$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/9a380ce2-8038-318b-a975-39bee35aa94f.roa File: 9a380ce2-8038-318b-a975-39bee35aa94f.roa (raw, json) Hash identifier: CT1wP8e4lyXkJp7ydy/x2Jbe2L7IvlAq3tUpgwtZJy0= Subject key identifier: 42:B8:EC:2A:C3:93:F4:B1:8E:53:3D:67:B3:0D:66:02:DE:F6:62:7F Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F43285849585E9FABA2F1BDD516727E40 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/9a380ce2-8038-318b-a975-39bee35aa94f.roa Signing time: Sat 29 Mar 2025 04:35:37 +0000 ROA not before: Sat 29 Mar 2025 04:35:37 +0000 ROA not after: Fri 27 Jun 2025 04:35:37 +0000 asID: 22653 IP address blocks: 104.238.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:58:5e:9f:ab:a2:f1:bd:d5:16:72:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Mar 29 04:35:37 2025 GMT Not After : Jun 27 04:35:37 2025 GMT Subject: CN=33213eb8-4592-421f-a755-5fd5385fa02b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:36:23:e5:41:b1:9c:7f:9a:f8:7f:d2:d2:d0: 9b:17:b2:f4:ee:43:42:c2:cc:a0:86:e6:b4:48:08: 08:58:48:18:6f:1e:db:8b:29:7c:a3:37:09:cf:e2: ed:ba:ea:b2:56:89:af:84:c8:a3:92:d5:e2:d2:ee: e1:42:cb:99:e5:98:89:a6:d3:53:15:59:d1:a5:14: 1e:b6:e0:2c:64:25:ce:f2:fb:06:4d:b2:e0:f3:21: 90:a6:01:d6:e5:17:9b:f7:98:14:da:ea:0c:50:22: 9e:1a:87:c5:8a:f3:0b:ba:d1:1d:73:00:b2:57:0e: 8f:b4:a7:5d:25:80:1a:0b:30:4b:d4:ff:93:98:f6: 77:77:98:55:5c:40:bb:5f:6d:57:56:42:18:7c:92: 97:2c:5b:07:34:e0:69:87:50:da:e2:e1:05:8e:be: ec:dd:cc:91:4e:be:5f:a3:ca:af:34:ad:1d:cb:9f: 4f:51:ac:5c:7b:ab:3e:1b:ef:ca:07:51:64:9b:66: da:8e:99:b8:fd:6e:73:78:62:b5:e9:fd:59:9a:19: 7c:6e:64:62:af:cb:98:a8:f5:86:ae:33:46:2f:50: f5:0c:1b:17:3d:71:10:d2:08:76:14:71:e9:c1:b8: 64:9c:ce:87:e2:82:d2:cb:63:93:39:30:2b:91:73: 68:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B8:EC:2A:C3:93:F4:B1:8E:53:3D:67:B3:0D:66:02:DE:F6:62:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/9a380ce2-8038-318b-a975-39bee35aa94f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 104.238.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:5c:d3:a6:af:ed:ac:4e:0d:cc:e9:f9:d6:7d:33:52:6a:f8: 9a:c2:c6:33:eb:dc:63:91:54:54:21:ca:85:02:3f:44:d1:43: ac:13:67:87:aa:7c:6a:c5:16:0b:de:db:88:97:56:fe:a8:11: d1:27:61:b8:40:98:1f:67:d5:da:ef:9d:0f:4a:f5:dc:df:47: dd:dc:82:c2:60:8b:f5:08:f1:02:c1:88:a4:15:88:95:7b:8f: 97:5a:ac:57:38:85:c0:83:3a:8c:ac:15:59:78:d3:e8:ff:93: ee:b6:46:f0:6b:eb:5b:43:5a:6e:10:d4:dc:91:2c:8d:03:6d: b8:00:aa:9d:a7:43:b8:44:50:e4:0c:aa:3a:dd:99:2a:9f:5c: af:99:49:5f:43:33:78:24:4a:c9:cd:20:c0:29:0c:9c:3a:34: 52:6d:de:19:ef:67:a5:29:0e:d0:6a:c0:80:2f:6a:66:c3:d1: 62:d1:c2:77:20:e5:27:b6:a6:25:9d:a7:a5:08:09:7e:7f:18: 63:60:b1:6e:04:f2:39:46:5f:26:73:b8:4e:eb:78:38:b9:1a: 4c:46:f4:9b:8a:df:a0:db:cc:be:d9:35:41:be:cb:51:c3:61: 25:b4:7d:62:a2:bc:08:d2:08:5f:12:80:49:21:3d:c8:3b:51: ec:f8:f3:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElYXp+rovG91RZyfkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDMyOTA0MzUzN1oXDTI1MDYyNzA0MzUzN1owLzEtMCsGA1UEAxMk MzMyMTNlYjgtNDU5Mi00MjFmLWE3NTUtNWZkNTM4NWZhMDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DYj5UGxnH+a+H/S0tCbF7L07kNCwsyghua0 SAgIWEgYbx7biyl8ozcJz+LtuuqyVomvhMijktXi0u7hQsuZ5ZiJptNTFVnRpRQe tuAsZCXO8vsGTbLg8yGQpgHW5Reb95gU2uoMUCKeGofFivMLutEdcwCyVw6PtKdd JYAaCzBL1P+TmPZ3d5hVXEC7X21XVkIYfJKXLFsHNOBph1Da4uEFjr7s3cyRTr5f o8qvNK0dy59PUaxce6s+G+/KB1Fkm2bajpm4/W5zeGK16f1Zmhl8bmRir8uYqPWG rjNGL1D1DBsXPXEQ0gh2FHHpwbhknM6H4oLSy2OTOTArkXNoGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEK47CrDk/SxjlM9Z7MNZgLe9mJ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvOWEzODBjZTItODAzOC0z MThiLWE5NzUtMzliZWUzNWFhOTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO74MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBc06av7axODczp+dZ9M1Jq+JrCxjPr3GORVFQhyoUCP0TRQ6wTZ4eq fGrFFgve24iXVv6oEdEnYbhAmB9n1drvnQ9K9dzfR93cgsJgi/UI8QLBiKQViJV7 j5darFc4hcCDOoysFVl40+j/k+62RvBr61tDWm4Q1NyRLI0DbbgAqp2nQ7hEUOQM qjrdmSqfXK+ZSV9DM3gkSsnNIMApDJw6NFJt3hnvZ6UpDtBqwIAvambD0WLRwncg 5Se2piWdp6UICX5/GGNgsW4E8jlGXyZzuE7reDi5GkxG9JuK36DbzL7ZNUG+y1HD YSW0fWKivAjSCF8SgEkhPcg7Uez483I= -----END CERTIFICATE-----Generated at Sat Apr 5 05:27:12 2025 by rpki-client