$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/9886f4c2-2c6c-312e-9503-deb0a91deaf3.roa File: 9886f4c2-2c6c-312e-9503-deb0a91deaf3.roa (raw, json) Hash identifier: xbU8lOEm3ijaa0hILiGtKI/HnJGKFQvzvslnhRd/2KI= Subject key identifier: BE:61:70:5D:02:45:7F:7E:D4:67:2E:98:ED:5C:85:DA:41:85:E0:93 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584919417AD7D8CA4C83E5F7BA80 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/9886f4c2-2c6c-312e-9503-deb0a91deaf3.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 3257 IP address blocks: 104.251.82.0/24 maxlen: 24 104.251.90.0/24 maxlen: 24 207.230.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:7a:d7:d8:ca:4c:83:e5:f7:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=f1035b06-4065-46e0-b091-d2f7ea2922ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ec:fa:03:84:19:95:40:6f:70:4f:37:54:d9: a4:c5:73:ae:d5:0b:e3:b5:c1:20:77:73:a4:c4:5e: 3b:c0:88:40:1e:8d:93:8b:36:a1:d0:56:35:39:2b: c6:18:5a:59:68:d3:60:62:bb:e6:71:a1:48:81:3b: 49:b4:70:24:c5:61:76:00:95:f9:38:41:3a:4c:df: b3:89:3a:a2:ab:c3:25:2b:72:2f:46:d3:8a:e5:75: ba:1e:54:74:bd:78:b8:4e:aa:af:d7:91:fa:ea:5a: 6b:90:94:11:85:92:5f:b9:22:20:f5:0d:82:73:2c: 96:e6:25:c5:5e:00:11:d4:32:0b:97:86:d1:8f:7b: 9c:0e:e9:33:ba:5a:a9:76:c5:76:17:ac:6c:e1:4f: 83:4a:98:f6:44:cf:9a:65:aa:b3:f2:9b:c6:34:34: 50:36:cb:7f:47:1f:0a:54:2f:e3:2e:ad:c1:ad:7a: cd:c0:0a:c5:0f:02:0b:cc:4b:87:32:79:1e:39:90: 71:dd:6e:9a:b6:39:ba:20:d7:f2:f2:bf:7b:e7:19: c2:fb:79:a1:83:66:93:0c:b9:5b:fa:33:cb:1c:36: bf:1e:f2:24:be:c5:a4:40:0b:d1:ad:62:9c:f6:9c: c6:17:8f:05:b6:e6:ab:df:f3:19:ee:9e:c0:be:95: 95:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:61:70:5D:02:45:7F:7E:D4:67:2E:98:ED:5C:85:DA:41:85:E0:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/9886f4c2-2c6c-312e-9503-deb0a91deaf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.251.82.0/24 104.251.90.0/24 207.230.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:34:8f:d2:3f:85:f6:fc:39:42:a7:49:e5:21:e7:4e:b1:bb: 9e:3c:4d:c9:8b:45:aa:5d:c2:fc:1d:33:93:27:d9:ab:90:52: 8a:e4:2f:08:eb:78:de:80:a0:26:85:a8:2b:5d:94:82:40:c0: 3d:22:4a:ce:76:4f:98:41:1a:9b:c4:79:96:dd:7d:e2:88:d6: d5:42:df:d0:9b:d9:81:2e:ae:68:ce:c2:08:ee:15:18:a3:41: dd:33:38:df:77:87:9f:22:4e:13:7d:22:4e:42:8e:78:7a:4f: 70:a7:3f:10:88:58:ea:32:67:c4:b7:ae:c7:6c:7b:6c:58:67: 66:18:54:ba:b7:c1:0d:f1:2f:9a:5c:ef:9d:44:d2:3a:15:6a: d5:7c:de:42:a5:29:82:10:5f:65:26:d2:15:c3:c9:29:3b:ff: 10:c9:49:fe:87:d9:c7:e4:7c:82:c5:f4:4e:f3:e1:9b:33:9b: 77:e6:93:e7:73:38:bd:13:01:2f:8c:68:8e:80:68:dd:b6:72: 24:0a:f6:5d:ad:2d:93:5c:c0:19:a9:c5:55:f0:cc:25:0f:f7: 5b:d4:d8:01:a4:bb:6c:2f:a4:93:bc:ce:71:c8:6e:98:00:76: 43:c8:59:fa:cd:f8:ac:56:19:90:14:e6:4a:ba:38:97:34:43: bf:55:0b:e4 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEkZQXrX2MpMg+X3uoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk ZjEwMzViMDYtNDA2NS00NmUwLWIwOTEtZDJmN2VhMjkyMmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+z6A4QZlUBvcE83VNmkxXOu1QvjtcEgd3Ok xF47wIhAHo2Tizah0FY1OSvGGFpZaNNgYrvmcaFIgTtJtHAkxWF2AJX5OEE6TN+z iTqiq8MlK3IvRtOK5XW6HlR0vXi4Tqqv15H66lprkJQRhZJfuSIg9Q2CcyyW5iXF XgAR1DILl4bRj3ucDukzulqpdsV2F6xs4U+DSpj2RM+aZaqz8pvGNDRQNst/Rx8K VC/jLq3BrXrNwArFDwILzEuHMnkeOZBx3W6atjm6INfy8r975xnC+3mhg2aTDLlb +jPLHDa/HvIkvsWkQAvRrWKc9pzGF48Ftuar3/MZ7p7AvpWVkwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFL5hcF0CRX9+1GcumO1chdpBheCTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvOTg4NmY0YzItMmM2Yy0z MTJlLTk1MDMtZGViMGE5MWRlYWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAaPtSAwQA aPtaAwQCz+ZoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAB40j9I/hfb8OUKnSeUh506xu548TcmLRapdwvwd M5Mn2auQUorkLwjreN6AoCaFqCtdlIJAwD0iSs52T5hBGpvEeZbdfeKI1tVC39Cb 2YEurmjOwgjuFRijQd0zON93h58iThN9Ik5Cjnh6T3CnPxCIWOoyZ8S3rsdse2xY Z2YYVLq3wQ3xL5pc751E0joVatV83kKlKYIQX2Um0hXDySk7/xDJSf6H2cfkfILF 9E7z4Zszm3fmk+dzOL0TAS+MaI6AaN22ciQK9l2tLZNcwBmpxVXwzCUP91vU2AGk u2wvpJO8znHIbpgAdkPIWfrN+KxWGZAU5kq6OJc0Q79VC+Q= -----END CERTIFICATE-----Generated at Sat Apr 5 22:32:38 2025 by rpki-client