$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/7dc5f10e-ddce-3970-80f8-6a11e52e6c28.roa File: 7dc5f10e-ddce-3970-80f8-6a11e52e6c28.roa (raw, json) Hash identifier: sCC2H8IdlmCrDtQvmT3l8NeOceheNXO/zAxhfVP+x0M= Subject key identifier: AD:73:55:66:4F:DD:10:5D:76:52:48:7C:18:D1:6B:6F:8B:35:B9:94 Certificate issuer: /CN=5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306 Certificate serial: 010D0C9F43285848D90BB7E437FC77D74DC14000 Authority key identifier: A0:92:D8:21:7C:49:33:E4:FA:A7:F1:31:06:BB:75:92:C6:C8:0F:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/7dc5f10e-ddce-3970-80f8-6a11e52e6c28.roa Signing time: Tue 11 Feb 2025 14:00:52 +0000 ROA not before: Tue 11 Feb 2025 14:00:52 +0000 ROA not after: Mon 12 May 2025 13:00:52 +0000 asID: 399213 IP address blocks: 104.167.227.0/24 maxlen: 24 2602:f8d9::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d9:0b:b7:e4:37:fc:77:d7:4d:c1:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306 Validity Not Before: Feb 11 14:00:52 2025 GMT Not After : May 12 13:00:52 2025 GMT Subject: CN=5f962a84-1359-4270-bb2b-656790681126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ac:23:52:0f:d0:46:44:cb:fd:f5:eb:4c:14: 6c:48:65:e5:8a:df:ac:eb:25:09:92:6c:1c:92:ba: eb:6d:d8:ab:ff:9a:4f:2e:14:c1:18:c6:04:d1:2c: e3:92:92:12:04:0e:f0:fa:09:81:c0:25:bb:dd:66: 74:f3:a7:b8:4d:07:92:6e:32:a9:3a:49:99:77:c7: 0b:a9:49:78:82:c3:66:3b:15:37:bb:be:73:28:98: f4:12:c2:50:ee:2f:0c:b1:74:d7:42:db:f6:44:29: c8:2c:d2:19:dc:d8:2b:02:39:26:e3:a3:bf:8f:dd: 41:9f:ba:1f:63:39:11:0e:d3:b3:d5:8a:70:93:33: 58:c1:d5:c4:4d:07:d3:00:61:90:07:90:b2:d1:b8: 5b:9d:23:f9:0a:79:93:71:d9:8a:0f:75:cd:9f:95: d9:a8:d6:ce:e0:f0:a0:82:ba:35:7c:e0:90:a2:0e: 2a:5e:e8:b3:1e:23:58:e0:36:f9:90:2e:0c:bf:e0: c4:a6:8b:9b:bb:a5:b1:f6:c4:79:30:bb:dd:cf:7a: 50:ce:64:25:8a:1c:d7:f0:82:e8:13:3b:72:8a:cb: 59:0c:83:7f:25:e0:0f:5c:9e:3d:d3:65:ff:13:0d: 7a:33:8c:af:23:c1:a5:16:d7:aa:83:31:0b:7a:6c: 68:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:73:55:66:4F:DD:10:5D:76:52:48:7C:18:D1:6B:6F:8B:35:B9:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/7dc5f10e-ddce-3970-80f8-6a11e52e6c28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.crl X509v3 Authority Key Identifier: keyid:A0:92:D8:21:7C:49:33:E4:FA:A7:F1:31:06:BB:75:92:C6:C8:0F:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.cer sbgp-ipAddrBlock: critical IPv4: 104.167.227.0/24 IPv6: 2602:f8d9::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:fc:6f:7a:f2:69:0d:9c:14:7f:77:34:c5:53:39:0e:f5:17: 1b:fb:6c:bf:eb:27:47:40:98:13:58:ae:64:20:53:07:9b:f4: 01:62:72:17:bc:9d:2e:5d:af:a9:cf:f1:26:31:7c:65:f3:a8: 2f:4f:8a:a4:f1:0d:29:8f:40:52:6d:0f:3e:e2:9a:d4:71:03: 5b:60:46:3b:e4:bd:40:a2:6d:53:02:b2:dd:7e:4f:17:85:fe: fd:47:be:a4:6d:81:1f:89:0b:54:43:1c:b5:f2:be:65:59:15: 4b:0a:c9:94:52:d1:7b:08:fd:ce:b7:80:0d:2d:31:6e:5a:cb: 56:65:b2:1a:16:12:b4:74:bb:9f:61:a4:9a:bc:75:3e:9a:ba: 67:9f:ee:42:c3:09:3c:18:91:9d:9d:a0:e9:2e:aa:e4:57:1d: 26:82:26:cd:96:81:72:9e:a0:9a:1b:3f:2d:50:6a:b9:e7:47: c9:27:9d:fb:cc:37:e4:34:cc:05:35:9a:e6:ac:66:7f:27:61: 43:2d:2f:20:13:e2:42:d2:6f:6b:7e:e5:b8:83:a2:9f:e6:dc: fb:6c:71:d7:23:6b:6c:c7:5b:0c:e3:8b:0d:93:d4:df:dd:a9: 2d:b3:4e:b0:12:9b:5e:ad:b8:2a:10:35:3a:9b:07:25:45:63: ba:1f:0a:ee -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEjZC7fkN/x3103BQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ2YTVkN2EtNTFhMi00YTgzLWI1YjUtZDhjMTU0Yjhk MzA2MB4XDTI1MDIxMTE0MDA1MloXDTI1MDUxMjEzMDA1MlowLzEtMCsGA1UEAxMk NWY5NjJhODQtMTM1OS00MjcwLWJiMmItNjU2NzkwNjgxMTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqwjUg/QRkTL/fXrTBRsSGXlit+s6yUJkmwc krrrbdir/5pPLhTBGMYE0SzjkpISBA7w+gmBwCW73WZ086e4TQeSbjKpOkmZd8cL qUl4gsNmOxU3u75zKJj0EsJQ7i8MsXTXQtv2RCnILNIZ3NgrAjkm46O/j91Bn7of YzkRDtOz1YpwkzNYwdXETQfTAGGQB5Cy0bhbnSP5CnmTcdmKD3XNn5XZqNbO4PCg gro1fOCQog4qXuizHiNY4Db5kC4Mv+DEpoubu6Wx9sR5MLvdz3pQzmQlihzX8ILo EztyistZDIN/JeAPXJ4902X/Ew16M4yvI8GlFteqgzELemxo3wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFK1zVWZP3RBddlJIfBjRa2+LNbmUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81ZDZh NWQ3YS01MWEyLTRhODMtYjViNS1kOGMxNTRiOGQzMDYvN2RjNWYxMGUtZGRjZS0z OTcwLTgwZjgtNmExMWU1MmU2YzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWQ2YTVkN2EtNTFhMi00YTgzLWI1 YjUtZDhjMTU0YjhkMzA2LzVkNmE1ZDdhLTUxYTItNGE4My1iNWI1LWQ4YzE1NGI4 ZDMwNi5jcmwwHwYDVR0jBBgwFoAUoJLYIXxJM+T6p/ExBrt1ksbID2kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81ZDZhNWQ3YS01MWEyLTRhODMtYjViNS1kOGMx NTRiOGQzMDYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAaKfjMA4E AgACMAgDBgAmAvjZADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAN/G968mkNnBR/dzTFUzkO9Rcb+2y/6ydH QJgTWK5kIFMHm/QBYnIXvJ0uXa+pz/EmMXxl86gvT4qk8Q0pj0BSbQ8+4prUcQNb YEY75L1Aom1TArLdfk8Xhf79R76kbYEfiQtUQxy18r5lWRVLCsmUUtF7CP3Ot4AN LTFuWstWZbIaFhK0dLufYaSavHU+mrpnn+5Cwwk8GJGdnaDpLqrkVx0mgibNloFy nqCaGz8tUGq550fJJ537zDfkNMwFNZrmrGZ/J2FDLS8gE+JC0m9rfuW4g6Kf5tz7 bHHXI2tsx1sM44sNk9Tf3akts06wEpterbgqEDU6mwclRWO6Hwru -----END CERTIFICATE-----Generated at Sat Apr 12 02:03:40 2025 by rpki-client