$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/04aa20c1-cb46-3c08-8bc1-2728eb1d768f.roa File: 04aa20c1-cb46-3c08-8bc1-2728eb1d768f.roa (raw, json) Hash identifier: s1rXoW8mXsgiA8x+2pUrBiQx93hTHfL6RjIuaLHJ4KE= Subject key identifier: 85:B8:61:45:96:F2:64:41:2B:C3:EE:AA:97:0B:DE:17:F3:27:5E:6C Certificate issuer: /CN=589ab9d5-eaa2-4a72-8721-78a3fe110680 Certificate serial: 010D0C9F432858497AD9AF46ED735F7E20371C20 Authority key identifier: 6F:26:7C:76:50:A4:16:47:26:93:39:F7:67:05:4F:80:39:13:A3:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/04aa20c1-cb46-3c08-8bc1-2728eb1d768f.roa Signing time: Thu 10 Apr 2025 13:00:59 +0000 ROA not before: Thu 10 Apr 2025 13:00:59 +0000 ROA not after: Wed 09 Jul 2025 13:00:59 +0000 asID: 174 IP address blocks: 104.251.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/589ab9d5-eaa2-4a72-8721-78a3fe110680.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/589ab9d5-eaa2-4a72-8721-78a3fe110680.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7a:d9:af:46:ed:73:5f:7e:20:37:1c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=589ab9d5-eaa2-4a72-8721-78a3fe110680 Validity Not Before: Apr 10 13:00:59 2025 GMT Not After : Jul 9 13:00:59 2025 GMT Subject: CN=bb72d2e4-9327-4496-b080-a912077d7bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d4:3b:86:af:67:f6:81:a5:10:c5:37:32:ca: 4e:92:4a:d3:33:d3:59:bb:57:a2:c0:d2:6f:62:d5: f2:48:dd:b9:b6:f9:7c:36:e3:af:25:23:4e:78:2a: fa:e0:67:82:27:00:8b:c3:4a:48:6f:9a:7e:6a:7a: c9:91:a4:44:56:1d:30:6c:74:54:ca:27:cd:9a:be: ac:5f:40:08:78:bb:27:2e:8d:94:de:8c:09:d5:bb: 74:3e:f8:0e:c9:5d:ab:46:b8:08:55:00:0f:7e:de: 5e:37:4b:0d:29:1b:c2:62:db:d8:93:31:e1:e9:a0: d0:9c:07:6c:b8:6e:42:05:07:9b:ba:38:8c:a3:ca: 46:34:7d:02:01:b8:d0:26:6d:55:a0:b9:fa:21:e3: ee:de:ee:ca:af:c6:4f:4a:f1:df:33:b3:0e:6a:9a: d7:7f:64:5a:e8:88:a0:00:04:68:7f:01:05:62:0b: 7c:7a:3c:0f:a1:3c:8f:d3:ca:4f:82:00:a4:cb:23: 93:bc:c9:31:fc:35:99:02:00:54:20:79:9d:35:10: 50:50:3d:88:ca:76:6e:91:b5:61:db:af:d2:22:c1: 43:e6:48:1b:27:8d:6e:4d:72:40:3c:04:82:f9:71: c9:c7:8b:e3:d0:e2:81:5c:d1:a6:00:e9:e3:13:ce: c8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B8:61:45:96:F2:64:41:2B:C3:EE:AA:97:0B:DE:17:F3:27:5E:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/04aa20c1-cb46-3c08-8bc1-2728eb1d768f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/589ab9d5-eaa2-4a72-8721-78a3fe110680.crl X509v3 Authority Key Identifier: keyid:6F:26:7C:76:50:A4:16:47:26:93:39:F7:67:05:4F:80:39:13:A3:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680.cer sbgp-ipAddrBlock: critical IPv4: 104.251.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:e4:5a:af:d8:4b:3b:c4:3c:f3:22:cc:bf:e1:58:f9:b7:2e: cb:18:76:b2:9e:f9:36:50:1f:42:4e:9b:0c:b0:d8:f4:0f:51: 56:dc:93:d9:c4:b8:bb:10:5f:42:31:bd:b1:cd:a5:31:95:3c: d2:07:01:99:cd:f7:a3:25:24:d1:f1:d5:b9:56:32:b7:2d:27: 6a:72:f9:bc:8a:fc:7e:47:11:ba:a8:8f:e1:f4:71:91:72:ac: c7:4f:a2:e5:67:5a:c5:e9:d2:95:55:85:30:13:2c:f0:84:52: d9:d4:57:22:b4:e7:e8:8b:5e:c6:c1:17:d0:d7:fb:72:58:99: 16:7a:39:5d:55:0b:e5:e0:71:26:0d:98:e3:83:e7:af:3c:8e: 5b:35:90:57:d9:c6:6f:78:94:db:b1:7b:4d:40:db:c3:34:ba: dc:4c:6d:24:89:89:ee:e9:0b:2e:6d:53:96:1d:8c:97:ad:3a: 23:1a:1d:2f:81:4d:ea:04:71:1b:4c:ed:a4:30:44:b9:39:73: 2b:74:74:f3:27:d4:10:92:aa:5f:69:87:b1:ca:4a:22:48:ad: 2f:7b:f9:8f:89:3b:a6:78:07:18:b5:4b:39:76:a3:73:c5:50: 20:cb:6b:e0:19:5a:70:b9:77:ab:71:c7:d0:cf:1f:12:f9:ba: 93:67:e1:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl62a9G7XNffiA3HCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTg5YWI5ZDUtZWFhMi00YTcyLTg3MjEtNzhhM2ZlMTEw NjgwMB4XDTI1MDQxMDEzMDA1OVoXDTI1MDcwOTEzMDA1OVowLzEtMCsGA1UEAxMk YmI3MmQyZTQtOTMyNy00NDk2LWIwODAtYTkxMjA3N2Q3YmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNQ7hq9n9oGlEMU3MspOkkrTM9NZu1eiwNJv YtXySN25tvl8NuOvJSNOeCr64GeCJwCLw0pIb5p+anrJkaREVh0wbHRUyifNmr6s X0AIeLsnLo2U3owJ1bt0PvgOyV2rRrgIVQAPft5eN0sNKRvCYtvYkzHh6aDQnAds uG5CBQebujiMo8pGNH0CAbjQJm1VoLn6IePu3u7Kr8ZPSvHfM7MOaprXf2Ra6Iig AARofwEFYgt8ejwPoTyP08pPggCkyyOTvMkx/DWZAgBUIHmdNRBQUD2IynZukbVh 26/SIsFD5kgbJ41uTXJAPASC+XHJx4vj0OKBXNGmAOnjE87IxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIW4YUWW8mRBK8PuqpcL3hfzJ15sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ODlh YjlkNS1lYWEyLTRhNzItODcyMS03OGEzZmUxMTA2ODAvMDRhYTIwYzEtY2I0Ni0z YzA4LThiYzEtMjcyOGViMWQ3NjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTg5YWI5ZDUtZWFhMi00YTcyLTg3 MjEtNzhhM2ZlMTEwNjgwLzU4OWFiOWQ1LWVhYTItNGE3Mi04NzIxLTc4YTNmZTEx MDY4MC5jcmwwHwYDVR0jBBgwFoAUbyZ8dlCkFkcmkzn3ZwVPgDkTo/AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ODlhYjlkNS1lYWEyLTRhNzItODcyMS03OGEz ZmUxMTA2ODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPuwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjkWq/YSzvEPPMizL/hWPm3LssYdrKe+TZQH0JOmwyw2PQPUVbck9nE uLsQX0IxvbHNpTGVPNIHAZnN96MlJNHx1blWMrctJ2py+byK/H5HEbqoj+H0cZFy rMdPouVnWsXp0pVVhTATLPCEUtnUVyK05+iLXsbBF9DX+3JYmRZ6OV1VC+XgcSYN mOOD5688jls1kFfZxm94lNuxe01A28M0utxMbSSJie7pCy5tU5YdjJetOiMaHS+B TeoEcRtM7aQwRLk5cyt0dPMn1BCSql9ph7HKSiJIrS97+Y+JO6Z4Bxi1Szl2o3PF UCDLa+AZWnC5d6txx9DPHxL5upNn4R8= -----END CERTIFICATE-----Generated at Fri Apr 11 23:20:06 2025 by rpki-client