$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/caafa691-29e7-3acd-9bec-67691a876be2.roa File: caafa691-29e7-3acd-9bec-67691a876be2.roa (raw, json) Hash identifier: 64ALni8Z4gUHFwYjiJ7s5NNGX/vEBQ9PYQeVPWuTNmo= Subject key identifier: 0F:A4:BA:5F:61:1C:A0:B0:0E:7D:61:93:C4:2A:69:4E:D4:FE:F7:57 Certificate issuer: /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Certificate serial: 010D0C9F432858494E2EB1AB606B905840078C80 Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/caafa691-29e7-3acd-9bec-67691a876be2.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 23470 IP address blocks: 104.128.72.0/24 maxlen: 24 104.128.73.0/24 maxlen: 24 104.128.74.0/24 maxlen: 24 104.128.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:b1:ab:60:6b:90:58:40:07:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=d746619e-2e93-41a1-bd67-c6fd54b077f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:af:24:49:75:71:8d:38:48:62:0d:6c:9b:ab: 7b:bd:8c:16:d3:3d:5e:e3:1e:6f:8c:7b:5a:a5:4e: 6c:01:b2:df:1a:66:66:65:f1:d7:fc:e9:cf:56:1c: c9:31:b1:c8:de:b9:13:75:94:55:0f:45:7d:1b:c1: 61:d1:d9:bb:e3:48:e0:6f:d5:25:30:2a:cb:64:73: e4:99:57:68:ed:5c:60:25:65:f8:90:4f:ea:95:24: 07:e3:f3:05:50:e5:23:c7:4d:aa:f7:f8:79:8f:94: 2c:8b:09:e6:48:17:3c:cb:6f:9c:a9:4d:16:25:9c: d2:12:b7:67:39:16:9c:45:5c:d4:b2:97:c7:e2:64: 62:85:45:59:f7:f0:14:af:f6:01:18:d6:39:a8:85: 49:86:6f:f6:ce:b9:71:0b:a0:b2:78:20:98:28:e0: 02:e8:fd:93:e0:01:3d:d2:47:4c:f9:ce:7d:b8:dd: 1f:75:d3:8e:15:5c:01:ea:ff:b7:05:b8:4d:08:b3: 63:71:12:fc:e2:ab:2f:27:77:23:4a:38:f0:a6:bb: 07:5b:59:16:b9:a7:e9:5b:0a:a2:69:cd:a9:4b:4b: dc:af:8e:82:8d:ac:2b:72:45:e4:52:19:60:ad:05: 90:a1:b5:a0:e4:1f:ce:26:9b:16:1f:fd:78:c7:64: 65:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A4:BA:5F:61:1C:A0:B0:0E:7D:61:93:C4:2A:69:4E:D4:FE:F7:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/caafa691-29e7-3acd-9bec-67691a876be2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl X509v3 Authority Key Identifier: keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer sbgp-ipAddrBlock: critical IPv4: 104.128.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:08:e5:3b:3d:a0:5d:e1:76:92:fa:ea:b3:80:ff:be:d3:2c: 63:32:96:96:28:80:67:7f:29:2c:c5:07:47:35:83:36:7c:84: d9:29:bf:48:be:7f:ad:78:1a:89:18:12:96:bc:ae:4a:83:5f: bd:a8:bf:6e:bb:3c:d8:96:92:2e:04:54:71:f5:85:1a:29:b5: 98:e4:99:7b:3a:22:36:36:36:70:b4:f0:80:8f:01:76:d0:b1: 58:a4:ae:cd:f0:80:23:40:f4:7e:b2:95:82:15:bb:e6:89:35: 75:e5:39:f6:91:42:9d:24:d4:67:05:48:c8:ca:10:39:d9:27: a5:24:97:34:87:ff:8e:92:b2:e7:76:8b:60:a9:c0:da:dd:9e: 88:60:6a:bb:7d:10:36:da:9d:8d:55:a4:71:1d:f2:04:7a:6a: 86:99:47:a8:a5:45:a3:00:e3:45:ea:e7:fb:cf:f9:1a:89:50: 19:f3:8c:32:44:92:2c:70:76:c6:80:b8:c7:d0:08:88:83:0c: 04:93:fb:02:04:ca:f7:a4:81:fc:ad:41:d8:a2:ea:16:2f:6e: 6c:f9:05:89:0d:73:b1:0b:94:07:e0:a4:56:a0:a9:b1:33:27: 1a:35:f5:da:5f:2e:32:85:99:54:72:5a:17:30:37:07:a1:7e: a0:a7:57:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLrGrYGuQWEAHjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM2OWIzMjEtNjliYy00MWM0LWE2ZTEtMzQ5MWRiZmMy NTQ0MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk ZDc0NjYxOWUtMmU5My00MWExLWJkNjctYzZmZDU0YjA3N2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK8kSXVxjThIYg1sm6t7vYwW0z1e4x5vjHta pU5sAbLfGmZmZfHX/OnPVhzJMbHI3rkTdZRVD0V9G8Fh0dm740jgb9UlMCrLZHPk mVdo7VxgJWX4kE/qlSQH4/MFUOUjx02q9/h5j5QsiwnmSBc8y2+cqU0WJZzSErdn ORacRVzUspfH4mRihUVZ9/AUr/YBGNY5qIVJhm/2zrlxC6CyeCCYKOAC6P2T4AE9 0kdM+c59uN0fddOOFVwB6v+3BbhNCLNjcRL84qsvJ3cjSjjwprsHW1kWuafpWwqi ac2pS0vcr46CjawrckXkUhlgrQWQobWg5B/OJpsWH/14x2RlyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+kul9hHKCwDn1hk8QqaU7U/vdXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5 YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkxZGJmYzI1NDQvY2FhZmE2OTEtMjllNy0z YWNkLTliZWMtNjc2OTFhODc2YmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWM2OWIzMjEtNjliYy00MWM0LWE2 ZTEtMzQ5MWRiZmMyNTQ0LzljNjliMzIxLTY5YmMtNDFjNC1hNmUxLTM0OTFkYmZj MjU0NC5jcmwwHwYDVR0jBBgwFoAUHjmb1lU0mBF67zRaH+8vJwq9KawwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkx ZGJmYzI1NDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIBIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoI5Ts9oF3hdpL66rOA/77TLGMylpYogGd/KSzFB0c1gzZ8hNkpv0i+ f614GokYEpa8rkqDX72ov267PNiWki4EVHH1hRoptZjkmXs6IjY2NnC08ICPAXbQ sVikrs3wgCNA9H6ylYIVu+aJNXXlOfaRQp0k1GcFSMjKEDnZJ6UklzSH/46Ssud2 i2CpwNrdnohgart9EDbanY1VpHEd8gR6aoaZR6ilRaMA40Xq5/vP+RqJUBnzjDJE kixwdsaAuMfQCIiDDAST+wIEyvekgfytQdii6hYvbmz5BYkNc7ELlAfgpFagqbEz Jxo19dpfLjKFmVRyWhcwNwehfqCnVzw= -----END CERTIFICATE-----Generated at Tue Apr 29 21:47:03 2025 by rpki-client