$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/453ca86f-265f-305d-a6a1-203e03a97f05.roa File: 453ca86f-265f-305d-a6a1-203e03a97f05.roa (raw, json) Hash identifier: NXmCgPUahPlkL1WU/10lw3XX4xsvtelOfOQ6iyoCNQo= Subject key identifier: C1:30:8E:AC:CA:4B:32:F6:A4:D9:DF:48:50:73:9D:53:85:B0:40:B3 Certificate issuer: /CN=35be4068-f7e5-404b-9693-dcff4b2e8f95 Certificate serial: 010D0C9F4328584930DE728AD14C4D6260312500 Authority key identifier: C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/453ca86f-265f-305d-a6a1-203e03a97f05.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 64236 IP address blocks: 104.254.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:72:8a:d1:4c:4d:62:60:31:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35be4068-f7e5-404b-9693-dcff4b2e8f95 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=aca86fac-a3c2-4a4c-916e-1e8a851c16cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7b:43:e1:6f:57:a8:6c:a5:f4:8c:07:2a:d1: da:78:10:97:b1:af:e7:59:37:66:a7:6f:7e:19:d8: 52:67:b4:3a:5c:2d:9f:15:2d:d6:f8:8e:cb:3c:d6: d3:ea:6e:65:f8:60:ff:d6:44:fd:ab:51:6a:e7:8c: 4c:c4:0d:b4:bc:1b:46:4e:3e:05:c2:d9:a9:b1:ed: e2:5e:2e:f6:ee:92:c0:51:ee:95:5f:61:52:13:52: 16:1a:02:1e:92:e1:3d:db:c3:12:95:e0:fe:28:fe: ec:06:67:c5:51:64:d0:3f:b1:36:a7:a6:86:15:06: f1:eb:e6:2c:a0:94:0c:80:79:64:8c:c9:a5:49:c5: b4:da:50:fa:c3:91:e8:c1:22:18:a7:a9:70:18:bb: 7e:bf:1e:7f:fe:b5:ea:85:ed:73:3b:7d:bb:cc:a3: a1:e8:7c:3f:fc:93:f8:7c:a6:93:f1:21:c0:35:d6: e1:14:24:18:33:61:35:40:ae:4b:bf:5e:9c:c9:4a: ac:6a:72:36:b5:cd:23:ed:63:9c:fd:9c:a5:29:87: 72:86:53:3a:b0:db:15:24:88:0e:b9:b5:8f:ae:70: 2d:ba:b6:55:49:16:98:6f:0d:9d:10:f1:e2:64:23: 46:cb:f4:a0:60:b1:9f:57:38:fe:45:02:e8:e5:c2: e6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:30:8E:AC:CA:4B:32:F6:A4:D9:DF:48:50:73:9D:53:85:B0:40:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/453ca86f-265f-305d-a6a1-203e03a97f05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl X509v3 Authority Key Identifier: keyid:C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer sbgp-ipAddrBlock: critical IPv4: 104.254.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:12:e0:ec:7b:e7:6f:71:6b:c9:21:15:f3:b8:d9:b9:36:c3: 90:f2:18:6d:3c:1c:d8:eb:42:12:e1:f0:69:76:16:d3:c3:91: d0:3e:af:b8:07:97:ff:2b:ef:08:13:30:4c:c9:fa:f2:ef:81: 44:da:a0:20:fd:6c:57:03:49:3f:93:b9:64:0a:89:f7:28:58: 03:47:1f:66:06:4c:4e:dc:6c:f1:e3:03:b7:2d:ab:a0:45:65: 7e:f9:95:0e:d8:f8:9f:d4:5d:48:d7:d2:9b:f0:54:b3:ca:94: d5:38:f7:96:1f:d1:0f:58:65:7a:70:90:14:bc:4c:e7:62:97: 0e:e4:66:25:83:1c:62:e9:47:01:64:31:85:80:d9:75:a8:a4: 9f:18:55:ee:73:75:2a:08:56:6a:a2:75:1b:e0:bf:3c:a6:1f: 72:be:89:52:70:3b:2c:85:2d:3e:5e:2e:32:91:44:e2:ad:7c: cd:0d:58:42:8b:ba:c6:25:3f:17:f9:8a:51:65:4b:44:15:5d: ee:6b:a9:b2:23:cc:f1:61:f5:d9:f8:3e:e5:88:d9:72:73:ee: f2:55:64:e2:2e:bc:d8:6a:96:aa:83:53:a8:e4:9c:22:19:8b: 62:7b:ff:e5:a0:65:46:b3:37:b6:5d:aa:95:52:06:7d:51:ca: 74:ea:2c:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3nKK0UxNYmAxJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZTQwNjgtZjdlNS00MDRiLTk2OTMtZGNmZjRiMmU4 Zjk1MB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk YWNhODZmYWMtYTNjMi00YTRjLTkxNmUtMWU4YTg1MWMxNmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3tD4W9XqGyl9IwHKtHaeBCXsa/nWTdmp29+ GdhSZ7Q6XC2fFS3W+I7LPNbT6m5l+GD/1kT9q1Fq54xMxA20vBtGTj4Fwtmpse3i Xi727pLAUe6VX2FSE1IWGgIekuE928MSleD+KP7sBmfFUWTQP7E2p6aGFQbx6+Ys oJQMgHlkjMmlScW02lD6w5HowSIYp6lwGLt+vx5//rXqhe1zO327zKOh6Hw//JP4 fKaT8SHANdbhFCQYM2E1QK5Lv16cyUqsanI2tc0j7WOc/ZylKYdyhlM6sNsVJIgO ubWPrnAturZVSRaYbw2dEPHiZCNGy/SgYLGfVzj+RQLo5cLmtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEwjqzKSzL2pNnfSFBznVOFsECzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zNWJl NDA2OC1mN2U1LTQwNGItOTY5My1kY2ZmNGIyZThmOTUvNDUzY2E4NmYtMjY1Zi0z MDVkLWE2YTEtMjAzZTAzYTk3ZjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzViZTQwNjgtZjdlNS00MDRiLTk2 OTMtZGNmZjRiMmU4Zjk1LzM1YmU0MDY4LWY3ZTUtNDA0Yi05NjkzLWRjZmY0YjJl OGY5NS5jcmwwHwYDVR0jBBgwFoAUx5tNJUqL+1JPO26W0tgCYtGpB88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zNWJlNDA2OC1mN2U1LTQwNGItOTY5My1kY2Zm NGIyZThmOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaP4YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgS4Ox7529xa8khFfO42bk2w5DyGG08HNjrQhLh8Gl2FtPDkdA+r7gH l/8r7wgTMEzJ+vLvgUTaoCD9bFcDST+TuWQKifcoWANHH2YGTE7cbPHjA7ctq6BF ZX75lQ7Y+J/UXUjX0pvwVLPKlNU495Yf0Q9YZXpwkBS8TOdilw7kZiWDHGLpRwFk MYWA2XWopJ8YVe5zdSoIVmqidRvgvzymH3K+iVJwOyyFLT5eLjKRROKtfM0NWEKL usYlPxf5ilFlS0QVXe5rqbIjzPFh9dn4PuWI2XJz7vJVZOIuvNhqlqqDU6jknCIZ i2J7/+WgZUazN7ZdqpVSBn1RynTqLAU= -----END CERTIFICATE-----Generated at Sun Apr 13 08:36:55 2025 by rpki-client