$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7950ff86-7690-33fa-bde4-a5e2852ee979.roa File: 7950ff86-7690-33fa-bde4-a5e2852ee979.roa (raw, json) Hash identifier: yzCm+2lv6wxsft8V1s9RokmsmpVueYp+Pg4moPPOjVI= Subject key identifier: 5A:BB:36:BC:B6:11:FD:29:50:1C:FA:C2:A6:D0:C8:57:00:7C:3C:AB Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B6423CD0D09660F0826D200 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7950ff86-7690-33fa-bde4-a5e2852ee979.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 54858 IP address blocks: 104.220.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:23:cd:0d:09:66:0f:08:26:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=6c02b8fa-eb86-4a0a-a5a7-c35597f03d25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c4:f6:a8:a9:9f:24:a2:41:fd:a1:e5:ac:cd: df:c9:c6:7a:09:5f:b6:66:c6:56:c4:28:f1:af:99: 8e:90:c9:63:9e:07:0c:83:66:b9:79:e6:a1:2e:5a: 1b:ba:bb:2a:2c:c1:de:cb:dd:37:47:7a:76:86:30: 11:15:25:d2:be:b3:a9:7e:66:a3:12:fc:9b:b9:40: 37:36:5b:57:91:29:81:42:1b:30:58:1c:25:40:4a: d3:32:9e:68:13:4f:57:4f:28:1e:a1:90:4e:6b:dd: 11:1d:b9:89:7d:2b:44:69:c7:a7:63:fc:40:75:d2: b7:09:d2:c9:11:93:92:dd:4d:5d:d5:4e:5d:61:59: 45:49:d4:1d:b9:d4:56:4d:90:18:a0:e0:64:ed:c3: de:4c:77:a1:13:65:d5:79:3a:30:50:cf:9f:b1:47: 92:ca:8b:d5:e6:77:ae:13:51:68:cc:a8:c7:a9:2e: c7:a2:a2:78:33:18:8b:79:51:17:61:a1:d2:79:10: 00:00:5f:e6:15:b0:54:5b:1c:90:4d:11:71:9f:b5: 90:eb:2b:e5:18:c8:e4:f2:d3:66:01:24:07:c7:e8: d2:35:07:8c:6d:a4:a2:71:a6:d0:07:b5:00:b8:c1: 21:8d:10:58:ac:24:51:50:2a:25:b1:97:27:40:bd: bb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:BB:36:BC:B6:11:FD:29:50:1C:FA:C2:A6:D0:C8:57:00:7C:3C:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7950ff86-7690-33fa-bde4-a5e2852ee979.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 104.220.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:4c:2d:ba:0b:5c:42:de:62:30:8d:1f:c4:f5:cb:94:d5:7c: 0e:6a:89:e6:3e:79:4d:a6:a7:66:57:c3:78:75:a7:ec:3b:a3: 86:67:1f:03:af:67:03:15:71:6c:ab:b0:80:dc:f6:e4:ab:c7: fa:16:1e:0f:8c:23:1f:b5:5f:6c:14:4a:db:e3:f6:a4:76:fa: 06:87:6a:56:14:4a:58:ce:e8:b9:eb:e2:52:3d:50:d0:e6:ca: 5f:b1:c4:79:73:31:b0:98:92:96:0b:11:b5:c3:33:93:57:f5: ec:57:77:14:7c:a1:90:5f:13:40:63:3d:b3:3f:bc:82:a1:33: 5b:63:2e:f4:91:ff:65:1f:b5:ec:38:b1:c9:57:ea:40:0f:2e: 4c:6f:77:67:55:70:a3:38:78:6b:41:ed:36:82:31:8e:a2:42: 50:0d:a3:e9:f1:8c:01:4d:0c:50:d8:0e:d4:52:f6:23:b9:4c: 0f:de:10:21:f0:73:55:4a:15:92:61:3d:2f:8b:6d:86:0c:3a: ff:fb:f3:38:e1:81:08:15:d2:9f:a7:19:df:8b:fa:87:6f:ac: b2:11:c9:53:13:b2:d5:c5:79:60:f1:40:8a:e7:82:a8:d5:a7: ec:36:11:4f:ce:af:ef:a9:23:9a:08:04:7d:38:5a:fc:55:7f: 36:f0:bc:86 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWElLZCPNDQlmDwgm0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk NmMwMmI4ZmEtZWI4Ni00YTBhLWE1YTctYzM1NTk3ZjAzZDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8T2qKmfJKJB/aHlrM3fycZ6CV+2ZsZWxCjx r5mOkMljngcMg2a5eeahLlobursqLMHey903R3p2hjARFSXSvrOpfmajEvybuUA3 NltXkSmBQhswWBwlQErTMp5oE09XTygeoZBOa90RHbmJfStEacenY/xAddK3CdLJ EZOS3U1d1U5dYVlFSdQdudRWTZAYoOBk7cPeTHehE2XVeTowUM+fsUeSyovV5neu E1FozKjHqS7HoqJ4MxiLeVEXYaHSeRAAAF/mFbBUWxyQTRFxn7WQ6yvlGMjk8tNm ASQHx+jSNQeMbaSicabQB7UAuMEhjRBYrCRRUColsZcnQL27tQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFq7Nry2Ef0pUBz6wqbQyFcAfDyrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNzk1MGZmODYtNzY5MC0z M2ZhLWJkZTQtYTVlMjg1MmVlOTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAaNwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAQ0wtugtcQt5iMI0fxPXLlNV8DmqJ5j55TaanZlfDeHWn7DujhmcfA69n AxVxbKuwgNz25KvH+hYeD4wjH7VfbBRK2+P2pHb6BodqVhRKWM7oueviUj1Q0ObK X7HEeXMxsJiSlgsRtcMzk1f17Fd3FHyhkF8TQGM9sz+8gqEzW2Mu9JH/ZR+17Dix yVfqQA8uTG93Z1Vwozh4a0HtNoIxjqJCUA2j6fGMAU0MUNgO1FL2I7lMD94QIfBz VUoVkmE9L4tthgw6//vzOOGBCBXSn6cZ34v6h2+sshHJUxOy1cV5YPFAiueCqNWn 7DYRT86v76kjmggEfTha/FV/NvC8hg== -----END CERTIFICATE-----Generated at Sun Apr 13 03:00:22 2025 by rpki-client