$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a0494a3f-f6a3-3e74-b5de-a573e347113b.roa File: a0494a3f-f6a3-3e74-b5de-a573e347113b.roa (raw, json) Hash identifier: GWiqwcahpVI63HolsWvOnFCZDJM97tqTzt6KP0IAc98= Subject key identifier: F7:FB:1D:40:06:1B:76:3D:BA:CB:9C:F2:E0:74:9B:B6:97:7B:C0:EF Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Certificate serial: 010D0C9F4328584944694CF54B691C0782E67C40 Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a0494a3f-f6a3-3e74-b5de-a573e347113b.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 4922 IP address blocks: 104.244.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:4c:f5:4b:69:1c:07:82:e6:7c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=6f1e4533-d055-4c48-9457-9c626ae1872e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ef:6a:71:bc:7b:c1:62:01:82:1d:8d:1d:aa: 2b:4c:95:99:c1:14:72:65:95:0d:b1:48:16:65:40: f4:7f:6a:9a:0e:ee:44:9c:3c:4d:c0:d1:d7:48:a6: fe:55:da:1a:ab:05:15:bc:bc:f7:83:15:03:41:48: c5:21:31:c2:d6:d1:72:26:bd:d5:6a:e3:99:4c:d3: c8:a7:8a:3b:25:5c:ed:e2:e7:93:c1:a2:f3:e7:67: b4:7c:26:cd:cd:53:06:fc:08:20:75:c9:21:78:d8: a7:65:fe:4b:83:cf:0b:29:63:3c:99:14:c0:10:95: 5c:f6:04:60:f2:6e:bd:26:66:01:c9:0a:f6:1d:2a: e8:e1:a2:2a:6e:c2:49:61:6b:0e:82:2d:2d:19:86: 12:63:f2:32:b8:5e:2c:7c:c6:69:00:80:f9:18:e7: b4:0c:79:b6:f5:fa:80:19:94:fd:47:6b:9f:19:d5: f5:ea:6f:6b:7b:27:4e:13:9b:b3:66:4e:d9:50:99: 29:2c:01:61:08:c3:36:38:16:e0:af:12:90:d8:4c: fa:b0:14:ed:4f:f4:e2:46:4d:0e:91:6c:d3:69:36: 64:cd:75:97:c1:f1:31:a0:2d:45:57:14:88:5e:5b: 35:b5:2b:ca:9b:47:d9:61:98:c3:d7:0e:32:96:f6: 8f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:FB:1D:40:06:1B:76:3D:BA:CB:9C:F2:E0:74:9B:B6:97:7B:C0:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a0494a3f-f6a3-3e74-b5de-a573e347113b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl X509v3 Authority Key Identifier: keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer sbgp-ipAddrBlock: critical IPv4: 104.244.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:44:f5:d9:8d:c6:03:33:0f:1a:32:87:ff:77:8c:47:6c:fe: d5:fb:d9:0e:fd:f4:ee:6d:81:cc:f6:ee:44:cc:20:f3:cd:10: c9:7a:76:0b:b3:bb:f0:a7:3b:e9:cb:75:ec:64:11:75:7d:25: 88:56:78:76:bc:ee:99:58:59:60:06:d9:f9:51:c7:3f:4f:b0: 0a:3e:f0:2f:bd:38:ad:b1:b1:d0:74:03:e4:58:76:c7:eb:7b: 94:67:66:78:41:2d:a3:d0:31:43:8e:8f:11:a6:6c:53:9e:c5: c9:76:a7:2e:22:95:25:e7:0f:00:93:bc:6e:29:31:62:74:2b: 0c:ed:cd:d5:e3:e9:59:a0:69:9b:55:5f:84:47:7c:31:9e:33: af:82:97:b5:1f:df:64:50:11:d2:29:14:cf:e8:5a:8f:7d:d4: fe:26:4c:e4:6a:14:8a:c9:66:8b:5e:00:44:d0:33:7d:fc:39: 63:c9:63:18:78:6d:bc:99:6a:2d:08:89:65:7d:f2:00:4e:17: 11:70:de:db:5a:e7:6a:7d:f6:5a:3e:de:f0:83:b8:aa:14:bf: c4:8b:d5:1e:37:45:69:25:78:84:27:dd:e9:ab:cd:7e:0c:0a: ef:f5:0d:93:c4:94:96:f4:3f:a8:29:33:fa:6b:19:09:d3:6f: ad:13:34:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaUz1S2kcB4LmfEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz MTA5MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk NmYxZTQ1MzMtZDA1NS00YzQ4LTk0NTctOWM2MjZhZTE4NzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyu9qcbx7wWIBgh2NHaorTJWZwRRyZZUNsUgW ZUD0f2qaDu5EnDxNwNHXSKb+VdoaqwUVvLz3gxUDQUjFITHC1tFyJr3VauOZTNPI p4o7JVzt4ueTwaLz52e0fCbNzVMG/AggdckheNinZf5Lg88LKWM8mRTAEJVc9gRg 8m69JmYByQr2HSro4aIqbsJJYWsOgi0tGYYSY/IyuF4sfMZpAID5GOe0DHm29fqA GZT9R2ufGdX16m9reydOE5uzZk7ZUJkpLAFhCMM2OBbgrxKQ2Ez6sBTtT/TiRk0O kWzTaTZkzXWXwfExoC1FVxSIXls1tSvKm0fZYZjD1w4ylvaPvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPf7HUAGG3Y9usuc8uB0m7aXe8DvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvYTA0OTRhM2YtZjZhMy0z ZTc0LWI1ZGUtYTU3M2UzNDcxMTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3 MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaPRoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1E9dmNxgMzDxoyh/93jEds/tX72Q799O5tgcz27kTMIPPNEMl6dguz u/CnO+nLdexkEXV9JYhWeHa87plYWWAG2flRxz9PsAo+8C+9OK2xsdB0A+RYdsfr e5RnZnhBLaPQMUOOjxGmbFOexcl2py4ilSXnDwCTvG4pMWJ0KwztzdXj6VmgaZtV X4RHfDGeM6+Cl7Uf32RQEdIpFM/oWo991P4mTORqFIrJZoteAETQM338OWPJYxh4 bbyZai0IiWV98gBOFxFw3tta52p99lo+3vCDuKoUv8SL1R43RWkleIQn3emrzX4M Cu/1DZPElJb0P6gpM/prGQnTb60TNEc= -----END CERTIFICATE-----Generated at Fri Apr 11 21:22:02 2025 by rpki-client