$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/2ca1fafd-5784-383a-86a2-45ab028896d0.roa File: 2ca1fafd-5784-383a-86a2-45ab028896d0.roa (raw, json) Hash identifier: M64wAKUbKfkv736TJ/Z+oW3IUmiaO7YINNQraSeyOpI= Subject key identifier: F6:D7:3D:7E:9E:56:72:A3:52:C7:D1:29:CF:9C:65:FF:89:5B:FB:33 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285849A089D406B355F5ECAA1F9580 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/2ca1fafd-5784-383a-86a2-45ab028896d0.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 931 IP address blocks: 104.224.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d4:06:b3:55:f5:ec:aa:1f:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=467849ca-4f87-47fe-8881-c8030ae52374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cf:d4:61:02:94:da:45:4e:21:68:09:96:2d: 7c:ab:a9:8c:2c:d2:9d:7e:52:40:29:de:30:ee:92: 1e:b6:31:40:9c:de:36:38:f9:c2:17:4c:4f:b6:35: 76:fb:54:47:32:44:de:c9:cf:c2:f8:7a:74:5b:32: cb:5e:e2:d9:50:ad:0c:ae:0f:3c:14:a8:f6:8a:75: fc:5b:a8:05:d7:0e:73:bb:06:ea:d9:1f:28:59:43: 0b:01:40:9a:59:2f:a6:24:7d:ea:66:37:39:86:a6: db:e5:11:9e:ce:68:d9:ac:00:0b:a3:55:51:b9:0a: ab:1e:4a:06:39:e0:9d:4c:35:2e:ed:77:b9:f8:9b: a3:4f:f2:24:ce:1b:ba:cf:8d:82:34:28:e3:be:7e: 8b:e5:58:09:ea:60:b9:ff:9d:bd:49:9d:e8:32:d8: 01:76:85:4c:30:e2:4c:5f:1f:b0:91:8f:d0:2b:75: a8:74:8b:de:7d:01:d6:98:fd:8a:25:e5:9f:9b:5d: dd:1e:c0:4d:67:bf:29:f8:a2:b8:26:c6:c3:5b:45: 75:2f:e1:06:f8:01:95:25:31:d7:4a:88:2d:98:fd: f1:86:a4:12:81:bc:45:99:18:b3:1f:07:95:4e:84: 6c:47:eb:33:af:91:39:a3:e6:f1:ae:03:d1:10:66: b6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D7:3D:7E:9E:56:72:A3:52:C7:D1:29:CF:9C:65:FF:89:5B:FB:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/2ca1fafd-5784-383a-86a2-45ab028896d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 104.224.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:4f:31:aa:b3:ed:c9:cb:59:f8:0b:30:d0:cf:ea:95:48:02: 28:c9:f8:92:52:8e:05:cf:fe:df:06:2c:c0:32:d8:52:2e:2b: d9:d4:1a:be:6c:40:2a:76:5c:a4:aa:50:70:47:fc:03:8d:06: 1e:ca:60:0f:3d:b1:5e:a7:c9:34:4e:61:c7:98:47:58:30:38: 55:70:7f:5d:46:ef:27:e5:76:78:73:31:3b:dd:6d:b1:3f:0e: 09:4e:09:00:8d:38:5f:e9:50:96:b6:97:1b:81:9c:c5:d6:37: 51:31:40:1f:df:2a:8f:29:4c:6c:8a:0b:d8:a3:4e:d7:db:aa: 68:f5:93:01:25:73:bf:37:20:7a:d7:4d:40:86:9a:a3:eb:10: ac:35:21:ed:1a:9a:2f:83:38:db:ca:46:91:b8:be:3c:82:6f: ce:cc:24:0a:9d:a3:37:a8:96:8f:fa:65:23:9b:f1:98:d7:18: 24:c1:3d:6d:04:b0:76:00:26:27:87:94:cc:fc:b5:df:7d:07: f7:3d:32:47:60:0a:db:48:cd:40:0e:00:98:e8:71:30:75:f2: a5:cd:aa:5e:4f:ed:a1:c8:c4:d4:38:c1:ab:62:0e:f4:f6:58: e7:83:85:ae:9b:2b:70:76:5a:4b:54:40:d0:78:5b:aa:6d:d6: 0d:7a:a4:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidQGs1X17KoflYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk NDY3ODQ5Y2EtNGY4Ny00N2ZlLTg4ODEtYzgwMzBhZTUyMzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjc/UYQKU2kVOIWgJli18q6mMLNKdflJAKd4w 7pIetjFAnN42OPnCF0xPtjV2+1RHMkTeyc/C+Hp0WzLLXuLZUK0Mrg88FKj2inX8 W6gF1w5zuwbq2R8oWUMLAUCaWS+mJH3qZjc5hqbb5RGezmjZrAALo1VRuQqrHkoG OeCdTDUu7Xe5+JujT/Ikzhu6z42CNCjjvn6L5VgJ6mC5/529SZ3oMtgBdoVMMOJM Xx+wkY/QK3WodIvefQHWmP2KJeWfm13dHsBNZ78p+KK4JsbDW0V1L+EG+AGVJTHX SogtmP3xhqQSgbxFmRizHweVToRsR+szr5E5o+bxrgPREGa2fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPbXPX6eVnKjUsfRKc+cZf+JW/szMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvMmNhMWZhZmQtNTc4NC0z ODNhLTg2YTItNDVhYjAyODg5NmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5PMaqz7cnLWfgLMNDP6pVIAijJ+JJSjgXP/t8GLMAy2FIuK9nUGr5s QCp2XKSqUHBH/AONBh7KYA89sV6nyTROYceYR1gwOFVwf11G7yfldnhzMTvdbbE/ DglOCQCNOF/pUJa2lxuBnMXWN1ExQB/fKo8pTGyKC9ijTtfbqmj1kwElc783IHrX TUCGmqPrEKw1Ie0ami+DONvKRpG4vjyCb87MJAqdozeolo/6ZSOb8ZjXGCTBPW0E sHYAJieHlMz8td99B/c9MkdgCttIzUAOAJjocTB18qXNql5P7aHIxNQ4watiDvT2 WOeDha6bK3B2WktUQNB4W6pt1g16pPo= -----END CERTIFICATE-----Generated at Sat Apr 26 16:30:26 2025 by rpki-client