$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/eff20afa-d256-340d-8b13-7a8f9e404a25.roa File: eff20afa-d256-340d-8b13-7a8f9e404a25.roa (raw, json) Hash identifier: dvk9N1//8Cm2a0RGjH2wrOY3Qpa7+Sg7HoRnnP+y2V0= Subject key identifier: 68:E9:41:A7:18:71:08:5C:66:64:E1:55:9E:77:8B:50:7A:F3:26:1E Certificate issuer: /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c Certificate serial: 010D0C9F4328584950F965D2E229AC1F1384FF80 Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/eff20afa-d256-340d-8b13-7a8f9e404a25.roa Signing time: Wed 26 Mar 2025 13:00:53 +0000 ROA not before: Wed 26 Mar 2025 13:00:53 +0000 ROA not after: Tue 24 Jun 2025 13:00:53 +0000 asID: 21559 IP address blocks: 104.238.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:50:f9:65:d2:e2:29:ac:1f:13:84:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c Validity Not Before: Mar 26 13:00:53 2025 GMT Not After : Jun 24 13:00:53 2025 GMT Subject: CN=63afd923-4e3c-44ea-b019-ec9b5e9bd37e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e9:3f:3b:26:04:68:42:0e:cc:a0:43:87:f0: c7:ed:3d:dd:b2:47:68:11:51:e1:3c:65:7c:42:af: 0b:cd:51:9c:25:64:0b:d5:41:d7:95:34:9d:b5:64: 9a:c6:18:a8:87:1d:8a:9a:2b:37:97:79:e6:ae:49: 65:87:ee:df:ee:56:e1:8c:7f:ff:e2:91:a0:67:46: ad:4c:e4:f7:ec:04:be:05:3f:7d:d6:19:b1:f5:bc: 64:5a:cd:f3:f8:63:80:e3:2f:ea:93:5e:29:6b:24: 01:63:d4:d3:f8:79:a1:17:d2:b7:1e:f4:bd:e6:73: 87:59:df:cb:a4:fe:54:ef:bd:60:bf:3b:49:ff:bc: 40:39:ce:20:55:e9:5b:db:0c:1f:7a:26:ea:f2:d8: 5c:e6:57:a6:69:00:de:97:a5:61:bf:4c:81:df:2b: 51:11:79:3a:d5:c4:95:9d:52:47:e4:b3:02:e2:90: 5b:b2:87:95:9f:ea:1e:27:7c:a2:1b:d7:c5:6b:e7: 14:c7:46:4f:f9:eb:4a:67:c9:28:a9:e1:2c:1d:15: c6:38:10:3e:71:23:b8:7e:db:32:ec:23:ce:96:1e: 8c:88:fd:da:f2:c4:df:ff:00:45:43:df:63:e8:18: 37:fd:0b:29:07:23:4b:c7:bb:e9:3b:9d:f6:09:91: fb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E9:41:A7:18:71:08:5C:66:64:E1:55:9E:77:8B:50:7A:F3:26:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/eff20afa-d256-340d-8b13-7a8f9e404a25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl X509v3 Authority Key Identifier: keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer sbgp-ipAddrBlock: critical IPv4: 104.238.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:41:70:94:b0:c7:f9:89:04:1c:34:8f:f8:8a:f4:00:c7:bd: 07:c7:49:78:95:e3:0c:e0:d2:0c:0b:6b:af:88:a4:35:e1:73: 4a:4a:8f:01:a7:24:1c:eb:7a:ed:58:70:0e:b5:7d:f2:cd:f2: 0b:05:ee:bf:a1:a3:91:c7:4e:1d:a5:fd:2c:81:ce:35:81:95: e1:e0:a6:91:f9:7d:a2:83:62:cf:0f:f6:22:6b:e9:7b:e0:97: 12:b6:de:d9:60:23:00:ff:05:b8:20:92:bb:5e:fa:06:34:6c: 3d:d4:a0:70:88:76:91:a2:f2:e9:49:ef:d1:26:ef:0d:ca:77: ef:5b:0c:6d:da:a9:09:57:7b:63:bd:e0:18:b1:92:64:bd:f9: b5:9b:96:4c:f5:41:2f:a8:f7:e4:89:3d:c5:fd:a8:c1:c1:21: 7a:ed:97:3c:2c:ae:48:ca:36:3d:d9:f8:f4:2d:d9:c9:48:f5: ff:34:03:54:ec:6a:58:56:16:cd:1b:a5:e4:e3:c0:94:1c:55: 99:f1:c1:d8:f1:95:27:d5:f5:4a:79:0d:32:d1:b1:1f:c1:85: 74:10:9c:c5:3a:1b:01:ce:f1:b8:2d:15:d7:cb:60:3a:21:97: 2e:31:17:78:f3:5c:a6:83:cd:cb:b0:a5:44:c9:97:a7:dc:0c: 23:95:f4:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElQ+WXS4imsHxOE/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTMwMWJkMGYtYzgwYS00MTU4LTlhZGEtZjUwNmJhZTBh YTNjMB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk NjNhZmQ5MjMtNGUzYy00NGVhLWIwMTktZWM5YjVlOWJkMzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+k/OyYEaEIOzKBDh/DH7T3dskdoEVHhPGV8 Qq8LzVGcJWQL1UHXlTSdtWSaxhiohx2Kmis3l3nmrkllh+7f7lbhjH//4pGgZ0at TOT37AS+BT991hmx9bxkWs3z+GOA4y/qk14payQBY9TT+HmhF9K3HvS95nOHWd/L pP5U771gvztJ/7xAOc4gVelb2wwfeibq8thc5lemaQDel6Vhv0yB3ytREXk61cSV nVJH5LMC4pBbsoeVn+oeJ3yiG9fFa+cUx0ZP+etKZ8koqeEsHRXGOBA+cSO4ftsy 7CPOlh6MiP3a8sTf/wBFQ99j6Bg3/QspByNLx7vpO532CZH7PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjpQacYcQhcZmThVZ53i1B68yYeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzAx YmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2YmFlMGFhM2MvZWZmMjBhZmEtZDI1Ni0z NDBkLThiMTMtN2E4ZjllNDA0YTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTMwMWJkMGYtYzgwYS00MTU4LTlh ZGEtZjUwNmJhZTBhYTNjL2UzMDFiZDBmLWM4MGEtNDE1OC05YWRhLWY1MDZiYWUw YWEzYy5jcmwwHwYDVR0jBBgwFoAU2+tyG9DCXdrpdTdqrZ80dv4slR8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMzAxYmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2 YmFlMGFhM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaO7oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZBcJSwx/mJBBw0j/iK9ADHvQfHSXiV4wzg0gwLa6+IpDXhc0pKjwGn JBzreu1YcA61ffLN8gsF7r+ho5HHTh2l/SyBzjWBleHgppH5faKDYs8P9iJr6Xvg lxK23tlgIwD/Bbggkrte+gY0bD3UoHCIdpGi8ulJ79Em7w3Kd+9bDG3aqQlXe2O9 4BixkmS9+bWblkz1QS+o9+SJPcX9qMHBIXrtlzwsrkjKNj3Z+PQt2clI9f80A1Ts alhWFs0bpeTjwJQcVZnxwdjxlSfV9Up5DTLRsR/BhXQQnMU6GwHO8bgtFdfLYDoh ly4xF3jzXKaDzcuwpUTJl6fcDCOV9DQ= -----END CERTIFICATE-----Generated at Sat Apr 12 13:07:06 2025 by rpki-client