$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/6deddc91-1e80-3cbe-aa0c-aac1448de702.roa File: 6deddc91-1e80-3cbe-aa0c-aac1448de702.roa (raw, json) Hash identifier: K0EvZlp2oF9tN6gNF98rHLG+DxIAqFbSxg6ZbmZRoaM= Subject key identifier: 6B:5A:DB:A1:A1:B4:C9:F4:CC:85:DE:31:F6:0C:01:AD:47:26:F7:DD Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285849A089D5F3FFAD4A1E6FC0D900 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/6deddc91-1e80-3cbe-aa0c-aac1448de702.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 213122 IP address blocks: 104.224.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d5:f3:ff:ad:4a:1e:6f:c0:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=8ba0674c-cbe5-4889-8ca6-2c6d2d588873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:62:ba:35:90:cc:9e:9e:28:dd:78:8b:55:71: 89:eb:a3:20:c1:f0:61:17:a9:bb:06:20:ee:82:07: 1d:14:05:48:6b:07:73:0a:3b:98:47:5c:7d:21:b0: 76:74:05:06:60:78:ec:a1:a8:b9:36:60:a0:5b:98: ea:1e:6f:52:33:20:9c:02:2b:62:a9:ba:c9:0a:63: 94:6a:89:76:2c:99:ce:72:4c:73:b0:5e:64:1e:05: 99:46:ec:53:49:1b:61:67:14:b0:09:28:b7:c2:cc: 74:f2:7d:82:c6:f1:7f:01:f9:2f:08:1b:07:bb:ae: 9b:c5:f9:62:c6:68:d8:f8:3d:a5:ef:12:8b:f7:9b: 37:60:7b:3b:7c:ae:f2:66:9d:9e:d2:56:0a:39:51: f1:08:f9:f1:4c:94:19:9d:ae:b8:0b:61:c6:f9:aa: 09:f8:62:70:ac:93:22:6c:29:40:23:4f:c9:52:b1: af:dc:81:bc:9f:8e:07:5d:24:44:52:cb:7d:69:39: 8f:ae:f7:a2:d1:b2:e8:4c:19:32:18:af:53:75:be: a2:ed:06:be:71:73:cd:d7:7e:d7:8a:79:a3:6f:50: 6e:35:1f:18:2a:e6:e8:b3:bd:6c:46:15:7a:51:2c: d2:3f:ae:6d:3a:83:68:42:70:73:ff:cb:01:cd:c4: ac:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:5A:DB:A1:A1:B4:C9:F4:CC:85:DE:31:F6:0C:01:AD:47:26:F7:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/6deddc91-1e80-3cbe-aa0c-aac1448de702.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 104.224.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:cb:c3:3a:d0:c1:16:3b:4d:c4:17:bf:c3:81:4f:32:14:b7: 22:33:3b:e1:02:a6:03:a2:f2:25:11:12:66:81:ff:3c:65:ac: f5:59:a2:98:cf:74:bc:36:ff:2e:d8:18:16:07:06:1a:52:e0: 18:33:34:f9:56:41:e0:d1:ea:3e:4f:6a:73:7c:71:1c:ef:db: fb:9a:29:df:5e:99:6f:9b:91:0d:7d:75:b0:88:96:09:65:51: 02:0e:6b:0a:f0:05:1d:13:a2:24:d1:1e:c7:6a:59:ab:31:ff: 03:76:10:b5:ab:e8:06:72:6f:50:4a:db:c2:40:2a:8d:d6:77: 66:3a:af:3e:80:ff:06:0c:99:e8:62:df:43:9c:d8:51:a5:d2: e9:4a:d2:08:d5:7d:53:0a:71:4c:28:83:ac:62:8e:5c:59:d7: 1c:97:3f:cb:75:00:f7:f4:15:e9:c6:87:db:9c:a6:93:be:7e: db:e2:37:37:ed:20:75:f1:d2:01:b9:9c:73:24:fc:f4:98:27: 84:8b:0e:97:73:b6:7c:20:83:81:2c:71:91:3f:03:38:69:da: 82:8f:9e:99:70:79:2b:b3:4f:f1:57:4b:ae:87:6f:09:16:c3: a0:d6:bf:aa:5a:64:d8:b3:f7:3d:78:28:95:d8:83:9e:c8:81: 69:d4:f0:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidXz/61KHm/A2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk OGJhMDY3NGMtY2JlNS00ODg5LThjYTYtMmM2ZDJkNTg4ODczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2K6NZDMnp4o3XiLVXGJ66MgwfBhF6m7BiDu ggcdFAVIawdzCjuYR1x9IbB2dAUGYHjsoai5NmCgW5jqHm9SMyCcAitiqbrJCmOU aol2LJnOckxzsF5kHgWZRuxTSRthZxSwCSi3wsx08n2CxvF/AfkvCBsHu66bxfli xmjY+D2l7xKL95s3YHs7fK7yZp2e0lYKOVHxCPnxTJQZna64C2HG+aoJ+GJwrJMi bClAI0/JUrGv3IG8n44HXSREUst9aTmPrvei0bLoTBkyGK9Tdb6i7Qa+cXPN137X inmjb1BuNR8YKubos71sRhV6USzSP65tOoNoQnBz/8sBzcSspQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGta26GhtMn0zIXeMfYMAa1HJvfdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNmRlZGRjOTEtMWU4MC0z Y2JlLWFhMGMtYWFjMTQ0OGRlNzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHLwzrQwRY7TcQXv8OBTzIUtyIzO+ECpgOi8iUREmaB/zxlrPVZopjP dLw2/y7YGBYHBhpS4BgzNPlWQeDR6j5PanN8cRzv2/uaKd9emW+bkQ19dbCIlgll UQIOawrwBR0ToiTRHsdqWasx/wN2ELWr6AZyb1BK28JAKo3Wd2Y6rz6A/wYMmehi 30Oc2FGl0ulK0gjVfVMKcUwog6xijlxZ1xyXP8t1APf0FenGh9ucppO+ftviNzft IHXx0gG5nHMk/PSYJ4SLDpdztnwgg4EscZE/Azhp2oKPnplweSuzT/FXS66HbwkW w6DWv6paZNiz9z14KJXYg57IgWnU8Fk= -----END CERTIFICATE-----Generated at Sat Apr 26 16:18:28 2025 by rpki-client