$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/95201972-0756-328a-8826-45e99e3090f9.roa File: 95201972-0756-328a-8826-45e99e3090f9.roa (raw, json) Hash identifier: 2eNnfs/91/vJ1SgVqR1+3zMbt7V/I5HGFj8eTz7GYLo= Subject key identifier: FF:C7:08:7D:31:36:F2:B9:5C:AE:C0:97:0B:6B:A1:A3:FA:05:F3:C0 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858495D8975F4CE1127CECD6BFD40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/95201972-0756-328a-8826-45e99e3090f9.roa Signing time: Mon 31 Mar 2025 01:00:47 +0000 ROA not before: Mon 31 Mar 2025 01:00:47 +0000 ROA not after: Sun 29 Jun 2025 01:00:47 +0000 asID: 8075 IP address blocks: 104.44.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5d:89:75:f4:ce:11:27:ce:cd:6b:fd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 31 01:00:47 2025 GMT Not After : Jun 29 01:00:47 2025 GMT Subject: CN=8e8dddb9-5407-437c-80ef-e9c5db10b6bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8f:85:33:5f:92:8c:31:ef:5e:75:5f:36:c9: b8:25:bf:d1:4d:5f:24:e3:e7:02:a4:d7:63:14:c8: 6c:eb:76:d6:d3:7f:38:d2:4f:b2:d4:fa:f2:ac:e9: a9:cb:56:56:9b:3b:8f:b7:97:f4:91:d0:99:83:d9: f1:16:9b:9b:17:0f:ea:33:50:4b:29:b1:4e:4d:09: 26:3a:e2:27:dc:ae:bc:f4:c1:c6:9f:e7:b1:14:61: c0:60:f1:09:a5:f1:a8:9d:6a:64:9a:1b:e3:c6:0f: 35:e0:c0:68:6c:4a:43:22:85:8c:e3:e6:90:53:e8: eb:65:0c:35:94:83:da:65:7a:ef:3d:3b:f1:69:87: 34:6c:30:6c:7e:66:58:b6:31:9d:2b:c1:1b:14:7d: 03:20:ef:f9:d2:83:79:f2:df:c0:4b:6b:34:62:ca: 24:ee:60:40:ae:8e:6a:69:39:36:04:68:2a:18:f2: 9c:a3:48:57:b7:93:0f:80:b2:d5:70:b7:5d:68:26: 31:5a:72:f3:30:ad:54:ce:63:55:eb:47:a6:e1:8a: 6d:90:24:6c:0b:69:e1:6a:f4:87:e6:f2:32:c3:24: 4b:c4:4b:f1:4c:6c:9e:79:ac:4b:9d:b1:27:ac:1f: fa:0a:a8:d6:56:09:8a:a9:4a:31:db:68:f9:fb:12: ba:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C7:08:7D:31:36:F2:B9:5C:AE:C0:97:0B:6B:A1:A3:FA:05:F3:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/95201972-0756-328a-8826-45e99e3090f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 104.44.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:24:13:1d:b4:52:54:b0:03:8a:ae:90:ac:38:ec:62:9f:02: 48:16:c1:55:47:cc:c1:7f:1c:ee:10:59:7a:bd:eb:9c:8b:28: 6f:ba:44:0a:cf:eb:36:89:ba:ba:0f:11:af:7e:59:59:6a:62: 29:c3:1f:98:92:6a:73:2b:74:8a:e0:e2:5e:61:f2:12:92:7d: 1a:b0:e7:30:71:34:13:d6:87:66:a1:d5:78:79:b9:a2:44:18: 31:c9:4a:fa:55:72:dc:5a:7a:60:6d:28:2d:a7:d9:89:2c:78: 6d:8b:ad:d4:7b:e7:82:d0:b5:41:20:14:0d:3c:b4:55:33:d6: 65:f4:dd:94:35:b6:bc:0e:99:e9:34:50:5a:f1:c9:88:aa:f7: 5e:89:af:1c:29:9c:84:75:9a:62:02:6b:53:bb:32:74:08:e3: 64:d9:6a:f2:4a:18:77:42:b2:e3:2f:d1:70:13:88:20:aa:b5: 6a:2e:00:74:5f:91:71:66:5b:ff:22:dc:2e:b3:8f:b9:6d:c2: 58:6a:12:02:4b:02:1a:bc:90:8a:aa:0e:33:6e:dd:33:8d:da: 36:20:46:0b:92:9d:dc:3c:78:d7:7d:a1:bd:73:40:54:c9:e8: 6d:cf:73:8d:ba:d5:a5:c3:4b:4b:69:1f:80:42:8f:64:e4:0d: 82:fe:71:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEldiXX0zhEnzs1r/UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMzMTAxMDA0N1oXDTI1MDYyOTAxMDA0N1owLzEtMCsGA1UEAxMk OGU4ZGRkYjktNTQwNy00MzdjLTgwZWYtZTljNWRiMTBiNmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY+FM1+SjDHvXnVfNsm4Jb/RTV8k4+cCpNdj FMhs63bW03840k+y1PryrOmpy1ZWmzuPt5f0kdCZg9nxFpubFw/qM1BLKbFOTQkm OuIn3K689MHGn+exFGHAYPEJpfGonWpkmhvjxg814MBobEpDIoWM4+aQU+jrZQw1 lIPaZXrvPTvxaYc0bDBsfmZYtjGdK8EbFH0DIO/50oN58t/AS2s0Ysok7mBAro5q aTk2BGgqGPKco0hXt5MPgLLVcLddaCYxWnLzMK1UzmNV60em4YptkCRsC2nhavSH 5vIywyRLxEvxTGyeeaxLnbEnrB/6CqjWVgmKqUox22j5+xK6rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/HCH0xNvK5XK7AlwtroaP6BfPAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTUyMDE5NzItMDc1Ni0z MjhhLTg4MjYtNDVlOTllMzA5MGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaCxCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0kEx20UlSwA4qukKw47GKfAkgWwVVHzMF/HO4QWXq965yLKG+6RArP 6zaJuroPEa9+WVlqYinDH5iSanMrdIrg4l5h8hKSfRqw5zBxNBPWh2ah1Xh5uaJE GDHJSvpVctxaemBtKC2n2YkseG2LrdR754LQtUEgFA08tFUz1mX03ZQ1trwOmek0 UFrxyYiq916JrxwpnIR1mmICa1O7MnQI42TZavJKGHdCsuMv0XATiCCqtWouAHRf kXFmW/8i3C6zj7ltwlhqEgJLAhq8kIqqDjNu3TON2jYgRguSndw8eNd9ob1zQFTJ 6G3Pc4261aXDS0tpH4BCj2TkDYL+cWQ= -----END CERTIFICATE-----Generated at Sun Apr 6 11:49:06 2025 by rpki-client