$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/02ae0dce-8d66-3178-9404-74219b4a48ca.roa File: 02ae0dce-8d66-3178-9404-74219b4a48ca.roa (raw, json) Hash identifier: BO42mhRLYTlENbYSuwmfmXjpJjOY9Ks17xUsEHV5QV8= Subject key identifier: 30:01:24:32:0E:FC:11:19:4A:41:91:C1:70:B3:46:FD:92:25:D9:69 Certificate issuer: /CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Certificate serial: 010D0C9F43285849AD1A10CB09FFF90B9A7ACA40 Authority key identifier: BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/02ae0dce-8d66-3178-9404-74219b4a48ca.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 8075 IP address blocks: 104.237.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:10:cb:09:ff:f9:0b:9a:7a:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=93beb18b-9341-4a8f-9d05-2f0aa478ff5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5b:04:19:63:f9:a0:46:be:c3:2d:f4:40:46: c4:27:70:65:cc:8a:ce:0a:26:1c:29:89:ba:99:95: a9:6f:ed:ce:0b:16:0e:80:34:47:94:33:37:49:2d: 2e:aa:f7:51:62:1c:1d:4e:d3:b7:03:ce:11:fd:f7: 69:a3:5c:48:22:82:3c:6d:5e:39:f4:a6:6a:34:51: c7:05:66:c7:8c:56:7d:fb:34:f7:25:1c:77:2a:42: 6b:39:24:4a:eb:b5:ee:c1:18:a4:dd:da:78:a4:f8: f5:2b:45:f9:a1:26:cf:ce:67:94:5e:8e:a5:ad:78: 09:21:d5:0f:25:64:78:be:08:04:49:7c:54:fd:ca: 4b:cf:c7:4c:02:a6:ab:54:1b:0f:0c:75:8b:41:22: 85:55:46:40:65:8c:c3:c7:e1:c7:b1:e6:8e:77:2d: f4:de:2e:40:e2:11:fd:27:e9:83:a2:45:68:e3:a8: 1a:fc:48:85:08:63:0b:c4:fc:0b:ba:81:9b:92:1d: 88:f1:34:96:90:77:34:4c:24:94:7d:0b:ce:1b:ad: bf:fd:4b:64:6e:de:8a:a4:41:fe:ef:cd:00:ed:49: a4:56:7b:7f:2d:51:d9:3a:d8:7e:76:48:33:ff:d9: 16:68:ec:31:bb:ba:fd:4f:81:d3:12:10:c5:01:93: b6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:01:24:32:0E:FC:11:19:4A:41:91:C1:70:B3:46:FD:92:25:D9:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/02ae0dce-8d66-3178-9404-74219b4a48ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl X509v3 Authority Key Identifier: keyid:BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer sbgp-ipAddrBlock: critical IPv4: 104.237.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:90:56:c4:2e:22:81:e2:1f:28:69:30:a7:35:11:9c:ac:22: 7f:4a:cc:da:db:1e:96:c1:38:58:cb:32:6e:2d:3e:5f:32:9c: 4b:33:e5:de:0e:94:5f:dd:69:dd:34:98:a3:0b:25:f7:7f:6d: 80:70:6a:fe:18:9f:62:53:96:1f:47:50:db:8a:9a:97:95:a7: 3a:14:41:f9:48:e3:a9:08:04:02:fa:e7:0c:86:f1:60:8e:54: 16:90:7c:5e:36:a9:bf:2e:37:c8:23:fa:7f:d4:c7:be:50:64: 4f:8f:f4:ee:ed:c7:29:95:c0:e9:2a:bb:0e:37:18:25:99:45: 63:36:79:ee:a6:06:b2:93:e1:e8:2b:d5:3c:26:81:14:65:94: c6:fd:53:cc:96:4e:26:11:3b:08:fa:5b:bd:f8:2c:be:62:64: 1a:54:28:61:9e:ba:7a:5e:ee:d4:84:e3:b0:c1:c8:91:43:ba: 8a:8e:e6:d4:a3:7d:5b:3c:4b:34:29:d8:af:4b:b3:8c:99:7a: 43:c7:75:53:7d:fa:ca:14:df:a0:69:8c:36:84:5c:b1:ba:64: 9b:21:b5:70:4f:de:12:4b:a7:8d:a0:93:79:2a:f4:f6:94:17: 14:1b:ba:9c:d5:e4:51:b7:7c:f0:bb:32:b5:45:ef:f5:d7:da: f6:ff:75:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhDLCf/5C5p6ykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUxZTU1YzEtYWQ4Zi00YjE4LWEwMGUtMGE4ZGYxYmVj MTU1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk OTNiZWIxOGItOTM0MS00YThmLTlkMDUtMmYwYWE0NzhmZjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1sEGWP5oEa+wy30QEbEJ3BlzIrOCiYcKYm6 mZWpb+3OCxYOgDRHlDM3SS0uqvdRYhwdTtO3A84R/fdpo1xIIoI8bV459KZqNFHH BWbHjFZ9+zT3JRx3KkJrOSRK67XuwRik3dp4pPj1K0X5oSbPzmeUXo6lrXgJIdUP JWR4vggESXxU/cpLz8dMAqarVBsPDHWLQSKFVUZAZYzDx+HHseaOdy303i5A4hH9 J+mDokVo46ga/EiFCGMLxPwLuoGbkh2I8TSWkHc0TCSUfQvOG62//Utkbt6KpEH+ 780A7UmkVnt/LVHZOth+dkgz/9kWaOwxu7r9T4HTEhDFAZO2SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDABJDIO/BEZSkGRwXCzRv2SJdlpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NTFl NTVjMS1hZDhmLTRiMTgtYTAwZS0wYThkZjFiZWMxNTUvMDJhZTBkY2UtOGQ2Ni0z MTc4LTk0MDQtNzQyMTliNGE0OGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDUxZTU1YzEtYWQ4Zi00YjE4LWEw MGUtMGE4ZGYxYmVjMTU1LzQ1MWU1NWMxLWFkOGYtNGIxOC1hMDBlLTBhOGRmMWJl YzE1NS5jcmwwHwYDVR0jBBgwFoAUu5jk8Qfoypch1BHov4c3CYbe8KcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80NTFlNTVjMS1hZDhmLTRiMTgtYTAwZS0wYThk ZjFiZWMxNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGQVsQuIoHiHyhpMKc1EZysIn9KzNrbHpbBOFjLMm4tPl8ynEsz5d4O lF/dad00mKMLJfd/bYBwav4Yn2JTlh9HUNuKmpeVpzoUQflI46kIBAL65wyG8WCO VBaQfF42qb8uN8gj+n/Ux75QZE+P9O7txymVwOkquw43GCWZRWM2ee6mBrKT4egr 1TwmgRRllMb9U8yWTiYROwj6W734LL5iZBpUKGGeunpe7tSE47DByJFDuoqO5tSj fVs8SzQp2K9Ls4yZekPHdVN9+soU36BpjDaEXLG6ZJshtXBP3hJLp42gk3kq9PaU FxQbupzV5FG3fPC7MrVF7/XX2vb/dV4= -----END CERTIFICATE-----Generated at Mon Apr 28 15:25:09 2025 by rpki-client