:bd:ca:fe:62:01: 84:a8:f8:38:65:d4:1d:b0:e0:f5:cd:a9:55:6e:9d:04:bb:03: 7f:30:b9:8d:ad:34:ff:20:73:cd:63:d9:1d:72:3b:18:e3:64: a2:4a:24:e4:5d:d3:94:15:4f:cb:af:32:ee:92:d8:49:3b:e0: 0a:17:23:31:d6:bc:0c:be:08:9d:59:1d:d5:c9:e3:2d:d1:09: 92:18:5f:38:b7:48:1f:e0:46:bc:90:58:3b:cb:f9:38:44:13: dd:b9:b5:9c:4c:3a:f8:e4:ea:e6:d8:2a:74:30:fd:60:7e:57: 1f:62:e9:0d:96:58:97:d9:38:cf:0c:26:c3:a2:fd:79:47:d4: 48:04:34:52:97:48:75:a5:77:aa:fc:eb:98:4c:e2:f6:3d:1b: 7b:c4:7c:76:6b:96:38:b5:f9:34:66:aa:c5:19:21:b1:ab:51: 8c:d7:5d:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrplhcIHxWXBZqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZjliNmM0YTktOTJjOC00NzE2LTlmZjQtNjY0NmYzNzBhZTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7DH7ffpzd5pXqB2da4meoHlx75UIz9EB2hz AfZToaLh5Fyd8o1VdlYoV0vz5LNCrwM0jFaHdzJ8/Pvdkskpuah96qYkLhWK6ktt +ROKpDvAMBUbYDkbgbYPmzV6xyTUclArxcdeh6ZSQCxN96vw8tP21hmry8mbgT2q 39IOxPmDdwWcHOljqts94U1yjidmTyG+a17uu1Ub2EQYDk6uQuOQGNiHeLGnRfVr keTaCYsZBaS4DgJOnSiJornmn9sAvtBLAN4FngqDAfLE51Hgi4uqPij5WcUkq49f FhHWjmTL0YN1pnMn+a4fb7EjKJtYR/AQC4NQtEt7ynIb+z47+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZLs4h0TM3TsKEV/4/XsJ6YCkBbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvMGExOGNiMzUtMTIwMC0z ZGU1LTkxY2YtNDM1NDE4ZGY3NTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPd7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdiz5DM2nVJqiGqAUPd4D7jl8ht4xCA3UyALvUwgU1VlR4CxNGYhC5Q tiD2Dh4ps/ThyyEIWVeL53Xhz6xrf34yO+xCLyU1c7LUa7PEC6TRqrKQHXy9yv5i AYSo+Dhl1B2w4PXNqVVunQS7A38wuY2tNP8gc81j2R1yOxjjZKJKJORd05QVT8uv Mu6S2Ek74AoXIzHWvAy+CJ1ZHdXJ4y3RCZIYXzi3SB/gRryQWDvL+ThEE925tZxM Ovjk6ubYKnQw/WB+Vx9i6Q2WWJfZOM8MJsOi/XlH1EgENFKXSHWld6r865hM4vY9 G3vEfHZrlji1+TRmqsUZIbGrUYzXXWg= -----END CERTIFICATE-----Generated at Sat Apr 5 11:22:57 2025 by rpki-client