$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/0a4d44f7-e647-3e74-b07a-7545c0c428be.roa File: 0a4d44f7-e647-3e74-b07a-7545c0c428be.roa (raw, json) Hash identifier: kOs349ZYb3yneT07RWTyLs1xjF5tvldMhTo/2bXDCaI= Subject key identifier: B9:8B:D0:7A:6E:51:30:02:70:F6:F0:8F:38:5C:3A:54:B3:35:F9:D2 Certificate issuer: /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a Certificate serial: 010D0C9F432858492F8C3510E74E96E53DA57320 Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/0a4d44f7-e647-3e74-b07a-7545c0c428be.roa Signing time: Fri 14 Mar 2025 13:39:19 +0000 ROA not before: Fri 14 Mar 2025 13:39:19 +0000 ROA not after: Thu 12 Jun 2025 13:39:19 +0000 asID: 7018 IP address blocks: 104.243.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2f:8c:35:10:e7:4e:96:e5:3d:a5:73:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a Validity Not Before: Mar 14 13:39:19 2025 GMT Not After : Jun 12 13:39:19 2025 GMT Subject: CN=daad467d-7236-4693-a563-61d2cddcdfec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:04:5c:ae:4c:36:bc:d8:49:57:22:a4:f7:1b: ae:46:2d:0f:e1:be:12:f2:ee:c8:97:42:7d:09:75: 37:07:07:d6:68:d8:4e:5c:02:e2:8b:b8:96:9d:df: c9:13:95:f6:ab:c8:9d:4a:d2:4f:b1:64:15:05:8c: f1:af:0d:4e:13:24:85:58:b9:cc:82:11:08:ed:6b: 2f:31:49:56:91:41:ce:b8:ed:51:10:8b:33:90:fc: 0b:eb:05:09:a2:4f:6a:a0:76:95:7f:6a:20:97:de: 89:13:4b:d3:75:a9:a1:dd:a4:51:ab:70:a3:33:44: 0f:b8:9d:92:95:d7:3d:28:0d:7e:d0:0a:0d:ee:b4: a4:29:3c:04:24:77:f2:4d:7c:26:77:98:67:ee:a4: ca:e8:b3:38:0e:50:1e:60:f3:ac:01:33:42:56:07: f8:31:e5:a6:78:1d:b1:81:23:eb:4e:ff:89:13:c3: b7:27:2b:e1:ea:83:d5:dd:ef:a6:33:db:33:d7:f0: f4:e9:20:d0:a8:3e:3c:57:27:c1:95:26:66:e2:74: 52:1e:92:76:d1:1e:04:00:5a:6f:e4:19:d8:bc:7e: f3:80:fc:ce:6a:78:c7:ef:80:2e:a3:90:17:f1:bb: 5a:94:03:c1:9d:97:4c:a3:dc:d1:a8:ca:4a:e0:81: 74:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8B:D0:7A:6E:51:30:02:70:F6:F0:8F:38:5C:3A:54:B3:35:F9:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/0a4d44f7-e647-3e74-b07a-7545c0c428be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl X509v3 Authority Key Identifier: keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer sbgp-ipAddrBlock: critical IPv4: 104.243.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:ef:89:5a:99:eb:2b:67:1d:fb:a6:90:8f:79:49:fe:22:f2: 71:2b:0f:76:68:04:00:a3:30:d4:b1:4d:94:38:d2:78:07:42: 25:b5:dd:9a:64:c1:71:4e:3d:db:f8:03:fc:8f:b5:d3:41:bb: 7f:88:dc:25:af:fb:4b:ac:19:0c:14:97:3c:52:7e:32:e1:d7: aa:ac:51:c2:62:74:4d:32:9e:92:3b:9d:6e:d3:93:7b:a8:47: 96:18:f1:f9:3f:b2:bd:1b:ec:f0:22:94:00:97:19:f8:0f:d2: e2:6d:d8:af:02:ca:88:5a:29:09:8e:fb:8a:e6:61:75:b4:e4: 38:d1:79:fd:c6:51:4b:c4:11:7a:0a:cb:99:8e:ec:88:ed:5f: 56:a1:c7:0b:2c:d3:99:59:14:8a:cc:7d:4b:5e:a2:b5:ab:3a: c2:81:d0:46:5c:d1:0d:07:9c:bd:e4:b9:8e:10:61:f9:f5:75: 12:9d:7a:65:fe:d0:72:b6:3c:f0:a6:7a:9f:98:b7:44:90:ac: 8c:a0:12:64:f8:f1:2a:28:c8:58:2a:2f:f7:e2:d5:96:3a:84: ba:26:b3:08:da:31:f6:f4:e4:bd:2d:b1:db:cd:ae:a9:96:1a: ff:2a:03:ac:d5:89:e8:e7:83:65:92:71:a9:78:01:6a:d1:ed: 0d:a3:95:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkvjDUQ506W5T2lcyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVkYWUyYTAtMGNiNy00NmU4LWFlMTctYWJlYjA2MDA3 ZTFhMB4XDTI1MDMxNDEzMzkxOVoXDTI1MDYxMjEzMzkxOVowLzEtMCsGA1UEAxMk ZGFhZDQ2N2QtNzIzNi00NjkzLWE1NjMtNjFkMmNkZGNkZmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtARcrkw2vNhJVyKk9xuuRi0P4b4S8u7Il0J9 CXU3BwfWaNhOXALii7iWnd/JE5X2q8idStJPsWQVBYzxrw1OEySFWLnMghEI7Wsv MUlWkUHOuO1REIszkPwL6wUJok9qoHaVf2ogl96JE0vTdamh3aRRq3CjM0QPuJ2S ldc9KA1+0AoN7rSkKTwEJHfyTXwmd5hn7qTK6LM4DlAeYPOsATNCVgf4MeWmeB2x gSPrTv+JE8O3Jyvh6oPV3e+mM9sz1/D06SDQqD48VyfBlSZm4nRSHpJ20R4EAFpv 5BnYvH7zgPzOanjH74Auo5AX8btalAPBnZdMo9zRqMpK4IF0rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmL0HpuUTACcPbwjzhcOlSzNfnSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82NWRh ZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmViMDYwMDdlMWEvMGE0ZDQ0ZjctZTY0Ny0z ZTc0LWIwN2EtNzU0NWMwYzQyOGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjVkYWUyYTAtMGNiNy00NmU4LWFl MTctYWJlYjA2MDA3ZTFhLzY1ZGFlMmEwLTBjYjctNDZlOC1hZTE3LWFiZWIwNjAw N2UxYS5jcmwwHwYDVR0jBBgwFoAUGkmdi3ejOt8fzU66Ucwao/qj9iUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82NWRhZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmVi MDYwMDdlMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHviVqZ6ytnHfumkI95Sf4i8nErD3ZoBACjMNSxTZQ40ngHQiW13Zpk wXFOPdv4A/yPtdNBu3+I3CWv+0usGQwUlzxSfjLh16qsUcJidE0ynpI7nW7Tk3uo R5YY8fk/sr0b7PAilACXGfgP0uJt2K8CyohaKQmO+4rmYXW05DjRef3GUUvEEXoK y5mO7IjtX1ahxwss05lZFIrMfUteorWrOsKB0EZc0Q0HnL3kuY4QYfn1dRKdemX+ 0HK2PPCmep+Yt0SQrIygEmT48SooyFgqL/fi1ZY6hLomswjaMfb05L0tsdvNrqmW Gv8qA6zViejng2WScal4AWrR7Q2jlQQ= -----END CERTIFICATE-----Generated at Fri Apr 4 21:02:30 2025 by rpki-client