$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/001b25cc-cdfd-35a1-b46a-8cc19bdbe753.roa File: 001b25cc-cdfd-35a1-b46a-8cc19bdbe753.roa (raw, json) Hash identifier: 8PDblXxnW42j3NyrOk+LLir+CZCabeK2DnYjcnCtqE4= Subject key identifier: 5C:8A:5B:CD:0C:53:39:7C:B8:66:C2:10:B6:D7:B4:AF:D7:58:8C:5E Certificate issuer: /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Certificate serial: 010D0C9F4328584965E976864198F8F0CA6FE440 Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/001b25cc-cdfd-35a1-b46a-8cc19bdbe753.roa Signing time: Thu 03 Apr 2025 01:00:46 +0000 ROA not before: Thu 03 Apr 2025 01:00:46 +0000 ROA not after: Wed 02 Jul 2025 01:00:46 +0000 asID: 46450 IP address blocks: 104.129.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:e9:76:86:41:98:f8:f0:ca:6f:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Validity Not Before: Apr 3 01:00:46 2025 GMT Not After : Jul 2 01:00:46 2025 GMT Subject: CN=c64c6dd1-fab0-49ae-8fac-9c3c5c44c67b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:98:85:95:fc:5f:98:61:79:8b:3f:32:59:90: 3a:0f:3e:0e:63:f7:58:b9:aa:61:36:36:76:34:95: 9b:06:40:12:2f:a0:63:e6:80:92:d2:95:7c:68:5e: c7:ce:ba:6e:bd:64:69:9a:dc:9e:23:a5:58:d4:91: 42:56:6c:a1:ea:5f:91:fd:dd:dc:2d:bf:1a:d9:25: c6:67:a3:5f:c6:2d:ab:ae:6a:dc:b7:f0:a3:66:be: 05:be:b9:93:73:6c:f9:d4:4a:7d:2f:73:58:ee:09: 86:4c:44:14:d3:b2:89:dd:94:56:fc:48:6b:e3:bd: 26:a5:c7:15:0d:76:42:f3:41:2c:5e:28:d0:ba:92: f7:76:f7:8d:4a:96:32:ec:11:7d:54:42:48:21:ff: 73:83:fb:ff:ba:16:c5:0d:78:41:a0:ef:d0:86:4b: 69:5d:61:78:a4:6d:53:27:c5:e6:f1:d5:38:e2:64: cd:2f:05:31:7b:b9:77:e8:61:bb:7d:6f:59:2a:9f: 69:4b:af:e1:44:34:6b:93:c7:f2:9e:3a:25:2d:e2: 0b:35:d4:2a:45:48:37:44:9f:13:0c:93:74:56:32: 2b:95:2e:d6:00:a9:9c:19:2e:b6:49:8c:5b:da:5b: 87:52:37:5d:79:a5:d6:60:29:8f:91:a9:6a:04:90: 06:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:8A:5B:CD:0C:53:39:7C:B8:66:C2:10:B6:D7:B4:AF:D7:58:8C:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/001b25cc-cdfd-35a1-b46a-8cc19bdbe753.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl X509v3 Authority Key Identifier: keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer sbgp-ipAddrBlock: critical IPv4: 104.129.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:7e:2a:26:4b:04:8c:2d:7c:b9:0d:eb:41:3e:94:4a:a4:6e: 59:89:10:0d:8d:93:fd:ea:51:c8:34:9d:19:4c:47:42:e1:85: f0:c1:dc:78:4f:ab:49:cd:e5:32:87:2f:3b:37:33:80:90:a2: dd:1b:08:bb:d9:16:21:ce:1d:d9:e5:d7:b8:f1:be:34:a6:16: f7:95:81:d9:d5:36:43:08:7b:83:61:f2:77:fd:0f:5e:4b:e7: 40:82:20:ec:e5:c1:6a:6c:0c:41:37:a6:31:8f:22:0f:5e:de: 99:2a:d0:de:ac:14:bf:6a:c6:f8:e3:00:f0:a6:1e:e4:37:68: 3d:11:ab:d7:22:5a:9b:a8:27:57:e5:0b:24:27:49:77:cc:ae: da:4b:c0:d3:51:36:70:f4:50:3e:cc:b2:72:6a:4b:ff:dd:96: ab:c9:8c:26:c0:ca:70:ca:89:eb:4f:b4:08:9c:0b:72:6f:60: ec:a8:50:23:ce:0c:c7:16:28:97:4c:6c:aa:14:5e:24:3b:68: 4e:79:8a:20:c3:d1:75:97:04:5d:77:a7:34:8b:a6:ab:92:37: a5:7e:db:35:79:26:0c:f1:87:47:05:b2:94:d7:50:f2:0d:9c: 44:a8:3d:e1:9c:07:1b:6c:36:1e:63:18:10:01:2c:3c:60:89: 51:8e:9c:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEll6XaGQZj48Mpv5EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5 ZGMyMB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk YzY0YzZkZDEtZmFiMC00OWFlLThmYWMtOWMzYzVjNDRjNjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpiFlfxfmGF5iz8yWZA6Dz4OY/dYuaphNjZ2 NJWbBkASL6Bj5oCS0pV8aF7HzrpuvWRpmtyeI6VY1JFCVmyh6l+R/d3cLb8a2SXG Z6Nfxi2rrmrct/CjZr4FvrmTc2z51Ep9L3NY7gmGTEQU07KJ3ZRW/Ehr470mpccV DXZC80EsXijQupL3dveNSpYy7BF9VEJIIf9zg/v/uhbFDXhBoO/QhktpXWF4pG1T J8Xm8dU44mTNLwUxe7l36GG7fW9ZKp9pS6/hRDRrk8fynjolLeILNdQqRUg3RJ8T DJN0VjIrlS7WAKmcGS62SYxb2luHUjddeaXWYCmPkalqBJAGtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFyKW80MUzl8uGbCELbXtK/XWIxeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvMDAxYjI1Y2MtY2RmZC0z NWExLWI0NmEtOGNjMTliZGJlNzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3 YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0 OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh ZWY1NDlkYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaIGIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKF+KiZLBIwtfLkN60E+lEqkblmJEA2Nk/3qUcg0nRlMR0LhhfDB3HhP q0nN5TKHLzs3M4CQot0bCLvZFiHOHdnl17jxvjSmFveVgdnVNkMIe4Nh8nf9D15L 50CCIOzlwWpsDEE3pjGPIg9e3pkq0N6sFL9qxvjjAPCmHuQ3aD0Rq9ciWpuoJ1fl CyQnSXfMrtpLwNNRNnD0UD7MsnJqS//dlqvJjCbAynDKietPtAicC3JvYOyoUCPO DMcWKJdMbKoUXiQ7aE55iiDD0XWXBF13pzSLpquSN6V+2zV5Jgzxh0cFspTXUPIN nESoPeGcBxtsNh5jGBABLDxgiVGOnBs= -----END CERTIFICATE-----Generated at Tue Apr 8 23:44:05 2025 by rpki-client