$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/b843c24c-9470-32c3-9572-a733f7a4b73d.roa File: b843c24c-9470-32c3-9572-a733f7a4b73d.roa (raw, json) Hash identifier: N14eN5hC9/CiRb8Wf/DF81mS7whrOQejRAaULGvXdNg= Subject key identifier: 7D:6E:90:FB:41:3F:24:96:F4:C2:20:E7:07:02:CD:F7:3A:6D:12:4D Certificate issuer: /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Certificate serial: 010D0C9F432858491110846EAF2A3E72FC2B7500 Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/b843c24c-9470-32c3-9572-a733f7a4b73d.roa Signing time: Mon 03 Mar 2025 15:35:51 +0000 ROA not before: Mon 03 Mar 2025 15:35:51 +0000 ROA not after: Sun 01 Jun 2025 14:35:51 +0000 asID: 21782 IP address blocks: 104.156.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:11:10:84:6e:af:2a:3e:72:fc:2b:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Validity Not Before: Mar 3 15:35:51 2025 GMT Not After : Jun 1 14:35:51 2025 GMT Subject: CN=ca2335c1-ab9e-42be-9ddc-26598ac9671f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f6:6c:15:bf:2b:7d:35:82:82:5a:03:04:b3: 05:81:0d:fd:66:fd:20:33:b7:5c:b5:53:8a:73:83: b0:e1:0a:a2:c5:de:b3:a6:4f:14:4b:b7:3b:27:bc: 24:dc:b7:36:fc:30:e8:b3:87:0c:3a:25:ed:17:a8: b5:d3:43:74:ae:39:49:31:96:7f:ff:cb:42:57:6f: 38:ca:fb:e6:f2:d5:e3:a1:6c:7a:35:9c:56:a7:ba: 80:9d:1f:8c:d4:8e:8a:dc:f3:ff:26:da:fa:49:e1: 5b:21:ac:e6:df:93:a7:e9:d2:0d:e3:5b:67:1d:f4: 5a:db:f1:23:91:d7:0f:40:23:ab:6a:fd:e1:8f:52: 7f:25:dd:f7:00:e6:42:7a:ea:34:8a:be:be:0e:69: 1c:1d:4d:cc:8e:62:b3:f2:3e:41:99:89:2b:2d:e5: ee:a2:5f:5e:25:75:98:b4:20:0a:86:18:15:0c:1e: 3f:cf:63:81:85:d1:8c:0d:ed:cc:f1:a8:14:cb:89: a4:0e:47:c7:43:9d:99:c9:3a:ac:64:f2:49:c8:ba: 3b:ca:cf:c0:7f:16:f1:99:e9:18:9a:35:57:49:87: 0d:e7:11:25:be:4c:f8:f6:6e:7c:de:1b:33:d2:35: f9:23:71:16:af:97:a7:72:34:78:e3:31:09:3a:e0: 18:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:6E:90:FB:41:3F:24:96:F4:C2:20:E7:07:02:CD:F7:3A:6D:12:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/b843c24c-9470-32c3-9572-a733f7a4b73d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl X509v3 Authority Key Identifier: keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer sbgp-ipAddrBlock: critical IPv4: 104.156.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:a6:f1:ee:1c:26:16:27:da:a4:71:9d:33:84:d1:87:83:21: 39:da:08:0d:b5:5f:f2:e8:c0:45:02:e5:45:35:a0:dd:49:5f: 75:21:e1:12:dd:a9:51:f0:41:7b:31:ed:4d:b2:19:a6:ee:7b: 13:9f:b1:62:d3:a9:97:c5:2a:f0:33:28:89:9c:37:d6:28:67: 57:e0:24:de:f8:a9:64:b2:43:c3:77:06:bb:ac:d1:3a:b2:55: 48:1a:d0:1e:6c:bc:41:dd:51:14:2c:b0:7f:44:26:fd:9a:e6: a1:7a:58:ed:25:a4:1a:58:9b:9c:c6:08:0a:11:94:a0:25:0d: c4:ae:94:04:57:90:44:14:41:ac:90:0b:3d:26:a0:25:18:fe: a6:20:c1:cc:68:58:22:5c:e2:d3:0f:43:ab:0d:ce:82:62:ed: f9:20:c6:59:a0:49:81:17:07:45:81:e3:27:47:6e:69:e3:d4: 85:0c:bb:4e:5e:c9:77:89:e4:f8:5f:18:95:8e:2b:37:20:2e: bb:97:2d:f5:4f:7a:d9:a9:0b:7a:5d:a8:9a:ab:86:d1:b1:5d: fd:3a:54:d1:2b:f6:34:b4:6d:57:e6:65:02:21:c1:20:0f:46: 68:a8:22:b1:39:bd:80:11:29:40:98:fb:58:0c:be:6a:38:5e: 29:d6:91:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkREIRuryo+cvwrdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM3ZGJjZDUtZDZiYi00YTg5LTk4YWUtZTI1NTBlYTNl OTNhMB4XDTI1MDMwMzE1MzU1MVoXDTI1MDYwMTE0MzU1MVowLzEtMCsGA1UEAxMk Y2EyMzM1YzEtYWI5ZS00MmJlLTlkZGMtMjY1OThhYzk2NzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/ZsFb8rfTWCgloDBLMFgQ39Zv0gM7dctVOK c4Ow4Qqixd6zpk8US7c7J7wk3Lc2/DDos4cMOiXtF6i100N0rjlJMZZ//8tCV284 yvvm8tXjoWx6NZxWp7qAnR+M1I6K3PP/Jtr6SeFbIazm35On6dIN41tnHfRa2/Ej kdcPQCOrav3hj1J/Jd33AOZCeuo0ir6+DmkcHU3MjmKz8j5BmYkrLeXuol9eJXWY tCAKhhgVDB4/z2OBhdGMDe3M8agUy4mkDkfHQ52ZyTqsZPJJyLo7ys/AfxbxmekY mjVXSYcN5xElvkz49m583hsz0jX5I3EWr5encjR44zEJOuAYewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1ukPtBPySW9MIg5wcCzfc6bRJNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Yzdk YmNkNS1kNmJiLTRhODktOThhZS1lMjU1MGVhM2U5M2EvYjg0M2MyNGMtOTQ3MC0z MmMzLTk1NzItYTczM2Y3YTRiNzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGM3ZGJjZDUtZDZiYi00YTg5LTk4 YWUtZTI1NTBlYTNlOTNhLzhjN2RiY2Q1LWQ2YmItNGE4OS05OGFlLWUyNTUwZWEz ZTkzYS5jcmwwHwYDVR0jBBgwFoAUAzePKejZd54MxR716MslpAwKWwIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84YzdkYmNkNS1kNmJiLTRhODktOThhZS1lMjU1 MGVhM2U5M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaJwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSm8e4cJhYn2qRxnTOE0YeDITnaCA21X/LowEUC5UU1oN1JX3Uh4RLd qVHwQXsx7U2yGabuexOfsWLTqZfFKvAzKImcN9YoZ1fgJN74qWSyQ8N3Brus0Tqy VUga0B5svEHdURQssH9EJv2a5qF6WO0lpBpYm5zGCAoRlKAlDcSulARXkEQUQayQ Cz0moCUY/qYgwcxoWCJc4tMPQ6sNzoJi7fkgxlmgSYEXB0WB4ydHbmnj1IUMu05e yXeJ5PhfGJWOKzcgLruXLfVPetmpC3pdqJqrhtGxXf06VNEr9jS0bVfmZQIhwSAP RmioIrE5vYARKUCY+1gMvmo4XinWkZA= -----END CERTIFICATE-----Generated at Sun Apr 6 21:25:53 2025 by rpki-client