$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/c0061223-367e-304e-b257-a101e5234c0c.roa File: c0061223-367e-304e-b257-a101e5234c0c.roa (raw, json) Hash identifier: C0NIvfuXXdSdd+94Ya0iTNqQAgLtdICg8HU948xTthY= Subject key identifier: 82:FA:6F:77:6E:84:C4:5A:B9:84:20:34:5C:36:5C:02:4F:A1:1F:57 Certificate issuer: /CN=d0ea12ff-f954-4229-88a2-d2c6656a0eca Certificate serial: 010D0C9F432858494B641555F1C4671203B6F100 Authority key identifier: 53:44:7F:09:63:92:50:77:CF:65:A6:EE:0F:7D:1F:E6:BD:CE:A4:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/c0061223-367e-304e-b257-a101e5234c0c.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 205220 IP address blocks: 104.193.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:15:55:f1:c4:67:12:03:b6:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0ea12ff-f954-4229-88a2-d2c6656a0eca Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=3d306080-243f-4bb2-abd9-b69a80e7bc65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:92:35:ea:2c:e6:1f:b7:b7:6c:3b:00:d7:c6: 01:6a:1b:76:bc:f3:a4:3a:36:fe:5b:12:72:aa:d7: 11:d9:a7:0c:e1:e1:e3:a0:cb:ea:16:d6:75:a8:60: b3:8b:a5:0f:67:4d:96:f1:b6:9d:c4:cc:10:34:fe: 18:c7:59:5c:64:e7:de:b0:ed:8e:93:4e:f7:b7:23: 2f:74:76:d2:cd:de:8f:02:85:ba:40:79:cf:c2:fd: 60:92:f4:ec:8a:f0:95:41:de:53:9e:89:27:bc:b2: 87:ad:25:5a:cf:47:ff:10:07:c1:25:a8:0b:e8:4f: 16:8b:11:9d:73:b0:30:87:9a:2d:00:ec:d6:d5:b5: a1:12:f1:07:23:a8:c2:40:ce:a4:78:0d:3b:e1:8e: c1:5c:ba:71:7d:1d:f7:72:19:b8:3a:b6:fa:6d:b4: fe:96:5a:e1:2f:8e:0c:e2:a8:f4:4e:ab:92:60:6f: 53:56:16:58:9b:d4:19:4d:c8:e6:42:08:49:07:bf: a8:f7:03:79:70:7e:9c:63:4a:5e:2f:89:df:77:76: cc:28:38:ed:a5:22:5b:23:4b:f7:e9:1a:60:05:d2: 07:f6:9d:04:6e:47:63:ea:fe:c7:9d:6a:27:ae:63: e6:df:f2:21:e5:86:2f:53:f9:6c:dd:2b:ff:e5:7c: b4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:FA:6F:77:6E:84:C4:5A:B9:84:20:34:5C:36:5C:02:4F:A1:1F:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/c0061223-367e-304e-b257-a101e5234c0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.crl X509v3 Authority Key Identifier: keyid:53:44:7F:09:63:92:50:77:CF:65:A6:EE:0F:7D:1F:E6:BD:CE:A4:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer sbgp-ipAddrBlock: critical IPv4: 104.193.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:87:72:86:1a:fc:94:4e:e0:57:fd:73:33:9a:e1:da:12:88: 91:fe:78:7b:87:68:55:41:6a:fe:2e:a8:35:df:6f:69:f9:ed: e2:73:95:89:ec:04:a1:c4:e6:b6:17:80:14:9e:f4:c5:77:1c: 9d:4d:c0:dd:4e:66:d0:d4:f5:fa:47:e8:1a:ad:d8:73:c0:7a: e2:0b:b8:72:d1:db:22:f4:6b:50:df:26:15:94:1b:ec:e6:52: 2a:e3:6f:54:dd:66:7e:0e:06:2f:b8:5a:f8:bc:0d:31:c0:9e: 58:7e:bd:cb:0c:eb:48:40:3f:ae:77:87:1d:7b:42:bd:c7:bd: 2d:8c:d1:0f:af:df:8a:29:1c:6a:2e:61:5c:a4:0a:49:87:af: 64:54:f6:02:8e:f1:68:ea:9a:6e:4d:59:5c:78:62:08:ba:1a: ee:9d:0c:51:65:85:80:e9:b6:b1:9e:87:f9:b6:86:2a:e9:ca: 97:a6:be:e3:97:e6:31:6b:22:41:fd:27:24:e6:42:ee:8d:ec: 70:53:57:55:9b:ab:77:8b:c3:e2:b2:0d:49:73:fc:26:36:e5: a4:8e:ca:2a:5a:0e:0f:44:5f:37:03:f9:48:84:91:84:83:fb: a1:f6:85:ad:99:e3:de:09:be:6a:05:27:3e:c7:e3:1c:cb:77: 7c:40:31:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZBVV8cRnEgO28QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlYTEyZmYtZjk1NC00MjI5LTg4YTItZDJjNjY1NmEw ZWNhMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk M2QzMDYwODAtMjQzZi00YmIyLWFiZDktYjY5YTgwZTdiYzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZI16izmH7e3bDsA18YBaht2vPOkOjb+WxJy qtcR2acM4eHjoMvqFtZ1qGCzi6UPZ02W8badxMwQNP4Yx1lcZOfesO2Ok073tyMv dHbSzd6PAoW6QHnPwv1gkvTsivCVQd5TnoknvLKHrSVaz0f/EAfBJagL6E8WixGd c7Awh5otAOzW1bWhEvEHI6jCQM6keA074Y7BXLpxfR33chm4Orb6bbT+llrhL44M 4qj0TquSYG9TVhZYm9QZTcjmQghJB7+o9wN5cH6cY0peL4nfd3bMKDjtpSJbI0v3 6RpgBdIH9p0Ebkdj6v7HnWonrmPm3/Ih5YYvU/ls3Sv/5Xy0CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIL6b3duhMRauYQgNFw2XAJPoR9XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMGVh MTJmZi1mOTU0LTQyMjktODhhMi1kMmM2NjU2YTBlY2EvYzAwNjEyMjMtMzY3ZS0z MDRlLWIyNTctYTEwMWU1MjM0YzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDBlYTEyZmYtZjk1NC00MjI5LTg4 YTItZDJjNjY1NmEwZWNhL2QwZWExMmZmLWY5NTQtNDIyOS04OGEyLWQyYzY2NTZh MGVjYS5jcmwwHwYDVR0jBBgwFoAUU0R/CWOSUHfPZabuD30f5r3OpLMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kMGVhMTJmZi1mOTU0LTQyMjktODhhMi1kMmM2 NjU2YTBlY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOHcoYa/JRO4Ff9czOa4doSiJH+eHuHaFVBav4uqDXfb2n57eJzlYns BKHE5rYXgBSe9MV3HJ1NwN1OZtDU9fpH6Bqt2HPAeuILuHLR2yL0a1DfJhWUG+zm Uirjb1TdZn4OBi+4Wvi8DTHAnlh+vcsM60hAP653hx17Qr3HvS2M0Q+v34opHGou YVykCkmHr2RU9gKO8Wjqmm5NWVx4Ygi6Gu6dDFFlhYDptrGeh/m2hirpypemvuOX 5jFrIkH9JyTmQu6N7HBTV1Wbq3eLw+KyDUlz/CY25aSOyipaDg9EXzcD+UiEkYSD +6H2ha2Z494JvmoFJz7H4xzLd3xAMYI= -----END CERTIFICATE-----Generated at Fri Apr 4 16:02:38 2025 by rpki-client