$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/f2dcfaef-7a0d-3b67-b729-b755b39db468.roa File: f2dcfaef-7a0d-3b67-b729-b755b39db468.roa (raw, json) Hash identifier: NpqynysJBvvlZzhwM/t7rzev7RPCsPOCLWoXVOxSchY= Subject key identifier: BC:3E:FC:D8:AA:B4:77:F3:B6:89:4C:DF:BD:49:F7:7E:47:C6:23:3F Certificate issuer: /CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Certificate serial: 010D0C9F43285849C904F2AF491BF0CBA15AA4A0 Authority key identifier: BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/f2dcfaef-7a0d-3b67-b729-b755b39db468.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 396018 IP address blocks: 104.237.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:f2:af:49:1b:f0:cb:a1:5a:a4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=ae9df6a0-42d1-4137-8115-925e9395a764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a5:0c:85:46:7b:b4:fb:42:43:86:6b:cc:92: ce:e3:b0:8b:b7:a4:30:81:b2:af:98:8d:42:6f:80: cf:40:73:59:69:a0:21:18:13:3a:f8:b6:c6:41:34: 82:d8:3d:f5:23:6e:a2:fe:0f:75:43:86:d3:05:97: 5c:77:07:eb:f5:7c:75:69:a8:03:c8:fa:7b:9c:f9: 70:a3:c9:62:ad:1c:34:2a:56:b8:51:f2:62:e4:24: 89:0b:43:81:b1:40:da:71:9d:a9:06:1e:8b:1b:3a: af:f8:d2:c3:bc:05:58:2e:42:4b:b4:58:b5:3d:c2: 42:e1:d0:cd:de:c9:b7:a6:ff:73:17:9d:de:87:7d: d4:29:a2:ab:e2:13:77:cd:9e:0b:f9:45:89:2d:1e: 50:03:cd:ca:d1:26:42:e5:52:68:c0:b4:34:e5:7a: 22:e5:11:a5:2a:9d:ca:af:44:ec:00:5a:81:f6:b3: f0:da:25:4b:cf:cc:c5:89:c4:63:ba:83:9f:2d:00: 65:68:0b:61:6a:a8:cc:02:db:42:bb:5d:06:48:4d: d4:b0:f3:85:ee:b1:e1:d0:60:48:19:f6:d0:ef:f0: 2c:f3:93:b4:1e:ff:12:f0:d5:c5:d7:cb:f0:03:a7: 58:e6:c4:7d:67:a5:36:9b:98:0f:ff:d1:ac:79:a8: 6d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:3E:FC:D8:AA:B4:77:F3:B6:89:4C:DF:BD:49:F7:7E:47:C6:23:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/f2dcfaef-7a0d-3b67-b729-b755b39db468.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl X509v3 Authority Key Identifier: keyid:BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer sbgp-ipAddrBlock: critical IPv4: 104.237.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:7e:e1:9a:f9:b1:a9:32:f6:28:b6:88:b8:69:76:0c:5c:23: 28:75:6b:49:36:3b:40:7c:ed:2c:e7:2a:07:19:2c:3f:d5:0e: 6f:7f:47:31:d5:b9:e8:cf:1e:dd:eb:4e:26:1f:1e:de:e8:6e: f0:e0:6d:9c:80:53:cf:87:72:03:d8:f4:73:f4:bb:03:dd:5c: d1:d8:da:5a:3c:64:2d:55:a9:bc:a1:2f:e0:fd:67:a2:0b:6a: a5:35:7c:9b:1e:5f:c9:82:ee:af:0a:82:13:7d:1a:eb:ec:b7: eb:b1:75:63:d1:08:c0:b3:b2:bc:14:21:c8:b8:aa:70:2c:70: 62:29:7f:0c:cf:56:ae:51:c0:f4:c0:1f:1b:58:33:a1:71:e5: 08:81:7d:4b:c7:4a:64:0f:a1:ce:64:17:6e:2d:7d:10:cb:16: 72:9c:d7:bf:b4:39:26:ab:d5:22:77:70:d0:88:86:b4:7e:c1: c1:3c:03:27:1b:26:25:3a:54:ec:0d:98:39:a5:3b:2b:d1:f1: 8b:14:32:b2:89:cb:42:61:e3:19:a2:28:c3:28:8c:8d:03:14: bd:8f:30:95:19:bf:5a:9e:59:6b:32:b4:52:40:2a:79:d6:d3: 05:d8:20:68:1a:37:5c:35:4a:37:fa:b4:24:c6:8a:57:27:de: 50:4f:49:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBPKvSRvwy6FapKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUxZTU1YzEtYWQ4Zi00YjE4LWEwMGUtMGE4ZGYxYmVj MTU1MB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk YWU5ZGY2YTAtNDJkMS00MTM3LTgxMTUtOTI1ZTkzOTVhNzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6UMhUZ7tPtCQ4ZrzJLO47CLt6QwgbKvmI1C b4DPQHNZaaAhGBM6+LbGQTSC2D31I26i/g91Q4bTBZdcdwfr9Xx1aagDyPp7nPlw o8lirRw0Kla4UfJi5CSJC0OBsUDacZ2pBh6LGzqv+NLDvAVYLkJLtFi1PcJC4dDN 3sm3pv9zF53eh33UKaKr4hN3zZ4L+UWJLR5QA83K0SZC5VJowLQ05Xoi5RGlKp3K r0TsAFqB9rPw2iVLz8zFicRjuoOfLQBlaAthaqjMAttCu10GSE3UsPOF7rHh0GBI GfbQ7/As85O0Hv8S8NXF18vwA6dY5sR9Z6U2m5gP/9GseahtnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLw+/NiqtHfztolM371J935HxiM/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NTFl NTVjMS1hZDhmLTRiMTgtYTAwZS0wYThkZjFiZWMxNTUvZjJkY2ZhZWYtN2EwZC0z YjY3LWI3MjktYjc1NWIzOWRiNDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDUxZTU1YzEtYWQ4Zi00YjE4LWEw MGUtMGE4ZGYxYmVjMTU1LzQ1MWU1NWMxLWFkOGYtNGIxOC1hMDBlLTBhOGRmMWJl YzE1NS5jcmwwHwYDVR0jBBgwFoAUu5jk8Qfoypch1BHov4c3CYbe8KcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80NTFlNTVjMS1hZDhmLTRiMTgtYTAwZS0wYThk ZjFiZWMxNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaO0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJ+4Zr5saky9ii2iLhpdgxcIyh1a0k2O0B87SznKgcZLD/VDm9/RzHV uejPHt3rTiYfHt7obvDgbZyAU8+HcgPY9HP0uwPdXNHY2lo8ZC1VqbyhL+D9Z6IL aqU1fJseX8mC7q8KghN9Guvst+uxdWPRCMCzsrwUIci4qnAscGIpfwzPVq5RwPTA HxtYM6Fx5QiBfUvHSmQPoc5kF24tfRDLFnKc17+0OSar1SJ3cNCIhrR+wcE8Aycb JiU6VOwNmDmlOyvR8YsUMrKJy0Jh4xmiKMMojI0DFL2PMJUZv1qeWWsytFJAKnnW 0wXYIGgaN1w1Sjf6tCTGilcn3lBPSUU= -----END CERTIFICATE-----Generated at Mon Jun 16 11:15:31 2025 by rpki-client