$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/750aa516-d178-3a5d-a10f-6629232da190.roa File: 750aa516-d178-3a5d-a10f-6629232da190.roa (raw, json) Hash identifier: ygiWWOufj3SImnWqwIH4YoqHeCjGQ8rDr4vv4AmxyM0= Subject key identifier: 90:BB:5C:C5:0A:CA:B0:07:D0:EC:0A:6A:C8:79:A7:5F:B5:B7:98:AB Certificate issuer: /CN=bb49c202-f644-4fa6-8a36-084312761f72 Certificate serial: 010D0C9F43285848F4F972D98523C2C7DE231700 Authority key identifier: CF:B3:27:7C:51:09:97:90:36:B3:FB:CF:B2:8C:86:C0:AB:F0:6B:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/750aa516-d178-3a5d-a10f-6629232da190.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 20473 IP address blocks: 104.245.232.0/21 maxlen: 24 172.98.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/bb49c202-f644-4fa6-8a36-084312761f72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/bb49c202-f644-4fa6-8a36-084312761f72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f9:72:d9:85:23:c2:c7:de:23:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb49c202-f644-4fa6-8a36-084312761f72 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=eaa6769e-3797-4958-957d-04edf970a446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c0:5f:7c:1e:4e:6a:5b:cf:91:cf:23:39:47: 06:82:0b:0f:07:71:d2:c7:1f:42:31:2b:08:17:ab: 97:21:99:02:33:97:fd:23:6b:af:b9:f5:02:e4:57: f4:62:e0:f3:94:ba:0d:db:d9:a8:d8:e1:7a:c5:a1: 37:ff:e7:58:2b:c8:0e:30:e9:7e:e5:d8:93:6a:bd: 4a:5b:e4:34:e9:81:43:05:a6:44:1b:11:da:be:56: 3f:40:7c:0a:ed:01:53:38:e1:27:5f:4c:7e:4f:c7: c0:97:15:48:d9:d1:e6:22:b3:db:fc:d0:56:42:3a: b8:78:cf:a1:21:d1:dc:8f:56:b2:78:fb:68:99:57: 93:95:c2:77:97:18:cc:0a:5c:62:f9:f8:1f:71:60: 79:79:4f:7d:43:64:34:9d:13:b0:11:32:02:c9:6a: e6:0f:e3:dd:79:02:f3:59:55:77:82:d8:dd:16:71: 3c:d1:5e:c5:1e:8f:87:30:b3:82:07:27:33:b5:58: 0d:4d:52:1a:9b:d2:f3:8a:0e:77:ee:03:8d:b9:1e: ba:55:66:73:21:b0:e0:70:ad:43:c5:99:9e:8a:92: cc:f6:04:8f:6d:72:4d:60:d1:42:e7:de:39:b2:71: d0:b1:a5:62:bd:d3:65:17:74:7b:8c:74:95:bd:16: 01:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:BB:5C:C5:0A:CA:B0:07:D0:EC:0A:6A:C8:79:A7:5F:B5:B7:98:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/750aa516-d178-3a5d-a10f-6629232da190.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/bb49c202-f644-4fa6-8a36-084312761f72.crl X509v3 Authority Key Identifier: keyid:CF:B3:27:7C:51:09:97:90:36:B3:FB:CF:B2:8C:86:C0:AB:F0:6B:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72.cer sbgp-ipAddrBlock: critical IPv4: 104.245.232.0/21 172.98.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:f2:9d:bd:6c:27:1e:fe:2e:d1:84:20:2f:7c:3e:1a:5b:a9: 12:98:d9:02:40:12:39:95:3a:ee:3b:de:49:58:ad:ba:ed:96: d3:bf:4b:9d:c1:07:54:34:68:6a:cb:93:2a:6a:4e:8e:bf:db: c4:f4:27:b1:7a:be:ed:47:06:3a:fe:b1:2c:4c:fb:aa:f1:5f: b3:94:2b:23:af:c4:05:91:bb:93:8a:55:0f:1d:05:3c:48:cb: 59:0f:11:48:0d:6d:0d:88:c3:6f:a8:d9:a1:bd:ed:27:bc:58: 68:a0:33:61:1c:41:7e:e6:c4:8e:14:c1:ea:ac:2c:19:bc:2b: 78:a0:d1:0f:2a:19:63:59:0a:1d:5e:ac:42:d7:5e:d5:70:9b: 09:47:0e:bd:cb:65:e1:fc:33:7e:e4:7e:0c:90:f4:c2:3e:c2: a8:e3:bc:c4:bd:28:f8:7b:d5:84:a8:dc:9e:30:a0:98:c1:51: e3:be:4e:7e:c9:c2:30:74:cd:e1:1c:5e:47:48:23:ff:2f:c5: 69:f5:fd:89:ba:07:2c:86:7a:a1:1c:1d:72:74:6e:1f:47:44: ca:60:4d:8b:01:e3:d5:b8:c0:6a:95:ac:2b:8e:ef:e3:cd:5c: 6a:45:6d:72:b1:30:cf:86:bc:26:b1:5a:23:84:14:ff:49:77: 3a:d6:7b:51 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEj0+XLZhSPCx94jFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmI0OWMyMDItZjY0NC00ZmE2LThhMzYtMDg0MzEyNzYx ZjcyMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZWFhNjc2OWUtMzc5Ny00OTU4LTk1N2QtMDRlZGY5NzBhNDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksBffB5OalvPkc8jOUcGggsPB3HSxx9CMSsI F6uXIZkCM5f9I2uvufUC5Ff0YuDzlLoN29mo2OF6xaE3/+dYK8gOMOl+5diTar1K W+Q06YFDBaZEGxHavlY/QHwK7QFTOOEnX0x+T8fAlxVI2dHmIrPb/NBWQjq4eM+h IdHcj1ayePtomVeTlcJ3lxjMClxi+fgfcWB5eU99Q2Q0nROwETICyWrmD+PdeQLz WVV3gtjdFnE80V7FHo+HMLOCBycztVgNTVIam9Lzig537gONuR66VWZzIbDgcK1D xZmeipLM9gSPbXJNYNFC5945snHQsaVivdNlF3R7jHSVvRYBNwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJC7XMUKyrAH0OwKash5p1+1t5irMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iYjQ5 YzIwMi1mNjQ0LTRmYTYtOGEzNi0wODQzMTI3NjFmNzIvNzUwYWE1MTYtZDE3OC0z YTVkLWExMGYtNjYyOTIzMmRhMTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmI0OWMyMDItZjY0NC00ZmE2LThh MzYtMDg0MzEyNzYxZjcyL2JiNDljMjAyLWY2NDQtNGZhNi04YTM2LTA4NDMxMjc2 MWY3Mi5jcmwwHwYDVR0jBBgwFoAUz7MnfFEJl5A2s/vPsoyGwKvwa6gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iYjQ5YzIwMi1mNjQ0LTRmYTYtOGEzNi0wODQz MTI3NjFmNzIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDaPXoAwQD rGLQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGPynb1sJx7+LtGEIC98PhpbqRKY2QJAEjmVOu473klYrbrt ltO/S53BB1Q0aGrLkypqTo6/28T0J7F6vu1HBjr+sSxM+6rxX7OUKyOvxAWRu5OK VQ8dBTxIy1kPEUgNbQ2Iw2+o2aG97Se8WGigM2EcQX7mxI4UweqsLBm8K3ig0Q8q GWNZCh1erELXXtVwmwlHDr3LZeH8M37kfgyQ9MI+wqjjvMS9KPh71YSo3J4woJjB UeO+Tn7JwjB0zeEcXkdII/8vxWn1/Ym6ByyGeqEcHXJ0bh9HRMpgTYsB49W4wGqV rCuO7+PNXGpFbXKxMM+GvCaxWiOEFP9JdzrWe1E= -----END CERTIFICATE-----Generated at Sat Apr 26 16:38:07 2025 by rpki-client