$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/aa0ddac2-635c-30b4-bf37-119ed84e3182.roa File: aa0ddac2-635c-30b4-bf37-119ed84e3182.roa (raw, json) Hash identifier: 52+ah+cTfwveWgszlS3B+OrymhD6u2C+tHzxkikjhjA= Subject key identifier: 12:6D:37:4B:ED:A2:40:D9:49:6F:AC:42:E0:9F:57:37:9F:8B:77:1F Certificate issuer: /CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Certificate serial: 010D0C9F43285849AD1A0C8FEA1A54C036ED7200 Authority key identifier: BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/aa0ddac2-635c-30b4-bf37-119ed84e3182.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 16509 IP address blocks: 104.237.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:0c:8f:ea:1a:54:c0:36:ed:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=199e8cf6-3fb9-48b5-85fb-d9afeba36b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5e:a0:5e:e9:f2:7f:fe:4d:f3:6a:1d:e2:e9: f2:6f:fb:e4:35:d7:aa:1d:c4:38:e0:00:b1:e1:af: e2:59:5f:71:85:d8:e0:7d:dd:a2:2c:34:a0:88:19: 67:d7:a7:1b:a7:06:a2:54:b2:8b:91:83:98:91:94: 8b:63:b2:af:22:87:15:70:43:76:72:35:23:29:4b: 06:8d:a2:7f:7d:8c:68:a7:5e:0a:a6:90:06:32:72: 5e:37:61:94:e6:31:a7:0f:b1:eb:01:d6:ff:3c:4f: 83:0e:d0:aa:ae:39:48:df:91:42:e8:85:14:e7:e6: 4e:e7:0c:f7:c9:cb:d1:b6:a8:03:7f:4f:0c:ae:22: f9:3e:dd:e8:b6:64:98:7a:71:78:c0:2f:55:b0:19: fd:6e:d7:d6:99:c5:8f:20:a9:28:eb:fd:2c:16:55: 2a:b1:4d:b0:08:0c:e9:f9:65:30:50:71:f4:7d:c1: 91:bd:d3:a4:95:61:a9:0f:34:1b:9f:a5:eb:84:23: 34:9c:ca:9e:12:2b:62:d4:9d:b9:8f:77:eb:e2:77: b3:9b:74:f3:1b:2b:fd:db:02:94:cd:d0:44:d4:a9: d2:ee:41:ff:84:10:90:50:42:9d:79:81:3c:d9:11: 11:85:f0:6d:1e:81:14:bc:44:b9:0e:e8:12:8f:00: 0b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:6D:37:4B:ED:A2:40:D9:49:6F:AC:42:E0:9F:57:37:9F:8B:77:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/aa0ddac2-635c-30b4-bf37-119ed84e3182.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl X509v3 Authority Key Identifier: keyid:BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer sbgp-ipAddrBlock: critical IPv4: 104.237.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:8e:1b:b0:8c:f7:7c:7a:d0:25:5c:78:ff:ee:21:4c:30:7c: ab:72:a7:82:b8:64:28:a3:ae:b3:47:97:f5:15:49:67:5f:17: 35:cd:aa:6a:8d:3a:dd:01:82:07:05:df:22:62:d0:f2:91:54: b1:ce:0a:d8:8a:af:24:ae:c3:8a:7a:94:61:6d:30:55:60:cd: 72:7d:26:11:4e:8e:12:3f:bd:66:13:ae:d1:54:58:95:8a:48: 1b:fc:9c:e8:5b:f5:70:61:97:7d:ad:88:94:66:ac:7d:6a:36: a0:23:ee:9d:e8:bc:6c:eb:1b:f3:89:dc:04:ae:3e:85:08:a5: 03:17:18:16:72:83:c2:b7:f2:d8:50:4f:4c:18:08:05:40:a7: 27:aa:9c:fd:dd:91:e5:3d:54:9a:bc:cc:fc:04:4a:82:88:0f: 55:f6:e8:86:09:22:bf:e7:66:cb:88:76:5a:e3:90:59:36:e4: 24:1c:12:d3:54:44:42:63:a4:31:dc:c6:80:aa:5f:d7:b5:d0: 79:8b:91:ac:13:f5:16:a8:64:ff:de:97:d7:50:b4:54:80:52: 12:01:a6:54:e6:7c:15:98:20:87:2c:58:cb:c3:0c:6a:6b:a3: fe:a9:25:86:45:22:44:f9:41:92:b8:e8:c7:f8:cb:5d:82:0f: 32:28:e3:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGgyP6hpUwDbtcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUxZTU1YzEtYWQ4Zi00YjE4LWEwMGUtMGE4ZGYxYmVj MTU1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk MTk5ZThjZjYtM2ZiOS00OGI1LTg1ZmItZDlhZmViYTM2YjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF6gXunyf/5N82od4unyb/vkNdeqHcQ44ACx 4a/iWV9xhdjgfd2iLDSgiBln16cbpwaiVLKLkYOYkZSLY7KvIocVcEN2cjUjKUsG jaJ/fYxop14KppAGMnJeN2GU5jGnD7HrAdb/PE+DDtCqrjlI35FC6IUU5+ZO5wz3 ycvRtqgDf08MriL5Pt3otmSYenF4wC9VsBn9btfWmcWPIKko6/0sFlUqsU2wCAzp +WUwUHH0fcGRvdOklWGpDzQbn6XrhCM0nMqeEiti1J25j3fr4nezm3TzGyv92wKU zdBE1KnS7kH/hBCQUEKdeYE82RERhfBtHoEUvES5DugSjwALYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJtN0vtokDZSW+sQuCfVzefi3cfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NTFl NTVjMS1hZDhmLTRiMTgtYTAwZS0wYThkZjFiZWMxNTUvYWEwZGRhYzItNjM1Yy0z MGI0LWJmMzctMTE5ZWQ4NGUzMTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDUxZTU1YzEtYWQ4Zi00YjE4LWEw MGUtMGE4ZGYxYmVjMTU1LzQ1MWU1NWMxLWFkOGYtNGIxOC1hMDBlLTBhOGRmMWJl YzE1NS5jcmwwHwYDVR0jBBgwFoAUu5jk8Qfoypch1BHov4c3CYbe8KcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80NTFlNTVjMS1hZDhmLTRiMTgtYTAwZS0wYThk ZjFiZWMxNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWOG7CM93x60CVceP/uIUwwfKtyp4K4ZCijrrNHl/UVSWdfFzXNqmqN Ot0BggcF3yJi0PKRVLHOCtiKrySuw4p6lGFtMFVgzXJ9JhFOjhI/vWYTrtFUWJWK SBv8nOhb9XBhl32tiJRmrH1qNqAj7p3ovGzrG/OJ3ASuPoUIpQMXGBZyg8K38thQ T0wYCAVApyeqnP3dkeU9VJq8zPwESoKID1X26IYJIr/nZsuIdlrjkFk25CQcEtNU REJjpDHcxoCqX9e10HmLkawT9RaoZP/el9dQtFSAUhIBplTmfBWYIIcsWMvDDGpr o/6pJYZFIkT5QZK46Mf4y12CDzIo41Y= -----END CERTIFICATE-----Generated at Sat Jun 14 06:02:20 2025 by rpki-client