$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/94da6f54-9255-374b-a408-2e35886a522d.roa File: 94da6f54-9255-374b-a408-2e35886a522d.roa (raw, json) Hash identifier: 3c9GRIRNn9VUZ6Om/is8mra+HCvtznCkJaWID5dcR9M= Subject key identifier: 72:07:3A:A4:1B:A7:3F:D4:83:D0:62:1F:A6:63:81:E7:80:A4:05:15 Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F43285848EC968BA5CE6A63807FDF7280 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/94da6f54-9255-374b-a408-2e35886a522d.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 40948 IP address blocks: 104.152.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:8b:a5:ce:6a:63:80:7f:df:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=8fea4696-b46b-4fad-9ebd-1ed333b112cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bc:08:16:b1:23:f7:ac:7d:56:a1:ed:68:22: e1:76:29:60:22:eb:a8:65:5b:7c:17:be:7f:fc:1d: 2b:1e:3d:50:c9:fd:a1:bb:4d:cb:15:6d:65:c1:23: 9f:d5:31:59:9a:e5:af:5f:86:9f:d0:67:98:d1:95: 53:4b:68:7b:23:b7:2d:3a:6c:81:5b:91:72:81:71: c5:6b:ae:4d:20:0a:bf:33:34:05:c0:d6:ed:b6:3e: a7:1b:b3:41:2a:36:db:da:02:a4:66:6f:ba:72:a9: 15:ed:08:cc:88:41:c6:76:c5:36:7e:9f:8c:2e:ec: 3b:9d:85:39:11:b2:1a:82:4e:22:c5:57:77:fb:0a: 26:27:84:f8:8b:0e:a9:37:e8:90:c9:1c:7c:50:72: d4:3c:c9:4d:1a:22:4d:07:4b:90:00:22:1c:55:cf: 59:8e:71:61:24:2b:a6:48:d3:f8:e9:f1:37:95:69: 7c:94:f3:f4:d3:2e:68:83:2b:99:db:72:46:2d:64: b6:8b:59:a7:10:c4:3a:d9:fd:04:c9:e6:b1:7c:5c: e6:ad:af:83:b3:05:1f:65:6f:92:45:25:23:e0:59: 8d:3f:e9:32:45:37:6a:b7:b1:70:55:0f:39:fb:8c: a4:52:f2:69:f9:4c:05:44:7e:7f:70:83:95:53:ed: 1a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:07:3A:A4:1B:A7:3F:D4:83:D0:62:1F:A6:63:81:E7:80:A4:05:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/94da6f54-9255-374b-a408-2e35886a522d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 104.152.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:30:f3:dd:aa:dd:b1:ef:41:2e:2a:e3:95:f1:31:eb:ed:a0: bf:ea:e6:05:fa:37:52:9c:cd:e3:5a:7e:ea:16:c0:96:fc:7c: 26:43:da:28:eb:3b:4f:eb:82:d2:b8:db:49:44:a2:b5:ae:0e: b0:b0:6b:78:c3:ac:04:20:19:ee:f0:a9:ad:79:1e:16:0a:77: 5e:81:c7:55:5d:aa:30:59:af:13:ad:41:26:6d:55:8d:f2:39: a6:00:ce:78:bb:37:dd:40:37:91:76:89:61:43:40:00:73:a1: 63:67:6a:4d:46:a0:cf:ca:f2:60:9b:60:f1:e9:55:64:19:76: f5:af:3c:0c:20:0d:70:f9:35:d0:a2:0e:89:00:99:d6:69:c5: 08:fd:fc:8a:49:3a:21:44:c3:3c:1b:1c:af:12:82:d8:b6:d5: fd:03:ad:83:e4:e2:6e:3a:fa:f1:41:6e:c9:f5:a1:f5:5e:d0: 4c:5f:5d:9d:72:35:c7:99:52:cd:87:41:d4:ba:c4:37:fc:d2: 97:aa:88:77:af:a3:06:77:fa:5e:17:b8:ab:57:2f:33:f0:68: ab:15:f3:93:cd:65:5a:80:02:46:ce:cb:91:23:74:50:6c:33: ed:74:de:12:ad:81:bd:66:4b:40:0d:00:41:47:cf:81:52:c4: e1:d7:67:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjsloulzmpjgH/fcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk OGZlYTQ2OTYtYjQ2Yi00ZmFkLTllYmQtMWVkMzMzYjExMmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7wIFrEj96x9VqHtaCLhdilgIuuoZVt8F75/ /B0rHj1Qyf2hu03LFW1lwSOf1TFZmuWvX4af0GeY0ZVTS2h7I7ctOmyBW5FygXHF a65NIAq/MzQFwNbttj6nG7NBKjbb2gKkZm+6cqkV7QjMiEHGdsU2fp+MLuw7nYU5 EbIagk4ixVd3+womJ4T4iw6pN+iQyRx8UHLUPMlNGiJNB0uQACIcVc9ZjnFhJCum SNP46fE3lWl8lPP00y5ogyuZ23JGLWS2i1mnEMQ62f0EyeaxfFzmra+DswUfZW+S RSUj4FmNP+kyRTdqt7FwVQ85+4ykUvJp+UwFRH5/cIOVU+0atwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIHOqQbpz/Ug9BiH6ZjgeeApAUVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvOTRkYTZmNTQtOTI1NS0z NzRiLWE0MDgtMmUzNTg4NmE1MjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJjEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALUw892q3bHvQS4q45XxMevtoL/q5gX6N1KczeNafuoWwJb8fCZD2ijr O0/rgtK420lEorWuDrCwa3jDrAQgGe7wqa15HhYKd16Bx1VdqjBZrxOtQSZtVY3y OaYAzni7N91AN5F2iWFDQABzoWNnak1GoM/K8mCbYPHpVWQZdvWvPAwgDXD5NdCi DokAmdZpxQj9/IpJOiFEwzwbHK8Sgti21f0DrYPk4m46+vFBbsn1ofVe0ExfXZ1y NceZUs2HQdS6xDf80peqiHevowZ3+l4XuKtXLzPwaKsV85PNZVqAAkbOy5EjdFBs M+103hKtgb1mS0ANAEFHz4FSxOHXZxY= -----END CERTIFICATE-----Generated at Fri Apr 11 21:27:51 2025 by rpki-client