$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1cd03f73-c2eb-3271-91b1-9de65564f3a8.roa File: 1cd03f73-c2eb-3271-91b1-9de65564f3a8.roa (raw, json) Hash identifier: Yn5VCqQ0grUc5W//tmtD87WfEGuKy2yaOLQxBGUFLZA= Subject key identifier: EB:41:23:E4:3B:AD:B9:C7:4E:CD:49:6B:66:F0:49:96:CC:14:41:54 Certificate issuer: /CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Certificate serial: 010D0C9F432858495ABEDEA4B5D78AA00A5D2940 Authority key identifier: B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1cd03f73-c2eb-3271-91b1-9de65564f3a8.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 40788 IP address blocks: 104.193.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:de:a4:b5:d7:8a:a0:0a:5d:29:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=b2a41965-2d99-46b8-9c71-aa2db51d628b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:bf:98:7b:87:b0:b5:d3:b5:d4:ac:a3:43:6f: 1e:f3:a5:2c:f2:a7:85:07:a7:4a:ba:b5:36:21:9c: 99:fa:40:ba:36:d8:b3:32:ff:cf:75:33:7d:aa:53: d3:12:23:35:a6:57:e1:95:2c:55:63:f3:c5:25:66: d5:9d:07:30:92:92:eb:2f:11:a3:f8:80:76:47:1b: a2:46:e4:04:03:25:75:fa:e5:1f:b9:cb:cb:e1:a5: 1e:53:a3:bc:4e:0e:cd:f2:73:b7:e1:16:e5:63:8d: a1:91:b7:35:35:db:c1:84:73:2f:b6:eb:6b:d9:ab: 43:ef:3a:bf:7c:e8:81:25:a4:b5:b3:8b:5a:d3:ee: cb:67:63:dc:6f:ce:19:f2:17:ed:da:a6:e3:2b:42: d3:e8:ac:01:70:5c:57:9c:33:74:dd:3b:43:91:a9: 89:fb:05:e7:dc:62:e7:ad:96:8a:3b:47:2c:92:a9: ef:44:e1:d7:5e:7f:f4:bb:f4:03:1f:46:c3:84:00: e1:43:2a:e3:66:85:0b:7f:6a:6c:34:15:45:00:1e: 3e:56:2d:cf:b1:1a:51:70:5b:6f:84:7d:f9:fc:ba: 6f:cb:bd:59:02:64:56:f2:f7:df:ff:26:fe:db:14: 39:1a:9d:73:c7:0b:0c:63:fd:e9:41:2d:17:09:d9: 65:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:41:23:E4:3B:AD:B9:C7:4E:CD:49:6B:66:F0:49:96:CC:14:41:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1cd03f73-c2eb-3271-91b1-9de65564f3a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl X509v3 Authority Key Identifier: keyid:B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer sbgp-ipAddrBlock: critical IPv4: 104.193.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:95:33:a0:1d:d8:58:43:e6:69:cf:7e:bc:0d:a5:ca:28:3c: 4e:7b:13:e9:4c:d7:4e:d4:95:ef:04:7a:53:97:f5:cb:c4:cd: 7d:15:15:15:6f:7c:de:41:5f:a4:0d:49:c0:7f:37:49:2c:03: 8b:f7:a2:bb:bb:c2:70:49:86:92:49:8b:9b:70:07:2c:be:f3: ab:15:b7:45:bf:2c:dd:d3:2a:3a:78:b7:3e:a8:08:6d:39:80: 4e:01:74:cb:95:34:ba:41:7a:9a:21:b3:db:1f:b3:79:7d:60: bc:7e:cd:84:ed:e5:25:17:63:7e:55:86:b7:b4:3b:6b:c7:86: 09:21:4e:9a:a2:b6:60:18:fc:07:1e:e8:52:28:e0:77:e1:2a: 07:2b:61:40:e6:82:e2:ff:3f:6b:19:41:cd:e5:25:6a:b9:54: 0f:35:da:6f:23:f8:ba:5d:55:6b:0f:4d:66:86:51:76:e9:de: c5:69:46:d9:e1:4f:7a:36:4b:ba:af:17:7f:59:50:0b:43:60: c2:89:a5:f9:7f:ce:66:ff:4b:6f:29:d7:a9:06:99:ce:f4:c2: 75:7f:71:f2:93:d5:78:a4:b4:45:f1:47:7a:61:2f:bb:6b:ab: 39:99:54:b0:75:f8:d4:86:66:54:dd:e8:4b:0d:8f:8f:93:46: 1e:f4:00:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavt6ktdeKoApdKUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWMyOWEwYmUtNzJhOC00ODk0LThjMGMtZjRkMjZlM2Fl MDU5MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk YjJhNDE5NjUtMmQ5OS00NmI4LTljNzEtYWEyZGI1MWQ2MjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3b+Ye4ewtdO11KyjQ28e86Us8qeFB6dKurU2 IZyZ+kC6NtizMv/PdTN9qlPTEiM1plfhlSxVY/PFJWbVnQcwkpLrLxGj+IB2Rxui RuQEAyV1+uUfucvL4aUeU6O8Tg7N8nO34RblY42hkbc1NdvBhHMvtutr2atD7zq/ fOiBJaS1s4ta0+7LZ2Pcb84Z8hft2qbjK0LT6KwBcFxXnDN03TtDkamJ+wXn3GLn rZaKO0cskqnvROHXXn/0u/QDH0bDhADhQyrjZoULf2psNBVFAB4+Vi3PsRpRcFtv hH35/Lpvy71ZAmRW8vff/yb+2xQ5Gp1zxwsMY/3pQS0XCdll7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtBI+Q7rbnHTs1Ja2bwSZbMFEFUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5 YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQyNmUzYWUwNTkvMWNkMDNmNzMtYzJlYi0z MjcxLTkxYjEtOWRlNjU1NjRmM2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWMyOWEwYmUtNzJhOC00ODk0LThj MGMtZjRkMjZlM2FlMDU5LzFjMjlhMGJlLTcyYTgtNDg5NC04YzBjLWY0ZDI2ZTNh ZTA1OS5jcmwwHwYDVR0jBBgwFoAUt+lHh3Pe7UatcsY/Em0QrrFWmR4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQy NmUzYWUwNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaME4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6VM6Ad2FhD5mnPfrwNpcooPE57E+lM107Ule8EelOX9cvEzX0VFRVv fN5BX6QNScB/N0ksA4v3oru7wnBJhpJJi5twByy+86sVt0W/LN3TKjp4tz6oCG05 gE4BdMuVNLpBepohs9sfs3l9YLx+zYTt5SUXY35Vhre0O2vHhgkhTpqitmAY/Ace 6FIo4HfhKgcrYUDmguL/P2sZQc3lJWq5VA812m8j+LpdVWsPTWaGUXbp3sVpRtnh T3o2S7qvF39ZUAtDYMKJpfl/zmb/S28p16kGmc70wnV/cfKT1XiktEXxR3phL7tr qzmZVLB1+NSGZlTd6EsNj4+TRh70AAw= -----END CERTIFICATE-----Generated at Tue Apr 8 14:42:37 2025 by rpki-client