$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/81f766cc-e7d1-391d-bb13-9792ad47c246.roa File: 81f766cc-e7d1-391d-bb13-9792ad47c246.roa (raw, json) Hash identifier: FIYy+7zajLWGCYkFWPSR3oU/k1YO6AYIvDthzcb8tbQ= Subject key identifier: 00:A9:E0:C1:66:1C:62:B1:69:C3:94:27:D6:EA:57:08:61:D4:DC:89 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285849A089D664C0648CF02745EE40 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/81f766cc-e7d1-391d-bb13-9792ad47c246.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 213122 IP address blocks: 104.249.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d6:64:c0:64:8c:f0:27:45:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=fd7075f1-419c-43a7-b1e9-4b53de3ac857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6a:da:21:0a:21:c9:16:49:06:0c:49:ee:2d: 41:cf:5a:ee:31:d4:89:c0:2c:03:81:ce:6e:3b:50: e7:d7:76:aa:32:71:a2:a6:d5:0e:fd:55:ce:f4:68: 06:e2:56:7b:5f:23:79:ea:63:87:0a:4b:91:67:11: 61:a4:18:59:bf:7c:08:7c:cb:f8:f4:12:ed:d0:6d: 76:c8:56:df:ce:6d:6e:37:17:3f:2d:4e:3b:33:10: 03:8a:49:dd:6b:70:61:44:9b:52:e3:27:c3:4d:36: 4b:74:d0:bb:5b:ea:e3:4f:ba:8f:14:95:fc:ec:34: bf:cd:29:a6:6e:a4:87:34:7b:ef:c3:cf:22:33:05: 66:0c:15:dc:db:29:03:dd:3c:68:61:20:29:5f:70: 56:c6:b2:e2:21:8e:9a:32:57:e7:75:34:e8:06:b2: 09:6b:84:0e:78:7f:54:fd:78:2f:85:08:0b:2a:67: ea:7e:f3:43:9e:2a:a7:3a:33:0b:45:2a:67:ca:0c: ed:f1:ed:b9:0f:47:b4:20:a7:a0:d4:5d:66:22:d7: 92:97:21:1b:25:21:46:fc:c4:9a:32:be:fa:25:83: e6:94:76:61:ae:c5:5c:be:af:ce:e6:47:4e:38:5b: 4b:ef:94:c8:04:67:f6:b9:50:ff:21:7b:8b:36:0e: dd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A9:E0:C1:66:1C:62:B1:69:C3:94:27:D6:EA:57:08:61:D4:DC:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/81f766cc-e7d1-391d-bb13-9792ad47c246.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 104.249.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:b1:68:43:5b:13:c5:98:b9:cb:b9:d5:8d:fe:a2:c0:c4:3c: e6:c5:e2:a4:85:b5:8a:48:00:8f:e2:1e:3f:cf:47:a6:38:62: 32:1e:00:cb:c2:57:52:f3:13:08:f6:92:b9:2f:74:1b:9f:04: 09:51:7d:43:cc:ad:0a:5e:b8:99:ed:0d:39:d3:e8:aa:07:37: ca:84:c1:6a:db:fb:a1:db:44:ac:77:0d:d3:f3:80:11:4e:ff: 85:19:5f:bf:7b:de:a1:8f:e9:be:49:e4:66:2c:b7:0c:cc:f2: 79:7b:99:a0:28:ff:07:e7:9f:11:e3:b5:c2:48:52:96:12:bc: 8b:12:7b:c2:4c:64:42:cd:87:98:ba:2e:4b:01:32:bf:25:05: 6b:4f:bd:db:f4:ac:87:05:5f:d4:4a:91:eb:20:2b:bd:d1:ac: d9:d5:ba:03:86:66:4c:66:aa:87:f6:dd:41:ad:48:6a:1d:db: 26:ad:d1:c1:52:aa:f4:c3:de:0a:e0:c3:79:9c:02:d2:5f:41: 67:bb:d8:53:2f:cf:50:85:d3:91:56:6a:5c:51:1a:ac:97:50: 98:77:44:95:55:72:40:f6:0a:d6:b3:b4:e8:43:3c:00:10:5d: 57:a0:ec:12:23:bf:d3:31:4b:4d:9b:8e:eb:21:2b:23:4b:df: 61:c9:fa:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidZkwGSM8CdF7kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk ZmQ3MDc1ZjEtNDE5Yy00M2E3LWIxZTktNGI1M2RlM2FjODU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2raIQohyRZJBgxJ7i1Bz1ruMdSJwCwDgc5u O1Dn13aqMnGiptUO/VXO9GgG4lZ7XyN56mOHCkuRZxFhpBhZv3wIfMv49BLt0G12 yFbfzm1uNxc/LU47MxADiknda3BhRJtS4yfDTTZLdNC7W+rjT7qPFJX87DS/zSmm bqSHNHvvw88iMwVmDBXc2ykD3TxoYSApX3BWxrLiIY6aMlfndTToBrIJa4QOeH9U /XgvhQgLKmfqfvNDniqnOjMLRSpnygzt8e25D0e0IKeg1F1mIteSlyEbJSFG/MSa Mr76JYPmlHZhrsVcvq/O5kdOOFtL75TIBGf2uVD/IXuLNg7d5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACp4MFmHGKxacOUJ9bqVwhh1NyJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvODFmNzY2Y2MtZTdkMS0z OTFkLWJiMTMtOTc5MmFkNDdjMjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPmDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACixaENbE8WYucu51Y3+osDEPObF4qSFtYpIAI/iHj/PR6Y4YjIeAMvC V1LzEwj2krkvdBufBAlRfUPMrQpeuJntDTnT6KoHN8qEwWrb+6HbRKx3DdPzgBFO /4UZX7973qGP6b5J5GYstwzM8nl7maAo/wfnnxHjtcJIUpYSvIsSe8JMZELNh5i6 LksBMr8lBWtPvdv0rIcFX9RKkesgK73RrNnVugOGZkxmqof23UGtSGod2yat0cFS qvTD3grgw3mcAtJfQWe72FMvz1CF05FWalxRGqyXUJh3RJVVckD2CtaztOhDPAAQ XVeg7BIjv9MxS02bjushKyNL32HJ+i4= -----END CERTIFICATE-----Generated at Sat Apr 26 16:17:47 2025 by rpki-client