$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/0227100c-57dc-3035-9ad0-7ea5aa7a6622.roa File: 0227100c-57dc-3035-9ad0-7ea5aa7a6622.roa (raw, json) Hash identifier: qVpJra8cCuD7bqKuuEgmbVd46LVmYd+VHp/otS2f0iM= Subject key identifier: B7:34:5B:F7:9E:D9:6A:4C:62:41:68:B7:8B:A6:CD:3C:F3:C5:42:FB Certificate issuer: /CN=63b3fcd9-f90d-4f20-96ec-d4d328517c0d Certificate serial: 010D0C9F4328584908815EE7057142AA9AB74F1C Authority key identifier: F3:9B:33:BE:A3:B1:8F:A1:6B:9E:C0:25:9F:3D:CD:2A:FC:62:38:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/0227100c-57dc-3035-9ad0-7ea5aa7a6622.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 398823 IP address blocks: 104.219.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:5e:e7:05:71:42:aa:9a:b7:4f:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63b3fcd9-f90d-4f20-96ec-d4d328517c0d Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=64ad8be9-f353-4f39-868e-175c9d2c566d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5b:83:41:e5:1f:52:fa:a1:68:f0:cf:10:8a: fc:e4:24:b2:54:41:82:37:d4:d9:9d:fe:7b:72:72: e5:f8:12:a4:16:77:c6:40:c4:4a:82:7b:e9:e3:62: cc:47:b4:63:47:67:23:6e:85:aa:76:6c:24:4a:fa: 30:b5:ce:1b:96:27:dd:1a:bb:43:3e:5b:fc:5a:d4: 99:ca:cc:d1:d1:58:6c:c2:81:39:31:8d:65:31:3b: 77:cb:ea:e6:7e:1a:e1:a5:5d:6b:e5:41:7b:0a:ef: 05:33:35:0c:b9:e4:19:f2:14:e6:3f:df:0b:0e:66: c4:d2:02:3b:71:8c:ea:09:6a:b8:8e:c8:47:47:e2: b6:e8:1c:dd:81:45:4b:66:3d:1b:5b:eb:8f:34:50: fa:11:6d:5d:9c:3c:f2:ee:db:55:17:96:9a:18:d1: d3:9f:2d:7e:99:47:e0:49:ed:62:ec:aa:e7:1f:d0: d0:ce:27:e8:8c:e4:74:65:d6:56:1e:47:61:7b:3f: 46:08:5d:37:96:f9:1d:1d:18:9a:42:fb:34:eb:3a: 77:5b:ea:25:e7:74:0b:58:a5:4d:fe:b5:e2:04:4e: 74:91:e7:3f:64:8f:41:cb:dd:3d:ae:0a:34:a1:49: a4:14:0c:1a:77:0e:db:8f:08:5f:fc:c7:a0:7c:54: 8e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:34:5B:F7:9E:D9:6A:4C:62:41:68:B7:8B:A6:CD:3C:F3:C5:42:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/0227100c-57dc-3035-9ad0-7ea5aa7a6622.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.crl X509v3 Authority Key Identifier: keyid:F3:9B:33:BE:A3:B1:8F:A1:6B:9E:C0:25:9F:3D:CD:2A:FC:62:38:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer sbgp-ipAddrBlock: critical IPv4: 104.219.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:3a:b4:29:d9:fd:3f:0e:b2:5a:8b:2e:ad:06:13:cc:f8:ab: ae:b6:f5:4b:3e:1d:f0:55:1e:ac:13:23:10:34:b6:93:13:76: 0c:79:b7:a5:9d:0d:23:2f:28:fe:38:c8:3b:b9:20:7a:f1:a1: ca:e6:e5:1e:5d:0c:6f:7a:2a:68:57:09:3a:cf:47:43:a5:78: be:e4:b1:4b:a9:9d:97:4e:78:e3:e0:b4:c8:22:89:8f:b1:57: 85:f3:1c:a2:70:88:b9:1d:15:0a:11:a5:f0:78:10:a9:ea:97: 4d:32:c3:c7:c2:72:72:44:ee:fd:12:06:97:68:34:59:2f:e1: 5a:58:dd:f0:1e:22:11:57:44:d7:12:af:98:0b:dd:d9:1b:a5: a6:64:1c:4e:82:18:ec:f3:75:8f:87:9c:ab:70:c0:d2:50:a6: db:98:a6:f8:eb:85:fa:86:2e:b7:1c:e6:96:d4:b9:92:0c:68: 15:1a:6d:e0:73:5d:fb:a6:7f:5a:1b:90:f5:82:7b:3b:3a:e1: b5:c0:8c:e2:b8:9a:0c:74:e0:36:ac:9a:a6:87:7d:f2:4c:8c: 49:f1:ca:63:7b:24:b6:e4:29:d2:81:97:58:ed:15:63:d8:f1: a3:5d:d8:b3:59:68:5e:c0:8a:24:43:27:f5:b0:93:9b:21:10: 26:c9:7c:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgV7nBXFCqpq3TxwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjNiM2ZjZDktZjkwZC00ZjIwLTk2ZWMtZDRkMzI4NTE3 YzBkMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk NjRhZDhiZTktZjM1My00ZjM5LTg2OGUtMTc1YzlkMmM1NjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1uDQeUfUvqhaPDPEIr85CSyVEGCN9TZnf57 cnLl+BKkFnfGQMRKgnvp42LMR7RjR2cjboWqdmwkSvowtc4blifdGrtDPlv8WtSZ yszR0VhswoE5MY1lMTt3y+rmfhrhpV1r5UF7Cu8FMzUMueQZ8hTmP98LDmbE0gI7 cYzqCWq4jshHR+K26BzdgUVLZj0bW+uPNFD6EW1dnDzy7ttVF5aaGNHTny1+mUfg Se1i7KrnH9DQzifojOR0ZdZWHkdhez9GCF03lvkdHRiaQvs06zp3W+ol53QLWKVN /rXiBE50kec/ZI9By909rgo0oUmkFAwadw7bjwhf/MegfFSOrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLc0W/ee2WpMYkFot4umzTzzxUL7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82M2Iz ZmNkOS1mOTBkLTRmMjAtOTZlYy1kNGQzMjg1MTdjMGQvMDIyNzEwMGMtNTdkYy0z MDM1LTlhZDAtN2VhNWFhN2E2NjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjNiM2ZjZDktZjkwZC00ZjIwLTk2 ZWMtZDRkMzI4NTE3YzBkLzYzYjNmY2Q5LWY5MGQtNGYyMC05NmVjLWQ0ZDMyODUx N2MwZC5jcmwwHwYDVR0jBBgwFoAU85szvqOxj6FrnsAlnz3NKvxiOA0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82M2IzZmNkOS1mOTBkLTRmMjAtOTZlYy1kNGQz Mjg1MTdjMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaNvUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIs6tCnZ/T8OslqLLq0GE8z4q6629Us+HfBVHqwTIxA0tpMTdgx5t6Wd DSMvKP44yDu5IHrxocrm5R5dDG96KmhXCTrPR0OleL7ksUupnZdOeOPgtMgiiY+x V4XzHKJwiLkdFQoRpfB4EKnql00yw8fCcnJE7v0SBpdoNFkv4VpY3fAeIhFXRNcS r5gL3dkbpaZkHE6CGOzzdY+HnKtwwNJQptuYpvjrhfqGLrcc5pbUuZIMaBUabeBz Xfumf1obkPWCezs64bXAjOK4mgx04DasmqaHffJMjEnxymN7JLbkKdKBl1jtFWPY 8aNd2LNZaF7AiiRDJ/Wwk5shECbJfHU= -----END CERTIFICATE-----Generated at Sat Apr 5 19:03:14 2025 by rpki-client