$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/002e220d-5567-33ef-bd92-28d89dfe57f5.roa File: 002e220d-5567-33ef-bd92-28d89dfe57f5.roa (raw, json) Hash identifier: yTYl6xGmVxt4+G9chksZwcqZgAISXynOFcF6k5c9ej0= Subject key identifier: 38:3B:DC:FB:47:B6:32:9F:64:61:23:8B:AC:52:54:F0:FF:0F:31:6A Certificate issuer: /CN=b433860d-ab5d-45f4-a11e-f313b584710a Certificate serial: 010D0C9F432858495EEEDA25644556CB7ABF0880 Authority key identifier: CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/002e220d-5567-33ef-bd92-28d89dfe57f5.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 14445 IP address blocks: 104.249.136.0/24 maxlen: 24 104.249.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:da:25:64:45:56:cb:7a:bf:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433860d-ab5d-45f4-a11e-f313b584710a Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=eb5ae29a-12c3-4a37-bedc-dd70f068b5f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:88:8e:04:f0:2d:12:32:13:90:25:42:16:b8: 2e:eb:92:59:b4:b7:19:a5:6f:90:f0:0c:f1:91:d0: 76:58:c6:8c:e5:bd:2c:f3:4f:65:57:67:8f:f8:28: 12:d9:2c:6e:55:d7:05:3d:92:12:6e:55:2d:c2:0f: 17:b6:10:78:89:e1:53:25:dd:63:ed:03:5f:8b:83: 2f:8c:31:30:0d:9b:8c:bb:53:5e:c1:9f:cf:d7:98: ec:85:a6:58:e6:77:49:52:a8:a6:a8:19:20:51:12: 4a:8e:75:66:4e:8f:b9:21:01:2a:f9:ac:89:b9:8e: a5:08:f9:4a:b7:e7:71:4e:6e:d8:c4:9b:88:5a:84: d2:82:40:e9:90:74:55:5a:0b:ca:19:de:ed:7f:7a: e9:be:d2:42:a5:9c:cc:4d:d0:d0:f2:fb:79:f8:3f: 9f:42:4c:12:66:77:bb:72:90:82:96:ed:e5:d1:01: 81:87:7f:94:98:e5:fd:88:bd:31:4f:c6:f6:60:df: 72:6a:6f:77:24:31:04:c8:69:cb:9a:57:d5:a5:88: 22:d9:bd:51:72:e3:71:86:38:05:ff:93:53:45:8c: 73:ef:05:a1:cc:69:00:43:9d:33:95:a4:e0:17:7d: c8:4f:8d:b4:70:6d:01:16:ac:4b:cf:5b:ae:3d:b3: 02:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:3B:DC:FB:47:B6:32:9F:64:61:23:8B:AC:52:54:F0:FF:0F:31:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/002e220d-5567-33ef-bd92-28d89dfe57f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl X509v3 Authority Key Identifier: keyid:CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer sbgp-ipAddrBlock: critical IPv4: 104.249.136.0/24 104.249.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:ea:b6:a9:c3:73:f0:5e:94:5a:98:87:09:19:b7:7a:aa:63: 34:0d:be:67:9d:f8:cf:34:79:f5:35:15:55:79:b2:af:26:19: e5:c8:f3:8b:9c:6e:17:0d:fa:12:81:88:6a:09:76:b4:52:c9: fd:89:7d:04:07:7f:27:80:5f:bb:bc:15:d0:31:8b:0f:9f:02: 45:33:d0:ff:13:ea:c1:d7:c1:9c:94:c1:a4:05:a7:1b:fa:2d: 5c:37:81:10:14:76:09:f4:96:77:b2:c8:c4:d9:10:4c:7b:f4: 85:3a:e0:29:61:cd:7d:da:e5:8f:29:de:cc:cb:dd:14:aa:28: 25:e4:eb:db:c8:36:57:b8:77:f1:e3:c7:1e:06:44:32:92:29: ec:f2:8f:e6:77:1b:d8:68:c6:71:eb:26:9b:d6:5f:4d:07:20: 3c:01:53:48:a5:66:1f:a3:e6:33:41:92:c5:d5:57:3b:4b:0f: 36:1a:46:8b:13:3f:c7:a6:8d:9a:8e:13:3d:1e:17:f8:a5:97: 08:c8:ee:77:9a:e3:97:23:d9:fd:a7:d9:4c:41:6d:8e:0a:54: 43:0c:8a:d8:71:84:63:16:45:cd:25:ce:0c:6a:c4:16:42:d9: 7a:b9:86:f3:d6:a4:fb:86:99:cd:b4:13:54:be:b4:61:2b:59: 20:13:95:d8 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEle7tolZEVWy3q/CIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzMzg2MGQtYWI1ZC00NWY0LWExMWUtZjMxM2I1ODQ3 MTBhMB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk ZWI1YWUyOWEtMTJjMy00YTM3LWJlZGMtZGQ3MGYwNjhiNWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4iOBPAtEjITkCVCFrgu65JZtLcZpW+Q8Azx kdB2WMaM5b0s809lV2eP+CgS2SxuVdcFPZISblUtwg8XthB4ieFTJd1j7QNfi4Mv jDEwDZuMu1NewZ/P15jshaZY5ndJUqimqBkgURJKjnVmTo+5IQEq+ayJuY6lCPlK t+dxTm7YxJuIWoTSgkDpkHRVWgvKGd7tf3rpvtJCpZzMTdDQ8vt5+D+fQkwSZne7 cpCClu3l0QGBh3+UmOX9iL0xT8b2YN9yam93JDEEyGnLmlfVpYgi2b1RcuNxhjgF /5NTRYxz7wWhzGkAQ50zlaTgF33IT420cG0BFqxLz1uuPbMCFQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDg73PtHtjKfZGEji6xSVPD/DzFqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iNDMz ODYwZC1hYjVkLTQ1ZjQtYTExZS1mMzEzYjU4NDcxMGEvMDAyZTIyMGQtNTU2Ny0z M2VmLWJkOTItMjhkODlkZmU1N2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjQzMzg2MGQtYWI1ZC00NWY0LWEx MWUtZjMxM2I1ODQ3MTBhL2I0MzM4NjBkLWFiNWQtNDVmNC1hMTFlLWYzMTNiNTg0 NzEwYS5jcmwwHwYDVR0jBBgwFoAUz9UTZdOGkQNiuVzEe6KxGXpl5VUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iNDMzODYwZC1hYjVkLTQ1ZjQtYTExZS1mMzEz YjU4NDcxMGEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaPmIAwQA aPmLMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAHqtqnDc/BelFqYhwkZt3qqYzQNvmed+M80efU1FVV5sq8m GeXI84ucbhcN+hKBiGoJdrRSyf2JfQQHfyeAX7u8FdAxiw+fAkUz0P8T6sHXwZyU waQFpxv6LVw3gRAUdgn0lneyyMTZEEx79IU64ClhzX3a5Y8p3szL3RSqKCXk69vI Nle4d/Hjxx4GRDKSKezyj+Z3G9hoxnHrJpvWX00HIDwBU0ilZh+j5jNBksXVVztL DzYaRosTP8emjZqOEz0eF/illwjI7nea45cj2f2n2UxBbY4KVEMMithxhGMWRc0l zgxqxBZC2Xq5hvPWpPuGmc20E1S+tGErWSATldg= -----END CERTIFICATE-----Generated at Sat Apr 5 04:33:59 2025 by rpki-client