$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/24ff9cdf-36ed-3cbd-9b0a-2d9bb4814c39.roa File: 24ff9cdf-36ed-3cbd-9b0a-2d9bb4814c39.roa (raw, json) Hash identifier: T+ZCi7N0CrdLKu3LceugozqOpFtLbxmnLgioSbMvaaE= Subject key identifier: C4:62:94:A4:36:6A:6A:2B:C4:03:59:3F:37:94:A9:9C:55:59:E7:1B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858494F93E7E5112D1DC87D9E4700 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/24ff9cdf-36ed-3cbd-9b0a-2d9bb4814c39.roa Signing time: Wed 26 Mar 2025 01:00:40 +0000 ROA not before: Wed 26 Mar 2025 01:00:40 +0000 ROA not after: Tue 24 Jun 2025 01:00:40 +0000 asID: 8072 IP address blocks: 104.44.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4f:93:e7:e5:11:2d:1d:c8:7d:9e:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 26 01:00:40 2025 GMT Not After : Jun 24 01:00:40 2025 GMT Subject: CN=4f9eff8e-1367-4089-bf66-f1ed036b5fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cb:d1:0b:72:f0:f5:99:05:ad:b2:f7:63:7a: cc:79:a7:6b:51:6f:22:b6:84:1c:8f:d2:93:7a:90: 84:ec:ee:c8:cf:ae:64:43:af:cb:65:86:37:5c:e0: 65:de:a0:bb:4a:d9:5f:47:48:3f:07:05:cc:fd:19: 93:a4:df:24:bc:ea:27:e2:37:ae:42:df:0f:1c:29: b1:e9:60:64:5a:0b:4e:69:dc:45:82:77:fa:f0:af: ae:ea:b7:81:4a:54:46:dd:33:86:89:8c:65:63:fc: 0a:b4:ec:8b:6a:74:61:d6:88:af:25:12:e4:30:06: 72:3d:ee:67:74:c2:2b:b4:b2:90:5b:d8:c7:b1:8a: e8:d4:98:d8:58:05:b2:06:24:26:c4:30:0d:40:3f: e0:5c:0a:ac:8c:7f:22:3f:92:68:cb:0b:ee:f7:67: 8b:3e:7e:a2:44:07:9e:cc:39:cc:4f:36:93:3c:93: 27:4c:fd:f6:3d:75:95:65:ba:37:b5:57:20:55:42: 73:19:ed:d7:e4:14:05:b2:a2:74:76:9a:82:5b:e1: 9a:b1:0a:fe:40:b6:e2:14:8f:1d:28:de:59:a8:a2: 96:27:26:d6:7a:cd:43:ef:2e:aa:3b:01:8a:79:22: d9:b1:e3:f3:46:88:c8:23:0c:33:2f:56:72:46:2a: 1f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:62:94:A4:36:6A:6A:2B:C4:03:59:3F:37:94:A9:9C:55:59:E7:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/24ff9cdf-36ed-3cbd-9b0a-2d9bb4814c39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 104.44.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:74:c7:e9:dc:87:7e:a9:79:80:4d:7b:d1:f5:29:ac:fb:a3: dc:42:39:0b:2c:f9:eb:42:8e:5b:ec:33:ff:80:1b:0f:cf:b1: a7:f3:bf:a6:4f:51:9f:45:3f:ae:88:33:2f:b0:ac:e8:df:df: af:30:c6:54:97:a1:ad:cd:32:8b:89:63:e8:58:a5:3f:9f:d6: 2f:6a:ec:e0:63:cb:f1:1d:78:51:71:e2:b8:ab:4a:43:7b:86: 4b:70:ee:fc:0a:60:ef:e9:d8:47:ab:3f:68:0f:7d:30:55:46: 13:a4:9e:2e:82:39:9d:38:e6:1b:74:2c:21:50:55:5b:04:08: 30:2a:5a:78:f3:15:a2:a1:9a:aa:0a:5e:31:8b:0f:45:8b:8e: 5a:9c:ae:88:11:ee:03:6e:a3:f8:69:75:ed:67:94:81:d2:89: c7:19:88:bb:c1:5a:22:94:b2:02:20:c0:ed:1d:cf:0d:b3:40: ef:b6:a2:df:3d:95:05:0c:15:41:9b:f9:fb:09:24:35:09:e0: 7b:7f:f9:d5:60:a1:9d:30:f5:d0:4c:48:e7:e8:15:78:98:6c: 0a:3c:6c:6d:aa:ac:d2:da:52:e9:9f:86:14:03:b6:a2:12:c8: a0:de:2c:69:c5:72:4e:1e:57:f6:ba:15:0c:b0:b5:0e:e8:de: dd:dd:4e:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElPk+flES0dyH2eRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMyNjAxMDA0MFoXDTI1MDYyNDAxMDA0MFowLzEtMCsGA1UEAxMk NGY5ZWZmOGUtMTM2Ny00MDg5LWJmNjYtZjFlZDAzNmI1ZmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMvRC3Lw9ZkFrbL3Y3rMeadrUW8itoQcj9KT epCE7O7Iz65kQ6/LZYY3XOBl3qC7StlfR0g/BwXM/RmTpN8kvOon4jeuQt8PHCmx 6WBkWgtOadxFgnf68K+u6reBSlRG3TOGiYxlY/wKtOyLanRh1oivJRLkMAZyPe5n dMIrtLKQW9jHsYro1JjYWAWyBiQmxDANQD/gXAqsjH8iP5Joywvu92eLPn6iRAee zDnMTzaTPJMnTP32PXWVZbo3tVcgVUJzGe3X5BQFsqJ0dpqCW+GasQr+QLbiFI8d KN5ZqKKWJybWes1D7y6qOwGKeSLZsePzRojIIwwzL1ZyRioftwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRilKQ2amorxANZPzeUqZxVWecbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjRmZjljZGYtMzZlZC0z Y2JkLTliMGEtMmQ5YmI0ODE0YzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaCxBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZ0x+nch36peYBNe9H1Kaz7o9xCOQss+etCjlvsM/+AGw/Psafzv6ZP UZ9FP66IMy+wrOjf368wxlSXoa3NMouJY+hYpT+f1i9q7OBjy/EdeFFx4rirSkN7 hktw7vwKYO/p2EerP2gPfTBVRhOkni6COZ045ht0LCFQVVsECDAqWnjzFaKhmqoK XjGLD0WLjlqcrogR7gNuo/hpde1nlIHSiccZiLvBWiKUsgIgwO0dzw2zQO+2ot89 lQUMFUGb+fsJJDUJ4Ht/+dVgoZ0w9dBMSOfoFXiYbAo8bG2qrNLaUumfhhQDtqIS yKDeLGnFck4eV/a6FQywtQ7o3t3dTgQ= -----END CERTIFICATE-----Generated at Sat Apr 5 09:42:32 2025 by rpki-client