$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/aaa0f512-6693-3968-9f7e-8a63d5f8b92d.roa File: aaa0f512-6693-3968-9f7e-8a63d5f8b92d.roa (raw, json) Hash identifier: j4B0WQgNg4sWiXsCbg82xoO7qx0bZVp1A5L49QoxaOY= Subject key identifier: 2C:59:A6:E2:89:19:C1:D1:DD:6C:ED:88:DD:D0:0B:E0:E5:16:63:21 Certificate issuer: /CN=61078829-6930-46b0-9ac8-91898d36b056 Certificate serial: 010D0C9F432858498339F3C07DED00323B779680 Authority key identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/aaa0f512-6693-3968-9f7e-8a63d5f8b92d.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 33548 IP address blocks: 104.247.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:f3:c0:7d:ed:00:32:3b:77:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61078829-6930-46b0-9ac8-91898d36b056 Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=76ab1253-0ba1-4384-b15b-15ab9e63534e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:51:cd:3b:04:b8:fd:0d:80:9a:09:7c:49:51: bb:d3:fa:5d:05:8d:c3:4c:4e:83:ff:a3:d1:69:b6: b0:61:c8:b7:cf:c4:f7:a5:da:f9:4a:d6:ad:dc:e8: 29:11:89:13:ef:6f:40:7f:e4:b3:1f:54:4d:52:ee: 06:3e:47:db:dd:3f:db:e9:57:0b:bb:e2:e9:05:39: 25:5b:62:e2:7d:02:e4:b3:df:ac:80:ba:69:9f:53: fc:3e:18:c1:f3:5a:7b:7b:a3:14:fa:81:ac:97:09: 7c:24:33:93:e5:05:f1:64:a4:f0:20:2c:e5:c0:c7: aa:17:00:92:1d:b6:ad:90:78:25:e0:c4:65:4a:d7: 24:2c:16:00:7e:78:b9:e0:db:ae:79:ed:ee:18:a4: 54:cf:22:dc:c4:84:14:9c:2d:e4:9f:b4:22:ad:56: a2:8b:4e:f6:94:84:ae:b3:67:21:dd:a4:ae:56:cc: 3c:af:d6:82:1c:2e:89:51:cd:95:b4:06:a7:23:35: 1f:b8:f9:24:39:d9:b5:25:4d:93:28:67:ce:50:0d: 3c:06:dc:c6:1b:f9:24:48:91:fa:1b:ee:71:24:bb: 69:6d:07:11:5e:55:54:7c:51:de:2f:4c:db:f7:25: a5:a5:fb:8b:f2:67:18:2a:34:4b:a8:01:da:67:22: a4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:59:A6:E2:89:19:C1:D1:DD:6C:ED:88:DD:D0:0B:E0:E5:16:63:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/aaa0f512-6693-3968-9f7e-8a63d5f8b92d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl X509v3 Authority Key Identifier: keyid:20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer sbgp-ipAddrBlock: critical IPv4: 104.247.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:3f:75:ab:1a:73:9c:81:2e:d4:b8:8c:ac:5c:03:89:56:a2: 88:58:be:6c:ff:f3:c8:bc:ee:1c:75:ff:4c:8e:76:81:09:b6: f0:17:0b:6a:16:76:ba:d5:da:58:b9:2b:a1:dd:4b:22:d2:64: f0:f4:3f:90:a4:79:d5:b8:5f:da:d5:ad:49:61:25:a6:a9:f4: 52:ff:89:fa:76:fc:96:3a:cd:76:2d:db:e4:22:9a:d6:ac:4a: 81:f4:48:b8:28:b9:a2:c3:44:42:74:92:cf:4d:83:1e:8f:07: 35:05:c2:c4:26:c4:80:9d:01:e9:76:9c:1c:2b:62:07:1a:0c: ff:eb:23:1d:e8:ab:98:9c:9f:ea:5c:4f:16:d5:4f:e3:93:40: c3:8b:6c:20:50:37:cb:f3:81:a8:4c:cf:4d:76:f3:fe:ca:92: 45:fd:f1:1d:b5:59:8b:b4:0a:0a:a8:90:72:c1:bd:32:19:ff: 61:bf:b4:c1:a8:35:3b:0f:e0:88:19:89:3a:00:ae:82:db:3f: e2:ad:0d:2a:66:5e:3f:32:90:9b:f2:94:03:57:09:25:ba:f1: 9f:a5:d8:22:13:e9:68:bc:4e:15:00:69:af:03:5a:80:e1:ce: d3:b2:0c:94:57:2e:c2:80:67:a8:ab:c3:9b:8b:55:74:02:c9: 97:8a:18:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOfPAfe0AMjt3loAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjEwNzg4MjktNjkzMC00NmIwLTlhYzgtOTE4OThkMzZi MDU2MB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk NzZhYjEyNTMtMGJhMS00Mzg0LWIxNWItMTVhYjllNjM1MzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFHNOwS4/Q2Amgl8SVG70/pdBY3DTE6D/6PR abawYci3z8T3pdr5Stat3OgpEYkT729Af+SzH1RNUu4GPkfb3T/b6VcLu+LpBTkl W2LifQLks9+sgLppn1P8PhjB81p7e6MU+oGslwl8JDOT5QXxZKTwICzlwMeqFwCS HbatkHgl4MRlStckLBYAfni54Nuuee3uGKRUzyLcxIQUnC3kn7QirVaii072lISu s2ch3aSuVsw8r9aCHC6JUc2VtAanIzUfuPkkOdm1JU2TKGfOUA08BtzGG/kkSJH6 G+5xJLtpbQcRXlVUfFHeL0zb9yWlpfuL8mcYKjRLqAHaZyKkAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxZpuKJGcHR3WztiN3QC+DlFmMhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82MTA3 ODgyOS02OTMwLTQ2YjAtOWFjOC05MTg5OGQzNmIwNTYvYWFhMGY1MTItNjY5My0z OTY4LTlmN2UtOGE2M2Q1ZjhiOTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjEwNzg4MjktNjkzMC00NmIwLTlh YzgtOTE4OThkMzZiMDU2LzYxMDc4ODI5LTY5MzAtNDZiMC05YWM4LTkxODk4ZDM2 YjA1Ni5jcmwwHwYDVR0jBBgwFoAUIEXV2ie7S4lN1IK5ZqALwLa2VKAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82MTA3ODgyOS02OTMwLTQ2YjAtOWFjOC05MTg5 OGQzNmIwNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaPeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADA/dasac5yBLtS4jKxcA4lWoohYvmz/88i87hx1/0yOdoEJtvAXC2oW drrV2li5K6HdSyLSZPD0P5CkedW4X9rVrUlhJaap9FL/ifp2/JY6zXYt2+Qimtas SoH0SLgouaLDREJ0ks9Ngx6PBzUFwsQmxICdAel2nBwrYgcaDP/rIx3oq5icn+pc TxbVT+OTQMOLbCBQN8vzgahMz0128/7KkkX98R21WYu0CgqokHLBvTIZ/2G/tMGo NTsP4IgZiToAroLbP+KtDSpmXj8ykJvylANXCSW68Z+l2CIT6Wi8ThUAaa8DWoDh ztOyDJRXLsKAZ6irw5uLVXQCyZeKGBI= -----END CERTIFICATE-----Generated at Wed Apr 30 10:47:28 2025 by rpki-client