$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/c8847bd4-be8e-3fcb-aad9-cea490dfbb4e.roa File: c8847bd4-be8e-3fcb-aad9-cea490dfbb4e.roa (raw, json) Hash identifier: la90OnmAfDOw1gVvNY38cfuUcS0RO+NazSHE5Cn3e0M= Subject key identifier: 88:51:56:40:F7:E3:10:F4:80:5E:F2:77:DF:75:9F:46:6C:55:10:A4 Certificate issuer: /CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Certificate serial: 010D0C9F43285848EF6155C0B2CDFB5EC9984F98 Authority key identifier: F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/c8847bd4-be8e-3fcb-aad9-cea490dfbb4e.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 46408 IP address blocks: 104.255.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:55:c0:b2:cd:fb:5e:c9:98:4f:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=31d2a31a-6f1f-4377-a87c-f65969d23247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:23:44:c8:6b:c7:4c:12:1d:44:9f:0d:a1:01: fa:61:8e:c3:c6:14:68:f1:d6:f7:d7:b4:e7:93:a5: 93:eb:13:4a:db:ae:4f:ce:1d:dd:a0:90:bc:c0:85: 71:ea:7a:7e:e7:34:e3:95:be:c9:d7:84:23:5c:c5: af:fa:87:d3:dc:54:82:82:6b:65:79:62:4e:54:2e: da:2f:00:b9:02:8f:bc:2a:bd:21:26:51:52:ca:41: 33:8c:7b:c7:25:b9:67:e2:10:ba:9a:52:4d:6a:21: be:ac:29:16:3c:fa:64:11:7a:bd:5a:3a:4c:9d:a0: ba:bb:93:ba:8a:81:11:6e:de:84:0c:f7:12:51:f2: 3f:ad:0b:79:45:94:3d:49:c5:8d:2a:21:79:ba:a9: 23:b3:26:ae:84:05:3f:0c:0a:2d:7e:48:c6:92:4a: 24:a5:c8:bf:30:9d:bb:76:6b:d4:7a:4c:08:88:94: 3e:d6:00:08:f7:52:0e:7b:d5:d0:da:12:8e:47:b3: 39:aa:aa:84:8b:7d:25:d9:99:f1:52:5d:84:d0:11: fb:f0:6b:d9:a8:c7:7b:bf:80:60:b6:68:16:63:eb: 07:5b:18:8a:07:35:ce:49:c0:7d:6a:e7:38:92:cc: 0c:91:84:c8:5d:06:82:23:66:cb:2f:c0:75:1f:f0: 1c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:51:56:40:F7:E3:10:F4:80:5E:F2:77:DF:75:9F:46:6C:55:10:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/c8847bd4-be8e-3fcb-aad9-cea490dfbb4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl X509v3 Authority Key Identifier: keyid:F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer sbgp-ipAddrBlock: critical IPv4: 104.255.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:5f:b2:42:1f:65:7a:fc:80:8b:cd:af:ef:1c:e6:46:0e:8f: 86:10:07:a1:83:fb:bd:4e:50:2d:ee:a3:15:0c:ab:ba:fe:ad: 4e:0a:a7:fd:c5:db:77:c9:8b:b2:6e:f2:26:2a:56:0e:fe:df: ac:ac:59:ce:20:e7:42:bd:9a:33:c3:02:10:9e:64:2d:26:53: d9:d4:91:5a:a4:ad:6c:8a:94:a7:9c:e0:98:a8:f2:70:3b:90: 0a:c9:2e:ca:3d:34:39:73:86:ee:42:0b:11:b0:5a:6a:2f:30: 99:12:ac:e4:39:b5:98:d4:b6:ee:d8:3a:3f:98:18:c7:21:bd: 65:be:ea:bb:4a:04:f6:95:7e:b3:c5:a8:0d:47:f5:ba:ac:52: 7b:d1:12:7c:fd:c9:8a:7c:14:2d:7c:c8:92:d0:a2:b7:8f:94: 57:88:20:51:8a:e3:f0:84:5a:bc:e0:c8:f8:cc:f7:3b:7f:b1: 8d:d2:06:49:e1:fb:36:fd:87:db:76:c1:af:fc:f3:94:9e:45: 5d:54:94:f0:ea:7b:6a:48:68:a5:29:28:15:35:bc:71:35:03: ae:ad:2b:32:a8:e8:a0:65:a7:2d:9b:80:bd:63:8f:2e:10:df: 07:06:64:a6:d8:84:f2:58:66:e9:c7:14:94:a8:ce:0c:9c:c0: 21:f4:0c:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYVXAss37XsmYT5gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkZjJlN2YtOGU4My00MzJhLThjMjctNTU0Njk0NGRk YTRiMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk MzFkMmEzMWEtNmYxZi00Mzc3LWE4N2MtZjY1OTY5ZDIzMjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCNEyGvHTBIdRJ8NoQH6YY7DxhRo8db317Tn k6WT6xNK265Pzh3doJC8wIVx6np+5zTjlb7J14QjXMWv+ofT3FSCgmtleWJOVC7a LwC5Ao+8Kr0hJlFSykEzjHvHJbln4hC6mlJNaiG+rCkWPPpkEXq9WjpMnaC6u5O6 ioERbt6EDPcSUfI/rQt5RZQ9ScWNKiF5uqkjsyauhAU/DAotfkjGkkokpci/MJ27 dmvUekwIiJQ+1gAI91IOe9XQ2hKOR7M5qqqEi30l2ZnxUl2E0BH78GvZqMd7v4Bg tmgWY+sHWxiKBzXOScB9auc4kswMkYTIXQaCI2bLL8B1H/AcDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhRVkD34xD0gF7yd991n0ZsVRCkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRm MmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2OTQ0ZGRhNGIvYzg4NDdiZDQtYmU4ZS0z ZmNiLWFhZDktY2VhNDkwZGZiYjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDVkZjJlN2YtOGU4My00MzJhLThj MjctNTU0Njk0NGRkYTRiL2Q1ZGYyZTdmLThlODMtNDMyYS04YzI3LTU1NDY5NDRk ZGE0Yi5jcmwwHwYDVR0jBBgwFoAU901L3g55e/8+XSHXuRqpy68UFwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRmMmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2 OTQ0ZGRhNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaP/oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxfskIfZXr8gIvNr+8c5kYOj4YQB6GD+71OUC3uoxUMq7r+rU4Kp/3F 23fJi7Ju8iYqVg7+36ysWc4g50K9mjPDAhCeZC0mU9nUkVqkrWyKlKec4Jio8nA7 kArJLso9NDlzhu5CCxGwWmovMJkSrOQ5tZjUtu7YOj+YGMchvWW+6rtKBPaVfrPF qA1H9bqsUnvREnz9yYp8FC18yJLQorePlFeIIFGK4/CEWrzgyPjM9zt/sY3SBknh +zb9h9t2wa/885SeRV1UlPDqe2pIaKUpKBU1vHE1A66tKzKo6KBlpy2bgL1jjy4Q 3wcGZKbYhPJYZunHFJSozgycwCH0DMw= -----END CERTIFICATE-----Generated at Sat Apr 12 11:10:10 2025 by rpki-client