$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/6987ceea-b04a-3ae2-a40a-d28cb3c0c962.roa File: 6987ceea-b04a-3ae2-a40a-d28cb3c0c962.roa (raw, json) Hash identifier: 3zQTBEkg9YZ0PIACsyniWovr0B1h3XpzpPGGs/e/Yz8= Subject key identifier: 0D:97:F9:A9:08:9C:49:4D:C5:7D:83:70:69:04:AA:52:0D:3D:B3:97 Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Certificate serial: 010D0C9F432858492CB21D9ADDD1B96759BE7750 Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/6987ceea-b04a-3ae2-a40a-d28cb3c0c962.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 395886 IP address blocks: 104.143.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b2:1d:9a:dd:d1:b9:67:59:be:77:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=4033d12d-1651-484e-98cf-baed2997aa8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:21:63:45:e0:81:c5:fb:a1:f4:d1:ee:6b:af: 91:21:04:55:6f:23:97:f9:9b:1e:2a:14:59:6b:f6: 36:34:71:17:00:84:48:04:6c:c8:fb:86:b1:ff:ef: a4:69:46:d1:c5:6d:ae:83:5f:33:05:cf:18:92:cf: 10:a4:3e:a4:10:33:33:b5:24:5c:dc:35:e7:c6:28: 75:7a:dc:b1:79:ca:5b:52:e4:f5:72:32:a4:ae:57: c1:13:ad:ae:97:09:55:e6:c1:f7:94:2c:4d:75:83: 41:7c:21:d5:f8:61:75:da:16:59:f0:65:c0:a5:96: 72:59:37:09:37:cb:c5:77:34:fa:f7:78:c2:1a:38: e7:51:d6:a2:aa:18:dc:dd:ae:6b:9b:2b:4a:da:a4: ed:2a:5d:cf:5b:1e:b0:d2:f4:39:d5:0a:7f:4f:c4: 66:e1:be:62:20:59:3b:5e:d5:68:99:67:5f:c6:98: 26:74:28:e4:e7:f3:32:71:90:a3:62:a2:78:18:e6: 91:c8:52:bf:92:71:af:28:16:fb:ba:c0:f7:0e:f0: cb:98:71:f3:ef:23:5c:4b:16:7c:9d:68:ce:87:e3: a4:ad:52:be:50:2e:c5:51:b7:aa:a2:d2:ac:15:8b: d3:4b:30:a8:82:b6:49:a8:59:6f:27:21:1d:34:ac: 54:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:97:F9:A9:08:9C:49:4D:C5:7D:83:70:69:04:AA:52:0D:3D:B3:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/6987ceea-b04a-3ae2-a40a-d28cb3c0c962.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl X509v3 Authority Key Identifier: keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer sbgp-ipAddrBlock: critical IPv4: 104.143.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:f3:38:bf:29:b7:1f:d2:e2:0a:bd:44:84:ac:3a:9f:b2:29: 10:4c:d1:7a:6d:2a:48:28:14:cd:c5:0d:d8:e8:ae:00:aa:4a: 8d:da:65:49:77:03:35:c3:4d:7f:73:fa:5a:da:0f:10:d6:47: 83:94:da:65:3d:0a:b8:f4:64:e2:66:02:bc:57:b6:dc:e3:b1: 5a:cf:00:97:31:1b:02:71:c7:95:dc:cf:2b:c8:3d:b5:8c:3e: 4d:99:c7:ea:05:fa:51:9a:66:9d:dd:e3:31:9c:25:c8:b7:7d: ed:0a:76:ec:7a:a4:97:ba:29:4f:b0:99:80:90:81:fc:f4:60: c6:ad:1e:65:ed:33:e9:1c:09:5c:1f:c8:2e:5a:74:7b:53:6c: 1c:9d:db:ac:d4:a1:c8:38:3a:f5:b7:5e:da:12:d1:8c:23:7c: dd:61:4c:76:61:39:55:91:32:30:17:51:78:bc:f8:d0:2b:1c: 08:18:d0:2a:1e:12:be:b4:0c:8b:45:a0:7f:29:1d:79:b9:5b: 70:d1:00:c3:d5:88:36:1c:42:49:ce:57:84:d0:93:20:ef:c2: e4:23:ee:bb:8f:33:70:3a:78:1f:51:95:30:48:1c:7e:b6:43: 89:86:94:f6:92:75:b1:dc:1c:f1:d7:52:af:9a:bb:a7:e1:03: 42:5e:fd:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssh2a3dG5Z1m+d1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm MDYzMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NDAzM2QxMmQtMTY1MS00ODRlLTk4Y2YtYmFlZDI5OTdhYThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iFjReCBxfuh9NHua6+RIQRVbyOX+ZseKhRZ a/Y2NHEXAIRIBGzI+4ax/++kaUbRxW2ug18zBc8Yks8QpD6kEDMztSRc3DXnxih1 etyxecpbUuT1cjKkrlfBE62ulwlV5sH3lCxNdYNBfCHV+GF12hZZ8GXApZZyWTcJ N8vFdzT693jCGjjnUdaiqhjc3a5rmytK2qTtKl3PWx6w0vQ51Qp/T8Rm4b5iIFk7 XtVomWdfxpgmdCjk5/MycZCjYqJ4GOaRyFK/knGvKBb7usD3DvDLmHHz7yNcSxZ8 nWjOh+OkrVK+UC7FUbeqotKsFYvTSzCogrZJqFlvJyEdNKxUVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2X+akInElNxX2DcGkEqlINPbOXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvNjk4N2NlZWEtYjA0YS0z YWUyLWE0MGEtZDI4Y2IzYzBjOTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1 YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4 NzY5MmYwNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaI8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTzOL8ptx/S4gq9RISsOp+yKRBM0XptKkgoFM3FDdjorgCqSo3aZUl3 AzXDTX9z+lraDxDWR4OU2mU9Crj0ZOJmArxXttzjsVrPAJcxGwJxx5XczyvIPbWM Pk2Zx+oF+lGaZp3d4zGcJci3fe0Kdux6pJe6KU+wmYCQgfz0YMatHmXtM+kcCVwf yC5adHtTbByd26zUocg4OvW3XtoS0YwjfN1hTHZhOVWRMjAXUXi8+NArHAgY0Coe Er60DItFoH8pHXm5W3DRAMPViDYcQknOV4TQkyDvwuQj7ruPM3A6eB9RlTBIHH62 Q4mGlPaSdbHcHPHXUq+au6fhA0Je/e0= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:37 2025 by rpki-client