$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/814253a9-9aad-32ad-b99c-4b4dc604402e.roa File: 814253a9-9aad-32ad-b99c-4b4dc604402e.roa (raw, json) Hash identifier: N3nqsfj1aqfWAWIPTlGcrg/+CiYEJ9P5WkAANUUZfSI= Subject key identifier: 3D:DF:CA:03:64:C2:B2:33:6C:06:BF:AB:BC:19:ED:30:4F:9B:81:32 Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Certificate serial: 010D0C9F4328584953C44DF1894C2DB9F829CA40 Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/814253a9-9aad-32ad-b99c-4b4dc604402e.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 151797 IP address blocks: 104.251.224.0/20 maxlen: 24 172.81.102.0/23 maxlen: 24 172.81.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:4d:f1:89:4c:2d:b9:f8:29:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=d36cee7a-0afd-47e8-baba-61b165e4ea14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2f:60:9c:77:79:3e:c1:5f:c9:05:92:64:4a: 33:48:70:d5:ba:f0:21:b2:a9:81:75:01:c8:e7:e8: 31:d1:08:4d:ae:79:ea:3d:f0:b7:af:79:ee:c6:71: 5b:6b:80:f1:f0:5a:4b:b5:74:e2:9a:92:d4:8d:ad: 27:2d:b4:6c:6d:ab:17:06:d2:fa:a9:38:b8:2c:e0: 66:fb:31:db:4e:71:c3:70:ae:a4:a6:c8:a4:b3:90: 70:57:35:75:2d:59:aa:4b:56:6e:3c:07:83:ab:84: a0:65:56:25:69:fa:34:b2:25:ad:9b:75:a5:57:8a: f0:3f:1e:a1:91:44:b7:ca:ba:fa:dc:37:46:3e:4c: 66:95:46:0c:8b:6c:e1:b6:7e:af:8d:90:59:58:07: 03:2b:a5:91:cc:8f:87:34:bb:a7:5e:3f:d1:f6:1f: 5d:00:82:41:f9:ce:3d:69:ef:38:56:59:62:30:3b: dd:27:71:32:08:e2:73:f5:ed:0a:e7:0b:27:a2:a0: 89:e2:18:06:6c:ed:bf:da:5d:f4:b5:37:b9:68:07: 65:cc:c5:77:f6:d8:27:21:9c:ca:61:59:2e:1f:5c: 1c:a4:23:fb:c5:17:d8:17:28:2a:b3:b5:d2:8f:60: 03:87:aa:77:03:c2:bd:7c:50:0c:4b:f7:94:af:8d: 20:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:DF:CA:03:64:C2:B2:33:6C:06:BF:AB:BC:19:ED:30:4F:9B:81:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/814253a9-9aad-32ad-b99c-4b4dc604402e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl X509v3 Authority Key Identifier: keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer sbgp-ipAddrBlock: critical IPv4: 104.251.224.0/20 172.81.102.0-172.81.111.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:5f:5e:ce:c1:fa:ff:d1:c5:b6:c3:10:43:5a:46:6a:7a:20: 72:cf:72:05:f6:35:76:33:e6:82:c0:0c:ae:0f:bf:9f:d9:64: 53:2e:f1:d9:ae:76:b2:ca:e4:39:a6:9e:59:a8:ca:9c:ff:7c: 2e:0f:04:8d:73:0d:14:ef:22:a4:61:b0:f8:68:40:ce:15:93: 3b:0d:49:18:e6:ed:03:5a:f4:b3:65:85:fd:a4:90:5c:f0:20: 93:81:f3:d5:6d:88:8c:ab:5b:3c:c5:91:9f:1c:36:73:12:f4: d8:2a:99:aa:4c:f7:7b:1c:24:99:d9:5e:16:03:74:10:91:f0: 3d:76:89:41:8d:63:b7:d8:54:81:3a:5d:57:57:34:34:0f:f4: 3f:e9:b7:0b:e6:90:97:0f:1f:2e:87:90:24:66:01:d6:2f:ec: 77:9c:ff:5e:cf:d0:11:34:d8:2a:82:dc:10:1d:2d:a5:c5:e9: 79:f0:cc:9e:2b:2a:4c:fe:cf:ab:6b:90:0f:9c:a2:07:c6:6c: 1f:53:0e:fa:97:98:a1:fd:92:73:0d:fb:4f:94:1b:5d:8a:3c: bc:b1:8c:86:a5:ed:b9:62:5c:b7:e9:be:71:4f:98:98:bc:5d: 83:46:c7:ba:ff:3f:a3:80:c7:59:79:35:d5:d7:81:83:44:f7: 31:fc:b0:b7 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWElTxE3xiUwtufgpykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm MDYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDM2Y2VlN2EtMGFmZC00N2U4LWJhYmEtNjFiMTY1ZTRlYTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC9gnHd5PsFfyQWSZEozSHDVuvAhsqmBdQHI 5+gx0QhNrnnqPfC3r3nuxnFba4Dx8FpLtXTimpLUja0nLbRsbasXBtL6qTi4LOBm +zHbTnHDcK6kpsiks5BwVzV1LVmqS1ZuPAeDq4SgZVYlafo0siWtm3WlV4rwPx6h kUS3yrr63DdGPkxmlUYMi2zhtn6vjZBZWAcDK6WRzI+HNLunXj/R9h9dAIJB+c49 ae84VlliMDvdJ3EyCOJz9e0K5wsnoqCJ4hgGbO2/2l30tTe5aAdlzMV39tgnIZzK YVkuH1wcpCP7xRfYFygqs7XSj2ADh6p3A8K9fFAMS/eUr40g2QIDAQABo4IDYzCC A18wHQYDVR0OBBYEFD3fygNkwrIzbAa/q7wZ7TBPm4EyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvODE0MjUzYTktOWFhZC0z MmFkLWI5OWMtNGI0ZGM2MDQ0MDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1 YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4 NzY5MmYwNjMuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQEaPvgMAwD BAGsUWYDBASsUWAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAL19ezsH6/9HFtsMQQ1pGanogcs9yBfY1djPm gsAMrg+/n9lkUy7x2a52ssrkOaaeWajKnP98Lg8EjXMNFO8ipGGw+GhAzhWTOw1J GObtA1r0s2WF/aSQXPAgk4Hz1W2IjKtbPMWRnxw2cxL02CqZqkz3exwkmdleFgN0 EJHwPXaJQY1jt9hUgTpdV1c0NA/0P+m3C+aQlw8fLoeQJGYB1i/sd5z/Xs/QETTY KoLcEB0tpcXpefDMnisqTP7Pq2uQD5yiB8ZsH1MO+peYof2Scw37T5QbXYo8vLGM hqXtuWJct+m+cU+YmLxdg0bHuv8/o4DHWXk11deBg0T3Mfywtw== -----END CERTIFICATE-----Generated at Tue Apr 29 13:22:50 2025 by rpki-client