$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/c8d33b8b-f1e7-3532-a195-f3f117e50354.roa File: c8d33b8b-f1e7-3532-a195-f3f117e50354.roa (raw, json) Hash identifier: 3oxsdnFMvqrIWQJKqCmPBlIazxkq4c72/aEp2FzgEbQ= Subject key identifier: 99:B6:BE:9D:4A:EF:10:76:E6:5A:12:66:6E:F5:42:65:89:30:40:A0 Certificate issuer: /CN=265b0641-047d-4787-a12d-159370bfcdb1 Certificate serial: 010D0C9F43285849A1EF70AEE97BECE17F515E80 Authority key identifier: 26:6C:47:39:A7:73:A8:23:18:A0:B7:CF:9A:FB:63:72:91:54:0B:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/c8d33b8b-f1e7-3532-a195-f3f117e50354.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 20473 IP address blocks: 104.171.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:70:ae:e9:7b:ec:e1:7f:51:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=265b0641-047d-4787-a12d-159370bfcdb1 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=4cedc3df-38bc-4a2e-aac0-1899754e67c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f6:f9:e8:e1:f0:8b:d8:c3:97:d8:43:92:41: 90:6c:ab:fb:2a:29:d4:46:3f:86:1d:a8:75:27:a8: 1b:cf:c9:ea:7d:b8:46:04:fa:fa:e2:26:d4:63:60: 2d:f7:56:6a:68:4f:b4:b2:bb:63:e1:b5:a1:4d:c7: ee:83:ca:25:f2:a0:a8:29:00:05:2d:55:4e:36:3c: 58:e7:ff:f3:76:ea:3f:11:4b:54:5a:a8:52:47:80: 70:26:88:ec:bb:29:7d:a3:d6:b9:67:ac:61:5b:d2: 8f:b2:ec:5b:02:80:4e:57:09:77:99:72:0f:40:41: ed:8c:96:65:40:19:5f:7d:7d:f8:2d:b5:77:1a:d9: 8a:91:e1:b0:81:a6:0b:48:3b:6d:d8:d7:27:ea:57: dd:73:29:00:d9:d3:f3:04:10:2b:08:12:04:06:df: 79:ab:8c:2a:c0:40:4a:16:77:7c:65:d4:07:30:7d: 46:0d:4b:87:34:59:01:4a:d7:a5:ac:07:08:fc:5f: 34:5d:47:b1:40:e7:c2:2d:08:ee:f9:e2:b3:8b:ac: 0c:30:46:60:dd:f4:5f:a3:b4:85:7e:6c:6c:7a:5a: 73:11:83:de:56:d1:d8:71:19:da:d6:f8:a9:b6:7d: d2:b2:94:66:61:8b:2b:c3:26:a0:13:87:19:fe:e7: 0d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B6:BE:9D:4A:EF:10:76:E6:5A:12:66:6E:F5:42:65:89:30:40:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/c8d33b8b-f1e7-3532-a195-f3f117e50354.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.crl X509v3 Authority Key Identifier: keyid:26:6C:47:39:A7:73:A8:23:18:A0:B7:CF:9A:FB:63:72:91:54:0B:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer sbgp-ipAddrBlock: critical IPv4: 104.171.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:52:d2:f3:79:f1:87:c2:c0:17:3b:98:0d:75:45:97:9f:da: 89:14:e9:27:e3:b7:4e:42:dc:da:37:5b:bc:14:5a:74:da:00: 40:99:30:a5:cc:94:2e:de:8b:da:69:38:b4:54:6b:9a:7e:ec: fc:b8:ce:43:fe:eb:d2:c7:7b:9c:dd:16:ab:93:f6:75:4d:80: 33:b4:32:4c:7a:1c:c8:53:b4:b0:d4:d1:4b:e1:e5:dd:e0:7e: d4:f2:8a:4c:54:db:a1:e7:99:b1:99:bf:0d:4b:8f:10:31:ae: 23:df:04:d1:ab:a5:3e:d7:57:9c:6e:97:f5:ee:0a:4c:d0:90: 88:fb:c3:b5:5c:a7:f0:97:b3:fe:a3:a1:91:01:60:00:bd:4e: 49:a7:fc:0b:38:c9:0d:ec:3a:5f:eb:a5:fa:c3:3c:fe:e1:25: 7e:22:29:1a:ab:42:d8:70:5b:2d:40:4a:46:ea:09:1e:f8:42: 40:5f:01:18:4a:31:5d:5a:82:f3:8e:a8:8f:86:97:31:dd:92: 7c:9c:91:2d:7e:9b:71:8b:8b:f3:9a:29:24:87:49:70:1b:d2: 3d:6a:98:2d:49:ba:83:8f:cf:34:d4:af:da:eb:9d:dc:af:fd: a7:ae:72:77:e4:26:52:c7:bc:57:97:8f:d8:67:27:87:1e:c2: fd:c4:05:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh73Cu6Xvs4X9RXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjY1YjA2NDEtMDQ3ZC00Nzg3LWExMmQtMTU5MzcwYmZj ZGIxMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk NGNlZGMzZGYtMzhiYy00YTJlLWFhYzAtMTg5OTc1NGU2N2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvb56OHwi9jDl9hDkkGQbKv7KinURj+GHah1 J6gbz8nqfbhGBPr64ibUY2At91ZqaE+0srtj4bWhTcfug8ol8qCoKQAFLVVONjxY 5//zduo/EUtUWqhSR4BwJojsuyl9o9a5Z6xhW9KPsuxbAoBOVwl3mXIPQEHtjJZl QBlffX34LbV3GtmKkeGwgaYLSDtt2Ncn6lfdcykA2dPzBBArCBIEBt95q4wqwEBK Fnd8ZdQHMH1GDUuHNFkBStelrAcI/F80XUexQOfCLQju+eKzi6wMMEZg3fRfo7SF fmxselpzEYPeVtHYcRna1viptn3SspRmYYsrwyagE4cZ/ucNsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJm2vp1K7xB25loSZm71QmWJMECgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNjVi MDY0MS0wNDdkLTQ3ODctYTEyZC0xNTkzNzBiZmNkYjEvYzhkMzNiOGItZjFlNy0z NTMyLWExOTUtZjNmMTE3ZTUwMzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjY1YjA2NDEtMDQ3ZC00Nzg3LWEx MmQtMTU5MzcwYmZjZGIxLzI2NWIwNjQxLTA0N2QtNDc4Ny1hMTJkLTE1OTM3MGJm Y2RiMS5jcmwwHwYDVR0jBBgwFoAUJmxHOadzqCMYoLfPmvtjcpFUCyUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNjViMDY0MS0wNDdkLTQ3ODctYTEyZC0xNTkz NzBiZmNkYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKsQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9S0vN58YfCwBc7mA11RZef2okU6Sfjt05C3No3W7wUWnTaAECZMKXM lC7ei9ppOLRUa5p+7Py4zkP+69LHe5zdFquT9nVNgDO0Mkx6HMhTtLDU0Uvh5d3g ftTyikxU26HnmbGZvw1LjxAxriPfBNGrpT7XV5xul/XuCkzQkIj7w7Vcp/CXs/6j oZEBYAC9Tkmn/As4yQ3sOl/rpfrDPP7hJX4iKRqrQthwWy1ASkbqCR74QkBfARhK MV1agvOOqI+GlzHdknyckS1+m3GLi/OaKSSHSXAb0j1qmC1JuoOPzzTUr9rrndyv /aeucnfkJlLHvFeXj9hnJ4cewv3EBV4= -----END CERTIFICATE-----Generated at Sat Apr 26 16:40:04 2025 by rpki-client