$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/8df1d45d-f0f6-331a-aa48-9c48058a3859.roa File: 8df1d45d-f0f6-331a-aa48-9c48058a3859.roa (raw, json) Hash identifier: 45DXHGi52ZgGy2yxkqIrKy5ZUeC4ZLWREq3HWXV/CXU= Subject key identifier: 96:FB:7C:9E:4F:3B:04:EB:A5:4B:1E:3E:CA:4A:C2:72:F9:C4:37:45 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285849A089D644C36D11706ACD5980 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/8df1d45d-f0f6-331a-aa48-9c48058a3859.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 213122 IP address blocks: 104.249.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d6:44:c3:6d:11:70:6a:cd:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=c78480e4-7af7-45c6-aed2-72a0e90f0782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:79:5a:0e:07:0c:cb:b6:f7:00:14:da:54:34: 9e:cc:b0:42:34:be:91:8b:ed:76:1a:62:88:d5:e2: 31:09:37:0f:07:49:25:f7:88:5a:23:02:3c:70:c0: 80:07:fe:3b:36:1c:78:84:32:3b:84:88:c2:6a:f2: da:27:37:43:1f:c4:52:bd:b7:cd:c0:fe:34:00:a3: 26:d2:af:3f:53:ce:4c:b2:6a:07:d6:d8:a9:27:1c: c4:93:f9:0b:38:0f:ac:5d:09:21:aa:6c:d6:b9:6c: 78:36:19:a2:83:f1:f6:35:ee:df:11:83:b5:54:04: 9a:66:57:44:0d:3e:cf:9a:db:05:97:b3:f0:15:21: 21:e1:45:c9:bf:18:4e:34:b2:5e:24:b5:d0:b3:19: 7b:d8:be:56:eb:1e:85:6e:7a:c4:39:c7:24:00:3e: 31:51:c7:6a:23:b4:aa:75:ce:27:cc:21:3e:01:41: 36:21:3c:94:65:9f:0c:70:25:f2:b0:e6:52:d3:cb: 42:20:89:09:23:60:9b:22:f6:78:88:e0:69:02:da: f1:c8:e1:de:86:03:23:f8:e3:cb:8a:86:64:ae:10: c4:f6:6f:a7:61:2b:1a:a0:d0:26:32:6c:99:22:ed: 43:c1:73:7a:bd:af:6b:3b:15:a2:17:a8:2a:92:a6: 0e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:FB:7C:9E:4F:3B:04:EB:A5:4B:1E:3E:CA:4A:C2:72:F9:C4:37:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/8df1d45d-f0f6-331a-aa48-9c48058a3859.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 104.249.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:18:94:31:b2:cc:80:9b:0a:5a:7e:83:9a:47:56:b9:5b:1d: a1:5d:d4:af:6b:8f:25:d1:7e:bb:db:18:80:c8:d1:e8:b5:a9: bb:3b:b8:8c:1b:66:7e:c5:9b:3f:fc:8c:a2:e5:ad:0a:cf:92: 53:2e:1e:90:5b:52:2f:43:7c:90:c5:67:22:36:d9:16:b1:4e: 50:fd:b7:95:79:8f:ea:d6:c3:d5:c1:48:5d:d2:1f:45:10:05: 8d:d5:f2:f8:2e:3d:77:18:4c:ba:70:5a:ee:1e:32:33:95:cf: 27:8a:54:aa:c4:8b:c2:98:6a:18:02:35:ee:d9:78:8c:66:21: 97:97:75:e1:32:dc:39:72:ac:d7:07:5d:1f:12:23:35:ad:b4: 5c:b9:d2:24:7a:a8:53:57:7a:8e:f2:15:b7:14:b4:e9:bc:d5: 3f:38:5e:e4:9d:07:8c:24:10:b6:af:43:12:53:48:e6:78:a2: b8:0b:37:bb:7f:5a:d2:9f:b9:69:0c:4e:07:b5:ed:47:5c:3b: 0b:ab:17:4e:4d:6c:f8:e8:a7:29:26:fd:bc:31:2e:d5:f9:fd: 2c:8e:e9:e9:b0:10:ce:be:29:c4:c7:53:4b:61:2f:5f:88:bc: 9d:07:c6:aa:94:79:af:45:15:47:3b:1a:4e:c3:61:25:0f:6f: 0a:7b:4e:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidZEw20RcGrNWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk Yzc4NDgwZTQtN2FmNy00NWM2LWFlZDItNzJhMGU5MGYwNzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHlaDgcMy7b3ABTaVDSezLBCNL6Ri+12GmKI 1eIxCTcPB0kl94haIwI8cMCAB/47Nhx4hDI7hIjCavLaJzdDH8RSvbfNwP40AKMm 0q8/U85MsmoH1tipJxzEk/kLOA+sXQkhqmzWuWx4Nhmig/H2Ne7fEYO1VASaZldE DT7PmtsFl7PwFSEh4UXJvxhONLJeJLXQsxl72L5W6x6FbnrEOcckAD4xUcdqI7Sq dc4nzCE+AUE2ITyUZZ8McCXysOZS08tCIIkJI2CbIvZ4iOBpAtrxyOHehgMj+OPL ioZkrhDE9m+nYSsaoNAmMmyZIu1DwXN6va9rOxWiF6gqkqYO8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJb7fJ5POwTrpUsePspKwnL5xDdFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvOGRmMWQ0NWQtZjBmNi0z MzFhLWFhNDgtOWM0ODA1OGEzODU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4YlDGyzICbClp+g5pHVrlbHaFd1K9rjyXRfrvbGIDI0ei1qbs7uIwb Zn7Fmz/8jKLlrQrPklMuHpBbUi9DfJDFZyI22RaxTlD9t5V5j+rWw9XBSF3SH0UQ BY3V8vguPXcYTLpwWu4eMjOVzyeKVKrEi8KYahgCNe7ZeIxmIZeXdeEy3DlyrNcH XR8SIzWttFy50iR6qFNXeo7yFbcUtOm81T84XuSdB4wkELavQxJTSOZ4orgLN7t/ WtKfuWkMTge17UdcOwurF05NbPjopykm/bwxLtX5/SyO6emwEM6+KcTHU0thL1+I vJ0HxqqUea9FFUc7Gk7DYSUPbwp7Tr4= -----END CERTIFICATE-----Generated at Sun Apr 27 01:32:58 2025 by rpki-client