$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/f0bf09cb-0ba6-3f0d-85d9-d21a4cb85376.roa File: f0bf09cb-0ba6-3f0d-85d9-d21a4cb85376.roa (raw, json) Hash identifier: 2rjDKRc3H/qxfa58PmyW0jHTC+ifz5kYOEhwnxGF4+w= Subject key identifier: F7:88:AA:5E:09:12:3F:49:D7:F3:16:36:4E:17:2E:D3:98:A0:6F:A8 Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F43285849C904EE4A74B080027BBF7A80 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/f0bf09cb-0ba6-3f0d-85d9-d21a4cb85376.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 5645 IP address blocks: 104.246.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:ee:4a:74:b0:80:02:7b:bf:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=d492eba3-ecc4-4faf-80b4-2ea3f6316bb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:65:98:07:f5:56:89:81:76:5f:15:45:9b:26: 19:71:80:88:31:5a:b9:1d:5c:c9:55:01:02:07:5e: 17:17:8e:c2:b6:ab:d9:ef:bf:aa:16:c6:b6:46:74: d1:ab:ce:5a:b3:e3:69:1d:7e:1a:47:42:8b:83:b2: 9b:fb:3b:27:fc:18:2f:04:e4:37:8a:54:79:ba:b1: 3c:35:ae:7c:3b:99:2c:38:75:f2:58:10:8f:39:f6: 28:53:bd:22:e6:cd:9d:be:8b:fd:29:b9:3d:87:c7: 5e:e0:39:ce:c2:f0:e8:ec:5b:77:04:68:19:3e:21: e2:c1:64:9f:cd:33:c6:38:37:17:10:db:c5:b4:bc: 5c:02:89:e9:66:61:bc:99:bb:6b:b9:84:7a:31:74: 56:2f:81:1f:4c:20:27:2b:9c:dc:21:61:d2:d5:29: c4:ae:e4:3e:7a:ea:c7:88:b0:e0:49:fb:a1:d5:87: a3:b7:8f:a9:87:c5:a0:35:f9:83:ab:74:b5:66:04: 2f:55:4c:ce:23:e8:5c:cd:9b:b8:31:67:8b:27:7a: ce:cf:ca:f9:f9:fd:3f:51:0c:9e:5c:cf:29:c1:05: c2:18:f0:1f:e6:bb:e0:a8:aa:6d:10:6d:7c:69:8d: 9c:c1:50:8a:f1:f5:66:41:48:e8:37:3a:5a:1d:16: 75:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:88:AA:5E:09:12:3F:49:D7:F3:16:36:4E:17:2E:D3:98:A0:6F:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/f0bf09cb-0ba6-3f0d-85d9-d21a4cb85376.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 104.246.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:15:e4:60:42:2f:2e:89:0e:bf:32:63:4b:b6:80:2f:98:52: 2f:63:0a:c0:20:cd:68:77:e0:c7:fc:61:c3:c9:f3:a8:61:ee: 87:74:64:f3:3d:9f:9c:d2:8c:1e:31:e8:e0:1a:89:99:66:5c: f2:e1:2b:cc:98:de:a0:4a:00:a6:a0:da:ac:ac:a2:a7:fe:7f: 55:c3:0b:43:4c:bd:ac:c0:dd:e0:25:8d:2c:ae:d5:9e:d2:69: cb:ae:15:f3:c4:1c:b6:65:d5:c6:f0:c4:6a:d0:d2:82:02:ab: cf:9b:fd:44:08:31:0b:bf:be:31:42:00:19:56:f5:83:98:0c: 25:c3:b4:ef:d5:30:8e:15:17:0b:7c:5f:d5:68:23:ca:9b:43: 68:88:a7:15:db:f5:55:af:1e:0a:2a:47:62:96:1f:db:2e:16: 11:a0:f8:9a:83:25:b8:0a:7a:44:c6:c4:94:fc:8b:c7:5d:ed: dc:1a:e1:76:2e:22:d5:36:5f:22:38:2d:7e:86:1c:26:f2:b8: 57:c6:18:89:88:b1:c7:65:97:a4:5a:b5:51:8b:ae:e9:e3:d5: e0:e9:4f:2f:84:94:71:35:4c:01:1b:12:23:58:96:75:80:65: 35:b5:00:66:94:97:02:6a:86:3f:68:81:40:79:bf:9a:ad:c7: de:7b:99:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBO5KdLCAAnu/eoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk ZDQ5MmViYTMtZWNjNC00ZmFmLTgwYjQtMmVhM2Y2MzE2YmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGWYB/VWiYF2XxVFmyYZcYCIMVq5HVzJVQEC B14XF47CtqvZ77+qFsa2RnTRq85as+NpHX4aR0KLg7Kb+zsn/BgvBOQ3ilR5urE8 Na58O5ksOHXyWBCPOfYoU70i5s2dvov9Kbk9h8de4DnOwvDo7Ft3BGgZPiHiwWSf zTPGODcXENvFtLxcAonpZmG8mbtruYR6MXRWL4EfTCAnK5zcIWHS1SnEruQ+eurH iLDgSfuh1Yejt4+ph8WgNfmDq3S1ZgQvVUzOI+hczZu4MWeLJ3rOz8r5+f0/UQye XM8pwQXCGPAf5rvgqKptEG18aY2cwVCK8fVmQUjoNzpaHRZ1GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPeIql4JEj9J1/MWNk4XLtOYoG+oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvZjBiZjA5Y2ItMGJhNi0z ZjBkLTg1ZDktZDIxYTRjYjg1Mzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPasMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQV5GBCLy6JDr8yY0u2gC+YUi9jCsAgzWh34Mf8YcPJ86hh7od0ZPM9 n5zSjB4x6OAaiZlmXPLhK8yY3qBKAKag2qysoqf+f1XDC0NMvazA3eAljSyu1Z7S acuuFfPEHLZl1cbwxGrQ0oICq8+b/UQIMQu/vjFCABlW9YOYDCXDtO/VMI4VFwt8 X9VoI8qbQ2iIpxXb9VWvHgoqR2KWH9suFhGg+JqDJbgKekTGxJT8i8dd7dwa4XYu ItU2XyI4LX6GHCbyuFfGGImIscdll6RatVGLrunj1eDpTy+ElHE1TAEbEiNYlnWA ZTW1AGaUlwJqhj9ogUB5v5qtx957mco= -----END CERTIFICATE-----Generated at Mon Jun 9 06:02:56 2025 by rpki-client