$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8/ebfc0fb2-00ab-3668-ab6b-daafd14150c4.roa File: ebfc0fb2-00ab-3668-ab6b-daafd14150c4.roa (raw, json) Hash identifier: Kky0x6pGs4ZuCaDLRyjvbcmgZu2AIg8SX/G39uGpZaY= Subject key identifier: C2:D6:3B:BA:08:64:CB:DB:BB:97:C6:AE:E2:66:E6:C9:6B:4B:ED:81 Certificate issuer: /CN=8847f57c-ba5f-4d96-baa3-c4a4de39d5a8 Certificate serial: 010D0C9F432858495C24419FC382B24791322D80 Authority key identifier: 42:67:38:47:82:B9:45:C0:A3:38:2D:C4:3E:C7:38:D3:35:D9:AC:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8/ebfc0fb2-00ab-3668-ab6b-daafd14150c4.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 23465 IP address blocks: 104.255.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:41:9f:c3:82:b2:47:91:32:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8847f57c-ba5f-4d96-baa3-c4a4de39d5a8 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=df41dfdf-f937-4b21-b18a-dc5f1dcb0fb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5f:5c:58:0b:72:55:5b:66:9f:52:47:ab:5f: 57:db:33:c5:8a:a1:39:a8:48:e2:d8:94:85:2c:2b: 56:c2:e1:42:53:4c:cb:07:7e:c2:26:e3:fe:a4:36: 20:8b:5c:55:25:f3:6d:5b:54:7b:97:aa:0e:db:d4: 12:e5:09:51:27:76:4e:3e:dc:a8:26:f9:26:37:72: 4c:28:60:0b:80:67:8e:a7:76:60:e8:d7:f0:2f:9d: c1:76:5c:1d:06:b8:20:68:32:c2:8a:5b:24:75:fb: c3:bf:3c:f7:89:8c:75:c2:4d:a2:07:9f:db:12:56: a0:fb:10:60:d2:17:79:84:54:77:37:71:a4:76:c0: d8:7f:3e:c6:83:09:95:19:0c:41:8d:50:b3:13:08: d3:15:5d:4e:c9:7f:9f:19:67:a8:44:a3:a2:2f:1f: 0d:6a:d4:03:c9:dd:d3:7d:58:cb:dd:82:68:67:3f: 33:a1:ae:12:4e:8a:9e:d0:e7:81:af:29:5b:ec:67: 2f:41:6d:a4:62:43:08:ce:b2:2e:c3:97:99:ab:e2: 43:30:cd:6d:e9:db:bc:18:ba:82:01:5e:1d:d2:18: 8d:4b:94:89:01:c0:fe:a9:6e:37:93:f1:c5:0c:73: 13:24:9b:9a:d1:23:89:e5:6c:d6:fe:b2:d0:27:69: 4f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D6:3B:BA:08:64:CB:DB:BB:97:C6:AE:E2:66:E6:C9:6B:4B:ED:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8/ebfc0fb2-00ab-3668-ab6b-daafd14150c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8.crl X509v3 Authority Key Identifier: keyid:42:67:38:47:82:B9:45:C0:A3:38:2D:C4:3E:C7:38:D3:35:D9:AC:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8.cer sbgp-ipAddrBlock: critical IPv4: 104.255.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:92:5b:e2:00:e3:03:39:df:61:44:6e:57:ef:5d:c8:5c:6d: 71:ca:a2:51:2e:50:ac:fb:9e:41:7d:26:c2:1c:38:e4:fb:32: e0:48:7b:dd:58:42:64:02:16:fb:2b:7f:5d:38:33:6c:3d:3e: 70:b6:f2:ea:89:2b:e0:d3:5d:9f:5e:a4:07:8b:99:ea:2e:80: 89:5f:0e:1e:1c:34:69:dd:eb:29:e8:79:dc:6a:d5:ce:0b:22: 59:1d:ec:6d:d3:12:89:77:38:e3:5c:86:21:ab:e1:92:73:89: c2:4a:f3:dd:fb:ae:2b:ac:c4:ab:93:a3:05:56:ff:73:7f:17: cc:30:77:f8:e4:ce:fb:87:49:d1:22:5e:da:ce:d8:db:b4:a0: 43:08:ae:1d:0b:a5:45:6a:5b:30:ba:4b:7b:5e:3a:36:0f:dd: 1a:d4:a6:90:d2:f3:ac:ee:49:50:7c:b9:3c:ae:1e:1d:79:aa: 0c:09:05:c4:00:d2:7d:12:d5:ac:ce:f9:f3:5b:07:4f:ed:c6: 65:01:a0:28:51:27:0a:9d:01:cf:6e:79:cd:d3:71:97:26:8d: 95:77:6a:4a:60:7a:60:44:95:9f:16:e4:17:85:45:5b:bf:db: 52:17:78:a7:41:87:40:31:f2:65:01:26:a9:f4:f3:ca:c7:f3: 2d:78:ed:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJEGfw4KyR5EyLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0N2Y1N2MtYmE1Zi00ZDk2LWJhYTMtYzRhNGRlMzlk NWE4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk ZGY0MWRmZGYtZjkzNy00YjIxLWIxOGEtZGM1ZjFkY2IwZmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj19cWAtyVVtmn1JHq19X2zPFiqE5qEji2JSF LCtWwuFCU0zLB37CJuP+pDYgi1xVJfNtW1R7l6oO29QS5QlRJ3ZOPtyoJvkmN3JM KGALgGeOp3Zg6NfwL53BdlwdBrggaDLCilskdfvDvzz3iYx1wk2iB5/bElag+xBg 0hd5hFR3N3GkdsDYfz7GgwmVGQxBjVCzEwjTFV1OyX+fGWeoRKOiLx8NatQDyd3T fVjL3YJoZz8zoa4SToqe0OeBrylb7GcvQW2kYkMIzrIuw5eZq+JDMM1t6du8GLqC AV4d0hiNS5SJAcD+qW43k/HFDHMTJJua0SOJ5WzW/rLQJ2lPGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLWO7oIZMvbu5fGruJm5slrS+2BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84ODQ3 ZjU3Yy1iYTVmLTRkOTYtYmFhMy1jNGE0ZGUzOWQ1YTgvZWJmYzBmYjItMDBhYi0z NjY4LWFiNmItZGFhZmQxNDE1MGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODg0N2Y1N2MtYmE1Zi00ZDk2LWJh YTMtYzRhNGRlMzlkNWE4Lzg4NDdmNTdjLWJhNWYtNGQ5Ni1iYWEzLWM0YTRkZTM5 ZDVhOC5jcmwwHwYDVR0jBBgwFoAUQmc4R4K5RcCjOC3EPsc40zXZrNQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84ODQ3ZjU3Yy1iYTVmLTRkOTYtYmFhMy1jNGE0 ZGUzOWQ1YTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaP8oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmSW+IA4wM532FEblfvXchcbXHKolEuUKz7nkF9JsIcOOT7MuBIe91Y QmQCFvsrf104M2w9PnC28uqJK+DTXZ9epAeLmeougIlfDh4cNGnd6ynoedxq1c4L Ilkd7G3TEol3OONchiGr4ZJzicJK8937riusxKuTowVW/3N/F8wwd/jkzvuHSdEi XtrO2Nu0oEMIrh0LpUVqWzC6S3teOjYP3RrUppDS86zuSVB8uTyuHh15qgwJBcQA 0n0S1azO+fNbB0/txmUBoChRJwqdAc9uec3TcZcmjZV3akpgemBElZ8W5BeFRVu/ 21IXeKdBh0Ax8mUBJqn088rH8y147Xo= -----END CERTIFICATE-----Generated at Sun Apr 6 11:47:06 2025 by rpki-client