$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b7151e5-64cf-4efa-968e-47796f2f7523/7328d350-a18c-3f29-847c-d151d2597c2b.roa File: 7328d350-a18c-3f29-847c-d151d2597c2b.roa (raw, json) Hash identifier: Ghe102eWxfrTo3yDaWIdEB0b3/sKXH2ntJMAbRHGCvk= Subject key identifier: 31:9E:48:E7:D3:9D:15:7A:22:D2:83:33:28:61:22:73:2A:CB:0D:40 Certificate issuer: /CN=1b7151e5-64cf-4efa-968e-47796f2f7523 Certificate serial: 010D0C9F43285848E9CBE08B356D8E731643AAC0 Authority key identifier: CE:CA:18:2C:24:A5:DF:87:16:2C:E1:A2:FD:5E:B0:55:E0:7A:CE:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b7151e5-64cf-4efa-968e-47796f2f7523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b7151e5-64cf-4efa-968e-47796f2f7523/7328d350-a18c-3f29-847c-d151d2597c2b.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 16995 IP address blocks: 104.218.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b7151e5-64cf-4efa-968e-47796f2f7523/1b7151e5-64cf-4efa-968e-47796f2f7523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b7151e5-64cf-4efa-968e-47796f2f7523/1b7151e5-64cf-4efa-968e-47796f2f7523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b7151e5-64cf-4efa-968e-47796f2f7523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:e0:8b:35:6d:8e:73:16:43:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b7151e5-64cf-4efa-968e-47796f2f7523 Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=dbaa8ad0-d464-4c11-8521-33f6eef37bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a2:00:3d:5b:a8:03:5b:73:a0:8f:96:7f:0f: 7a:45:ef:39:e5:28:91:74:ad:49:ca:3c:39:0f:72: 01:c7:8e:60:0e:27:8d:53:33:f6:b8:fb:3d:01:06: a4:75:68:e6:75:9a:a9:ca:0e:da:99:7a:ab:ca:5c: 7d:94:29:c1:10:a3:d3:de:d7:02:81:89:56:28:44: 65:84:7a:93:54:fa:e5:3f:32:83:43:c0:00:79:9b: 5b:b5:25:c3:9e:a2:cc:67:7f:34:37:12:75:0b:20: c4:0e:9b:84:b9:84:dd:49:7e:c0:43:79:8c:76:57: 7a:11:c2:89:f4:db:b1:c4:ba:ae:06:d1:c4:d0:80: 99:c3:d2:56:45:23:68:20:4c:48:e1:0d:8f:c0:8b: e3:22:01:e2:50:c4:7a:c8:bd:8b:56:2f:2d:a2:d9: 99:42:15:00:e4:66:a8:09:c4:c4:2f:ce:1d:6b:46: bf:a0:c5:4e:d1:ed:e0:a4:a4:6b:1b:c6:90:0c:f2: dd:6c:81:47:90:24:99:e4:d0:16:e4:b8:1f:2c:8e: 22:35:7e:89:ff:ef:c5:7d:ba:ac:89:93:95:73:0a: 9a:ea:7e:0d:de:bc:15:4d:c2:7f:db:76:41:29:ea: 52:42:5c:8d:d6:59:47:c2:4d:59:24:79:ad:36:e7: e6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:9E:48:E7:D3:9D:15:7A:22:D2:83:33:28:61:22:73:2A:CB:0D:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b7151e5-64cf-4efa-968e-47796f2f7523/7328d350-a18c-3f29-847c-d151d2597c2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b7151e5-64cf-4efa-968e-47796f2f7523/1b7151e5-64cf-4efa-968e-47796f2f7523.crl X509v3 Authority Key Identifier: keyid:CE:CA:18:2C:24:A5:DF:87:16:2C:E1:A2:FD:5E:B0:55:E0:7A:CE:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b7151e5-64cf-4efa-968e-47796f2f7523.cer sbgp-ipAddrBlock: critical IPv4: 104.218.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:6b:e5:6c:b7:58:0b:41:77:9e:b8:b8:14:7c:bb:35:62:be: c7:69:e4:cd:cc:4d:7c:db:ea:b4:06:04:09:41:0b:a0:8a:34: ca:96:de:04:f6:23:71:33:f0:1e:66:8d:d7:f5:30:2b:4c:d0: 19:de:7a:5b:ca:d0:8f:99:eb:e7:65:6f:fe:0e:c2:f6:3b:71: df:a2:54:0d:47:99:0b:37:88:95:9e:21:78:26:5f:82:6a:67: d3:02:c7:56:a4:d1:81:2a:72:b7:16:78:cb:0e:61:a2:11:e4: cb:50:0f:37:fd:d2:9d:51:05:03:13:c3:02:88:c8:c8:b5:0e: 71:ce:0c:f8:82:15:2b:9b:84:31:b2:1d:56:b3:04:6b:88:1e: e6:fc:97:ac:15:d7:24:0a:05:7e:46:85:03:e5:71:5a:c1:23: d0:6a:c5:b2:a3:b5:5a:aa:18:1e:a6:70:78:7a:3e:03:9e:8e: b4:1c:11:b1:2d:2d:ef:b3:e5:ab:56:38:65:20:fc:6b:bb:27: da:09:90:8e:e4:cf:cd:d7:d3:6a:56:60:e8:9a:bb:43:70:dd: 1a:ba:b1:8e:7d:34:8c:02:13:d4:9c:d4:ad:e7:d3:61:21:b6: af:ed:51:5a:34:c6:5e:5a:1a:ac:c5:e5:ab:6a:e4:18:e4:1c: 1a:80:89:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy+CLNW2OcxZDqsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWI3MTUxZTUtNjRjZi00ZWZhLTk2OGUtNDc3OTZmMmY3 NTIzMB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk ZGJhYThhZDAtZDQ2NC00YzExLTg1MjEtMzNmNmVlZjM3YmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaIAPVuoA1tzoI+Wfw96Re855SiRdK1Jyjw5 D3IBx45gDieNUzP2uPs9AQakdWjmdZqpyg7amXqrylx9lCnBEKPT3tcCgYlWKERl hHqTVPrlPzKDQ8AAeZtbtSXDnqLMZ380NxJ1CyDEDpuEuYTdSX7AQ3mMdld6EcKJ 9NuxxLquBtHE0ICZw9JWRSNoIExI4Q2PwIvjIgHiUMR6yL2LVi8totmZQhUA5Gao CcTEL84da0a/oMVO0e3gpKRrG8aQDPLdbIFHkCSZ5NAW5LgfLI4iNX6J/+/Ffbqs iZOVcwqa6n4N3rwVTcJ/23ZBKepSQlyN1llHwk1ZJHmtNufmMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGeSOfTnRV6ItKDMyhhInMqyw1AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYjcx NTFlNS02NGNmLTRlZmEtOTY4ZS00Nzc5NmYyZjc1MjMvNzMyOGQzNTAtYTE4Yy0z ZjI5LTg0N2MtZDE1MWQyNTk3YzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWI3MTUxZTUtNjRjZi00ZWZhLTk2 OGUtNDc3OTZmMmY3NTIzLzFiNzE1MWU1LTY0Y2YtNGVmYS05NjhlLTQ3Nzk2ZjJm NzUyMy5jcmwwHwYDVR0jBBgwFoAUzsoYLCSl34cWLOGi/V6wVeB6zrgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYjcxNTFlNS02NGNmLTRlZmEtOTY4ZS00Nzc5 NmYyZjc1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaNpUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5r5Wy3WAtBd564uBR8uzVivsdp5M3MTXzb6rQGBAlBC6CKNMqW3gT2 I3Ez8B5mjdf1MCtM0BneelvK0I+Z6+dlb/4OwvY7cd+iVA1HmQs3iJWeIXgmX4Jq Z9MCx1ak0YEqcrcWeMsOYaIR5MtQDzf90p1RBQMTwwKIyMi1DnHODPiCFSubhDGy HVazBGuIHub8l6wV1yQKBX5GhQPlcVrBI9BqxbKjtVqqGB6mcHh6PgOejrQcEbEt Le+z5atWOGUg/Gu7J9oJkI7kz83X02pWYOiau0Nw3Rq6sY59NIwCE9Sc1K3n02Eh tq/tUVo0xl5aGqzF5atq5BjkHBqAico= -----END CERTIFICATE-----Generated at Sat Apr 12 14:49:48 2025 by rpki-client