$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b09b8ccb-eb67-3a30-9d51-24dfc031880b.roa File: b09b8ccb-eb67-3a30-9d51-24dfc031880b.roa (raw, json) Hash identifier: 2VtA+BxY5XKQ6W+B+nYsQeuegWOUDJyckfvYXH1Kwo4= Subject key identifier: 8F:C3:C6:E5:EC:1B:F1:B3:4C:B7:45:3A:E8:4F:AB:52:C8:68:0F:40 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B6421C1610B9E0D0981BF00 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b09b8ccb-eb67-3a30-9d51-24dfc031880b.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 11404 IP address blocks: 104.220.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:21:c1:61:0b:9e:0d:09:81:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=b1ed3503-d102-4969-926a-5ea4cb97c23d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f6:9d:f8:3a:8d:d0:7d:41:8f:32:6a:ef:21: 60:6f:52:e5:ed:5e:46:e3:dd:52:c9:57:63:dc:1e: 4c:e5:86:b8:c8:ad:55:76:1e:7b:78:93:cb:bb:76: ea:46:df:3e:23:2f:61:d6:10:33:57:7e:de:32:4f: 90:af:44:05:38:60:d2:b2:b2:40:e6:09:79:f5:57: 51:2d:f8:6f:92:26:68:ec:53:22:73:22:3a:fd:f1: fe:88:5f:9b:65:b5:36:c4:10:03:4a:ee:f7:42:03: d9:d0:6c:f1:a4:b1:61:b4:6f:3f:ed:fb:c3:f4:2f: 4d:5a:8a:ea:6b:8c:94:90:0e:c9:01:f8:9a:4a:b9: 93:1c:32:41:3d:f9:c8:00:b3:02:95:4b:42:b9:4a: 01:27:e9:3c:8a:7d:15:5f:88:17:ef:3d:1e:53:c0: c0:b7:74:bb:cc:34:ac:ec:4c:80:1c:99:de:87:cc: bf:39:6c:64:e6:2b:a0:1b:f7:43:7f:ca:f7:77:96: 22:81:aa:0d:f9:11:ed:99:99:32:03:b5:12:70:eb: 46:95:83:48:c9:65:22:6e:06:30:cf:fc:a8:c1:2a: 53:fa:d5:13:2e:fd:ea:78:cd:41:d2:66:85:97:6d: 50:40:53:49:82:eb:80:31:c8:46:4b:2c:c1:01:24: 3c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C3:C6:E5:EC:1B:F1:B3:4C:B7:45:3A:E8:4F:AB:52:C8:68:0F:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b09b8ccb-eb67-3a30-9d51-24dfc031880b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 104.220.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:34:5c:7d:15:d0:dd:07:57:31:f5:ed:da:04:c5:c2:7c:0f: 05:6e:10:3e:09:cb:cd:9f:90:4c:49:05:a4:0f:f8:c3:1f:60: bd:53:e1:72:66:fe:e1:25:cb:e7:db:59:76:af:d3:7c:79:cf: 02:0d:0d:84:6f:58:58:2f:cd:1c:37:33:20:e0:90:bc:9a:a3: f2:ad:3d:5b:d3:d8:80:1b:07:79:53:fb:aa:bb:7b:31:09:3a: 30:22:10:1d:7b:2d:7e:70:97:e9:22:fc:c3:e1:79:6f:1a:bb: 70:93:ad:5d:9e:99:e0:ee:4c:43:ec:9a:b5:c1:87:e6:64:87: 60:b4:60:fc:bc:cd:42:45:af:27:43:d2:87:b6:97:6d:2e:b5: 32:d5:be:cd:ff:5d:aa:45:f7:b0:6f:fc:26:84:a9:bd:c4:73: f2:e0:53:5b:6b:12:9d:5f:3d:6f:cd:ab:5d:e7:8e:46:e1:ef: fb:ae:91:ac:69:7d:a4:10:bf:b4:3d:63:34:cd:ef:71:97:5d: 8b:74:d3:19:3a:6f:3b:d9:38:a9:36:4f:b5:3e:bd:9b:e1:6c: 45:5d:20:b3:4d:23:b1:9c:5f:ea:d5:2e:1c:03:4c:d6:bb:4f: 3d:ae:60:a2:fe:3a:80:e9:1d:df:d9:75:52:f8:70:c1:bb:2b: a4:16:a3:94 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWElLZCHBYQueDQmBvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk YjFlZDM1MDMtZDEwMi00OTY5LTkyNmEtNWVhNGNiOTdjMjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvad+DqN0H1BjzJq7yFgb1Ll7V5G491SyVdj 3B5M5Ya4yK1Vdh57eJPLu3bqRt8+Iy9h1hAzV37eMk+Qr0QFOGDSsrJA5gl59VdR LfhvkiZo7FMicyI6/fH+iF+bZbU2xBADSu73QgPZ0GzxpLFhtG8/7fvD9C9NWorq a4yUkA7JAfiaSrmTHDJBPfnIALMClUtCuUoBJ+k8in0VX4gX7z0eU8DAt3S7zDSs 7EyAHJneh8y/OWxk5iugG/dDf8r3d5YigaoN+RHtmZkyA7UScOtGlYNIyWUibgYw z/yowSpT+tUTLv3qeM1B0maFl21QQFNJguuAMchGSyzBASQ8NwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFI/DxuXsG/GzTLdFOuhPq1LIaA9AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvYjA5YjhjY2ItZWI2Ny0z YTMwLTlkNTEtMjRkZmMwMzE4ODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAaNwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAMDRcfRXQ3QdXMfXt2gTFwnwPBW4QPgnLzZ+QTEkFpA/4wx9gvVPhcmb+ 4SXL59tZdq/TfHnPAg0NhG9YWC/NHDczIOCQvJqj8q09W9PYgBsHeVP7qrt7MQk6 MCIQHXstfnCX6SL8w+F5bxq7cJOtXZ6Z4O5MQ+yatcGH5mSHYLRg/LzNQkWvJ0PS h7aXbS61MtW+zf9dqkX3sG/8JoSpvcRz8uBTW2sSnV89b82rXeeORuHv+66RrGl9 pBC/tD1jNM3vcZddi3TTGTpvO9k4qTZPtT69m+FsRV0gs00jsZxf6tUuHANM1rtP Pa5gov46gOkd39l1UvhwwbsrpBajlA== -----END CERTIFICATE-----Generated at Thu Apr 17 07:00:20 2025 by rpki-client