$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/248a1fbf-b60e-3527-b32d-4b51452afa6f.roa File: 248a1fbf-b60e-3527-b32d-4b51452afa6f.roa (raw, json) Hash identifier: RiqPr5qFRPIUkNSS0MGCQwb7Krl7I6hf/UhvYn3/Yd0= Subject key identifier: ED:AD:5D:54:1C:53:95:8D:4C:B6:AE:65:90:9E:C5:95:E5:0F:52:90 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849028F6C5EA76B8D27F3493660 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/248a1fbf-b60e-3527-b32d-4b51452afa6f.roa Signing time: Wed 26 Feb 2025 10:54:25 +0000 ROA not before: Wed 26 Feb 2025 10:54:25 +0000 ROA not after: Tue 27 May 2025 09:54:25 +0000 asID: 30036 IP address blocks: 104.201.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:8f:6c:5e:a7:6b:8d:27:f3:49:36:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 26 10:54:25 2025 GMT Not After : May 27 09:54:25 2025 GMT Subject: CN=e0ef369b-09f1-4cef-b9cf-b8c7bf34741d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a9:83:10:3d:5b:92:f9:2a:88:de:d1:2c:f9: b2:f0:87:77:1c:e2:94:a4:2f:d1:19:93:b7:f5:8b: 2e:df:87:1c:b6:3d:ce:3b:e5:66:14:c4:47:41:1d: 06:99:a1:12:55:5d:8a:35:a3:09:be:15:67:78:69: 2b:0e:f1:9e:ab:ea:dd:82:d6:03:1a:9d:9b:bc:99: 51:d2:03:b1:c8:2e:40:b6:f1:7e:25:c4:4a:e8:d7: 37:f5:64:7d:c5:15:89:b6:1f:db:76:da:09:6e:87: 8f:ab:28:0e:e7:13:86:22:0b:19:34:6f:e2:21:8a: 17:ce:0c:f3:1a:20:18:24:af:91:14:68:df:5a:75: 0e:97:61:e2:c6:c7:85:5f:59:d6:62:a3:16:22:2b: 65:70:7e:a3:8c:15:93:3a:da:d7:a8:6f:cd:68:cc: c0:47:6d:be:7f:23:cc:f0:f0:bd:e4:4d:97:5a:c0: 4d:5b:bd:70:8a:75:f8:a6:8c:9d:a9:28:e9:98:77: 2f:90:0d:26:51:48:e5:60:a4:68:00:5f:5e:5e:c1: 64:26:1f:ef:4a:45:f0:97:61:13:7e:be:bd:9b:0d: ad:9f:ab:b6:f7:a0:4e:1a:98:f0:0c:6c:67:c4:ba: 31:18:78:ff:28:1e:c2:6a:9c:37:be:9c:23:56:1a: 9a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:AD:5D:54:1C:53:95:8D:4C:B6:AE:65:90:9E:C5:95:E5:0F:52:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/248a1fbf-b60e-3527-b32d-4b51452afa6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 104.201.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:c0:87:94:6f:2a:04:55:c0:a9:d1:30:82:04:f9:d9:a1:58: 9e:66:7f:3a:22:67:b9:dd:e9:4c:99:17:d4:83:04:8e:43:b9: 29:93:a9:d9:11:12:0b:0c:d2:97:42:c5:8b:6b:2b:f4:76:cc: 36:aa:95:55:d2:15:75:d9:24:cf:dc:44:1c:ce:67:91:c2:2e: ea:cf:79:28:5a:61:d2:4d:e9:61:07:b9:6b:e5:9e:51:fb:d1: af:c9:3e:e6:b7:ea:1a:9f:5f:fa:44:23:b7:4c:86:60:af:e1: c9:bd:14:a5:33:35:ae:b1:89:65:5b:eb:31:86:ed:2f:cf:28: a8:44:b9:aa:f5:a6:d2:29:28:0c:87:d8:c6:4e:ba:c2:63:f0: 99:ab:4b:b8:a2:df:5d:36:5a:31:c9:16:8a:3a:a5:ed:c7:9c: 4c:a3:03:f6:2b:5e:91:f2:9d:ee:b7:51:fd:e4:6b:80:d8:16: a7:63:97:ab:66:85:74:67:c4:1e:19:c7:65:44:20:bc:ab:2b: 75:41:1f:65:d0:af:1a:8f:3e:f4:ac:7f:74:39:ef:64:54:53: fc:49:39:07:09:ca:b0:3b:99:b9:a2:d0:29:e3:55:f5:86:0c: f2:07:04:9a:12:43:f3:d5:46:7b:5b:17:a7:0a:73:46:b2:96: 1f:f8:b2:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkCj2xep2uNJ/NJNmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIyNjEwNTQyNVoXDTI1MDUyNzA5NTQyNVowLzEtMCsGA1UEAxMk ZTBlZjM2OWItMDlmMS00Y2VmLWI5Y2YtYjhjN2JmMzQ3NDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqmDED1bkvkqiN7RLPmy8Id3HOKUpC/RGZO3 9Ysu34cctj3OO+VmFMRHQR0GmaESVV2KNaMJvhVneGkrDvGeq+rdgtYDGp2bvJlR 0gOxyC5AtvF+JcRK6Nc39WR9xRWJth/bdtoJboePqygO5xOGIgsZNG/iIYoXzgzz GiAYJK+RFGjfWnUOl2HixseFX1nWYqMWIitlcH6jjBWTOtrXqG/NaMzAR22+fyPM 8PC95E2XWsBNW71winX4poydqSjpmHcvkA0mUUjlYKRoAF9eXsFkJh/vSkXwl2ET fr69mw2tn6u296BOGpjwDGxnxLoxGHj/KB7Capw3vpwjVhqamQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2tXVQcU5WNTLauZZCexZXlD1KQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjQ4YTFmYmYtYjYwZS0z NTI3LWIzMmQtNGI1MTQ1MmFmYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMlmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDAh5RvKgRVwKnRMIIE+dmhWJ5mfzoiZ7nd6UyZF9SDBI5DuSmTqdkR EgsM0pdCxYtrK/R2zDaqlVXSFXXZJM/cRBzOZ5HCLurPeShaYdJN6WEHuWvlnlH7 0a/JPua36hqfX/pEI7dMhmCv4cm9FKUzNa6xiWVb6zGG7S/PKKhEuar1ptIpKAyH 2MZOusJj8JmrS7ii3102WjHJFoo6pe3HnEyjA/YrXpHyne63Uf3ka4DYFqdjl6tm hXRnxB4Zx2VEILyrK3VBH2XQrxqPPvSsf3Q572RUU/xJOQcJyrA7mbmi0CnjVfWG DPIHBJoSQ/PVRntbF6cKc0aylh/4smI= -----END CERTIFICATE-----Generated at Sun Apr 27 04:09:15 2025 by rpki-client