$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/3e7d0114-a080-3fa9-ad31-8c198137b1d8.roa File: 3e7d0114-a080-3fa9-ad31-8c198137b1d8.roa (raw, json) Hash identifier: B8/5Q7iyEmZ1UQriqRqp5uANCZDb7Gd2JkAgtBqlqxg= Subject key identifier: 12:18:C0:97:E5:F0:82:E1:66:10:E8:B5:AB:77:E6:E7:F8:74:7A:1F Certificate issuer: /CN=9f0b0d1e-f26b-47ed-968e-d30c9e0eba98 Certificate serial: 010D0C9F432858494CC9438B4AC56F3F333BC200 Authority key identifier: DC:EF:9F:AF:43:6A:21:4F:4F:33:22:B4:AE:A3:9C:8E:8F:24:E6:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/3e7d0114-a080-3fa9-ad31-8c198137b1d8.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 40772 IP address blocks: 104.36.104.0/24 maxlen: 24 104.36.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:43:8b:4a:c5:6f:3f:33:3b:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0b0d1e-f26b-47ed-968e-d30c9e0eba98 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=3d742cd3-970d-46cb-b2ca-4810e11bf8b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:03:73:a3:3d:6a:b2:cc:17:4a:10:d6:a2:e8: a5:d0:02:9d:ee:3b:9e:40:d9:90:f5:d7:e6:0b:78: ca:78:55:cd:39:43:8a:d2:db:1b:31:22:08:fd:b2: 68:f7:c3:73:21:88:75:7a:e9:66:50:a6:96:fd:d7: 09:46:2b:93:dc:d5:70:0e:73:a1:34:25:56:ff:99: 21:a5:0c:ce:ac:13:68:0c:31:91:d8:a1:96:d4:26: 80:73:4c:51:9d:48:ce:49:9c:ae:89:fe:07:91:3a: 62:c9:4f:91:36:f5:65:9d:51:d4:23:1e:7d:42:d5: f9:18:4c:23:cf:27:e4:1d:af:a8:6e:fc:35:e1:04: 2c:88:01:ca:f2:78:06:f9:6b:55:c4:c4:62:73:34: ce:4c:e6:1b:0f:de:ef:7c:5b:f6:50:a2:ad:ce:2f: c5:c8:d3:75:34:09:ab:57:aa:ef:14:1a:81:9b:9b: de:cb:46:1f:49:80:7b:30:c4:b7:35:5b:8d:ef:d0: 66:79:74:43:44:e3:96:28:a4:00:28:2c:25:b3:4a: e3:b6:29:db:46:6c:4a:47:c7:60:6d:31:c4:d9:85: 3f:c6:d2:4c:81:92:b2:c6:f2:1c:8a:18:65:c2:df: 52:32:da:3e:b9:51:a7:d4:bb:c9:c2:36:7c:a4:13: 5e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:18:C0:97:E5:F0:82:E1:66:10:E8:B5:AB:77:E6:E7:F8:74:7A:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/3e7d0114-a080-3fa9-ad31-8c198137b1d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98.crl X509v3 Authority Key Identifier: keyid:DC:EF:9F:AF:43:6A:21:4F:4F:33:22:B4:AE:A3:9C:8E:8F:24:E6:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98.cer sbgp-ipAddrBlock: critical IPv4: 104.36.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:64:c6:91:78:6b:53:91:df:10:f6:48:66:ad:2e:4d:25:d6: db:48:4a:73:df:db:97:cc:40:f5:12:38:ea:ec:29:70:66:77: 72:46:53:73:dc:93:de:82:8d:9d:e6:91:d0:28:46:11:cd:08: 74:7a:68:49:e0:44:38:2b:9e:71:3a:3a:08:80:2a:68:b9:68: 16:3f:d0:aa:67:35:bc:07:71:6f:ea:30:56:8f:31:a0:bc:84: 03:df:2d:3d:84:09:8a:fa:43:1a:3d:67:05:b1:f0:72:0d:6a: bb:80:bd:77:83:f6:3c:00:a0:0e:b7:77:ca:d8:b7:3b:7d:63: aa:7c:23:cb:9e:b4:5a:d5:b7:de:1a:7e:f2:37:b3:f9:3d:9d: 59:30:a6:c5:a4:a7:b7:5e:82:25:3d:5c:c7:d2:f3:61:60:e7: 16:4a:cb:04:3c:60:31:9c:05:26:0b:c0:a7:af:2e:b1:33:c0: e8:86:21:ab:20:aa:89:b9:4a:0e:31:86:f1:79:d8:c5:01:5d: 65:b3:27:68:57:21:80:d6:3f:27:79:30:14:8f:ba:b2:55:7f: 5b:23:e5:d8:03:42:9e:ea:a6:f7:2d:34:5e:cc:da:cb:05:83: ff:e1:eb:17:a8:43:85:a8:78:e5:1a:bf:0b:be:a0:33:8a:9b: 50:f7:97:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUOLSsVvPzM7wgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWYwYjBkMWUtZjI2Yi00N2VkLTk2OGUtZDMwYzllMGVi YTk4MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk M2Q3NDJjZDMtOTcwZC00NmNiLWIyY2EtNDgxMGUxMWJmOGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQNzoz1qsswXShDWouil0AKd7jueQNmQ9dfm C3jKeFXNOUOK0tsbMSII/bJo98NzIYh1eulmUKaW/dcJRiuT3NVwDnOhNCVW/5kh pQzOrBNoDDGR2KGW1CaAc0xRnUjOSZyuif4HkTpiyU+RNvVlnVHUIx59QtX5GEwj zyfkHa+obvw14QQsiAHK8ngG+WtVxMRiczTOTOYbD97vfFv2UKKtzi/FyNN1NAmr V6rvFBqBm5vey0YfSYB7MMS3NVuN79BmeXRDROOWKKQAKCwls0rjtinbRmxKR8dg bTHE2YU/xtJMgZKyxvIcihhlwt9SMto+uVGn1LvJwjZ8pBNeowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBIYwJfl8ILhZhDotat35uf4dHofMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85ZjBi MGQxZS1mMjZiLTQ3ZWQtOTY4ZS1kMzBjOWUwZWJhOTgvM2U3ZDAxMTQtYTA4MC0z ZmE5LWFkMzEtOGMxOTgxMzdiMWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOWYwYjBkMWUtZjI2Yi00N2VkLTk2 OGUtZDMwYzllMGViYTk4LzlmMGIwZDFlLWYyNmItNDdlZC05NjhlLWQzMGM5ZTBl YmE5OC5jcmwwHwYDVR0jBBgwFoAU3O+fr0NqIU9PMyK0rqOcjo8k5nkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS85ZjBiMGQxZS1mMjZiLTQ3ZWQtOTY4ZS1kMzBj OWUwZWJhOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaCRoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlkxpF4a1OR3xD2SGatLk0l1ttISnPf25fMQPUSOOrsKXBmd3JGU3Pc k96CjZ3mkdAoRhHNCHR6aEngRDgrnnE6OgiAKmi5aBY/0KpnNbwHcW/qMFaPMaC8 hAPfLT2ECYr6Qxo9ZwWx8HINaruAvXeD9jwAoA63d8rYtzt9Y6p8I8uetFrVt94a fvI3s/k9nVkwpsWkp7degiU9XMfS82Fg5xZKywQ8YDGcBSYLwKevLrEzwOiGIasg qom5Sg4xhvF52MUBXWWzJ2hXIYDWPyd5MBSPurJVf1sj5dgDQp7qpvctNF7M2ssF g//h6xeoQ4WoeOUavwu+oDOKm1D3l5k= -----END CERTIFICATE-----Generated at Sat Apr 12 10:16:56 2025 by rpki-client