$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae/6757d0ec-3da9-362b-964a-6f6259402d74.roa File: 6757d0ec-3da9-362b-964a-6f6259402d74.roa (raw, json) Hash identifier: D9FgBH6DzIz4qI7FJagNX98D8m5ZD9oRfQEsd9G57ck= Subject key identifier: 66:51:19:0F:AA:30:D0:A1:3C:61:4A:20:2C:15:4A:4C:19:00:A0:92 Certificate issuer: /CN=41d819be-21e8-4d68-8993-33ab237e51ae Certificate serial: 010D0C9F432858490F7BFC2375943031379FF1A0 Authority key identifier: BF:F7:3C:D9:CA:4A:32:C7:FF:0B:FD:F3:E5:54:10:42:3C:C8:97:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae/6757d0ec-3da9-362b-964a-6f6259402d74.roa Signing time: Mon 03 Mar 2025 02:00:39 +0000 ROA not before: Mon 03 Mar 2025 02:00:39 +0000 ROA not after: Sun 01 Jun 2025 01:00:39 +0000 asID: 395324 IP address blocks: 104.219.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae/41d819be-21e8-4d68-8993-33ab237e51ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae/41d819be-21e8-4d68-8993-33ab237e51ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0f:7b:fc:23:75:94:30:31:37:9f:f1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41d819be-21e8-4d68-8993-33ab237e51ae Validity Not Before: Mar 3 02:00:39 2025 GMT Not After : Jun 1 01:00:39 2025 GMT Subject: CN=2ded44d7-9913-48ee-b06f-efc716490591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d5:94:c3:2f:39:26:0a:7e:8f:f5:cf:b5:f7: ac:26:07:0c:84:b1:bb:7c:0e:20:18:10:14:ee:37: c9:29:da:e1:70:50:f1:9d:80:cc:29:50:79:e3:ae: 09:22:5f:cc:4c:0d:c9:93:bd:8f:a4:96:2d:20:f3: e7:85:06:2a:ab:5a:da:8e:0f:60:fe:27:da:d2:f7: 1c:58:9d:cc:9b:a9:f0:26:35:41:1d:a9:d4:6f:d5: 1c:6a:22:c9:67:2c:93:6a:8d:99:ee:92:32:50:11: 01:a9:1f:6f:f6:47:1f:d8:5e:d1:4c:d9:54:99:88: 88:7c:38:06:98:39:12:32:da:88:cf:d4:1b:65:4b: 1b:75:a0:a6:02:04:5f:d6:d0:3f:8f:e7:d6:61:76: 67:65:b4:88:46:f9:a8:89:82:e0:5b:21:b3:b6:83: f8:40:ff:a3:1d:2d:6d:8f:a9:a0:e2:58:7f:b9:89: 74:19:ab:42:af:7f:47:74:21:f7:8d:9f:24:0d:7a: 1e:c0:47:78:f7:30:c4:47:0f:5b:81:96:7d:29:14: a3:09:93:51:cf:cd:13:62:73:10:da:8a:c9:d5:92: 78:08:1b:77:20:f4:a3:1c:43:e5:0c:d9:69:56:24: cb:ea:1b:4c:e4:7d:aa:c6:2a:41:75:c8:f6:45:26: c6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:51:19:0F:AA:30:D0:A1:3C:61:4A:20:2C:15:4A:4C:19:00:A0:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae/6757d0ec-3da9-362b-964a-6f6259402d74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae/41d819be-21e8-4d68-8993-33ab237e51ae.crl X509v3 Authority Key Identifier: keyid:BF:F7:3C:D9:CA:4A:32:C7:FF:0B:FD:F3:E5:54:10:42:3C:C8:97:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae.cer sbgp-ipAddrBlock: critical IPv4: 104.219.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:60:f0:09:51:db:a0:e7:91:e5:5f:78:37:a7:2a:6c:ef:db: f9:55:b0:cb:bb:29:0f:f6:fa:24:1e:8d:cc:85:0f:2b:33:7d: f2:c6:f3:b2:af:d8:0e:e2:e6:da:db:61:90:70:ae:75:94:5a: 04:d4:95:6c:ff:83:5d:f9:2c:44:c3:d1:31:ac:0c:0c:10:d3: f3:17:96:77:fb:29:ae:ce:30:08:be:10:79:64:7c:f1:1d:f4: 31:0c:c4:fb:51:32:2b:e5:a6:c5:e1:2d:79:c3:69:a5:bc:32: 20:0d:eb:2f:3a:fc:32:75:74:2c:af:c2:65:59:db:d4:37:32: 72:1f:87:60:57:3a:3e:cc:fa:d7:f3:c3:71:f4:eb:a4:2f:ae: 7c:05:83:d4:8b:d0:e7:2e:d4:c2:36:91:4a:ac:d1:4f:46:c7: c0:f8:ec:23:2e:80:c9:3f:ca:ce:b9:0a:0e:9c:d0:bd:29:43: c6:e0:5d:8a:56:8a:12:a1:5a:92:a4:b7:e9:93:12:d3:b1:1c: 2e:5e:f6:95:3d:b9:67:64:94:c9:79:e4:f8:81:f1:42:ed:cc: 51:9e:3f:46:cb:c7:1a:c1:a4:ce:6a:e9:07:86:18:66:07:90: 24:5a:17:d5:16:16:1c:93:76:dd:6a:0c:45:04:1f:e8:53:88: 9f:c6:f1:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkPe/wjdZQwMTef8aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkODE5YmUtMjFlOC00ZDY4LTg5OTMtMzNhYjIzN2U1 MWFlMB4XDTI1MDMwMzAyMDAzOVoXDTI1MDYwMTAxMDAzOVowLzEtMCsGA1UEAxMk MmRlZDQ0ZDctOTkxMy00OGVlLWIwNmYtZWZjNzE2NDkwNTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNWUwy85Jgp+j/XPtfesJgcMhLG7fA4gGBAU 7jfJKdrhcFDxnYDMKVB5464JIl/MTA3Jk72PpJYtIPPnhQYqq1rajg9g/ifa0vcc WJ3Mm6nwJjVBHanUb9UcaiLJZyyTao2Z7pIyUBEBqR9v9kcf2F7RTNlUmYiIfDgG mDkSMtqIz9QbZUsbdaCmAgRf1tA/j+fWYXZnZbSIRvmoiYLgWyGztoP4QP+jHS1t j6mg4lh/uYl0GatCr39HdCH3jZ8kDXoewEd49zDERw9bgZZ9KRSjCZNRz80TYnMQ 2orJ1ZJ4CBt3IPSjHEPlDNlpViTL6htM5H2qxipBdcj2RSbGVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZRGQ+qMNChPGFKICwVSkwZAKCSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MWQ4 MTliZS0yMWU4LTRkNjgtODk5My0zM2FiMjM3ZTUxYWUvNjc1N2QwZWMtM2RhOS0z NjJiLTk2NGEtNmY2MjU5NDAyZDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDFkODE5YmUtMjFlOC00ZDY4LTg5 OTMtMzNhYjIzN2U1MWFlLzQxZDgxOWJlLTIxZTgtNGQ2OC04OTkzLTMzYWIyMzdl NTFhZS5jcmwwHwYDVR0jBBgwFoAUv/c82cpKMsf/C/3z5VQQQjzIl2YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80MWQ4MTliZS0yMWU4LTRkNjgtODk5My0zM2Fi MjM3ZTUxYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaNtfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALFg8AlR26DnkeVfeDenKmzv2/lVsMu7KQ/2+iQejcyFDyszffLG87Kv 2A7i5trbYZBwrnWUWgTUlWz/g135LETD0TGsDAwQ0/MXlnf7Ka7OMAi+EHlkfPEd 9DEMxPtRMivlpsXhLXnDaaW8MiAN6y86/DJ1dCyvwmVZ29Q3MnIfh2BXOj7M+tfz w3H066QvrnwFg9SL0Ocu1MI2kUqs0U9Gx8D47CMugMk/ys65Cg6c0L0pQ8bgXYpW ihKhWpKkt+mTEtOxHC5e9pU9uWdklMl55PiB8ULtzFGeP0bLxxrBpM5q6QeGGGYH kCRaF9UWFhyTdt1qDEUEH+hTiJ/G8aE= -----END CERTIFICATE-----Generated at Mon Apr 28 12:07:56 2025 by rpki-client