$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/07f6990d-62ce-456e-a266-cab190ec7375/bf7f9aa4-8a00-3dfe-b9b7-644ea15773dc.roa File: bf7f9aa4-8a00-3dfe-b9b7-644ea15773dc.roa (raw, json) Hash identifier: BsVypcp+AwoYM7f1GtlxkiFKWExi+odu3r7V+YvKf3w= Subject key identifier: 1F:EF:94:6F:03:54:74:0E:2B:3E:5B:B4:74:0B:D2:F5:FA:60:6A:D4 Certificate issuer: /CN=07f6990d-62ce-456e-a266-cab190ec7375 Certificate serial: 010D0C9F4328584940395028DBD9EC2128CC72F6 Authority key identifier: B3:9D:14:14:C4:C8:35:B1:A3:8E:58:24:B3:1B:E6:7D:89:21:A3:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/07f6990d-62ce-456e-a266-cab190ec7375.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/07f6990d-62ce-456e-a266-cab190ec7375/bf7f9aa4-8a00-3dfe-b9b7-644ea15773dc.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 62913 IP address blocks: 104.219.28.0/24 maxlen: 24 104.219.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/07f6990d-62ce-456e-a266-cab190ec7375/07f6990d-62ce-456e-a266-cab190ec7375.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/07f6990d-62ce-456e-a266-cab190ec7375/07f6990d-62ce-456e-a266-cab190ec7375.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/07f6990d-62ce-456e-a266-cab190ec7375.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:50:28:db:d9:ec:21:28:cc:72:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07f6990d-62ce-456e-a266-cab190ec7375 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=7d8d6d64-1b4c-4ce5-8884-d23a9c9172af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bb:65:6d:75:e3:43:95:f4:b6:c7:1d:aa:90: 92:a5:74:e4:db:73:8a:10:11:f7:17:31:de:c6:b9: 5c:1b:3f:9d:b0:7c:28:45:55:c6:73:05:7c:9c:d2: 22:3e:d6:99:58:56:b0:3e:12:ad:3d:a6:d9:c1:65: 27:e5:64:ba:b2:2b:73:0c:03:86:4b:6f:d9:c4:28: 73:b8:ac:24:fc:ed:3e:a6:c9:7b:58:f0:7d:ef:7b: 57:57:1f:56:17:e8:ad:d7:e7:b5:05:d6:75:45:82: e5:1c:d1:4e:e3:9d:49:e1:29:e3:2a:aa:1b:ed:a9: c5:cc:12:db:06:e6:b1:a7:74:e3:9e:87:6e:09:d1: 95:ba:6e:00:ed:92:15:06:8c:48:b6:80:0a:ab:51: 8f:f6:a4:ca:e1:03:7b:18:f3:e9:e2:59:86:29:aa: 50:65:5d:7f:27:a1:11:5f:b9:af:5f:c5:46:25:be: 0f:27:8a:5e:9b:83:18:42:c4:db:72:ca:b9:81:97: a7:70:b0:d7:14:f4:b3:bf:52:70:1a:58:8a:22:e3: 8a:ba:f2:28:4d:50:77:ab:09:57:9e:86:99:79:63: de:35:30:c9:f9:91:ba:41:bb:b4:fe:2e:bf:c1:d3: 7c:11:5b:28:e1:6b:a5:74:13:78:08:25:5e:7b:46: b5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:EF:94:6F:03:54:74:0E:2B:3E:5B:B4:74:0B:D2:F5:FA:60:6A:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/07f6990d-62ce-456e-a266-cab190ec7375/bf7f9aa4-8a00-3dfe-b9b7-644ea15773dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/07f6990d-62ce-456e-a266-cab190ec7375/07f6990d-62ce-456e-a266-cab190ec7375.crl X509v3 Authority Key Identifier: keyid:B3:9D:14:14:C4:C8:35:B1:A3:8E:58:24:B3:1B:E6:7D:89:21:A3:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/07f6990d-62ce-456e-a266-cab190ec7375.cer sbgp-ipAddrBlock: critical IPv4: 104.219.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:5f:70:92:d5:85:19:24:1b:d8:df:81:2b:3c:a8:39:f2:3e: fc:f0:46:95:c5:8f:b1:7d:c8:bb:5e:df:59:ab:66:71:6b:c5: be:7b:ff:f1:79:3f:98:61:c4:15:1d:69:b5:c5:03:b8:71:df: 60:e4:e7:9e:14:61:32:79:30:82:53:cc:74:52:32:e3:e0:19: 23:8b:4f:db:28:12:14:fa:fe:55:85:f0:04:0a:b5:2d:2e:47: 05:4a:60:db:27:40:f9:1c:4b:e4:ae:7e:31:fb:c6:5c:4d:39: 8f:07:0d:33:01:6a:a8:d9:d8:52:57:7b:88:95:6f:21:1f:f8: 10:f6:ee:3b:f2:ce:78:3b:2e:19:4e:58:d2:92:77:c6:bd:e5: 36:ca:bb:4f:7d:08:6e:1a:38:15:f0:4f:28:c1:6e:93:83:08: d8:c6:12:49:a2:86:c7:da:5b:b7:3b:03:b8:c5:85:f9:c4:af: 95:26:c4:20:f7:be:1f:f8:2c:15:e3:93:e9:7f:2c:72:dc:cd: bb:2a:6b:92:7b:d1:29:06:aa:84:d1:a0:ae:4a:08:d8:31:fb: c4:40:92:a3:24:01:5f:19:7e:42:e3:b9:67:d1:12:2d:f9:fa: 5b:18:e5:8d:07:b6:c0:5d:32:a7:7f:5a:b3:0e:16:0d:5d:60: 0f:0d:3a:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOVAo29nsISjMcvYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDdmNjk5MGQtNjJjZS00NTZlLWEyNjYtY2FiMTkwZWM3 Mzc1MB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk N2Q4ZDZkNjQtMWI0Yy00Y2U1LTg4ODQtZDIzYTljOTE3MmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbtlbXXjQ5X0tscdqpCSpXTk23OKEBH3FzHe xrlcGz+dsHwoRVXGcwV8nNIiPtaZWFawPhKtPabZwWUn5WS6sitzDAOGS2/ZxChz uKwk/O0+psl7WPB973tXVx9WF+it1+e1BdZ1RYLlHNFO451J4SnjKqob7anFzBLb Buaxp3TjnoduCdGVum4A7ZIVBoxItoAKq1GP9qTK4QN7GPPp4lmGKapQZV1/J6ER X7mvX8VGJb4PJ4pem4MYQsTbcsq5gZencLDXFPSzv1JwGliKIuOKuvIoTVB3qwlX noaZeWPeNTDJ+ZG6Qbu0/i6/wdN8EVso4WuldBN4CCVee0a1IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/vlG8DVHQOKz5btHQL0vX6YGrUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wN2Y2 OTkwZC02MmNlLTQ1NmUtYTI2Ni1jYWIxOTBlYzczNzUvYmY3ZjlhYTQtOGEwMC0z ZGZlLWI5YjctNjQ0ZWExNTc3M2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDdmNjk5MGQtNjJjZS00NTZlLWEy NjYtY2FiMTkwZWM3Mzc1LzA3ZjY5OTBkLTYyY2UtNDU2ZS1hMjY2LWNhYjE5MGVj NzM3NS5jcmwwHwYDVR0jBBgwFoAUs50UFMTINbGjjlgksxvmfYkho/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wN2Y2OTkwZC02MmNlLTQ1NmUtYTI2Ni1jYWIx OTBlYzczNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaNscMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5fcJLVhRkkG9jfgSs8qDnyPvzwRpXFj7F9yLte31mrZnFrxb57//F5 P5hhxBUdabXFA7hx32Dk554UYTJ5MIJTzHRSMuPgGSOLT9soEhT6/lWF8AQKtS0u RwVKYNsnQPkcS+SufjH7xlxNOY8HDTMBaqjZ2FJXe4iVbyEf+BD27jvyzng7LhlO WNKSd8a95TbKu099CG4aOBXwTyjBbpODCNjGEkmihsfaW7c7A7jFhfnEr5UmxCD3 vh/4LBXjk+l/LHLczbsqa5J70SkGqoTRoK5KCNgx+8RAkqMkAV8ZfkLjuWfREi35 +lsY5Y0HtsBdMqd/WrMOFg1dYA8NOps= -----END CERTIFICATE-----Generated at Fri Apr 11 23:14:05 2025 by rpki-client