$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/2a556ca8-fb0c-30e2-ae52-37d41b9af24c.roa File: 2a556ca8-fb0c-30e2-ae52-37d41b9af24c.roa (raw, json) Hash identifier: EMt4KCA2v4XO+qNEiMxWGpztVlgHMOlJs/QyNks8aKs= Subject key identifier: A1:5D:3A:0E:89:F8:F2:03:91:FA:E6:D7:73:92:A4:E7:49:ED:ED:51 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285849A089D416F227232A8CF018C0 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/2a556ca8-fb0c-30e2-ae52-37d41b9af24c.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 931 IP address blocks: 104.224.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d4:16:f2:27:23:2a:8c:f0:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=b5965b8d-7166-4591-9c66-9e99b5c0bba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:50:84:94:98:fb:2c:76:cb:56:b9:be:5e:a6: 72:59:a8:55:64:24:18:29:cc:33:e7:ef:ad:f7:8f: 17:91:3d:f7:c0:ed:9f:c1:6d:3e:9e:16:27:f3:46: 8f:1a:80:e6:ca:3f:04:8f:08:01:27:b2:3d:d7:fe: 51:5b:84:e4:32:c4:f3:21:73:75:a6:50:8e:16:06: cf:ff:13:6c:f2:12:11:21:87:fa:03:23:c5:92:21: 01:00:7a:32:3f:5e:68:66:7e:71:08:ca:fa:d4:c0: e7:c7:08:b8:f5:19:4e:a0:41:b6:8a:3b:f8:60:ca: 64:4f:89:d5:f6:b1:48:62:bb:d5:3f:46:47:ca:1e: 4f:1b:cc:ab:51:a5:ee:eb:3e:16:da:44:71:fa:9b: 59:08:61:27:50:08:e8:6d:64:d5:99:e5:6b:27:f1: d3:c3:9c:99:b3:11:e0:c2:ba:03:93:f7:18:fc:2e: 56:3b:52:b0:9f:58:ac:5e:29:a2:76:ff:df:87:65: 26:ad:ab:66:bb:b8:f6:70:ee:d8:55:0c:2c:f3:fa: 3d:ea:88:d3:d2:5f:f1:d2:64:ca:84:20:ac:e8:cc: da:33:e2:cd:63:91:f7:06:fc:88:db:69:a7:dd:98: d0:57:40:aa:b2:ee:8c:00:0a:32:84:12:7d:27:d5: 6b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:5D:3A:0E:89:F8:F2:03:91:FA:E6:D7:73:92:A4:E7:49:ED:ED:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/2a556ca8-fb0c-30e2-ae52-37d41b9af24c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 104.224.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:49:95:66:17:8c:87:a7:14:3e:dc:d8:8f:a4:7d:61:86:38: 6b:52:cd:df:01:9e:26:6b:d5:93:6f:38:03:e0:f1:46:ba:8e: be:5d:35:19:37:87:82:85:6a:21:fc:42:73:a6:82:57:d3:f1: 98:a2:0c:57:91:10:50:ac:0e:2e:79:a9:8b:f8:c1:5d:29:2a: 1b:65:53:e6:b2:ec:43:4d:78:df:2a:a5:03:9b:2e:35:5c:14: 8d:2f:50:aa:9e:39:4a:7d:4b:96:9b:b1:96:75:ec:e0:eb:eb: a9:43:4d:98:00:16:b3:01:a1:08:80:a2:bd:12:3f:66:a0:16: d1:4c:70:cb:a2:50:3a:fc:b0:4b:01:d4:b9:88:4b:37:17:17: 68:41:e3:9f:ac:96:2a:0d:ac:92:3e:63:92:ac:98:48:03:2b: 43:9e:a6:36:18:b2:3c:f3:f6:e7:1e:e6:ab:ce:22:1f:30:d2: c5:98:29:96:39:45:f4:b5:9a:61:ef:99:5a:ef:e1:66:d1:ef: 75:cd:5c:89:ee:1e:08:e7:c2:06:58:0e:40:c2:47:87:5a:2c: 91:45:16:e7:9d:02:fa:bc:96:12:95:a5:07:03:47:14:6f:59: f2:4c:d9:b9:0e:84:3b:78:c2:1a:db:bc:1d:3a:da:e6:88:30: 60:7f:64:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidQW8icjKozwGMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk YjU5NjViOGQtNzE2Ni00NTkxLTljNjYtOWU5OWI1YzBiYmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVCElJj7LHbLVrm+XqZyWahVZCQYKcwz5++t 948XkT33wO2fwW0+nhYn80aPGoDmyj8EjwgBJ7I91/5RW4TkMsTzIXN1plCOFgbP /xNs8hIRIYf6AyPFkiEBAHoyP15oZn5xCMr61MDnxwi49RlOoEG2ijv4YMpkT4nV 9rFIYrvVP0ZHyh5PG8yrUaXu6z4W2kRx+ptZCGEnUAjobWTVmeVrJ/HTw5yZsxHg wroDk/cY/C5WO1Kwn1isXimidv/fh2Umratmu7j2cO7YVQws8/o96ojT0l/x0mTK hCCs6MzaM+LNY5H3BvyI22mn3ZjQV0Cqsu6MAAoyhBJ9J9VrGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFdOg6J+PIDkfrm13OSpOdJ7e1RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvMmE1NTZjYTgtZmIwYy0z MGUyLWFlNTItMzdkNDFiOWFmMjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOAdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBJlWYXjIenFD7c2I+kfWGGOGtSzd8BniZr1ZNvOAPg8Ua6jr5dNRk3 h4KFaiH8QnOmglfT8ZiiDFeREFCsDi55qYv4wV0pKhtlU+ay7ENNeN8qpQObLjVc FI0vUKqeOUp9S5absZZ17ODr66lDTZgAFrMBoQiAor0SP2agFtFMcMuiUDr8sEsB 1LmISzcXF2hB45+slioNrJI+Y5KsmEgDK0OepjYYsjzz9uce5qvOIh8w0sWYKZY5 RfS1mmHvmVrv4WbR73XNXInuHgjnwgZYDkDCR4daLJFFFuedAvq8lhKVpQcDRxRv WfJM2bkOhDt4whrbvB062uaIMGB/ZFY= -----END CERTIFICATE-----Generated at Sat Apr 26 16:08:19 2025 by rpki-client