$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/823cc639-6d73-3313-a883-bac72b1b40b0.roa File: 823cc639-6d73-3313-a883-bac72b1b40b0.roa (raw, json) Hash identifier: 7Oty1Soli0lJg5KCddXnn5AAtCXdmk1LZhP2ep/Nk8E= Subject key identifier: E7:01:08:0C:AC:A6:ED:39:0F:06:43:42:0C:CA:51:82:0D:F0:5B:30 Certificate issuer: /CN=80688222-2583-4dac-a7df-1d78925c7b53 Certificate serial: 010D0C9F432858491D71836BEF12B14115A9B580 Authority key identifier: F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/823cc639-6d73-3313-a883-bac72b1b40b0.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 1640 IP address blocks: 104.36.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:83:6b:ef:12:b1:41:15:a9:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80688222-2583-4dac-a7df-1d78925c7b53 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=17c0a262-4d2b-493c-8add-61f2c7e47bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a3:53:e2:c8:4e:3a:f6:31:a5:d9:14:38:cd: 22:ce:34:a7:c4:3c:5b:e3:d4:b0:5d:ea:00:6d:b7: 0c:c3:7d:8a:ee:df:0c:bf:27:7c:de:74:da:12:49: 32:d9:a5:63:f1:89:c6:7b:aa:c2:b5:d0:fb:87:9a: f3:cb:a3:28:aa:10:0d:29:5f:24:61:e5:42:3c:ae: 87:e0:3e:88:98:2b:b5:74:c3:53:a7:e7:5f:ba:17: e7:7f:ee:18:de:ad:11:70:bf:e9:a4:66:67:13:b9: 36:ce:40:0a:cc:c6:34:45:a3:fd:cc:3d:f7:14:70: 35:83:5b:21:ae:7d:5b:ac:a1:ad:f8:2c:86:b6:b0: 54:10:53:00:38:12:ae:20:79:c1:85:f1:be:47:2a: 6b:6f:88:a2:55:9d:6e:f2:b4:24:33:6b:82:70:88: b8:44:c2:08:ff:33:e6:27:ac:c9:f3:b9:29:d4:8f: 38:f4:1d:d0:cc:73:c5:4c:2a:74:96:ea:4d:cc:e0: bf:7e:eb:27:bb:66:e5:3d:1a:a8:55:a9:cf:ac:43: b5:73:99:e8:37:f6:f5:c1:50:96:b6:63:33:75:1c: 4d:b3:28:9a:40:da:39:e6:21:1d:9b:d2:70:31:5e: 68:47:51:6d:1a:29:1d:db:47:f6:ce:1b:d7:8b:ff: a0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:01:08:0C:AC:A6:ED:39:0F:06:43:42:0C:CA:51:82:0D:F0:5B:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/823cc639-6d73-3313-a883-bac72b1b40b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl X509v3 Authority Key Identifier: keyid:F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer sbgp-ipAddrBlock: critical IPv4: 104.36.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:61:34:f6:53:77:67:65:0d:2a:b7:48:6e:61:c1:06:bb:81: a2:7a:d0:fd:50:55:5e:e8:e0:87:6d:a3:84:f3:b5:96:c1:f1: f4:d3:62:e2:c2:a1:67:3c:ba:d3:d1:b5:a0:a8:e8:ae:f4:bb: 72:17:ee:eb:b3:cb:2c:47:c7:8c:df:be:83:6d:60:a8:aa:ee: 1e:81:8b:2a:cf:a3:f5:b9:77:3c:22:4a:2a:d3:6b:5e:6d:53: 0b:29:89:b6:fa:be:30:5b:d1:b5:41:d3:3e:2d:90:ea:4a:a6: c5:50:2b:79:ce:1b:fd:10:50:aa:3e:31:5b:ab:7a:33:e3:5b: 50:fb:86:26:2e:54:ce:3b:55:48:75:2d:22:6a:b5:31:63:94: 91:b7:4d:16:d0:e8:38:1f:5a:26:c8:9c:23:9b:e9:53:5a:f8: a7:5f:d6:82:27:d1:7e:47:6a:e9:e7:98:95:88:03:c7:c3:a1: 06:4b:fa:eb:c6:c9:81:b2:15:c0:2b:2b:48:f5:3b:d5:25:e7: a2:a8:32:b9:e5:12:d2:8e:6e:d8:d7:f3:d0:ba:67:cf:46:fe: 25:7c:6b:8d:d3:67:c5:a6:8d:6b:b6:d1:f0:b0:5b:3a:03:e0: 05:c5:ae:c0:96:04:cd:65:81:7d:7f:94:99:9c:43:dd:32:07: 7d:a6:95:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcYNr7xKxQRWptYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODA2ODgyMjItMjU4My00ZGFjLWE3ZGYtMWQ3ODkyNWM3 YjUzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk MTdjMGEyNjItNGQyYi00OTNjLThhZGQtNjFmMmM3ZTQ3YmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6NT4shOOvYxpdkUOM0izjSnxDxb49SwXeoA bbcMw32K7t8Mvyd83nTaEkky2aVj8YnGe6rCtdD7h5rzy6MoqhANKV8kYeVCPK6H 4D6ImCu1dMNTp+dfuhfnf+4Y3q0RcL/ppGZnE7k2zkAKzMY0RaP9zD33FHA1g1sh rn1brKGt+CyGtrBUEFMAOBKuIHnBhfG+Ryprb4iiVZ1u8rQkM2uCcIi4RMII/zPm J6zJ87kp1I849B3QzHPFTCp0lupNzOC/fusnu2blPRqoVanPrEO1c5noN/b1wVCW tmMzdRxNsyiaQNo55iEdm9JwMV5oR1FtGikd20f2zhvXi/+gUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcBCAyspu05DwZDQgzKUYIN8FswMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84MDY4 ODIyMi0yNTgzLTRkYWMtYTdkZi0xZDc4OTI1YzdiNTMvODIzY2M2MzktNmQ3My0z MzEzLWE4ODMtYmFjNzJiMWI0MGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODA2ODgyMjItMjU4My00ZGFjLWE3 ZGYtMWQ3ODkyNWM3YjUzLzgwNjg4MjIyLTI1ODMtNGRhYy1hN2RmLTFkNzg5MjVj N2I1My5jcmwwHwYDVR0jBBgwFoAU+ahh3ff7wnrlT+4Ixm9SjWzKWrUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84MDY4ODIyMi0yNTgzLTRkYWMtYTdkZi0xZDc4 OTI1YzdiNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaCTMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVhNPZTd2dlDSq3SG5hwQa7gaJ60P1QVV7o4Idto4TztZbB8fTTYuLC oWc8utPRtaCo6K70u3IX7uuzyyxHx4zfvoNtYKiq7h6BiyrPo/W5dzwiSirTa15t Uwspibb6vjBb0bVB0z4tkOpKpsVQK3nOG/0QUKo+MVurejPjW1D7hiYuVM47VUh1 LSJqtTFjlJG3TRbQ6DgfWibInCOb6VNa+Kdf1oIn0X5HaunnmJWIA8fDoQZL+uvG yYGyFcArK0j1O9Ul56KoMrnlEtKObtjX89C6Z89G/iV8a43TZ8WmjWu20fCwWzoD 4AXFrsCWBM1lgX1/lJmcQ90yB32mlTU= -----END CERTIFICATE-----Generated at Fri Mar 14 10:33:49 2025 by rpki-client