$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/7159248f-4ebc-3298-a66b-855e619832d0.roa File: 7159248f-4ebc-3298-a66b-855e619832d0.roa (raw, json) Hash identifier: il14c6wtd+QQum4ivQ47xQPb/FeF1r/KdUpMG9+VpB0= Subject key identifier: 9C:D1:62:D3:16:80:16:2D:28:95:45:F7:CB:EC:FF:08:CB:33:A7:D4 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285849A089D62217DDF8839CFC0E00 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/7159248f-4ebc-3298-a66b-855e619832d0.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 213122 IP address blocks: 104.224.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d6:22:17:dd:f8:83:9c:fc:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=29575567-0c58-4933-a948-d6090aac6483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:be:78:24:be:16:50:2a:42:fc:b8:60:b5:06: 27:55:20:97:ad:56:e9:e2:f0:dd:5c:75:67:6a:7c: 58:95:11:66:32:41:0f:c6:21:1f:b9:11:a9:7a:53: 4a:af:73:9b:b7:16:b5:6c:b8:56:2d:33:18:f2:62: 24:08:5f:a4:34:79:91:40:4c:03:28:7e:03:bb:ac: 12:3e:b6:2e:68:6b:0d:0f:b5:03:56:23:24:5b:27: ed:f7:1b:e8:80:37:ae:d8:b9:4d:3b:e1:7b:e1:f7: c1:ad:39:e5:27:9b:f5:b7:38:4d:5d:a1:1f:4b:46: 57:41:56:5d:5d:a0:c1:13:a4:13:b5:79:1f:23:2d: be:0e:f1:6e:80:67:90:bd:5e:7f:c1:9e:b8:ae:4a: cb:85:2a:b1:86:2c:22:34:bb:dc:f6:b2:3e:3a:5a: a2:5d:cc:86:40:7c:3d:99:3b:1b:0f:1b:3f:e6:de: 17:06:e9:39:1a:65:58:1c:e0:9f:19:64:39:da:f6: 39:d2:00:6e:08:58:51:ab:47:d0:d2:e7:cc:a8:d3: 3d:0a:d0:b4:43:51:cc:e7:71:12:f3:1c:35:77:fc: dc:28:47:47:05:47:26:f9:ca:16:fe:e6:4b:55:0a: f7:fb:c3:d0:5b:4e:d6:d9:36:83:e4:ae:c8:e9:3a: ba:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D1:62:D3:16:80:16:2D:28:95:45:F7:CB:EC:FF:08:CB:33:A7:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/7159248f-4ebc-3298-a66b-855e619832d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 104.224.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:a5:d6:57:66:ef:18:a2:29:de:b4:1c:e5:35:68:33:ae:a1: 4d:a8:6b:f7:4d:4d:da:bc:f8:bd:59:58:1a:1c:fc:58:40:22: b1:0d:e4:be:3f:3a:32:f9:70:13:98:7c:56:de:10:49:10:41: 52:d3:e4:69:9a:44:b5:78:b2:f5:1a:3c:81:28:44:ed:8f:d3: 52:78:96:89:4b:59:de:55:7c:fc:84:44:48:ab:b4:b3:46:e1: 80:80:62:0f:66:35:3c:75:21:9b:f0:7f:db:cb:9b:81:72:11: 54:34:1a:1e:54:a4:c0:33:0d:c3:34:63:17:bd:f2:e0:dc:0b: f6:b4:42:86:8d:da:0b:e0:1d:c3:ce:e5:dd:f7:05:75:db:dc: 60:09:17:98:42:cc:04:5c:fd:c0:25:5a:96:f0:4b:31:6e:af: ef:5d:79:3c:dd:61:39:65:25:67:4c:20:e1:1c:99:6c:eb:11: bc:b9:60:6c:21:17:54:09:d1:88:52:ff:28:30:93:2f:e1:43: 09:fe:55:00:53:b4:dc:19:3a:48:0f:ec:3f:10:e9:6a:4b:3d: 98:6b:75:23:ec:76:3e:dc:ec:c0:7c:4b:d7:6b:64:f2:af:a9: 31:e1:65:1a:90:46:c5:88:0a:34:b5:58:3f:ce:e0:e0:ae:fd: e0:8a:6a:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidYiF934g5z8DgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk Mjk1NzU1NjctMGM1OC00OTMzLWE5NDgtZDYwOTBhYWM2NDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi754JL4WUCpC/LhgtQYnVSCXrVbp4vDdXHVn anxYlRFmMkEPxiEfuRGpelNKr3Obtxa1bLhWLTMY8mIkCF+kNHmRQEwDKH4Du6wS PrYuaGsND7UDViMkWyft9xvogDeu2LlNO+F74ffBrTnlJ5v1tzhNXaEfS0ZXQVZd XaDBE6QTtXkfIy2+DvFugGeQvV5/wZ64rkrLhSqxhiwiNLvc9rI+OlqiXcyGQHw9 mTsbDxs/5t4XBuk5GmVYHOCfGWQ52vY50gBuCFhRq0fQ0ufMqNM9CtC0Q1HM53ES 8xw1d/zcKEdHBUcm+coW/uZLVQr3+8PQW07W2TaD5K7I6Tq6qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzRYtMWgBYtKJVF98vs/wjLM6fUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNzE1OTI0OGYtNGViYy0z Mjk4LWE2NmItODU1ZTYxOTgzMmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOAeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+l1ldm7xiiKd60HOU1aDOuoU2oa/dNTdq8+L1ZWBoc/FhAIrEN5L4/ OjL5cBOYfFbeEEkQQVLT5GmaRLV4svUaPIEoRO2P01J4lolLWd5VfPyEREirtLNG 4YCAYg9mNTx1IZvwf9vLm4FyEVQ0Gh5UpMAzDcM0Yxe98uDcC/a0QoaN2gvgHcPO 5d33BXXb3GAJF5hCzARc/cAlWpbwSzFur+9deTzdYTllJWdMIOEcmWzrEby5YGwh F1QJ0YhS/ygwky/hQwn+VQBTtNwZOkgP7D8Q6WpLPZhrdSPsdj7c7MB8S9drZPKv qTHhZRqQRsWICjS1WD/O4OCu/eCKasY= -----END CERTIFICATE-----Generated at Sat Apr 26 16:31:14 2025 by rpki-client