$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/a2dd4bca-e66a-376c-b4ff-789e9f0d2310.roa File: a2dd4bca-e66a-376c-b4ff-789e9f0d2310.roa (raw, json) Hash identifier: 4cJc61vVyFq+NcqBm16si94Yge2rG6K74cTtEc+bXG0= Subject key identifier: 8D:A7:5B:B6:94:41:E5:FB:97:C4:FE:6F:40:3E:19:82:F5:0F:8A:CC Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Certificate serial: 010D0C9F432858496CE45D3FC77991B37BBC0A80 Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/a2dd4bca-e66a-376c-b4ff-789e9f0d2310.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 26768 IP address blocks: 104.251.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:5d:3f:c7:79:91:b3:7b:bc:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=bc41ed0c-bb2c-44a6-8674-9552841b5973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8b:d1:24:f9:13:56:c8:c2:bb:b6:99:d1:d4: d5:22:47:71:10:1a:e5:38:03:5a:13:c7:68:56:bb: 9e:8d:01:86:1f:6f:a9:ab:9f:fb:21:d1:09:b9:8b: 58:9b:ce:1d:a3:3d:04:bd:a3:90:b6:19:93:dd:d9: 82:e6:64:76:92:8f:fd:c1:c1:e4:05:cf:3c:68:b8: 9b:49:4f:a5:3b:9f:64:73:c2:eb:98:95:a1:e2:81: 76:86:13:e5:44:8d:9e:2e:c1:22:9f:5b:d6:cd:f8: 4e:7c:d1:a2:bb:5b:4e:ba:3d:78:43:7c:32:a5:12: f0:df:01:52:4d:bb:ed:c4:6c:4c:ff:75:dc:1f:86: 1e:c3:b2:60:73:42:7b:36:47:e3:7d:d1:f3:da:89: 0d:72:c3:d0:cd:b9:00:aa:14:f7:fe:20:f5:25:c0: d8:72:fa:39:08:04:d2:2b:15:71:e3:70:22:a7:4c: e4:1a:e1:0e:fb:81:58:d8:e8:48:6b:4b:9e:79:4f: 6d:be:ca:75:4d:fe:d9:31:20:7b:1c:a8:6c:a4:62: bd:4a:4c:5d:f8:ec:6c:73:04:68:cd:d0:80:08:ba: 0a:b3:62:6d:14:9e:da:c2:51:2f:c3:30:8c:8f:58: a2:0b:04:a8:3a:c9:c1:99:4d:92:d3:66:f3:30:19: 24:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A7:5B:B6:94:41:E5:FB:97:C4:FE:6F:40:3E:19:82:F5:0F:8A:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/a2dd4bca-e66a-376c-b4ff-789e9f0d2310.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl X509v3 Authority Key Identifier: keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer sbgp-ipAddrBlock: critical IPv4: 104.251.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:22:e1:51:7b:da:76:76:0c:b7:4e:56:f9:de:25:89:40:ee: 45:8c:54:7d:bb:05:e6:f0:b8:42:35:58:b1:15:21:a0:48:1c: d0:70:8d:eb:c9:4d:8f:c4:82:cc:02:57:31:35:b4:1c:0e:4f: 49:d0:17:c5:b1:4e:6f:bc:bb:3b:6e:22:2f:1a:c1:2a:9e:ec: b8:9b:50:36:c3:2f:99:cb:39:2b:df:7f:04:60:6c:61:6f:af: d9:9f:0b:97:b4:6c:3d:fd:39:66:24:2d:38:ce:f4:a4:f4:c6: d3:25:2b:ef:e0:c1:fd:83:10:4f:fe:67:9d:a7:f1:5f:04:8b: 45:c7:54:b9:9f:83:52:2f:43:1b:52:26:b4:b1:23:03:9b:f4: 63:81:62:d3:c2:6f:54:e4:85:f7:fc:c6:c5:9f:ce:f6:d2:f9: d2:29:ab:4a:e3:95:19:36:05:0c:4b:1c:c6:12:76:63:32:e9: 7f:47:8d:da:34:0c:17:37:b2:4e:c6:38:c3:8f:ca:97:c8:48: c9:5a:df:46:5c:43:b8:d4:4c:e3:ba:f7:d0:3d:e3:0f:05:89: a5:61:f3:b8:04:15:4b:e2:99:c0:e4:36:94:bd:c7:4f:03:be: bb:9d:25:6e:b9:8c:f1:4d:a8:d2:7d:45:06:5a:3f:b1:3f:4f: a4:59:55:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5F0/x3mRs3u8CoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm MDYzMB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk YmM0MWVkMGMtYmIyYy00NGE2LTg2NzQtOTU1Mjg0MWI1OTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnovRJPkTVsjCu7aZ0dTVIkdxEBrlOANaE8do VruejQGGH2+pq5/7IdEJuYtYm84doz0EvaOQthmT3dmC5mR2ko/9wcHkBc88aLib SU+lO59kc8LrmJWh4oF2hhPlRI2eLsEin1vWzfhOfNGiu1tOuj14Q3wypRLw3wFS TbvtxGxM/3XcH4Yew7Jgc0J7NkfjfdHz2okNcsPQzbkAqhT3/iD1JcDYcvo5CATS KxVx43Aip0zkGuEO+4FY2OhIa0ueeU9tvsp1Tf7ZMSB7HKhspGK9Skxd+OxscwRo zdCACLoKs2JtFJ7awlEvwzCMj1iiCwSoOsnBmU2S02bzMBkkTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2nW7aUQeX7l8T+b0A+GYL1D4rMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvYTJkZDRiY2EtZTY2YS0z NzZjLWI0ZmYtNzg5ZTlmMGQyMzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1 YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4 NzY5MmYwNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPvqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4i4VF72nZ2DLdOVvneJYlA7kWMVH27BebwuEI1WLEVIaBIHNBwjevJ TY/EgswCVzE1tBwOT0nQF8WxTm+8uztuIi8awSqe7LibUDbDL5nLOSvffwRgbGFv r9mfC5e0bD39OWYkLTjO9KT0xtMlK+/gwf2DEE/+Z52n8V8Ei0XHVLmfg1IvQxtS JrSxIwOb9GOBYtPCb1Tkhff8xsWfzvbS+dIpq0rjlRk2BQxLHMYSdmMy6X9Hjdo0 DBc3sk7GOMOPypfISMla30ZcQ7jUTOO699A94w8FiaVh87gEFUvimcDkNpS9x08D vrudJW65jPFNqNJ9RQZaP7E/T6RZVd0= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:19 2025 by rpki-client