$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/29387d14-5369-3841-8b55-747cef9985b6.roa File: 29387d14-5369-3841-8b55-747cef9985b6.roa (raw, json) Hash identifier: pgGMLk8gmyL23OqMIo4S8Wyv0Ll6xpBTMcm8iz9vb4M= Subject key identifier: 66:01:34:B4:CC:C0:77:7C:32:64:9E:01:84:77:E8:70:54:6E:2C:12 Certificate issuer: /CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279 Certificate serial: 010D0C9F4328584909E69F7386BA7DB4D8ECEE00 Authority key identifier: C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/29387d14-5369-3841-8b55-747cef9985b6.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 46562 IP address blocks: 104.200.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:9f:73:86:ba:7d:b4:d8:ec:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279 Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=e280220d-79a7-4408-9968-411fc5061555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:37:b3:32:33:4a:04:49:30:94:8d:d8:af:2d: 2a:ff:78:f4:7b:4b:29:c7:ce:b2:6b:cb:1c:90:db: a7:b4:f6:50:57:0e:c4:d2:9c:d9:81:b7:27:fc:85: 97:1b:6f:84:2e:e8:19:9a:45:1e:1c:64:28:81:af: c1:b9:74:58:08:87:12:92:46:e0:32:37:bd:ad:b3: ae:b1:dc:28:17:72:22:14:eb:ec:af:c6:26:ae:fd: 25:77:12:37:68:9d:81:7d:ca:4f:62:52:f4:60:c0: 2d:a6:20:3d:87:0b:96:da:37:cb:a5:9b:80:82:36: be:e2:d3:27:d6:c6:7a:62:72:51:01:bc:e9:f7:b4: fd:cb:cd:28:7c:bd:98:5d:6d:67:12:fe:2b:18:b8: ee:ee:9d:2d:a6:67:c7:d8:1e:d9:51:15:dc:cc:dc: 1e:75:5d:22:ed:df:fc:d8:68:3e:38:be:49:05:b3: 14:ee:78:cc:3f:b9:9b:62:a2:e4:e0:5c:20:ae:c3: e6:85:42:84:c5:ee:5e:31:22:8f:95:57:c8:39:1d: 54:84:51:31:e8:ea:cd:90:2d:00:49:db:9d:b8:97: ae:eb:91:c8:94:f8:cd:81:57:da:52:75:f4:ef:3b: 0e:d1:56:7c:78:ad:3b:e6:6a:1b:c4:4c:9f:a7:9b: 59:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:01:34:B4:CC:C0:77:7C:32:64:9E:01:84:77:E8:70:54:6E:2C:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/29387d14-5369-3841-8b55-747cef9985b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl X509v3 Authority Key Identifier: keyid:C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer sbgp-ipAddrBlock: critical IPv4: 104.200.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:20:26:18:9b:ae:77:52:e4:a0:fc:5b:d4:ae:c5:41:d3:d7: fe:c2:df:b7:cf:19:6e:93:6b:4f:72:54:2b:6f:1d:1f:1f:49: 5a:24:28:a7:02:74:02:46:66:c1:c6:8d:40:42:3e:01:8d:e1: 8b:df:3d:3c:d8:e9:68:54:70:6d:80:19:7c:8e:e5:f7:46:37: 6b:79:7f:0c:37:6d:12:fe:74:9b:7e:20:a6:c5:fe:bc:76:ed: ff:ec:ca:41:b5:8b:6f:1a:6e:17:00:b6:e1:4e:89:49:79:17: e1:6e:c9:39:65:4e:4e:01:f1:82:59:a0:06:e3:98:76:bb:1e: a2:70:3b:0b:1f:2b:7d:6c:2c:e1:1c:0b:ef:5c:ef:3f:17:36: 40:7a:47:53:96:0c:60:63:53:38:fb:0a:75:0b:83:9d:97:73: 4a:95:69:94:15:40:2b:c9:d0:c1:0c:a7:4c:70:87:45:ae:81: 19:d8:92:24:86:86:80:55:00:96:20:27:2c:58:97:64:b5:95: 03:18:47:9e:54:c4:7c:b9:59:99:29:60:01:98:53:7f:01:67: 19:87:ef:78:0a:67:b0:d6:85:41:15:34:89:15:dd:32:a3:ee: da:c0:76:53:80:03:23:52:10:df:92:21:26:8d:df:41:77:92: d4:f6:63:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJ5p9zhrp9tNjs7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDUzMjNkYWMtYTE1ZC00ZjgyLWE3MGItMzBlMWE0Y2Ex Mjc5MB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk ZTI4MDIyMGQtNzlhNy00NDA4LTk5NjgtNDExZmM1MDYxNTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojezMjNKBEkwlI3Yry0q/3j0e0spx86ya8sc kNuntPZQVw7E0pzZgbcn/IWXG2+ELugZmkUeHGQoga/BuXRYCIcSkkbgMje9rbOu sdwoF3IiFOvsr8Ymrv0ldxI3aJ2BfcpPYlL0YMAtpiA9hwuW2jfLpZuAgja+4tMn 1sZ6YnJRAbzp97T9y80ofL2YXW1nEv4rGLju7p0tpmfH2B7ZURXczNwedV0i7d/8 2Gg+OL5JBbMU7njMP7mbYqLk4FwgrsPmhUKExe5eMSKPlVfIOR1UhFEx6OrNkC0A SduduJeu65HIlPjNgVfaUnX07zsO0VZ8eK075mobxEyfp5tZtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYBNLTMwHd8MmSeAYR36HBUbiwSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNTMy M2RhYy1hMTVkLTRmODItYTcwYi0zMGUxYTRjYTEyNzkvMjkzODdkMTQtNTM2OS0z ODQxLThiNTUtNzQ3Y2VmOTk4NWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDUzMjNkYWMtYTE1ZC00ZjgyLWE3 MGItMzBlMWE0Y2ExMjc5L2Q1MzIzZGFjLWExNWQtNGY4Mi1hNzBiLTMwZTFhNGNh MTI3OS5jcmwwHwYDVR0jBBgwFoAUyDY3c/UqyujL65IZblyvIFXxGr4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNTMyM2RhYy1hMTVkLTRmODItYTcwYi0zMGUx YTRjYTEyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaMiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4gJhibrndS5KD8W9SuxUHT1/7C37fPGW6Ta09yVCtvHR8fSVokKKcC dAJGZsHGjUBCPgGN4YvfPTzY6WhUcG2AGXyO5fdGN2t5fww3bRL+dJt+IKbF/rx2 7f/sykG1i28abhcAtuFOiUl5F+FuyTllTk4B8YJZoAbjmHa7HqJwOwsfK31sLOEc C+9c7z8XNkB6R1OWDGBjUzj7CnULg52Xc0qVaZQVQCvJ0MEMp0xwh0WugRnYkiSG hoBVAJYgJyxYl2S1lQMYR55UxHy5WZkpYAGYU38BZxmH73gKZ7DWhUEVNIkV3TKj 7trAdlOAAyNSEN+SISaN30F3ktT2YyQ= -----END CERTIFICATE-----Generated at Fri Mar 14 09:27:15 2025 by rpki-client