$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/3ffe2b76-e774-3c56-aae6-c2359820c5cf.roa File: 3ffe2b76-e774-3c56-aae6-c2359820c5cf.roa (raw, json) Hash identifier: 1enhM6VomOem4DZ6Ml7itKjaxv0DctGTPUXUTKCV8co= Subject key identifier: 7D:B3:C1:3C:B5:9D:31:0C:EC:72:32:B0:CD:48:D5:E9:C3:97:72:6B Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F43285848EC96971864D25CA0E15E4380 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/3ffe2b76-e774-3c56-aae6-c2359820c5cf.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 20127 IP address blocks: 104.152.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:97:18:64:d2:5c:a0:e1:5e:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=0428c2b4-12f8-4434-b708-e0f699323601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:21:5f:d8:df:ce:14:08:04:b2:9f:26:e5:82: 8e:e5:e9:49:69:eb:d8:88:ff:ce:26:cd:e9:64:7a: ab:73:b7:18:5f:53:a5:3c:33:28:c4:9e:d5:f5:0c: 68:c6:22:b9:ba:15:57:ce:5d:64:b8:65:1b:52:e5: 09:a3:f0:98:5d:92:fb:2d:2e:87:c7:06:07:70:f2: 9f:0e:0a:09:20:c2:cf:37:91:de:78:30:61:1e:da: a1:25:5a:7a:85:98:54:01:7a:79:15:6c:16:6c:56: 6e:bf:23:22:5b:ec:3e:00:3e:91:30:db:54:7e:d4: 6b:51:e3:33:63:f0:b2:1f:c1:2e:b0:c2:93:5a:f2: 35:52:c8:b6:b4:96:d5:25:47:79:35:56:3e:9c:a3: eb:d7:78:d4:d7:2f:c0:47:25:1e:fb:e6:f9:51:ad: 54:3a:79:8d:36:8e:c0:3d:13:66:97:8e:b7:30:a7: 41:e1:d9:06:c1:1f:bb:cb:af:c4:ef:52:0b:aa:2d: 47:42:83:ff:9b:8d:24:0d:1a:9b:c8:46:66:33:6c: 88:51:b6:1e:9f:8b:ee:fe:30:a9:d4:8c:b3:99:3c: e7:55:d9:4d:07:fb:79:04:05:6f:4c:81:0e:02:bb: c6:d2:34:e3:f3:eb:4f:6b:bf:2b:36:d7:d0:35:40: 0d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B3:C1:3C:B5:9D:31:0C:EC:72:32:B0:CD:48:D5:E9:C3:97:72:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/3ffe2b76-e774-3c56-aae6-c2359820c5cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 104.152.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:4b:ea:7f:7c:dc:79:02:59:8a:53:76:5f:f4:23:2d:a1:cb: e6:f6:b1:68:96:6f:c9:c7:7e:42:02:c0:eb:cb:98:75:3f:20: 0a:52:4a:34:75:6b:8a:cd:45:4b:2c:4a:e0:de:11:a5:62:0a: 0e:b0:db:04:0e:b3:eb:37:cb:a1:01:df:c9:7c:79:eb:6e:57: d6:fc:b1:1d:17:5d:88:03:a3:10:d4:8b:d9:11:83:9a:3e:6a: f3:6d:e2:a5:bb:6a:24:ca:ab:46:0c:1a:b0:17:5e:f9:4b:10: 9f:ae:83:ea:93:43:9c:5e:78:63:21:88:d8:08:6c:54:2a:74: 70:c7:98:dd:5d:44:9c:01:4d:26:b9:38:84:95:f6:04:5e:14: b5:fb:92:c5:ed:cd:07:c8:87:6d:37:1e:0a:af:fa:6a:42:29: 4f:cb:e8:3e:15:d1:90:b4:d7:83:33:e0:64:5e:57:e0:91:7f: 4f:4b:3f:c2:b0:3c:92:40:ad:20:6b:e1:cf:d6:48:a2:5b:a6: 58:80:f4:30:9c:36:be:ac:48:92:ee:b1:ef:0c:e5:e6:bf:98: b2:d6:e3:e1:4e:df:c7:db:18:c2:01:67:33:07:92:3c:8d:19: 9c:d6:60:76:e5:d2:a0:bd:19:37:72:00:7d:b7:ca:3b:30:d9: 71:50:34:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslpcYZNJcoOFeQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk MDQyOGMyYjQtMTJmOC00NDM0LWI3MDgtZTBmNjk5MzIzNjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyFf2N/OFAgEsp8m5YKO5elJaevYiP/OJs3p ZHqrc7cYX1OlPDMoxJ7V9QxoxiK5uhVXzl1kuGUbUuUJo/CYXZL7LS6HxwYHcPKf DgoJIMLPN5HeeDBhHtqhJVp6hZhUAXp5FWwWbFZuvyMiW+w+AD6RMNtUftRrUeMz Y/CyH8EusMKTWvI1Usi2tJbVJUd5NVY+nKPr13jU1y/ARyUe++b5Ua1UOnmNNo7A PRNml463MKdB4dkGwR+7y6/E71ILqi1HQoP/m40kDRqbyEZmM2yIUbYen4vu/jCp 1IyzmTznVdlNB/t5BAVvTIEOArvG0jTj8+tPa78rNtfQNUAN2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2zwTy1nTEM7HIysM1I1enDl3JrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvM2ZmZTJiNzYtZTc3NC0z YzU2LWFhZTYtYzIzNTk4MjBjNWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJjFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1L6n983HkCWYpTdl/0Iy2hy+b2sWiWb8nHfkICwOvLmHU/IApSSjR1 a4rNRUssSuDeEaViCg6w2wQOs+s3y6EB38l8eetuV9b8sR0XXYgDoxDUi9kRg5o+ avNt4qW7aiTKq0YMGrAXXvlLEJ+ug+qTQ5xeeGMhiNgIbFQqdHDHmN1dRJwBTSa5 OISV9gReFLX7ksXtzQfIh203Hgqv+mpCKU/L6D4V0ZC014Mz4GReV+CRf09LP8Kw PJJArSBr4c/WSKJbpliA9DCcNr6sSJLuse8M5ea/mLLW4+FO38fbGMIBZzMHkjyN GZzWYHbl0qC9GTdyAH23yjsw2XFQNF0= -----END CERTIFICATE-----Generated at Fri Apr 11 21:28:07 2025 by rpki-client