$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/42afc059-5ef8-345d-9eb0-509cf5658724.roa File: 42afc059-5ef8-345d-9eb0-509cf5658724.roa (raw, json) Hash identifier: AnEszm122wTBGgogusZn/oXY+hJ93+bGBDfYqU1sqF0= Subject key identifier: 49:35:3A:64:37:C0:AA:E9:07:B1:0B:02:6A:94:A0:94:A9:DF:AB:21 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285849A089D44C19DA4E6F2E203780 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/42afc059-5ef8-345d-9eb0-509cf5658724.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 931 IP address blocks: 104.249.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d4:4c:19:da:4e:6f:2e:20:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=7576ba5e-5412-44a9-bab9-3931da34d378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d0:dc:0f:36:33:8b:0e:6a:a6:16:cd:a4:06: 94:00:3e:86:5f:66:72:a6:f9:23:49:d3:4a:63:8c: b8:4d:d6:7c:cd:80:64:a4:0e:cd:38:7b:fa:3c:d2: 1a:5d:fa:01:31:ae:d9:5c:e2:4c:d7:a0:10:f6:bf: 68:ee:4e:41:19:92:cf:71:53:93:6d:cd:a0:4d:44: e8:22:a1:26:7a:b7:54:ab:d1:2a:26:49:2d:40:12: ba:6f:2a:6c:28:fc:af:8b:6b:3a:e5:38:bd:d3:f0: 2f:92:3d:5a:dc:40:13:fe:69:83:27:d2:3f:b6:35: a5:76:2c:1a:10:85:02:c1:eb:7b:fa:f0:e1:f6:d9: ec:50:f0:6e:90:15:f7:62:bc:6c:5e:f9:2a:bd:ae: db:b3:53:1b:d3:cf:dd:91:f4:87:d7:27:7e:7b:31: 05:bd:1b:cf:8c:83:70:69:cf:c3:b3:26:5c:31:f8: 5a:ef:74:64:97:26:b9:26:99:7f:90:e2:c6:3a:68: b7:5e:93:2d:3a:b7:e3:b7:ea:05:99:e3:a2:25:25: d5:ae:8d:e2:9c:1b:15:91:b8:82:8f:54:c8:fb:07: 61:98:10:e8:84:3e:f6:4c:62:ea:8e:78:df:d0:a2: 42:dd:c1:fe:16:c5:75:3e:37:88:f0:c2:dd:35:14: 1b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:35:3A:64:37:C0:AA:E9:07:B1:0B:02:6A:94:A0:94:A9:DF:AB:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/42afc059-5ef8-345d-9eb0-509cf5658724.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 104.249.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:f8:67:73:58:99:0d:2c:f2:47:91:c3:a7:b9:fe:4a:a4:31: 3a:a5:29:30:cf:6f:20:33:a8:b3:4e:5f:34:c6:2f:5d:2a:87: 65:57:44:10:80:5a:22:50:d0:9c:0d:7d:5b:d5:4b:88:2a:9f: d7:52:a2:6a:df:d2:86:2a:92:f3:cd:6c:69:5e:83:b2:a1:e3: 2c:a1:3e:85:44:02:06:32:b3:5f:9e:de:e3:c7:7d:d3:ab:cc: fa:01:b2:5f:b5:61:9b:0b:0b:40:d9:2d:31:96:53:ea:a2:8f: 08:27:d2:f0:d8:d0:5a:48:4f:ed:9a:05:e8:22:4a:4a:12:48: f7:db:0c:f3:6e:35:2f:a5:6d:6b:78:de:97:df:a4:3f:10:85: ff:0a:07:e0:7f:fd:c0:a4:a0:b9:bb:2b:a9:77:41:f1:c2:de: 8d:d7:67:ca:65:46:e3:f7:37:69:e3:90:77:cd:e1:bb:43:f8: aa:5c:da:69:e0:72:48:d0:a8:be:ed:18:b3:84:ef:00:59:75: 91:c4:85:cc:7c:db:27:1f:98:7c:01:77:f8:35:b0:4e:d1:49: 99:08:7d:e9:9b:34:9b:12:45:59:5d:bd:27:a3:26:e2:1a:31: 8c:84:90:4e:8a:3b:37:f3:4c:60:ec:aa:ef:ff:b0:d8:70:89: e6:2a:38:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidRMGdpOby4gN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk NzU3NmJhNWUtNTQxMi00NGE5LWJhYjktMzkzMWRhMzRkMzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNDcDzYziw5qphbNpAaUAD6GX2ZypvkjSdNK Y4y4TdZ8zYBkpA7NOHv6PNIaXfoBMa7ZXOJM16AQ9r9o7k5BGZLPcVOTbc2gTUTo IqEmerdUq9EqJkktQBK6bypsKPyvi2s65Ti90/Avkj1a3EAT/mmDJ9I/tjWldiwa EIUCwet7+vDh9tnsUPBukBX3YrxsXvkqva7bs1Mb08/dkfSH1yd+ezEFvRvPjINw ac/DsyZcMfha73Rklya5Jpl/kOLGOmi3XpMtOrfjt+oFmeOiJSXVro3inBsVkbiC j1TI+wdhmBDohD72TGLqjnjf0KJC3cH+FsV1PjeI8MLdNRQbpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEk1OmQ3wKrpB7ELAmqUoJSp36shMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNDJhZmMwNTktNWVmOC0z NDVkLTllYjAtNTA5Y2Y1NjU4NzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFf4Z3NYmQ0s8keRw6e5/kqkMTqlKTDPbyAzqLNOXzTGL10qh2VXRBCA WiJQ0JwNfVvVS4gqn9dSomrf0oYqkvPNbGleg7Kh4yyhPoVEAgYys1+e3uPHfdOr zPoBsl+1YZsLC0DZLTGWU+qijwgn0vDY0FpIT+2aBegiSkoSSPfbDPNuNS+lbWt4 3pffpD8Qhf8KB+B//cCkoLm7K6l3QfHC3o3XZ8plRuP3N2njkHfN4btD+Kpc2mng ckjQqL7tGLOE7wBZdZHEhcx82ycfmHwBd/g1sE7RSZkIfembNJsSRVldvSejJuIa MYyEkE6KOzfzTGDsqu//sNhwieYqODc= -----END CERTIFICATE-----Generated at Sat Apr 26 16:41:36 2025 by rpki-client