$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/a2820430-cffa-3a28-865a-d2bff6b67e7e.roa File: a2820430-cffa-3a28-865a-d2bff6b67e7e.roa (raw, json) Hash identifier: 6I6A2B+zMI4AkNrWaqB6A4r2eOR6jm1+TBKf4CjHQog= Subject key identifier: 0B:3F:7D:80:D0:DE:20:96:71:AE:1A:94:72:C3:B8:74:D2:AB:93:85 Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Certificate serial: 010D0C9F4328584953C44DE1D924100474B51280 Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/a2820430-cffa-3a28-865a-d2bff6b67e7e.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 140042 IP address blocks: 104.251.224.0/20 maxlen: 24 172.81.102.0/23 maxlen: 24 172.81.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:4d:e1:d9:24:10:04:74:b5:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=7d52aad1-d665-4dad-8189-5aa8c092cfb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ee:d3:da:42:26:05:73:0a:de:ea:c6:25:33: 52:8c:d9:f0:cf:6e:99:bb:87:0c:3d:21:45:d7:ef: 13:1c:8e:31:28:2e:fa:22:d3:da:77:e7:63:5b:cb: 6c:cf:d3:86:3f:4e:c6:f7:f4:f3:9b:50:a7:b7:ab: db:1f:4c:0a:60:06:68:fd:fe:67:84:d3:a7:11:15: 7a:23:42:39:56:5d:6d:90:bc:cf:d7:f0:18:0b:54: 7c:ab:a4:bc:3e:cd:eb:b4:81:01:50:9e:3b:52:dc: 9e:ff:60:d5:b5:0a:38:ae:01:df:14:c9:ee:95:23: 87:60:27:ad:72:c9:2d:c4:d1:2b:90:bf:3d:a0:a3: 5c:a4:0c:2c:5f:c4:0e:d2:f9:cc:c4:29:05:a2:03: 88:41:64:20:70:f3:5a:87:cc:31:2d:5f:9b:7f:54: 28:91:00:03:c9:2f:fa:44:10:15:df:45:fe:4e:dc: 1e:34:52:55:2f:26:ca:a1:e1:04:d9:d7:f9:18:b9: a9:db:94:f8:e8:0c:db:87:27:cb:eb:e6:df:0b:14: 2c:8c:63:ff:5f:dd:1e:27:b2:52:03:34:73:0e:9b: dd:69:3c:f9:7d:ce:00:20:7e:dc:f1:48:9a:4f:f0: c6:e5:85:f9:b9:98:1e:fe:53:9c:57:1c:91:e6:b1: 55:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:3F:7D:80:D0:DE:20:96:71:AE:1A:94:72:C3:B8:74:D2:AB:93:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/a2820430-cffa-3a28-865a-d2bff6b67e7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl X509v3 Authority Key Identifier: keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer sbgp-ipAddrBlock: critical IPv4: 104.251.224.0/20 172.81.102.0-172.81.111.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:28:2d:87:96:f3:61:af:a1:dc:ec:7b:7f:39:e6:bd:50:83: 95:3d:6c:68:27:f5:2a:d9:82:8a:94:ad:13:d9:9d:2e:b7:03: bf:a5:e1:e7:b6:91:b1:ad:af:f1:f1:38:7e:0a:1a:49:d2:b4: 53:44:d1:10:d5:2a:b8:3f:f3:f2:e5:98:c4:6d:e3:ac:51:06: 35:dc:61:c5:b4:b1:9e:b9:e1:de:3d:12:c5:18:19:ce:58:f9: 2d:8e:52:c3:71:e6:df:73:b1:d2:f4:aa:11:0e:3d:ed:19:14: 45:06:d0:52:5b:b1:3c:49:10:52:32:1d:61:98:39:bb:c7:94: ae:31:97:3a:34:62:3e:83:7c:76:0a:26:b7:04:b8:c9:79:98: 28:79:49:26:13:25:56:da:21:39:9a:33:ae:13:5c:87:b4:9c: 2f:01:01:e5:02:3d:32:32:e5:8c:85:8d:31:aa:12:6f:4e:85: 3a:d4:52:5b:12:f7:ad:c8:b0:85:cf:df:64:8f:ba:d0:f3:8c: b7:51:0c:07:ee:c8:2f:0f:fc:0f:6e:ec:ab:98:95:dc:73:e2: fb:c2:2a:7a:84:61:ce:d7:ff:d6:db:7e:3b:e8:4c:fa:2f:2c: 12:66:2d:d5:7a:96:d3:3f:c0:04:57:5f:ce:d4:86:36:0b:12: cb:23:6a:b5 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWElTxE3h2SQQBHS1EoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm MDYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk N2Q1MmFhZDEtZDY2NS00ZGFkLTgxODktNWFhOGMwOTJjZmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje7T2kImBXMK3urGJTNSjNnwz26Zu4cMPSFF 1+8THI4xKC76ItPad+djW8tsz9OGP07G9/Tzm1Cnt6vbH0wKYAZo/f5nhNOnERV6 I0I5Vl1tkLzP1/AYC1R8q6S8Ps3rtIEBUJ47Utye/2DVtQo4rgHfFMnulSOHYCet csktxNErkL89oKNcpAwsX8QO0vnMxCkFogOIQWQgcPNah8wxLV+bf1QokQADyS/6 RBAV30X+TtweNFJVLybKoeEE2df5GLmp25T46AzbhyfL6+bfCxQsjGP/X90eJ7JS AzRzDpvdaTz5fc4AIH7c8UiaT/DG5YX5uZge/lOcVxyR5rFVWQIDAQABo4IDYzCC A18wHQYDVR0OBBYEFAs/fYDQ3iCWca4alHLDuHTSq5OFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvYTI4MjA0MzAtY2ZmYS0z YTI4LTg2NWEtZDJiZmY2YjY3ZTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1 YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4 NzY5MmYwNjMuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQEaPvgMAwD BAGsUWYDBASsUWAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAWygth5bzYa+h3Ox7fznmvVCDlT1saCf1KtmC ipStE9mdLrcDv6Xh57aRsa2v8fE4fgoaSdK0U0TRENUquD/z8uWYxG3jrFEGNdxh xbSxnrnh3j0SxRgZzlj5LY5Sw3Hm33Ox0vSqEQ497RkURQbQUluxPEkQUjIdYZg5 u8eUrjGXOjRiPoN8dgomtwS4yXmYKHlJJhMlVtohOZozrhNch7ScLwEB5QI9MjLl jIWNMaoSb06FOtRSWxL3rciwhc/fZI+60POMt1EMB+7ILw/8D27sq5iV3HPi+8Iq eoRhztf/1tt+O+hM+i8sEmYt1XqW0z/ABFdfztSGNgsSyyNqtQ== -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:18 2025 by rpki-client