$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/372b639d-5c46-306f-9666-b8d03b1e82dc.roa File: 372b639d-5c46-306f-9666-b8d03b1e82dc.roa (raw, json) Hash identifier: Zcu2NmYr1QnMUaSJ4BjIEnu6E3nM16EjB9NoE+E5idI= Subject key identifier: 08:3A:63:01:BE:86:BB:8B:81:34:9D:BF:74:0D:D2:AB:9C:18:84:2C Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584953C44D8C2D37C38C4ABBEA40 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/372b639d-5c46-306f-9666-b8d03b1e82dc.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 11290 IP address blocks: 104.244.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:4d:8c:2d:37:c3:8c:4a:bb:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=1731930a-ed02-4aee-af1f-9367ae9bfb6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f8:5b:f8:bc:58:86:be:dd:56:f0:e1:89:27: 8d:d9:99:62:61:5d:d5:01:a0:fc:e4:0c:6c:d3:e5: 33:45:70:55:44:7f:b1:7e:af:19:c7:e9:23:ea:3c: 78:c9:70:58:f3:ab:35:85:d3:20:df:5f:f3:e3:e7: f9:49:ea:16:28:4a:f7:88:41:a4:7e:89:10:d9:7f: bf:38:99:be:f4:d9:67:60:0f:10:68:d9:03:9e:01: 95:82:5f:13:d7:32:42:c9:0f:87:c4:40:17:0c:40: 46:b9:15:a2:23:ce:3b:27:9a:52:a8:0e:ae:cc:da: 17:db:46:52:b6:ff:f0:42:d0:91:39:61:bc:80:2b: 38:2e:7e:e1:75:c7:6a:91:08:4d:16:bc:70:19:c5: 12:37:30:ca:17:a0:86:7e:77:f6:6a:a9:db:d0:36: 65:35:9a:00:c7:6d:38:f9:0f:6b:7c:ab:0a:0e:8a: c3:01:f7:c4:9b:12:19:09:38:02:ed:74:ea:0e:fe: d3:a8:ca:47:f0:50:28:77:38:89:f1:63:6a:b3:87: 02:d8:ef:b0:2a:eb:a2:9a:64:cc:ff:cb:14:5e:ec: 53:89:1e:d1:9b:5c:3e:12:5d:94:1a:79:bd:8b:21: cc:c0:73:9c:bf:08:8d:52:f0:4b:07:e7:ec:5f:41: c3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:3A:63:01:BE:86:BB:8B:81:34:9D:BF:74:0D:D2:AB:9C:18:84:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/372b639d-5c46-306f-9666-b8d03b1e82dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 104.244.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:0e:25:f6:42:c5:89:46:62:5e:21:19:7e:77:76:86:92:04: e1:fa:bf:ff:88:74:4f:bd:3d:27:db:cc:84:e4:93:0e:40:4d: b6:53:12:72:a0:06:c0:38:4d:ed:cb:28:7f:af:52:5e:54:c5: 72:44:56:94:d3:56:b8:c8:d7:77:2d:42:3b:14:3f:58:ee:2a: 57:20:63:76:b3:c6:14:19:be:d6:a6:9a:e1:dc:89:8d:98:90: 6e:6c:d1:78:f2:13:dd:f9:a9:70:19:21:c3:9d:8a:42:d7:38: 17:62:c5:0e:05:fd:13:72:5c:c7:7e:a9:6f:b3:4d:ac:7c:0a: eb:a3:98:0e:7e:ca:fa:6c:30:18:42:c7:27:81:cd:18:30:9b: 59:5d:a8:1d:97:77:da:a7:34:6c:08:26:50:15:fb:14:42:70: b1:92:32:e6:a6:7b:0e:f6:c7:b0:09:82:95:73:73:9c:72:6c: 9b:05:b4:8c:ba:f1:d2:5a:50:03:84:df:0e:aa:51:fc:ed:9a: d4:b2:e2:5a:ea:0a:1e:2c:5d:7f:b7:b8:3b:d2:1c:ba:75:a5: 67:80:0b:7f:fb:62:7d:ee:cc:4a:a1:78:bc:fc:40:97:b1:7e: 21:a3:d0:bf:2a:17:d9:0c:22:a7:3b:83:c6:2b:ce:30:a1:e0: 66:95:7b:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxE2MLTfDjEq76kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk MTczMTkzMGEtZWQwMi00YWVlLWFmMWYtOTM2N2FlOWJmYjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPhb+LxYhr7dVvDhiSeN2ZliYV3VAaD85Axs 0+UzRXBVRH+xfq8Zx+kj6jx4yXBY86s1hdMg31/z4+f5SeoWKEr3iEGkfokQ2X+/ OJm+9NlnYA8QaNkDngGVgl8T1zJCyQ+HxEAXDEBGuRWiI847J5pSqA6uzNoX20ZS tv/wQtCROWG8gCs4Ln7hdcdqkQhNFrxwGcUSNzDKF6CGfnf2aqnb0DZlNZoAx204 +Q9rfKsKDorDAffEmxIZCTgC7XTqDv7TqMpH8FAodziJ8WNqs4cC2O+wKuuimmTM /8sUXuxTiR7Rm1w+El2UGnm9iyHMwHOcvwiNUvBLB+fsX0HDEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAg6YwG+hruLgTSdv3QN0qucGIQsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMzcyYjYzOWQtNWM0Ni0z MDZmLTk2NjYtYjhkMDNiMWU4MmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPREMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUOJfZCxYlGYl4hGX53doaSBOH6v/+IdE+9PSfbzITkkw5ATbZTEnKg BsA4Te3LKH+vUl5UxXJEVpTTVrjI13ctQjsUP1juKlcgY3azxhQZvtammuHciY2Y kG5s0XjyE935qXAZIcOdikLXOBdixQ4F/RNyXMd+qW+zTax8CuujmA5+yvpsMBhC xyeBzRgwm1ldqB2Xd9qnNGwIJlAV+xRCcLGSMuamew72x7AJgpVzc5xybJsFtIy6 8dJaUAOE3w6qUfztmtSy4lrqCh4sXX+3uDvSHLp1pWeAC3/7Yn3uzEqheLz8QJex fiGj0L8qF9kMIqc7g8YrzjCh4GaVe+U= -----END CERTIFICATE-----Generated at Sun Apr 6 05:53:01 2025 by rpki-client