$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a/1e85c596-69bf-373d-9906-1d381b3d01ef.roa File: 1e85c596-69bf-373d-9906-1d381b3d01ef.roa (raw, json) Hash identifier: 4XJwQFLUJWhP/lJG+eHQeF5RPYbcIDcYURTBKnqzaIQ= Subject key identifier: 20:1F:2E:60:12:62:88:02:AE:17:07:49:00:A3:AD:E8:16:7A:F2:78 Certificate issuer: /CN=0d76e4c1-4951-48f9-a654-18ee7c98157a Certificate serial: 010D0C9F43285848F3911BA24834C121F88E01C0 Authority key identifier: BC:A6:71:B7:AE:35:D0:B0:02:05:BF:4F:20:43:46:F6:C8:54:C8:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a/1e85c596-69bf-373d-9906-1d381b3d01ef.roa Signing time: Fri 21 Feb 2025 02:00:39 +0000 ROA not before: Fri 21 Feb 2025 02:00:39 +0000 ROA not after: Thu 22 May 2025 01:00:39 +0000 asID: 8987 IP address blocks: 104.254.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a/0d76e4c1-4951-48f9-a654-18ee7c98157a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a/0d76e4c1-4951-48f9-a654-18ee7c98157a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f3:91:1b:a2:48:34:c1:21:f8:8e:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d76e4c1-4951-48f9-a654-18ee7c98157a Validity Not Before: Feb 21 02:00:39 2025 GMT Not After : May 22 01:00:39 2025 GMT Subject: CN=aa85d4f8-6aeb-4c62-9c09-9334c606710c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:09:57:e7:a8:2e:c8:db:db:59:17:ba:ee:e1: 04:ab:c2:0e:ac:15:e6:67:50:40:a0:a3:54:9f:5e: 36:f4:4d:02:8a:a2:bb:33:b3:85:e0:c2:86:d7:39: 1c:c6:d2:54:0a:c5:ae:90:73:19:45:ae:a0:28:77: c4:c6:69:0b:20:e2:13:1d:e9:84:2a:f1:c6:15:2d: 9f:bd:33:0d:9e:7c:6c:91:f9:d8:44:b8:c2:f6:8b: d2:d5:20:83:e9:bf:60:82:f4:21:5e:d9:ad:ee:1c: f7:86:ea:ab:75:f0:3d:08:e1:d5:a7:84:33:cf:61: 88:70:e3:90:85:cf:20:ca:b8:2b:39:09:be:ad:7f: e3:20:7c:e9:d7:93:79:44:c6:42:f7:79:b3:57:12: bc:d8:f1:c6:a6:ca:48:13:41:c4:1f:00:85:4c:65: e0:08:08:f2:0a:56:90:af:3d:26:aa:fe:d4:f7:31: 2b:58:5d:7d:ba:98:7f:e3:9a:86:54:1c:b3:fe:1d: e0:09:c5:39:de:f3:e6:c9:67:52:86:95:52:ee:1d: 2b:fe:65:e1:d0:75:6a:7b:fc:52:00:9d:56:1a:0b: 32:8d:8e:44:ef:70:a6:02:0f:b9:d8:41:5c:be:d3: 48:23:a0:17:94:92:ed:a6:7b:91:22:da:ca:ae:eb: fb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:1F:2E:60:12:62:88:02:AE:17:07:49:00:A3:AD:E8:16:7A:F2:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a/1e85c596-69bf-373d-9906-1d381b3d01ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a/0d76e4c1-4951-48f9-a654-18ee7c98157a.crl X509v3 Authority Key Identifier: keyid:BC:A6:71:B7:AE:35:D0:B0:02:05:BF:4F:20:43:46:F6:C8:54:C8:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a.cer sbgp-ipAddrBlock: critical IPv4: 104.254.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:27:d4:58:b2:73:a4:03:1c:28:85:44:53:d0:b4:6d:06:dc: df:0d:05:da:68:44:c2:bc:6f:a5:04:b3:e6:04:a9:3c:3a:dd: 5d:00:92:28:6f:f6:90:d0:22:b2:04:f3:b3:80:5e:9c:b7:4a: f5:de:19:2b:68:36:ff:30:f0:75:b7:ba:5e:5d:a9:9a:c4:02: 94:eb:e3:37:c8:71:76:e8:6b:f0:db:d4:42:3e:ba:e1:71:8f: 3f:3e:76:10:42:1a:98:ef:f1:fd:da:43:5b:6e:b6:b6:d4:8c: 0c:21:3c:78:ed:d5:18:da:68:2f:55:20:28:bd:11:6f:e0:84: 4d:83:9c:96:8e:1a:af:d1:5c:12:86:4d:b8:ab:aa:dd:4f:b9: 3e:91:e5:35:30:6c:74:68:3b:35:e7:58:77:99:c9:c9:2e:3a: 16:1a:48:dd:65:0f:d3:bf:60:c4:6e:78:87:e5:1b:0b:d1:fe: 1d:32:fe:34:fc:d1:14:03:7a:81:90:64:b3:e3:39:c2:c8:f4: 9d:9b:a5:5c:23:24:07:09:51:bb:8c:11:10:b0:77:a6:31:b9: 0e:a3:f1:97:eb:2e:af:3a:ac:f9:ad:8b:1c:b4:d4:14:f2:11: b7:c7:3c:49:87:78:34:09:91:05:4f:ad:74:31:d5:7b:e4:94: ff:f8:b1:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjzkRuiSDTBIfiOAcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3NmU0YzEtNDk1MS00OGY5LWE2NTQtMThlZTdjOTgx NTdhMB4XDTI1MDIyMTAyMDAzOVoXDTI1MDUyMjAxMDAzOVowLzEtMCsGA1UEAxMk YWE4NWQ0ZjgtNmFlYi00YzYyLTljMDktOTMzNGM2MDY3MTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwlX56guyNvbWRe67uEEq8IOrBXmZ1BAoKNU n1429E0CiqK7M7OF4MKG1zkcxtJUCsWukHMZRa6gKHfExmkLIOITHemEKvHGFS2f vTMNnnxskfnYRLjC9ovS1SCD6b9ggvQhXtmt7hz3huqrdfA9COHVp4Qzz2GIcOOQ hc8gyrgrOQm+rX/jIHzp15N5RMZC93mzVxK82PHGpspIE0HEHwCFTGXgCAjyClaQ rz0mqv7U9zErWF19uph/45qGVByz/h3gCcU53vPmyWdShpVS7h0r/mXh0HVqe/xS AJ1WGgsyjY5E73CmAg+52EFcvtNII6AXlJLtpnuRItrKruv7HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAfLmASYogCrhcHSQCjregWevJ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wZDc2 ZTRjMS00OTUxLTQ4ZjktYTY1NC0xOGVlN2M5ODE1N2EvMWU4NWM1OTYtNjliZi0z NzNkLTk5MDYtMWQzODFiM2QwMWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGQ3NmU0YzEtNDk1MS00OGY5LWE2 NTQtMThlZTdjOTgxNTdhLzBkNzZlNGMxLTQ5NTEtNDhmOS1hNjU0LTE4ZWU3Yzk4 MTU3YS5jcmwwHwYDVR0jBBgwFoAUvKZxt6410LACBb9PIENG9shUyDowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wZDc2ZTRjMS00OTUxLTQ4ZjktYTY1NC0xOGVl N2M5ODE1N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP6NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkn1Fiyc6QDHCiFRFPQtG0G3N8NBdpoRMK8b6UEs+YEqTw63V0Akihv 9pDQIrIE87OAXpy3SvXeGStoNv8w8HW3ul5dqZrEApTr4zfIcXboa/Db1EI+uuFx jz8+dhBCGpjv8f3aQ1tutrbUjAwhPHjt1RjaaC9VICi9EW/ghE2DnJaOGq/RXBKG Tbirqt1PuT6R5TUwbHRoOzXnWHeZyckuOhYaSN1lD9O/YMRueIflGwvR/h0y/jT8 0RQDeoGQZLPjOcLI9J2bpVwjJAcJUbuMERCwd6YxuQ6j8ZfrLq86rPmtixy01BTy EbfHPEmHeDQJkQVPrXQx1XvklP/4sfg= -----END CERTIFICATE-----Generated at Sat Apr 26 16:33:24 2025 by rpki-client