$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/d040ec9d-d8f4-31f2-a2d8-fd6142194dea.roa File: d040ec9d-d8f4-31f2-a2d8-fd6142194dea.roa (raw, json) Hash identifier: xkRc/U5HdeEp2HlJGIXglK7SFZ4dM+gvX9W3l9rhu20= Subject key identifier: 6B:10:44:7B:2F:8A:B5:76:5B:39:B4:14:60:E7:7B:30:BE:88:08:65 Certificate issuer: /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c Certificate serial: 010D0C9F43285848A830B2723F91A972D980F7C0 Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/d040ec9d-d8f4-31f2-a2d8-fd6142194dea.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 6208 IP address blocks: 104.238.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:b2:72:3f:91:a9:72:d9:80:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=14484958-9fc7-4ecb-ae20-98a810b642d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:43:f3:28:eb:dc:bc:72:68:34:a7:f7:37:8c: 10:50:6d:49:4c:02:c7:36:fb:e0:93:34:3b:f1:48: 79:b7:55:ed:24:bc:00:4c:ab:dd:28:c3:87:2d:32: 47:ad:cc:71:e3:1c:fd:7d:9e:24:b1:78:c0:f7:59: 89:a6:87:6b:3e:3e:05:d2:82:30:71:b8:3f:61:aa: 9b:7f:7c:f5:49:06:52:c8:2c:de:05:cc:da:91:01: ea:ac:25:67:dd:52:69:28:96:5c:4e:31:f0:30:9d: e8:6d:0a:ae:f3:5c:b4:03:98:87:cb:5a:3c:56:29: d8:ce:0d:1a:91:ba:ed:de:64:e5:8d:80:f8:d4:83: e8:d2:30:7b:bc:0d:9d:7c:ca:e3:15:30:b3:65:bf: d1:fb:21:34:cd:27:e4:bb:29:cb:83:cf:ba:e6:08: 22:58:48:3a:06:f2:55:f6:88:6b:28:97:06:5f:cf: 78:39:ff:f7:c1:da:5f:74:a7:04:88:aa:28:c2:bb: a2:72:c0:50:1f:47:7a:92:ad:5f:06:82:8a:3c:0d: 4e:8c:c5:22:fb:04:51:5f:24:cb:69:a8:7b:82:c7: 5f:4d:3e:7b:86:f3:a2:12:5a:77:72:6f:7e:17:2e: 96:74:a6:6a:36:e2:11:b5:e6:34:34:9f:68:6d:34: ff:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:10:44:7B:2F:8A:B5:76:5B:39:B4:14:60:E7:7B:30:BE:88:08:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/d040ec9d-d8f4-31f2-a2d8-fd6142194dea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl X509v3 Authority Key Identifier: keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer sbgp-ipAddrBlock: critical IPv4: 104.238.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:09:c0:17:63:8e:24:f9:56:24:28:ee:45:6c:f0:d8:b1:6e: a2:ff:d7:d3:22:ba:c1:ce:17:d2:99:9b:1d:e7:ea:a7:ed:5f: e7:de:4e:02:84:1d:cf:b6:2d:40:0c:f9:75:7c:52:9d:06:aa: 64:14:1c:24:ab:01:2c:cd:9f:c4:0b:bd:89:d1:a8:cf:5a:60: e9:ab:86:79:6f:a6:01:a8:bb:d7:92:f5:38:7f:ba:9e:45:f1: d0:51:d9:5a:c6:a0:d5:f1:4a:77:41:75:d2:c3:16:24:fa:5c: 8c:9c:40:ec:d3:2a:6d:ec:c6:67:17:fb:80:9d:7a:b6:b4:ed: f4:74:81:4b:6a:2e:40:1b:e0:a8:1e:e0:79:76:bb:dc:c4:03: de:4c:a4:01:16:1f:08:74:b0:02:c8:31:f1:31:0e:74:22:30: 36:9c:e5:c9:d1:bd:c3:7a:0b:eb:2a:9d:c4:91:37:cc:50:26: 44:7a:12:ab:6e:4d:61:48:7d:84:89:9a:cd:d0:27:11:87:3e: 3d:e3:2a:22:14:d4:90:6f:94:00:46:af:41:2d:a6:dc:52:84: f3:ab:ad:40:46:b1:24:27:dd:5f:81:13:2b:b5:eb:ec:cf:51: a3:d3:e5:c7:1c:75:47:48:23:f8:cd:98:ac:b1:a4:63:80:97: 1b:8f:e9:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMLJyP5GpctmA98AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTMwMWJkMGYtYzgwYS00MTU4LTlhZGEtZjUwNmJhZTBh YTNjMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk MTQ0ODQ5NTgtOWZjNy00ZWNiLWFlMjAtOThhODEwYjY0MmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskPzKOvcvHJoNKf3N4wQUG1JTALHNvvgkzQ7 8Uh5t1XtJLwATKvdKMOHLTJHrcxx4xz9fZ4ksXjA91mJpodrPj4F0oIwcbg/Yaqb f3z1SQZSyCzeBczakQHqrCVn3VJpKJZcTjHwMJ3obQqu81y0A5iHy1o8VinYzg0a kbrt3mTljYD41IPo0jB7vA2dfMrjFTCzZb/R+yE0zSfkuynLg8+65ggiWEg6BvJV 9ohrKJcGX894Of/3wdpfdKcEiKoowruicsBQH0d6kq1fBoKKPA1OjMUi+wRRXyTL aah7gsdfTT57hvOiElp3cm9+Fy6WdKZqNuIRteY0NJ9obTT/BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsQRHsvirV2Wzm0FGDnezC+iAhlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzAx YmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2YmFlMGFhM2MvZDA0MGVjOWQtZDhmNC0z MWYyLWEyZDgtZmQ2MTQyMTk0ZGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTMwMWJkMGYtYzgwYS00MTU4LTlh ZGEtZjUwNmJhZTBhYTNjL2UzMDFiZDBmLWM4MGEtNDE1OC05YWRhLWY1MDZiYWUw YWEzYy5jcmwwHwYDVR0jBBgwFoAU2+tyG9DCXdrpdTdqrZ80dv4slR8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMzAxYmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2 YmFlMGFhM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO7CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQJwBdjjiT5ViQo7kVs8NixbqL/19MiusHOF9KZmx3n6qftX+feTgKE Hc+2LUAM+XV8Up0GqmQUHCSrASzNn8QLvYnRqM9aYOmrhnlvpgGou9eS9Th/up5F 8dBR2VrGoNXxSndBddLDFiT6XIycQOzTKm3sxmcX+4Cdera07fR0gUtqLkAb4Kge 4Hl2u9zEA95MpAEWHwh0sALIMfExDnQiMDac5cnRvcN6C+sqncSRN8xQJkR6Eqtu TWFIfYSJms3QJxGHPj3jKiIU1JBvlABGr0EtptxShPOrrUBGsSQn3V+BEyu16+zP UaPT5cccdUdII/jNmKyxpGOAlxuP6aE= -----END CERTIFICATE-----Generated at Sat Apr 12 15:01:08 2025 by rpki-client