$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/10f6258f-0624-366b-b770-20e51ad3c4d0.roa File: 10f6258f-0624-366b-b770-20e51ad3c4d0.roa (raw, json) Hash identifier: /z6/Gsrj4PoF1nIdAaecJbqK7jhMrYZO2a2HCw4MsuY= Subject key identifier: AD:4C:57:D6:B7:36:1F:C1:94:06:81:11:90:3E:CB:60:BF:CC:DF:13 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584917206EA8A5A66A44B814B940 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/10f6258f-0624-366b-b770-20e51ad3c4d0.roa Signing time: Wed 05 Mar 2025 19:42:46 +0000 ROA not before: Wed 05 Mar 2025 19:42:46 +0000 ROA not after: Tue 03 Jun 2025 18:42:46 +0000 asID: 53730 IP address blocks: 104.238.248.0/24 maxlen: 24 104.238.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 14 Mar 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:20:6e:a8:a5:a6:6a:44:b8:14:b9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Mar 5 19:42:46 2025 GMT Not After : Jun 3 18:42:46 2025 GMT Subject: CN=b6358b82-0351-4e77-875f-c757caff965b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:31:95:68:fc:08:a7:6d:55:30:64:77:23:6f: 27:37:c6:e6:52:14:73:2c:84:9a:f5:90:08:06:83: aa:7d:6a:69:83:26:b8:85:26:8f:44:7f:95:06:f4: f0:6b:09:1b:8c:36:f8:67:78:fd:82:00:d5:9c:9b: 8f:8d:23:d9:a8:d0:6f:97:45:52:49:df:90:6e:55: d7:eb:db:73:08:13:25:32:ee:8c:37:08:65:7f:93: de:40:f7:e4:c3:8e:64:e1:c6:cd:0a:28:9a:fe:8a: b4:98:97:de:70:b0:e1:e4:3b:27:18:21:93:24:bc: cd:63:91:09:42:19:9e:65:36:4b:8f:e8:de:e4:14: f9:9c:0f:e3:88:87:78:83:4d:ee:b6:39:6f:78:45: df:52:b5:a6:4c:1a:4d:22:a2:2b:5f:10:9a:89:06: 60:16:df:fb:27:d0:b0:a0:f8:ec:5d:f3:0c:27:c5: d5:d4:97:dd:cf:25:04:8e:bd:0d:4e:f9:97:17:eb: dc:10:5a:bb:f8:a8:33:ee:dc:3d:e4:06:ac:06:88: 36:51:7f:8c:2e:e4:3b:bc:1c:3a:6f:83:ec:aa:80: 4c:e2:89:50:6d:71:99:4a:54:34:ae:d6:a0:07:67: 29:aa:91:7a:6c:2e:e4:d0:75:88:70:91:e9:5d:03: e6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:4C:57:D6:B7:36:1F:C1:94:06:81:11:90:3E:CB:60:BF:CC:DF:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/10f6258f-0624-366b-b770-20e51ad3c4d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 104.238.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:10:e7:ca:ac:ff:7a:e8:6d:8d:33:fa:82:20:c1:ca:68:90: 06:b5:b5:5c:3d:20:f7:0e:6d:e6:f3:1c:52:76:fb:4e:7b:6b: 3d:c1:2a:c9:95:9e:ae:39:75:58:ae:40:eb:00:56:ae:1d:9b: 79:0e:2a:d0:81:3d:3e:31:e3:5f:55:ab:ad:f9:6c:1d:39:8a: d5:8f:2b:ce:8c:e4:72:f3:b4:50:ad:a5:1e:39:20:d3:b6:b7: a6:9e:dc:2e:6e:24:14:7b:87:a5:fe:1f:0e:de:a0:ff:9d:35: a7:a8:49:0d:50:b2:e0:ca:9c:a7:ee:c4:3e:05:36:70:c4:b9: 6b:8d:ea:6f:f8:f2:3e:51:ce:25:d9:e0:d4:7c:fa:72:81:73: 1a:d1:e3:14:e3:f7:8c:e0:87:0e:2d:d4:be:cd:6c:fa:a5:55: a7:21:fd:5e:49:2a:72:a9:28:22:3a:6a:5e:52:5c:f8:e0:14: 85:57:e3:e5:07:41:74:ed:ac:68:d1:ea:2a:a8:b8:86:06:64: 67:c2:0d:a0:cf:8a:2e:ff:67:bc:7d:28:27:14:d0:dd:59:3a: 9f:82:8c:d0:d7:c4:73:2a:39:ce:47:97:94:ce:a1:0b:e6:db: f3:c0:c1:ef:4c:e4:8e:90:68:10:50:b1:3f:35:68:82:f7:5c: 96:9e:9c:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkXIG6opaZqRLgUuUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDMwNTE5NDI0NloXDTI1MDYwMzE4NDI0NlowLzEtMCsGA1UEAxMk YjYzNThiODItMDM1MS00ZTc3LTg3NWYtYzc1N2NhZmY5NjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjGVaPwIp21VMGR3I28nN8bmUhRzLISa9ZAI BoOqfWppgya4hSaPRH+VBvTwawkbjDb4Z3j9ggDVnJuPjSPZqNBvl0VSSd+QblXX 69tzCBMlMu6MNwhlf5PeQPfkw45k4cbNCiia/oq0mJfecLDh5DsnGCGTJLzNY5EJ QhmeZTZLj+je5BT5nA/jiId4g03utjlveEXfUrWmTBpNIqIrXxCaiQZgFt/7J9Cw oPjsXfMMJ8XV1JfdzyUEjr0NTvmXF+vcEFq7+Kgz7tw95AasBog2UX+MLuQ7vBw6 b4PsqoBM4olQbXGZSlQ0rtagB2cpqpF6bC7k0HWIcJHpXQPmOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1MV9a3Nh/BlAaBEZA+y2C/zN8TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvMTBmNjI1OGYtMDYyNC0z NjZiLWI3NzAtMjBlNTFhZDNjNGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaO74MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYQ58qs/3robY0z+oIgwcpokAa1tVw9IPcObebzHFJ2+057az3BKsmV nq45dViuQOsAVq4dm3kOKtCBPT4x419Vq635bB05itWPK86M5HLztFCtpR45INO2 t6ae3C5uJBR7h6X+Hw7eoP+dNaeoSQ1QsuDKnKfuxD4FNnDEuWuN6m/48j5RziXZ 4NR8+nKBcxrR4xTj94zghw4t1L7NbPqlVach/V5JKnKpKCI6al5SXPjgFIVX4+UH QXTtrGjR6iqouIYGZGfCDaDPii7/Z7x9KCcU0N1ZOp+CjNDXxHMqOc5Hl5TOoQvm 2/PAwe9M5I6QaBBQsT81aIL3XJaenGk= -----END CERTIFICATE-----Generated at Thu Mar 13 06:49:21 2025 by rpki-client