$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/a1a2060a-6881-3ef5-aa7c-1c39f839b05b.roa File: a1a2060a-6881-3ef5-aa7c-1c39f839b05b.roa (raw, json) Hash identifier: KiNnhVTBDSTWE++jBYN934ChQTNVKZDl4AdDXH2RCKM= Subject key identifier: F3:C5:CB:54:B3:59:6C:A5:33:42:94:23:04:F2:E6:5C:FD:88:48:84 Certificate issuer: /CN=4d929512-7541-4207-be46-8af4cc4a4800 Certificate serial: 010D0C9F43285849806F2A35BC73BB29400A9000 Authority key identifier: 50:76:C6:B0:0E:4F:BF:DD:EB:45:FC:C4:02:E7:4F:56:CB:5D:35:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/a1a2060a-6881-3ef5-aa7c-1c39f839b05b.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 26658 IP address blocks: 104.232.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:2a:35:bc:73:bb:29:40:0a:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d929512-7541-4207-be46-8af4cc4a4800 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=e508ecb5-4f89-4b57-bed2-f1133ce23c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e1:d9:71:65:f2:98:d7:b8:21:d8:28:c9:63: a8:b6:92:5b:ed:8f:df:11:54:e0:06:83:40:9b:a9: 75:f9:8b:04:f7:b2:b6:94:b9:fb:f0:c0:3e:9a:b6: 4b:88:ed:6e:a6:eb:a6:5e:1b:32:d8:be:f4:d7:00: ae:6c:7e:cc:d7:de:4d:36:3e:a3:c7:3f:d2:74:e9: 13:52:1d:42:db:77:f1:40:80:c0:b1:75:ed:c3:a0: ff:fd:a6:f2:0a:13:d1:dd:74:7f:ec:4e:12:8b:f3: d2:c4:38:e3:05:a5:ff:af:2f:53:c3:af:81:3e:7f: 1b:1b:f6:16:f0:8c:83:d6:1c:0a:6b:32:a1:23:6b: f3:78:08:01:ca:68:f1:78:d2:2f:a6:b4:f5:ad:ac: 96:f4:50:63:cd:21:d1:85:e9:8c:37:e0:02:12:c7: dd:ca:71:50:8f:7b:cb:54:e8:c8:d8:b5:9f:ee:62: 93:1f:a0:86:a4:7e:29:b3:ab:72:25:58:75:2c:3b: db:cc:2c:c0:2d:94:61:68:ba:e5:11:6c:9a:f1:4c: 28:18:63:ed:30:77:f4:8f:c5:1a:12:68:65:88:fd: 88:c7:3d:47:a2:db:c9:ee:ac:99:86:09:66:6a:22: b5:3b:33:1e:92:2f:58:03:0c:34:0d:68:cd:61:3f: ec:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C5:CB:54:B3:59:6C:A5:33:42:94:23:04:F2:E6:5C:FD:88:48:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/a1a2060a-6881-3ef5-aa7c-1c39f839b05b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.crl X509v3 Authority Key Identifier: keyid:50:76:C6:B0:0E:4F:BF:DD:EB:45:FC:C4:02:E7:4F:56:CB:5D:35:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer sbgp-ipAddrBlock: critical IPv4: 104.232.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:4e:f5:5c:24:8f:f7:d3:ee:41:6d:03:be:76:eb:86:56:a0: 85:85:bf:8e:30:24:b1:f5:db:42:71:c1:e9:eb:9a:77:6e:ce: aa:d0:c0:2d:4d:d5:2c:43:07:5b:d0:9e:06:e2:c4:1a:6a:78: 13:c3:d7:ae:8f:bb:d3:bc:fa:15:d9:07:0c:81:12:2b:db:06: 37:80:04:44:fa:10:e6:47:73:7b:a9:65:b5:29:cb:4d:cc:1a: 95:09:65:f4:18:db:4e:b9:c0:11:e6:f3:b5:49:10:a3:44:94: d9:3d:f5:50:b0:00:f3:c1:68:69:41:68:0d:5b:97:7f:8e:4e: 29:e7:fc:0e:a8:4b:bc:14:f5:3b:e0:c6:2f:f2:44:85:3b:e6: 38:3d:2c:b4:b2:90:db:95:e5:a6:58:95:14:44:5b:15:73:fb: 20:cc:26:72:a7:7d:af:bd:91:ec:4b:c5:29:d3:4e:9e:f1:a4: 66:71:66:f8:51:45:02:80:da:20:f1:2f:4f:73:04:aa:1b:13: 23:41:a7:b8:1e:29:8a:aa:9c:aa:f4:96:29:25:eb:4f:d5:01: 09:5f:87:f2:6e:b5:ae:a7:75:b1:0f:20:db:c3:af:2e:89:12: 8f:a7:63:97:c8:0b:f4:e5:ae:1e:47:0b:11:9b:d0:35:ab:f5: 80:c7:d3:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbyo1vHO7KUAKkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ5Mjk1MTItNzU0MS00MjA3LWJlNDYtOGFmNGNjNGE0 ODAwMB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk ZTUwOGVjYjUtNGY4OS00YjU3LWJlZDItZjExMzNjZTIzYzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeHZcWXymNe4IdgoyWOotpJb7Y/fEVTgBoNA m6l1+YsE97K2lLn78MA+mrZLiO1upuumXhsy2L701wCubH7M195NNj6jxz/SdOkT Uh1C23fxQIDAsXXtw6D//abyChPR3XR/7E4Si/PSxDjjBaX/ry9Tw6+BPn8bG/YW 8IyD1hwKazKhI2vzeAgBymjxeNIvprT1rayW9FBjzSHRhemMN+ACEsfdynFQj3vL VOjI2LWf7mKTH6CGpH4ps6tyJVh1LDvbzCzALZRhaLrlEWya8UwoGGPtMHf0j8Ua EmhliP2Ixz1HotvJ7qyZhglmaiK1OzMeki9YAww0DWjNYT/s1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPFy1SzWWylM0KUIwTy5lz9iEiEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80ZDky OTUxMi03NTQxLTQyMDctYmU0Ni04YWY0Y2M0YTQ4MDAvYTFhMjA2MGEtNjg4MS0z ZWY1LWFhN2MtMWMzOWY4MzliMDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGQ5Mjk1MTItNzU0MS00MjA3LWJl NDYtOGFmNGNjNGE0ODAwLzRkOTI5NTEyLTc1NDEtNDIwNy1iZTQ2LThhZjRjYzRh NDgwMC5jcmwwHwYDVR0jBBgwFoAUUHbGsA5Pv93rRfzEAudPVstdNTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80ZDkyOTUxMi03NTQxLTQyMDctYmU0Ni04YWY0 Y2M0YTQ4MDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaOhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5O9Vwkj/fT7kFtA75264ZWoIWFv44wJLH120JxwenrmnduzqrQwC1N 1SxDB1vQngbixBpqeBPD166Pu9O8+hXZBwyBEivbBjeABET6EOZHc3upZbUpy03M GpUJZfQY2065wBHm87VJEKNElNk99VCwAPPBaGlBaA1bl3+OTinn/A6oS7wU9Tvg xi/yRIU75jg9LLSykNuV5aZYlRREWxVz+yDMJnKnfa+9kexLxSnTTp7xpGZxZvhR RQKA2iDxL09zBKobEyNBp7geKYqqnKr0likl60/VAQlfh/Juta6ndbEPINvDry6J Eo+nY5fIC/Tlrh5HCxGb0DWr9YDH0zo= -----END CERTIFICATE-----Generated at Sat Apr 26 19:25:24 2025 by rpki-client