$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d8dc86cb-161f-3995-8d99-dd240df2a645.roa File: d8dc86cb-161f-3995-8d99-dd240df2a645.roa (raw, json) Hash identifier: 4GnKQP8hedFE6jorOTdJw6ZmJft6fsiwYLlgZaH/XMQ= Subject key identifier: 0C:63:26:EE:C0:F2:39:CF:A8:41:81:78:81:43:E2:54:69:22:77:0E Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584930DE6C3B5F5BCC6D4F0B9880 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d8dc86cb-161f-3995-8d99-dd240df2a645.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 23470 IP address blocks: 104.251.85.0/24 maxlen: 24 104.251.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:6c:3b:5f:5b:cc:6d:4f:0b:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=ab658b07-6a5f-4d66-a922-ec9232461287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9b:cd:41:18:05:42:fb:f4:ea:c1:00:1a:b7: 2b:07:98:f4:a2:23:47:24:63:64:45:a8:01:8d:08: 08:e4:73:5e:30:21:ba:1d:ce:dd:a3:eb:d3:eb:99: ef:9d:bb:fa:dd:71:b2:79:e7:bd:69:bb:c7:60:4c: b2:9b:7e:1d:a8:17:57:c4:ba:51:e7:39:15:99:96: 29:2e:87:44:57:92:68:19:f0:54:4c:1e:f5:6b:09: e6:a4:44:45:e3:de:b2:1a:67:f8:d2:9d:dd:51:58: 1e:96:8c:f5:2d:63:a5:ba:ef:21:b1:1c:82:d6:c4: b6:86:a6:be:04:73:a9:6c:6b:cb:0b:b4:e4:3a:97: 16:f5:10:9c:6e:47:d5:a5:ff:80:06:72:18:a6:d9: f8:53:8f:c4:ab:6b:d3:c5:06:bc:82:1a:df:de:b0: 07:3a:af:9c:8d:41:76:bd:3b:cd:be:5a:1a:84:c3: 55:6a:b7:55:53:ba:08:fa:8b:e6:ec:d9:15:92:5d: 8d:2c:7c:39:6e:c0:3f:61:8a:af:d1:d7:25:6e:83: 9b:aa:d4:86:fb:6f:8a:86:cc:59:04:00:f9:b4:df: f8:ba:36:dd:3f:b4:bb:55:b3:78:2c:8d:44:a9:d9: 06:53:4e:f9:c4:18:03:83:f1:5d:03:85:00:6d:0c: f9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:63:26:EE:C0:F2:39:CF:A8:41:81:78:81:43:E2:54:69:22:77:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d8dc86cb-161f-3995-8d99-dd240df2a645.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.251.85.0/24 104.251.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:99:dc:dd:58:96:78:cd:e1:62:ff:0c:0f:cb:67:84:68:98: b0:e9:f7:f3:37:21:46:ae:8c:45:90:5b:40:48:9d:51:da:42: f2:b9:91:e7:e0:0f:26:c5:d3:e6:f5:2e:34:af:f7:84:67:02: 78:b1:7a:f6:57:7d:23:ad:cc:0e:e3:8a:ad:26:a4:71:02:74: 6a:f2:79:5c:07:23:bf:fc:9c:06:92:97:44:c4:0f:00:f0:2b: 5d:e8:73:db:c0:0d:17:1c:8b:7a:5e:af:7a:e3:84:50:59:e8: 28:b9:57:14:cf:0e:3f:61:a9:16:47:ff:88:eb:34:53:6f:af: 6c:0b:22:c1:a2:a5:bf:2a:67:a4:e0:8d:ea:9f:8d:8d:b0:3d: 8d:1c:02:1d:88:92:e2:c8:dc:d4:98:03:b2:fc:6a:cd:ae:2b: a0:5c:09:34:f1:a6:1c:8a:46:c3:d2:b5:c3:9a:fe:ce:86:f5: bb:34:6e:d4:5c:2d:53:61:22:74:bf:c5:f6:31:72:36:cd:8f: 62:1b:66:a1:ef:5e:f8:4a:ea:d9:74:1d:81:80:b3:88:d3:29: 80:8e:f0:b1:be:9f:91:63:96:ea:bd:30:09:90:c5:3a:61:53: 3f:16:66:c9:fd:69:69:eb:4d:f0:40:ed:16:4e:a9:7c:69:b8: ae:27:01:8c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEkw3mw7X1vMbU8LmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk YWI2NThiMDctNmE1Zi00ZDY2LWE5MjItZWM5MjMyNDYxMjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZvNQRgFQvv06sEAGrcrB5j0oiNHJGNkRagB jQgI5HNeMCG6Hc7do+vT65nvnbv63XGyeee9abvHYEyym34dqBdXxLpR5zkVmZYp LodEV5JoGfBUTB71awnmpERF496yGmf40p3dUVgeloz1LWOluu8hsRyC1sS2hqa+ BHOpbGvLC7TkOpcW9RCcbkfVpf+ABnIYptn4U4/Eq2vTxQa8ghrf3rAHOq+cjUF2 vTvNvloahMNVardVU7oI+ovm7NkVkl2NLHw5bsA/YYqv0dclboObqtSG+2+KhsxZ BAD5tN/4ujbdP7S7VbN4LI1EqdkGU075xBgDg/FdA4UAbQz54wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAxjJu7A8jnPqEGBeIFD4lRpIncOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZDhkYzg2Y2ItMTYxZi0z OTk1LThkOTktZGQyNDBkZjJhNjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaPtVAwQA aPtbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGKZ3N1YlnjN4WL/DA/LZ4RomLDp9/M3IUaujEWQW0BInVHa QvK5kefgDybF0+b1LjSv94RnAnixevZXfSOtzA7jiq0mpHECdGryeVwHI7/8nAaS l0TEDwDwK13oc9vADRcci3per3rjhFBZ6Ci5VxTPDj9hqRZH/4jrNFNvr2wLIsGi pb8qZ6TgjeqfjY2wPY0cAh2IkuLI3NSYA7L8as2uK6BcCTTxphyKRsPStcOa/s6G 9bs0btRcLVNhInS/xfYxcjbNj2IbZqHvXvhK6tl0HYGAs4jTKYCO8LG+n5Fjluq9 MAmQxTphUz8WZsn9aWnrTfBA7RZOqXxpuK4nAYw= -----END CERTIFICATE-----Generated at Tue Apr 8 23:36:31 2025 by rpki-client