$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/eaf7e485-7ab8-383a-af6e-1d1d48e46da5.roa File: eaf7e485-7ab8-383a-af6e-1d1d48e46da5.roa (raw, json) Hash identifier: ZJCJgZLVMjc6w/8cD/iIg5+I4YEPVLf5Vm+gcOYLZak= Subject key identifier: C1:71:53:75:DD:A1:2A:22:46:A0:86:FB:8E:27:D9:FC:84:A1:A8:15 Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F43285848C6E633A620982E4079FAA500 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/eaf7e485-7ab8-383a-af6e-1d1d48e46da5.roa Signing time: Wed 05 Feb 2025 02:00:39 +0000 ROA not before: Wed 05 Feb 2025 02:00:39 +0000 ROA not after: Tue 06 May 2025 01:00:39 +0000 asID: 21743 IP address blocks: 104.247.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c6:e6:33:a6:20:98:2e:40:79:fa:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Feb 5 02:00:39 2025 GMT Not After : May 6 01:00:39 2025 GMT Subject: CN=2efd7049-e615-46c0-9b70-9dd611b9ed56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9f:01:1a:2c:fc:89:6d:bd:23:bb:29:ea:e1: a7:cf:a1:cc:1c:16:00:e8:fa:31:a1:b6:d8:0c:7c: 9e:99:23:84:58:e8:d2:5b:55:af:b8:91:67:1e:5a: ea:39:bb:55:e7:fd:ff:26:44:ac:56:07:aa:32:64: 87:26:36:a6:0e:1e:7d:55:87:7c:ea:3d:c9:07:60: b0:8a:24:24:e6:ac:61:2b:65:2c:15:9e:50:71:24: e6:93:f7:7e:d2:45:df:2e:21:aa:36:9c:db:40:f2: 56:14:0b:e1:63:2b:ac:5c:ed:ac:98:96:73:54:92: c3:29:a4:11:01:41:dd:a3:1a:6c:7c:b7:d8:d4:a1: e1:db:b5:ca:13:e0:8f:d3:ab:e7:2b:26:23:87:dd: e0:c2:51:66:c5:18:6a:83:9d:be:98:82:78:4b:bb: 62:3f:68:aa:93:f4:43:36:e2:50:69:0e:fd:de:a9: 9e:fd:e3:1b:aa:38:5a:d5:84:1d:e4:03:16:62:f7: e7:cc:3a:10:1d:db:9d:64:d7:a6:03:31:b9:38:63: cb:98:b2:be:7e:0e:8f:21:21:87:b0:16:d5:d0:0d: 5a:01:e1:a5:e6:fb:e8:1d:57:0b:dc:f4:d5:36:84: 57:63:4e:4e:30:79:8c:80:7d:06:4d:f8:0c:a0:bf: fb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:71:53:75:DD:A1:2A:22:46:A0:86:FB:8E:27:D9:FC:84:A1:A8:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/eaf7e485-7ab8-383a-af6e-1d1d48e46da5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 104.247.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:72:1b:b2:f9:f5:de:0e:ec:54:3d:fb:64:02:08:50:4f:7f: f2:5e:dc:3d:bd:b9:bf:fc:b2:ee:0e:3b:bf:37:d5:0e:73:b5: 3d:b5:e1:03:06:9a:ab:85:41:32:32:da:8e:a7:f7:e7:f4:52: 7c:62:36:af:86:7a:d0:0e:a7:db:92:ae:64:5b:43:ae:e5:56: 2e:8a:4c:a8:96:8a:bb:a5:b2:0e:9e:d6:8b:7e:c1:b1:1c:c7: fc:29:05:4b:02:a5:0e:0b:6f:52:9c:72:ac:ac:c5:b8:c8:86: bf:b5:60:8d:33:f0:93:e5:e4:a3:47:aa:2b:6d:72:f9:f1:32: ef:c2:63:7c:f1:79:ba:28:3c:b8:75:a2:95:6e:52:d0:9d:ed: 02:64:73:de:c3:56:36:7e:43:0d:29:b5:86:46:36:6f:10:aa: 47:b5:5b:6f:53:67:e9:4f:f1:96:f1:5d:f5:eb:0b:26:28:12: 6e:82:34:a7:36:4b:d7:ae:1f:d9:de:0e:d6:a2:59:36:81:d8: 24:c5:a6:b5:53:4d:c0:80:9f:fd:84:6d:a2:22:cb:ef:54:31: f0:26:46:0d:49:97:15:9c:24:17:79:91:ed:5e:b3:f1:ce:51: d5:55:3f:83:61:9b:d9:e6:99:bf:1f:8d:fd:ba:9a:5b:a2:a6: 73:f7:12:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjG5jOmIJguQHn6pQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI1MDIwNTAyMDAzOVoXDTI1MDUwNjAxMDAzOVowLzEtMCsGA1UEAxMk MmVmZDcwNDktZTYxNS00NmMwLTliNzAtOWRkNjExYjllZDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZ8BGiz8iW29I7sp6uGnz6HMHBYA6PoxobbY DHyemSOEWOjSW1WvuJFnHlrqObtV5/3/JkSsVgeqMmSHJjamDh59VYd86j3JB2Cw iiQk5qxhK2UsFZ5QcSTmk/d+0kXfLiGqNpzbQPJWFAvhYyusXO2smJZzVJLDKaQR AUHdoxpsfLfY1KHh27XKE+CP06vnKyYjh93gwlFmxRhqg52+mIJ4S7tiP2iqk/RD NuJQaQ793qme/eMbqjha1YQd5AMWYvfnzDoQHdudZNemAzG5OGPLmLK+fg6PISGH sBbV0A1aAeGl5vvoHVcL3PTVNoRXY05OMHmMgH0GTfgMoL/7GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFxU3XdoSoiRqCG+44n2fyEoagVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvZWFmN2U0ODUtN2FiOC0z ODNhLWFmNmUtMWQxZDQ4ZTQ2ZGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPd5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtyG7L59d4O7FQ9+2QCCFBPf/Je3D29ub/8su4OO7831Q5ztT214QMG mquFQTIy2o6n9+f0UnxiNq+GetAOp9uSrmRbQ67lVi6KTKiWirulsg6e1ot+wbEc x/wpBUsCpQ4Lb1KccqysxbjIhr+1YI0z8JPl5KNHqittcvnxMu/CY3zxebooPLh1 opVuUtCd7QJkc97DVjZ+Qw0ptYZGNm8Qqke1W29TZ+lP8ZbxXfXrCyYoEm6CNKc2 S9euH9neDtaiWTaB2CTFprVTTcCAn/2EbaIiy+9UMfAmRg1JlxWcJBd5ke1es/HO UdVVP4Nhm9nmmb8fjf26mluipnP3Els= -----END CERTIFICATE-----Generated at Sun Feb 16 20:32:42 2025 by rpki-client