$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/c9d7f4b0-07ef-3c63-9739-79d59d8a974e.roa File: c9d7f4b0-07ef-3c63-9739-79d59d8a974e.roa (raw, json) Hash identifier: vrhcRjsXWlMK4zF5UfX93k/rYEpO+p0gOQ8+8ul8rSc= Subject key identifier: FE:AD:2E:6D:91:76:68:50:2F:2A:78:48:75:09:16:84:B1:13:C5:14 Certificate issuer: /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Certificate serial: 010D0C9F4328584965E976A86DCE85BC9D53E400 Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/c9d7f4b0-07ef-3c63-9739-79d59d8a974e.roa Signing time: Thu 03 Apr 2025 01:00:46 +0000 ROA not before: Thu 03 Apr 2025 01:00:46 +0000 ROA not after: Wed 02 Jul 2025 01:00:46 +0000 asID: 46450 IP address blocks: 104.225.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:e9:76:a8:6d:ce:85:bc:9d:53:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Validity Not Before: Apr 3 01:00:46 2025 GMT Not After : Jul 2 01:00:46 2025 GMT Subject: CN=703e2f74-9a76-4570-a137-ce7ef592a98e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:12:90:c4:a4:2b:ea:85:80:3e:c6:82:f9:0b: c0:0c:5e:19:7a:f1:8f:45:f5:4a:7b:65:75:68:20: e8:97:81:85:b2:8d:e1:e3:f8:43:db:3a:3c:cf:52: 4d:c0:96:f5:77:c2:ab:da:b1:cf:1c:75:34:d9:91: 20:1c:94:d3:dd:d6:f2:fb:31:80:eb:64:6f:bb:f9: 53:8d:03:01:c6:b4:6d:13:00:a0:0f:12:c9:41:7f: 33:b7:da:19:f4:dd:df:26:ce:43:c9:c6:18:7a:95: a0:d8:a1:ef:c4:5a:c0:ec:8e:67:b4:02:e3:32:2f: 03:c5:83:1f:16:bd:df:91:73:47:52:06:80:b4:f8: bb:df:3d:5b:72:78:11:2f:6b:ed:6e:51:a2:af:9f: ab:e2:d8:63:61:63:0b:55:6c:bd:28:9e:6d:ef:53: e4:f6:37:19:a7:cf:ac:fe:44:97:10:5c:f0:e4:d9: d7:75:b8:c1:46:94:83:da:5f:3a:7b:da:8b:c5:88: 5f:84:c9:89:aa:10:a1:0f:bb:a6:b2:28:6e:53:dc: 51:bb:4a:41:84:fe:d4:01:00:47:ea:7d:96:50:26: 73:f9:ce:fe:b2:27:bb:a3:9e:8d:06:d4:18:6c:2c: e9:b8:4b:17:b9:b8:51:96:54:50:1d:44:34:c4:af: 5a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:AD:2E:6D:91:76:68:50:2F:2A:78:48:75:09:16:84:B1:13:C5:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/c9d7f4b0-07ef-3c63-9739-79d59d8a974e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl X509v3 Authority Key Identifier: keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer sbgp-ipAddrBlock: critical IPv4: 104.225.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:b0:66:5d:a1:d3:47:ed:f3:49:b1:ef:9f:fb:6e:ac:3d:db: 38:23:88:c6:4d:e4:9a:ed:2c:64:7a:50:e8:c6:1c:7a:65:aa: 90:da:a4:88:c9:a3:03:8d:60:2e:fa:62:b2:e3:4d:c9:ca:6e: 85:b6:fb:07:4d:f8:7f:5e:31:34:dd:c7:18:a9:47:8f:f2:3b: db:37:d5:88:7b:09:f8:1c:6c:d9:d6:c2:81:5d:17:d3:04:c4: eb:98:2b:f7:08:04:94:c3:e6:9e:71:58:73:37:79:d5:63:2e: 16:f6:38:af:44:62:40:8c:16:e4:81:8d:5f:e4:16:9f:75:8d: ef:f1:2a:db:e6:2a:8f:7c:03:5a:b8:21:88:ad:c3:36:d3:cc: 32:ec:04:13:72:da:51:3e:26:6b:ed:f0:cd:6c:94:22:93:02: a8:b2:5f:81:e3:1a:ec:ea:fa:4f:c2:a3:66:0c:49:37:10:cd: a0:89:13:d0:92:53:61:1a:9c:c1:f7:0a:23:c3:71:0e:63:42: 34:70:b4:a3:09:4b:f2:2e:6f:8e:76:dd:74:ea:35:38:25:7f: 94:20:11:30:77:52:3b:54:43:02:7f:6c:8f:fa:d5:c9:ba:22: c4:50:d8:e3:a0:b5:eb:86:28:90:77:b9:19:c9:7b:07:08:ca: 3d:52:50:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEll6Xaobc6FvJ1T5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5 ZGMyMB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk NzAzZTJmNzQtOWE3Ni00NTcwLWExMzctY2U3ZWY1OTJhOThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxKQxKQr6oWAPsaC+QvADF4ZevGPRfVKe2V1 aCDol4GFso3h4/hD2zo8z1JNwJb1d8Kr2rHPHHU02ZEgHJTT3dby+zGA62Rvu/lT jQMBxrRtEwCgDxLJQX8zt9oZ9N3fJs5DycYYepWg2KHvxFrA7I5ntALjMi8DxYMf Fr3fkXNHUgaAtPi73z1bcngRL2vtblGir5+r4thjYWMLVWy9KJ5t71Pk9jcZp8+s /kSXEFzw5NnXdbjBRpSD2l86e9qLxYhfhMmJqhChD7umsihuU9xRu0pBhP7UAQBH 6n2WUCZz+c7+sie7o56NBtQYbCzpuEsXubhRllRQHUQ0xK9aEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6tLm2RdmhQLyp4SHUJFoSxE8UUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvYzlkN2Y0YjAtMDdlZi0z YzYzLTk3MzktNzlkNTlkOGE5NzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3 YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0 OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh ZWY1NDlkYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaOHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSwZl2h00ft80mx75/7bqw92zgjiMZN5JrtLGR6UOjGHHplqpDapIjJ owONYC76YrLjTcnKboW2+wdN+H9eMTTdxxipR4/yO9s31Yh7CfgcbNnWwoFdF9ME xOuYK/cIBJTD5p5xWHM3edVjLhb2OK9EYkCMFuSBjV/kFp91je/xKtvmKo98A1q4 IYitwzbTzDLsBBNy2lE+Jmvt8M1slCKTAqiyX4HjGuzq+k/Co2YMSTcQzaCJE9CS U2EanMH3CiPDcQ5jQjRwtKMJS/Iub4523XTqNTglf5QgETB3UjtUQwJ/bI/61cm6 IsRQ2OOgteuGKJB3uRnJewcIyj1SUE0= -----END CERTIFICATE-----Generated at Sun Apr 6 13:22:01 2025 by rpki-client