$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/8a5c0e90-ec6b-3ac8-85d7-908f880e7035.roa File: 8a5c0e90-ec6b-3ac8-85d7-908f880e7035.roa (raw, json) Hash identifier: bZWCRFJyhI5vBpB20g47KwDxsykDOvC96m49s4D7hFQ= Subject key identifier: 01:16:AB:7F:D1:92:03:7C:D3:85:17:20:7D:95:F7:6C:39:14:29:32 Certificate issuer: /CN=25422be5-720b-40bc-8a4d-02579ec1bead Certificate serial: 010D0C9F43285848E59BC733460574A227594500 Authority key identifier: CE:D2:97:2D:47:2B:D4:F9:C0:90:20:70:DB:AC:BA:3B:D5:62:63:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/8a5c0e90-ec6b-3ac8-85d7-908f880e7035.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 63447 IP address blocks: 104.245.200.0/22 maxlen: 22 204.107.204.0/24 maxlen: 24 2602:ff98::/36 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Mar 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:c7:33:46:05:74:a2:27:59:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25422be5-720b-40bc-8a4d-02579ec1bead Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=16b3af0e-be4f-469f-a935-3fffa9ff2baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bb:c2:1e:cf:55:14:58:d2:ed:b8:9d:87:62: 00:e0:28:f5:85:20:19:b6:92:67:3a:31:9d:42:b3: 26:af:62:df:e2:fd:2f:b9:a0:53:e7:ac:a5:9c:82: 56:d8:64:f2:91:f2:ca:e3:bb:fb:e7:6a:37:55:18: 8d:3f:e7:0e:db:a2:ef:70:5c:d8:73:f3:ce:f9:2a: 52:0f:cb:85:c6:57:ca:66:af:af:07:dd:91:2e:4c: be:8e:4c:e3:b9:81:58:f0:49:db:d8:94:4d:d6:ba: 62:9c:e0:e8:ce:d5:27:f6:3c:04:ae:d6:39:45:92: e2:87:a3:07:5b:42:e1:47:1d:82:0a:20:9b:92:67: 58:0c:31:78:bd:d6:e3:5f:62:83:0d:6a:c9:e6:69: 40:eb:61:96:49:70:7d:ae:30:24:dc:5a:a6:58:13: 72:b9:62:4c:ab:9c:19:8f:ff:7f:f7:7c:9b:86:8b: 62:e8:88:8d:51:2e:f9:76:98:bb:48:54:a1:55:cd: 83:1a:79:65:04:19:ce:04:e5:1a:4b:95:dd:93:1b: 3a:9e:ea:ac:f6:1d:17:9d:44:bd:2e:47:9c:ca:3e: 2a:5c:42:2c:33:99:84:60:7b:fa:3b:9a:6e:7c:5f: 68:aa:8c:9e:17:74:02:45:48:92:ac:d5:64:0d:e8: 4c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:16:AB:7F:D1:92:03:7C:D3:85:17:20:7D:95:F7:6C:39:14:29:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/8a5c0e90-ec6b-3ac8-85d7-908f880e7035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.crl X509v3 Authority Key Identifier: keyid:CE:D2:97:2D:47:2B:D4:F9:C0:90:20:70:DB:AC:BA:3B:D5:62:63:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead.cer sbgp-ipAddrBlock: critical IPv4: 104.245.200.0/22 204.107.204.0/24 IPv6: 2602:ff98::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:9d:f2:6e:01:cc:f1:7b:0c:56:61:83:b9:72:a1:c9:dd:11: c2:7c:2f:7c:33:78:b1:ea:29:df:ee:a6:95:4b:81:a8:23:ef: d4:41:28:1d:e9:74:67:0f:99:a5:85:76:07:ce:70:c6:f5:df: 6c:18:59:1a:63:e9:d8:c5:12:8a:79:ed:1c:5f:f0:b8:01:8f: ca:a8:cf:d8:43:af:9e:6c:ea:f5:a8:41:f9:e9:65:b1:0f:e1: 8d:e9:20:f8:db:b0:0a:55:f5:f7:13:a9:ce:19:a9:a4:2b:83: f3:3c:72:da:35:84:96:c7:88:dd:57:53:ba:b2:4d:60:96:ed: f0:73:76:81:43:3d:d5:f7:83:3c:79:46:20:e7:67:f0:e5:1c: 55:7f:0a:05:2b:43:34:55:3f:fa:0f:12:d4:34:e5:43:4d:ac: bb:ae:79:2a:05:00:26:90:fd:f6:18:b5:8b:63:9b:0e:71:8a: 75:dd:aa:5e:ec:c6:6f:a0:fb:aa:56:94:7f:6a:d2:35:b1:e0: ed:a4:60:9c:15:f6:6b:a8:9c:bf:dc:a2:78:1d:7e:9c:90:aa: 33:32:b1:d4:9b:f1:13:bd:72:86:91:47:cf:b2:79:9f:57:a6: 0f:7e:ec:e5:46:ae:70:d0:82:22:8e:a2:86:5d:ef:fc:7f:a1: f6:f1:2a:ea -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEjlm8czRgV0oidZRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU0MjJiZTUtNzIwYi00MGJjLThhNGQtMDI1NzllYzFi ZWFkMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk MTZiM2FmMGUtYmU0Zi00NjlmLWE5MzUtM2ZmZmE5ZmYyYmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLvCHs9VFFjS7bidh2IA4Cj1hSAZtpJnOjGd QrMmr2Lf4v0vuaBT56ylnIJW2GTykfLK47v752o3VRiNP+cO26LvcFzYc/PO+SpS D8uFxlfKZq+vB92RLky+jkzjuYFY8Enb2JRN1rpinODoztUn9jwErtY5RZLih6MH W0LhRx2CCiCbkmdYDDF4vdbjX2KDDWrJ5mlA62GWSXB9rjAk3FqmWBNyuWJMq5wZ j/9/93ybhoti6IiNUS75dpi7SFShVc2DGnllBBnOBOUaS5Xdkxs6nuqs9h0XnUS9 Lkecyj4qXEIsM5mEYHv6O5pufF9oqoyeF3QCRUiSrNVkDehMawIDAQABo4IDazCC A2cwHQYDVR0OBBYEFAEWq3/RkgN804UXIH2V92w5FCkyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yNTQy MmJlNS03MjBiLTQwYmMtOGE0ZC0wMjU3OWVjMWJlYWQvOGE1YzBlOTAtZWM2Yi0z YWM4LTg1ZDctOTA4Zjg4MGU3MDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjU0MjJiZTUtNzIwYi00MGJjLThh NGQtMDI1NzllYzFiZWFkLzI1NDIyYmU1LTcyMGItNDBiYy04YTRkLTAyNTc5ZWMx YmVhZC5jcmwwHwYDVR0jBBgwFoAUztKXLUcr1PnAkCBw26y6O9ViY2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yNTQyMmJlNS03MjBiLTQwYmMtOGE0ZC0wMjU3 OWVjMWJlYWQuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQCaPXIAwQA zGvMMA4EAgACMAgDBgQmAv+YADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQACnfJuAczxewxWYYO5cqHJ3RHC fC98M3ix6inf7qaVS4GoI+/UQSgd6XRnD5mlhXYHznDG9d9sGFkaY+nYxRKKee0c X/C4AY/KqM/YQ6+ebOr1qEH56WWxD+GN6SD427AKVfX3E6nOGamkK4PzPHLaNYSW x4jdV1O6sk1glu3wc3aBQz3V94M8eUYg52fw5RxVfwoFK0M0VT/6DxLUNOVDTay7 rnkqBQAmkP32GLWLY5sOcYp13ape7MZvoPuqVpR/atI1seDtpGCcFfZrqJy/3KJ4 HX6ckKozMrHUm/ETvXKGkUfPsnmfV6YPfuzlRq5w0IIijqKGXe/8f6H28Srq -----END CERTIFICATE-----Generated at Tue Mar 18 21:14:09 2025 by rpki-client