$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/ff0d513b-a80f-3c68-9a25-c35917b33ec7.roa File: ff0d513b-a80f-3c68-9a25-c35917b33ec7.roa (raw, json) Hash identifier: XHXRNeYAFkYnenGNdgBPlXuX/Gg6z/rMs3PUHcrBAh4= Subject key identifier: 80:08:53:D9:F4:84:D4:32:42:BF:5C:D5:4E:E7:39:3C:D5:51:75:13 Certificate issuer: /CN=d648fae7-947d-4ab0-9d26-c1da38e440ef Certificate serial: 010D0C9F43285849304F1810031159629E43E984 Authority key identifier: 80:F3:A0:CA:9D:A0:E2:FB:A9:DA:8F:01:3B:CE:DC:E3:7F:C0:C6:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/ff0d513b-a80f-3c68-9a25-c35917b33ec7.roa Signing time: Fri 14 Mar 2025 20:11:59 +0000 ROA not before: Fri 14 Mar 2025 20:11:59 +0000 ROA not after: Thu 12 Jun 2025 20:11:59 +0000 asID: 7029 IP address blocks: 172.82.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/d648fae7-947d-4ab0-9d26-c1da38e440ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/d648fae7-947d-4ab0-9d26-c1da38e440ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:4f:18:10:03:11:59:62:9e:43:e9:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d648fae7-947d-4ab0-9d26-c1da38e440ef Validity Not Before: Mar 14 20:11:59 2025 GMT Not After : Jun 12 20:11:59 2025 GMT Subject: CN=cd03731e-3beb-4ce8-9495-c2330b17060c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:26:2b:82:fb:c6:2e:01:4c:11:84:b2:6d:04: 5b:ba:bd:0f:ff:cc:b3:d8:6e:b0:09:bf:1b:e1:f3: cc:1f:e8:cd:45:53:de:2e:73:da:36:66:9a:58:73: 0a:03:74:09:9b:e4:a7:9f:69:93:92:68:3c:5b:45: 0c:9d:cc:0f:00:8e:49:f9:f5:6a:64:09:84:f7:b2: e1:89:de:98:15:40:d3:6d:18:8a:f0:fa:c9:82:f2: 85:54:4a:1a:3e:5e:d9:ef:28:91:9e:8e:fd:b1:a0: bf:95:30:d7:43:10:e4:6b:07:8d:80:f4:b0:69:61: 30:79:8e:d2:1e:78:3b:29:b5:4d:e0:8a:f0:85:1a: 99:c2:c2:c1:0b:b6:9e:a4:19:4d:d7:ac:60:07:44: 21:f8:fb:f4:16:2b:aa:11:f8:ac:fa:de:8e:03:65: a4:d4:34:a2:3e:c5:5c:6a:d8:25:c5:a7:60:59:05: c1:7a:5d:2d:75:20:05:68:01:85:4a:80:2d:b2:1d: 29:6c:85:5a:47:89:92:48:3f:a9:b6:30:93:a7:86: 56:71:9b:dc:8a:43:5d:2e:2b:5f:c6:b4:3b:29:e6: 93:75:e4:41:1e:fb:33:23:7d:ba:1f:b4:c7:58:74: f6:46:8f:05:6a:81:b1:b7:db:1f:87:a1:7c:f3:bb: ab:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:08:53:D9:F4:84:D4:32:42:BF:5C:D5:4E:E7:39:3C:D5:51:75:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/ff0d513b-a80f-3c68-9a25-c35917b33ec7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/d648fae7-947d-4ab0-9d26-c1da38e440ef.crl X509v3 Authority Key Identifier: keyid:80:F3:A0:CA:9D:A0:E2:FB:A9:DA:8F:01:3B:CE:DC:E3:7F:C0:C6:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef.cer sbgp-ipAddrBlock: critical IPv4: 172.82.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:d9:4a:79:2c:3c:fc:13:67:08:a6:e0:12:6e:17:93:03:9d: a2:2c:61:93:48:22:df:6f:6b:f3:16:b7:af:bb:1a:1b:e5:db: b3:1d:f4:12:57:fc:89:46:5e:20:c1:90:92:9b:ba:57:65:a6: f6:ed:fb:de:7f:f1:76:9d:e4:37:df:51:20:5c:42:dc:fa:64: c7:74:a1:25:5e:fb:fc:3f:a3:16:53:33:2c:31:9f:a2:54:c3: ef:62:65:7f:c1:bf:64:02:41:91:32:a8:a6:0a:13:5b:10:26: 70:09:a0:a1:e3:17:04:1e:61:da:4d:a4:9a:29:27:4f:3d:5a: f8:67:54:0b:24:e1:d0:51:55:e8:c9:f8:c2:14:d8:ab:3c:67: 2e:cb:57:fe:d5:ab:91:03:a8:44:ad:f1:26:1d:ec:4d:63:0b: 86:fe:8a:67:25:9b:d2:70:66:c3:b4:d0:af:f9:18:4c:f0:15: 55:d5:b5:54:e3:2b:82:d6:19:2f:b5:be:3d:bb:3c:23:ac:f5: e8:00:83:89:1f:5d:30:e8:f1:ff:13:8f:b5:ee:01:84:0f:93: 6b:be:8b:da:d7:0d:11:2f:53:3c:df:bf:4b:94:0d:aa:9d:84: 0b:f5:e5:2d:ad:95:2b:e2:cc:67:42:3b:33:88:f4:a5:75:ef: bb:18:56:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkwTxgQAxFZYp5D6YQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY0OGZhZTctOTQ3ZC00YWIwLTlkMjYtYzFkYTM4ZTQ0 MGVmMB4XDTI1MDMxNDIwMTE1OVoXDTI1MDYxMjIwMTE1OVowLzEtMCsGA1UEAxMk Y2QwMzczMWUtM2JlYi00Y2U4LTk0OTUtYzIzMzBiMTcwNjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCYrgvvGLgFMEYSybQRbur0P/8yz2G6wCb8b 4fPMH+jNRVPeLnPaNmaaWHMKA3QJm+Snn2mTkmg8W0UMncwPAI5J+fVqZAmE97Lh id6YFUDTbRiK8PrJgvKFVEoaPl7Z7yiRno79saC/lTDXQxDkaweNgPSwaWEweY7S Hng7KbVN4IrwhRqZwsLBC7aepBlN16xgB0Qh+Pv0FiuqEfis+t6OA2Wk1DSiPsVc atglxadgWQXBel0tdSAFaAGFSoAtsh0pbIVaR4mSSD+ptjCTp4ZWcZvcikNdLitf xrQ7KeaTdeRBHvszI326H7THWHT2Ro8FaoGxt9sfh6F887urbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAIU9n0hNQyQr9c1U7nOTzVUXUTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNjQ4 ZmFlNy05NDdkLTRhYjAtOWQyNi1jMWRhMzhlNDQwZWYvZmYwZDUxM2ItYTgwZi0z YzY4LTlhMjUtYzM1OTE3YjMzZWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDY0OGZhZTctOTQ3ZC00YWIwLTlk MjYtYzFkYTM4ZTQ0MGVmL2Q2NDhmYWU3LTk0N2QtNGFiMC05ZDI2LWMxZGEzOGU0 NDBlZi5jcmwwHwYDVR0jBBgwFoAUgPOgyp2g4vup2o8BO87c43/AxuIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNjQ4ZmFlNy05NDdkLTRhYjAtOWQyNi1jMWRh MzhlNDQwZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFJoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXZSnksPPwTZwim4BJuF5MDnaIsYZNIIt9va/MWt6+7Ghvl27Md9BJX /IlGXiDBkJKbuldlpvbt+95/8Xad5DffUSBcQtz6ZMd0oSVe+/w/oxZTMywxn6JU w+9iZX/Bv2QCQZEyqKYKE1sQJnAJoKHjFwQeYdpNpJopJ089WvhnVAsk4dBRVejJ +MIU2Ks8Zy7LV/7Vq5EDqESt8SYd7E1jC4b+imclm9JwZsO00K/5GEzwFVXVtVTj K4LWGS+1vj27PCOs9egAg4kfXTDo8f8Tj7XuAYQPk2u+i9rXDREvUzzfv0uUDaqd hAv15S2tlSvizGdCOzOI9KV177sYVnc= -----END CERTIFICATE-----Generated at Sat Apr 5 22:26:33 2025 by rpki-client