$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/aaf31aab-4b95-35a5-8785-33e89424e316.roa File: aaf31aab-4b95-35a5-8785-33e89424e316.roa (raw, json) Hash identifier: re/IzzfLQsHqNEtA9FmIQwNMyk7Rg6auTfCb0mEUFmY= Subject key identifier: 4F:C2:22:70:C9:F1:86:E1:7B:A9:7A:9C:4E:5D:58:09:25:C7:C8:E1 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584953C432818625F7950EF0A110 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/aaf31aab-4b95-35a5-8785-33e89424e316.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 54113 IP address blocks: 104.156.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:32:81:86:25:f7:95:0e:f0:a1:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=757071d3-c270-41eb-89df-b22f04398b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c4:7c:eb:8d:c2:e0:06:58:10:d0:72:7c:fb: 43:61:b5:68:d4:d4:a6:e2:6a:b1:d8:b2:9f:db:fe: 6d:9f:11:65:cf:7b:ea:18:0d:a6:6d:81:43:11:dc: ce:6a:f7:50:75:24:c4:69:3b:b1:c4:c5:e2:02:43: ee:53:3c:67:60:16:90:56:ca:b1:50:bc:87:55:9d: a3:6e:62:57:e7:93:9b:e7:be:71:d5:9e:e1:a5:66: ab:7b:93:41:76:37:37:1f:3f:af:7d:ab:bb:a7:09: 19:41:93:ac:c5:7e:3b:2a:e7:e0:fe:a3:10:6c:48: 32:c7:c5:56:da:58:1d:64:f1:bc:ac:78:f7:61:64: d1:71:f0:7c:9e:d0:f6:98:02:34:77:f5:fe:5e:69: fb:74:4c:e5:6f:f6:1a:68:87:d2:50:e4:8c:17:0c: 82:c1:a2:7a:23:49:1b:57:5a:4f:d0:d3:a6:60:90: 9a:aa:49:f2:6d:b6:be:c5:80:be:03:eb:30:9d:96: 76:02:2a:ec:65:82:c7:3e:3e:55:c8:99:59:19:4d: 6d:3c:38:c5:35:e0:19:0e:c9:f4:ba:6c:ea:5f:31: 60:50:c1:5c:29:90:08:67:ee:4a:54:67:79:9a:9d: 3a:c7:00:2d:26:9f:17:00:24:f4:9b:25:f7:be:7b: b1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C2:22:70:C9:F1:86:E1:7B:A9:7A:9C:4E:5D:58:09:25:C7:C8:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/aaf31aab-4b95-35a5-8785-33e89424e316.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 104.156.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:86:2b:5f:5a:ff:c9:48:5b:b9:a5:54:26:45:7c:1c:47:2b: dc:15:9b:0a:60:b9:ca:58:86:2b:03:08:df:25:ba:8a:85:ed: 8d:ec:4b:6d:af:18:ad:b8:85:57:30:5f:50:a4:80:7a:af:e0: ff:95:24:ed:74:1d:5e:d1:0d:21:96:e2:71:c9:32:48:8b:33: 85:74:e5:ff:fa:6d:55:8e:b2:87:97:9a:0c:e6:24:a2:a8:c5: 91:e9:fe:c6:ae:b6:c8:e9:37:db:8b:b6:ef:df:fe:61:8e:df: fa:5e:3c:f5:9a:a3:fb:d5:d2:90:ed:f4:5f:9e:87:bc:a4:d0: 2d:5c:61:c6:6d:3e:3f:da:3f:93:e6:21:97:0f:96:95:db:c1: cd:4c:c3:0e:dd:3d:a0:eb:42:ed:0f:08:a6:3c:06:90:1c:a1: 8e:2f:62:a3:9a:62:6b:29:8e:4e:16:57:23:82:e7:ac:0a:5c: 50:57:82:c7:94:0e:9d:6c:52:29:30:90:b3:d3:f0:6b:27:5a: a6:74:2a:d3:0d:9c:09:df:87:c1:47:c0:ef:2f:8e:6c:e1:3a: 02:31:fc:28:1e:f8:21:a2:14:f7:51:a6:cb:11:69:4a:a2:b6: c4:7b:b1:28:44:fd:a8:65:08:ac:5c:dc:7c:95:da:43:60:b2: 86:9e:32:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxDKBhiX3lQ7woRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk NzU3MDcxZDMtYzI3MC00MWViLTg5ZGYtYjIyZjA0Mzk4YjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsR8643C4AZYENByfPtDYbVo1NSm4mqx2LKf 2/5tnxFlz3vqGA2mbYFDEdzOavdQdSTEaTuxxMXiAkPuUzxnYBaQVsqxULyHVZ2j bmJX55Ob575x1Z7hpWare5NBdjc3Hz+vfau7pwkZQZOsxX47Kufg/qMQbEgyx8VW 2lgdZPG8rHj3YWTRcfB8ntD2mAI0d/X+Xmn7dEzlb/YaaIfSUOSMFwyCwaJ6I0kb V1pP0NOmYJCaqknybba+xYC+A+swnZZ2AirsZYLHPj5VyJlZGU1tPDjFNeAZDsn0 umzqXzFgUMFcKZAIZ+5KVGd5mp06xwAtJp8XACT0myX3vnuxkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/CInDJ8Ybhe6l6nE5dWAklx8jhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYWFmMzFhYWItNGI5NS0z NWE1LTg3ODUtMzNlODk0MjRlMzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJxUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqGK19a/8lIW7mlVCZFfBxHK9wVmwpgucpYhisDCN8luoqF7Y3sS22v GK24hVcwX1CkgHqv4P+VJO10HV7RDSGW4nHJMkiLM4V05f/6bVWOsoeXmgzmJKKo xZHp/sautsjpN9uLtu/f/mGO3/pePPWao/vV0pDt9F+eh7yk0C1cYcZtPj/aP5Pm IZcPlpXbwc1Mww7dPaDrQu0PCKY8BpAcoY4vYqOaYmspjk4WVyOC56wKXFBXgseU Dp1sUikwkLPT8GsnWqZ0KtMNnAnfh8FHwO8vjmzhOgIx/Cge+CGiFPdRpssRaUqi tsR7sShE/ahlCKxc3HyV2kNgsoaeMsw= -----END CERTIFICATE-----Generated at Thu Apr 3 03:00:30 2025 by rpki-client