$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/50ff23d6-c143-3056-90c8-553c1e77ad8a.roa File: 50ff23d6-c143-3056-90c8-553c1e77ad8a.roa (raw, json) Hash identifier: v6QCEkC9YDPaJlOOIMbX+Nnc5YYmhsPXatUTr4/Aurk= Subject key identifier: 42:9B:BB:C3:8E:F9:B1:61:6C:CA:D9:72:DE:BC:FF:B2:E4:D8:84:AF Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584894A5EB66607CCF7FDC43A800 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/50ff23d6-c143-3056-90c8-553c1e77ad8a.roa Signing time: Sat 18 Jan 2025 02:00:38 +0000 ROA not before: Sat 18 Jan 2025 02:00:38 +0000 ROA not after: Fri 18 Apr 2025 01:00:38 +0000 asID: 8100 IP address blocks: 104.238.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:94:a5:eb:66:60:7c:cf:7f:dc:43:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Jan 18 02:00:38 2025 GMT Not After : Apr 18 01:00:38 2025 GMT Subject: CN=8d41025b-a3fa-482d-9710-1cfb250492a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:32:f4:75:12:f5:89:83:de:cc:1c:7c:e0:dc: 13:24:6c:47:20:84:3b:9b:2e:ac:4e:36:64:c0:32: f8:d5:2e:d3:86:fe:c2:6a:a1:13:1c:27:f7:1d:9a: bb:69:e0:e2:1d:e1:2f:3b:51:29:a6:21:56:1d:cf: e9:d2:53:d2:83:3e:68:ed:b7:3e:aa:c7:2f:1f:f3: 8a:89:76:00:86:75:81:e4:77:38:29:a4:ee:7f:07: f8:fa:39:6b:61:6c:9a:40:8a:7d:f8:b5:c1:3c:85: c2:cd:ae:c6:f4:24:cf:16:c8:67:5f:9a:77:6b:bb: 9c:8b:1d:69:82:cf:87:bb:c0:dd:1a:83:d7:c5:49: 13:87:0c:c2:fd:4a:a1:f5:dd:2b:4a:33:91:16:7e: 3d:d3:8d:ae:de:df:83:c3:67:44:40:84:99:65:18: d0:5b:15:7d:a5:41:cf:aa:ad:a2:90:93:1c:d1:81: c2:84:6a:b0:df:1a:ac:ae:15:98:76:af:60:cb:bc: 40:a0:f1:04:89:b5:1e:4a:33:55:c0:41:9d:0c:3c: 6d:60:5c:53:f1:f8:38:4f:08:02:b5:30:50:e0:e7: b3:ad:7e:6a:aa:9a:c2:d7:a8:b4:64:7b:f5:53:74: ba:91:a1:55:cc:37:5c:f4:cd:52:0d:41:a1:0d:1e: fe:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:9B:BB:C3:8E:F9:B1:61:6C:CA:D9:72:DE:BC:FF:B2:E4:D8:84:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/50ff23d6-c143-3056-90c8-553c1e77ad8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 104.238.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:f5:12:da:59:7e:96:b7:1a:ac:d3:bb:a1:73:74:4a:e2:df: 09:36:aa:aa:16:ad:10:0b:94:23:cc:fe:dd:5d:10:f7:5e:c1: e5:81:30:af:70:c5:ca:c0:7f:8d:24:37:31:02:11:dd:8a:13: 01:98:4b:d7:f4:79:24:41:68:8b:1a:54:5a:e7:50:7b:ef:7f: 44:19:87:d1:66:6b:5d:cd:1f:0c:e9:8a:ae:4e:6a:09:1d:39: fe:77:fb:49:64:cf:60:7e:fd:1f:58:62:ac:6e:e3:52:c3:35: fc:0d:91:bc:a2:ca:03:18:fa:ed:d7:54:2b:f9:5e:51:49:a9: b5:32:9b:78:f2:84:d2:c0:9d:f9:a2:32:54:f7:bf:18:ca:13: ca:64:b8:8d:f2:ca:b3:7f:53:a3:bb:c6:40:15:08:a6:8e:66: 81:15:38:1e:31:a1:aa:be:dc:d5:25:b4:f4:7e:e7:2e:c4:f5: db:be:de:b4:a6:84:c9:39:69:9a:b2:bf:b5:16:6a:ad:90:84: 4d:68:65:d4:22:a6:97:a6:08:2d:e0:1c:0e:a7:b8:8a:fb:97: 23:6a:72:6d:24:1d:08:d1:f8:7d:59:12:7d:f6:9b:39:6b:1c: 58:fc:7f:db:4c:aa:1e:05:f2:f6:66:b1:71:25:f0:20:ea:15: 2f:de:f2:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiUpetmYHzPf9xDqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDExODAyMDAzOFoXDTI1MDQxODAxMDAzOFowLzEtMCsGA1UEAxMk OGQ0MTAyNWItYTNmYS00ODJkLTk3MTAtMWNmYjI1MDQ5MmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TL0dRL1iYPezBx84NwTJGxHIIQ7my6sTjZk wDL41S7Thv7CaqETHCf3HZq7aeDiHeEvO1EppiFWHc/p0lPSgz5o7bc+qscvH/OK iXYAhnWB5Hc4KaTufwf4+jlrYWyaQIp9+LXBPIXCza7G9CTPFshnX5p3a7ucix1p gs+Hu8DdGoPXxUkThwzC/Uqh9d0rSjORFn49042u3t+Dw2dEQISZZRjQWxV9pUHP qq2ikJMc0YHChGqw3xqsrhWYdq9gy7xAoPEEibUeSjNVwEGdDDxtYFxT8fg4TwgC tTBQ4OezrX5qqprC16i0ZHv1U3S6kaFVzDdc9M1SDUGhDR7+qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKbu8OO+bFhbMrZct68/7Lk2ISvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNTBmZjIzZDYtYzE0My0z MDU2LTkwYzgtNTUzYzFlNzdhZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO75MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA31EtpZfpa3GqzTu6FzdEri3wk2qqoWrRALlCPM/t1dEPdeweWBMK9w xcrAf40kNzECEd2KEwGYS9f0eSRBaIsaVFrnUHvvf0QZh9Fma13NHwzpiq5Oagkd Of53+0lkz2B+/R9YYqxu41LDNfwNkbyiygMY+u3XVCv5XlFJqbUym3jyhNLAnfmi MlT3vxjKE8pkuI3yyrN/U6O7xkAVCKaOZoEVOB4xoaq+3NUltPR+5y7E9du+3rSm hMk5aZqyv7UWaq2QhE1oZdQippemCC3gHA6nuIr7lyNqcm0kHQjR+H1ZEn32mzlr HFj8f9tMqh4F8vZmsXEl8CDqFS/e8mE= -----END CERTIFICATE-----Generated at Sat Apr 5 05:24:54 2025 by rpki-client