$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/9b494297-3222-3843-851d-68c7c1744624.roa File: 9b494297-3222-3843-851d-68c7c1744624.roa (raw, json) Hash identifier: 4SkpvmqPpSuEUOVQfcrMLBT/sAHWWcIJ6YP52H27Ytc= Subject key identifier: 8D:1D:5C:51:6C:09:D0:C0:54:03:82:E6:BE:06:DA:DC:4C:A7:0B:24 Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F4328584961B9932DE632744B20E822C0 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/9b494297-3222-3843-851d-68c7c1744624.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 21743 IP address blocks: 104.247.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:93:2d:e6:32:74:4b:20:e8:22:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=e3e84f31-cabe-47cf-b423-133830e5b439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1e:a6:54:7e:55:81:db:ce:bc:f6:17:b9:98: 85:2b:62:e2:0d:af:03:8d:45:a7:e2:37:dd:a0:0a: 68:de:cf:75:29:c4:f3:8e:9b:b1:e0:be:ac:4c:d4: 00:e6:18:92:c2:29:2f:58:92:54:b8:09:60:71:24: 89:0a:9d:3f:2d:90:89:c2:46:1a:f7:2d:d6:3d:74: 06:34:ca:b8:ee:ff:0f:fd:62:43:9f:a1:47:b9:b0: be:07:ac:6e:28:92:a1:3b:a1:b0:e6:ef:f5:be:31: 5f:d3:4c:41:df:01:16:24:08:7f:09:22:c6:b3:a3: 4a:e8:35:4b:3c:f9:8a:9e:4a:57:e0:29:6d:60:84: 99:46:09:fc:b3:95:b7:1c:68:06:3b:01:6c:0b:ca: 59:41:2c:83:82:f5:e9:f7:99:12:bb:d3:4f:18:88: e2:6d:22:a0:0c:78:ae:da:c6:06:6b:e8:85:f8:6e: 46:ac:61:20:a6:6e:6f:3f:11:43:c5:4d:98:fb:cf: 70:e4:0f:9b:7e:30:c6:5e:bf:f7:80:72:e3:04:8d: 03:7c:01:0e:9c:1a:0e:0f:8d:c2:86:53:64:43:bc: 26:47:9c:65:d8:38:a9:5e:0b:04:b9:78:9f:87:8c: e9:8a:0f:91:3a:b5:13:db:00:e4:5c:7c:27:e0:02: 62:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:1D:5C:51:6C:09:D0:C0:54:03:82:E6:BE:06:DA:DC:4C:A7:0B:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/9b494297-3222-3843-851d-68c7c1744624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 104.247.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:1c:6d:a5:10:92:05:b1:36:cd:60:b5:64:0f:09:2d:46:a5: 6a:84:e3:9c:71:59:72:89:67:a5:73:23:1d:5f:26:28:8d:92: ea:eb:9f:62:ff:50:05:3b:16:69:5c:47:08:ce:76:b3:00:ec: fe:58:18:ab:59:06:ec:cc:56:64:bf:02:c1:f5:13:a7:c5:c7: 10:e9:d7:e7:d0:ab:c9:1a:06:29:c7:cf:fe:9a:44:1a:68:7e: 57:b6:ce:57:b3:e9:d8:7d:f4:e9:7f:77:27:a4:56:61:33:3b: f8:27:ab:d4:a9:36:6a:03:c1:17:41:d0:ea:42:24:55:6c:e2: 14:6f:97:a9:7d:2c:17:cc:d0:b6:d4:b2:cd:3c:eb:c4:72:49: 37:ca:fc:a7:d6:ba:0c:a8:51:47:b6:b5:7a:6c:37:ee:65:78: c1:79:2d:36:fa:0f:60:e8:f6:d2:09:90:94:1b:ed:30:da:2d: 9e:fa:31:e0:34:7a:80:b6:53:d4:72:77:69:4e:cc:09:ce:57: a8:f5:7d:36:a3:e8:50:34:2c:ae:12:92:4a:8f:f6:bc:85:b5: 17:ac:a7:f2:05:a1:6e:f7:f0:52:ee:6d:30:f6:4b:53:e4:94: 07:2a:5c:ec:49:31:3f:98:db:5d:c9:e5:47:37:de:33:c7:12: 54:43:d7:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuZMt5jJ0SyDoIsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk ZTNlODRmMzEtY2FiZS00N2NmLWI0MjMtMTMzODMwZTViNDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth6mVH5VgdvOvPYXuZiFK2LiDa8DjUWn4jfd oApo3s91KcTzjpux4L6sTNQA5hiSwikvWJJUuAlgcSSJCp0/LZCJwkYa9y3WPXQG NMq47v8P/WJDn6FHubC+B6xuKJKhO6Gw5u/1vjFf00xB3wEWJAh/CSLGs6NK6DVL PPmKnkpX4CltYISZRgn8s5W3HGgGOwFsC8pZQSyDgvXp95kSu9NPGIjibSKgDHiu 2sYGa+iF+G5GrGEgpm5vPxFDxU2Y+89w5A+bfjDGXr/3gHLjBI0DfAEOnBoOD43C hlNkQ7wmR5xl2DipXgsEuXifh4zpig+ROrUT2wDkXHwn4AJimwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0dXFFsCdDAVAOC5r4G2txMpwskMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvOWI0OTQyOTctMzIyMi0z ODQzLTg1MWQtNjhjN2MxNzQ0NjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPd4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4cbaUQkgWxNs1gtWQPCS1GpWqE45xxWXKJZ6VzIx1fJiiNkurrn2L/ UAU7FmlcRwjOdrMA7P5YGKtZBuzMVmS/AsH1E6fFxxDp1+fQq8kaBinHz/6aRBpo fle2zlez6dh99Ol/dyekVmEzO/gnq9SpNmoDwRdB0OpCJFVs4hRvl6l9LBfM0LbU ss0868RySTfK/KfWugyoUUe2tXpsN+5leMF5LTb6D2Do9tIJkJQb7TDaLZ76MeA0 eoC2U9Ryd2lOzAnOV6j1fTaj6FA0LK4SkkqP9ryFtResp/IFoW738FLubTD2S1Pk lAcqXOxJMT+Y213J5Uc33jPHElRD1zU= -----END CERTIFICATE-----Generated at Thu May 1 13:24:53 2025 by rpki-client