$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/b040a988-fc2f-3b79-b962-453ddd2ae85a.roa File: b040a988-fc2f-3b79-b962-453ddd2ae85a.roa (raw, json) Hash identifier: 2F/fvAv5skYuG6ja2Jiov1lR0F9Vh8fofHgaxqR4OlM= Subject key identifier: B4:47:8D:E7:86:23:F9:9D:CD:C3:C5:48:0F:43:67:E3:E8:A3:12:60 Certificate issuer: /CN=657b5e5f-0699-429f-8c83-a39c9a7a0322 Certificate serial: 010D0C9F4328584902EC1CA9EC84A5BD86FDB3C0 Authority key identifier: 85:26:FC:AD:03:6A:32:2F:82:8F:5E:3C:18:00:BF:59:B9:88:0E:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/b040a988-fc2f-3b79-b962-453ddd2ae85a.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 16676 IP address blocks: 104.243.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:1c:a9:ec:84:a5:bd:86:fd:b3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=657b5e5f-0699-429f-8c83-a39c9a7a0322 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=484845b0-3196-4260-8e37-e6ac4e2f7494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1b:78:b3:45:30:65:23:f8:ca:ef:be:25:6a: 9c:21:3b:d5:1d:01:fc:4c:9c:61:68:31:fd:5b:d1: c9:16:2b:7c:18:e3:e7:75:9b:c0:f7:a0:1f:88:e0: d5:3c:83:db:60:4c:44:5c:5f:7f:16:72:39:9b:57: 79:9f:24:e8:5a:bb:04:94:a1:99:89:bd:ad:30:c8: 59:76:84:05:a0:9b:ba:79:d8:09:fd:c5:b1:8c:46: 60:00:5d:82:88:91:b7:eb:dc:7f:cd:2d:45:6a:ab: 16:36:8b:58:7f:d4:ac:e4:e9:49:d5:45:56:f1:59: b0:f5:2b:e2:ee:4b:81:a1:11:e4:09:d9:b8:a6:0f: c3:e4:2b:49:7d:5a:c5:21:3c:b4:8d:0c:82:68:f7: a7:e3:f8:bc:8c:8e:3c:da:48:f0:54:ce:4d:c1:d1: 77:49:51:23:9a:99:93:5f:c2:fd:41:40:0b:ef:5f: 88:ed:88:a2:e4:24:8b:c3:ba:d0:a5:53:61:b8:30: 3d:b5:e9:d3:3f:88:07:11:cc:44:84:dd:10:61:a8: 81:9e:86:12:b2:d4:98:4a:29:f7:f5:e7:ad:d6:23: 8b:61:71:81:96:b5:e8:a9:69:2f:9c:d2:5b:3d:3e: 02:2e:59:71:c5:79:b3:97:15:07:b1:70:eb:74:96: 46:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:47:8D:E7:86:23:F9:9D:CD:C3:C5:48:0F:43:67:E3:E8:A3:12:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/b040a988-fc2f-3b79-b962-453ddd2ae85a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.crl X509v3 Authority Key Identifier: keyid:85:26:FC:AD:03:6A:32:2F:82:8F:5E:3C:18:00:BF:59:B9:88:0E:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer sbgp-ipAddrBlock: critical IPv4: 104.243.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ea:1a:c6:cc:1c:b9:d4:c5:80:13:13:73:d5:40:a2:06:5b:50: 72:ff:5b:20:a5:d2:7d:f3:57:08:48:d3:6d:fd:bd:9c:4a:ae: c1:d7:de:21:0d:92:63:d0:e2:01:da:3a:e5:75:19:1c:d7:a2: 97:f2:e9:3b:5a:69:f7:d3:cf:c9:69:e2:5b:72:cf:0a:d7:82: 8e:40:e1:3d:2c:8c:0b:fb:cb:ee:3c:c4:eb:a9:69:07:69:3e: ed:99:56:0f:bd:5c:01:9a:de:63:0d:60:e6:a9:fa:35:fa:fd: 73:88:f4:39:39:de:44:17:de:43:bd:f7:ad:38:10:14:79:30: 82:6d:de:e5:0e:e3:3d:f3:b9:f7:d9:86:71:49:9c:0c:fc:07: 53:bf:f5:f3:41:90:c5:c2:a9:5e:68:bb:df:06:36:f8:ca:e4: 7a:08:3e:91:f1:f0:96:c3:0d:dc:6f:7d:12:7e:b5:a1:5d:95: 01:8d:98:09:64:3c:ab:f6:f9:95:03:3a:f4:ba:29:39:7b:b0: 9b:24:ad:c5:2f:2f:cd:05:17:17:19:ef:42:95:87:f9:61:49: fa:13:a6:60:0a:bd:43:6c:5f:f0:7d:47:4a:cd:b0:b0:50:6b: a9:08:55:25:5c:a1:94:76:cb:a8:ee:95:98:86:d8:3c:5f:32: 92:dc:20:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7Byp7ISlvYb9s8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU3YjVlNWYtMDY5OS00MjlmLThjODMtYTM5YzlhN2Ew MzIyMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk NDg0ODQ1YjAtMzE5Ni00MjYwLThlMzctZTZhYzRlMmY3NDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBt4s0UwZSP4yu++JWqcITvVHQH8TJxhaDH9 W9HJFit8GOPndZvA96AfiODVPIPbYExEXF9/FnI5m1d5nyToWrsElKGZib2tMMhZ doQFoJu6edgJ/cWxjEZgAF2CiJG369x/zS1FaqsWNotYf9Ss5OlJ1UVW8Vmw9Svi 7kuBoRHkCdm4pg/D5CtJfVrFITy0jQyCaPen4/i8jI482kjwVM5NwdF3SVEjmpmT X8L9QUAL71+I7Yii5CSLw7rQpVNhuDA9tenTP4gHEcxEhN0QYaiBnoYSstSYSin3 9eet1iOLYXGBlrXoqWkvnNJbPT4CLllxxXmzlxUHsXDrdJZG1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRHjeeGI/mdzcPFSA9DZ+PooxJgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82NTdi NWU1Zi0wNjk5LTQyOWYtOGM4My1hMzljOWE3YTAzMjIvYjA0MGE5ODgtZmMyZi0z Yjc5LWI5NjItNDUzZGRkMmFlODVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjU3YjVlNWYtMDY5OS00MjlmLThj ODMtYTM5YzlhN2EwMzIyLzY1N2I1ZTVmLTA2OTktNDI5Zi04YzgzLWEzOWM5YTdh MDMyMi5jcmwwHwYDVR0jBBgwFoAUhSb8rQNqMi+Cj148GAC/WbmIDswwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82NTdiNWU1Zi0wNjk5LTQyOWYtOGM4My1hMzlj OWE3YTAzMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPPcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOoaxswcudTFgBMTc9VAogZbUHL/WyCl0n3zVwhI0239vZxKrsHX3iEN kmPQ4gHaOuV1GRzXopfy6TtaaffTz8lp4ltyzwrXgo5A4T0sjAv7y+48xOupaQdp Pu2ZVg+9XAGa3mMNYOap+jX6/XOI9Dk53kQX3kO99604EBR5MIJt3uUO4z3zuffZ hnFJnAz8B1O/9fNBkMXCqV5ou98GNvjK5HoIPpHx8JbDDdxvfRJ+taFdlQGNmAlk PKv2+ZUDOvS6KTl7sJskrcUvL80FFxcZ70KVh/lhSfoTpmAKvUNsX/B9R0rNsLBQ a6kIVSVcoZR2y6julZiG2DxfMpLcIGI= -----END CERTIFICATE-----Generated at Sat Apr 12 00:26:01 2025 by rpki-client