$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/e59419c7-f2cd-369a-8fd3-eb62f0eca867.roa File: e59419c7-f2cd-369a-8fd3-eb62f0eca867.roa (raw, json) Hash identifier: DT73CGyJf4X71Gi0uOoomQZcF2YPgK4v4Sy8B+x3+iE= Subject key identifier: DF:DD:AC:6E:81:95:A9:9E:C0:3B:97:10:4E:F9:38:30:79:B0:F5:5A Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285849A089D632E875B55D42034500 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/e59419c7-f2cd-369a-8fd3-eb62f0eca867.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 213122 IP address blocks: 104.224.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d6:32:e8:75:b5:5d:42:03:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=ff5c6297-8e4e-4e36-9388-a832bd191f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5a:6d:a0:55:dc:d4:1a:13:02:33:e8:60:17: e9:8d:0e:15:8b:51:ac:1f:95:ad:01:1f:f4:21:66: 0f:ce:1b:06:58:d1:bd:d2:01:28:18:a6:ad:8f:50: dd:31:62:53:c7:29:38:9f:95:78:02:fb:8a:d9:3c: c3:0e:91:37:86:03:7d:e4:13:2a:71:60:17:e2:ea: 06:21:f8:4f:87:cb:37:ec:6e:82:64:3b:9d:09:96: ef:80:c0:5f:30:1a:ba:b9:a2:63:bd:83:10:c1:2c: 02:88:d9:37:4d:32:85:c9:44:12:99:8b:c6:18:e3: 82:1f:10:c1:71:ad:59:34:3f:1b:06:45:4f:f1:ff: a8:5b:4a:32:1b:bf:c3:ea:d4:d3:d5:ba:7e:ea:d2: d8:8a:bd:54:f6:64:97:a0:0a:b2:5d:1e:11:f8:4e: ac:07:50:1f:e4:3e:59:03:fb:82:15:3e:f2:7d:56: 90:ed:8a:b8:1f:4c:ae:e8:af:ae:97:39:c2:14:59: d5:96:d7:58:eb:ad:7b:c2:27:00:cf:3a:59:34:2a: 10:75:c4:81:78:2a:fc:c1:62:d1:4f:7d:4a:5f:12: f3:b4:6d:1c:1f:fc:65:f2:f5:fd:3a:6b:21:14:19: 35:95:dd:45:f1:bf:93:93:90:42:73:40:5d:a8:51: c5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:DD:AC:6E:81:95:A9:9E:C0:3B:97:10:4E:F9:38:30:79:B0:F5:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/e59419c7-f2cd-369a-8fd3-eb62f0eca867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 104.224.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:d7:3a:88:de:c9:23:2a:8a:ea:56:69:3e:de:83:0a:0a:e7: 86:f0:39:70:20:0b:f4:65:97:b6:81:d7:64:97:18:b2:a2:d7: 67:dc:5c:bd:77:dc:bc:9c:2c:9d:b4:53:0a:de:64:b1:df:b3: ea:57:0e:9d:c6:d2:e5:28:02:2d:96:09:30:09:6f:e9:83:cc: 35:3f:b2:b6:54:32:29:ea:b3:ed:d5:15:38:57:dc:b5:d7:1c: 33:39:c4:29:a3:bc:ab:9a:70:02:f7:27:23:ab:0d:21:43:0f: 4c:9e:91:cc:d9:64:3e:bd:03:72:52:43:b7:b3:7f:e1:0a:8c: 51:c6:9d:a0:f5:6e:85:71:d8:6a:28:43:53:20:ab:09:5d:43: 2c:a1:26:81:63:99:fc:7d:d9:c6:19:23:e5:55:8a:cc:5b:34: 4f:21:4d:ae:0f:e8:44:cd:82:2f:1c:8f:6d:26:3c:f3:a6:4e: 0c:22:f4:29:db:46:d3:3b:70:8e:2e:88:e2:1b:50:21:ef:95: 51:c4:62:81:22:a6:d6:df:cb:00:2e:19:15:62:46:16:cc:33: b6:e5:ae:a0:f5:96:d7:eb:e4:75:a6:1d:65:07:82:91:21:07: 21:16:6a:ed:c0:f6:4b:d1:74:49:3d:0d:ee:19:55:24:96:2b: 5d:3b:27:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidYy6HW1XUIDRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk ZmY1YzYyOTctOGU0ZS00ZTM2LTkzODgtYTgzMmJkMTkxZjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVptoFXc1BoTAjPoYBfpjQ4Vi1GsH5WtAR/0 IWYPzhsGWNG90gEoGKatj1DdMWJTxyk4n5V4AvuK2TzDDpE3hgN95BMqcWAX4uoG IfhPh8s37G6CZDudCZbvgMBfMBq6uaJjvYMQwSwCiNk3TTKFyUQSmYvGGOOCHxDB ca1ZND8bBkVP8f+oW0oyG7/D6tTT1bp+6tLYir1U9mSXoAqyXR4R+E6sB1Af5D5Z A/uCFT7yfVaQ7Yq4H0yu6K+ulznCFFnVltdY6617wicAzzpZNCoQdcSBeCr8wWLR T31KXxLztG0cH/xl8vX9OmshFBk1ld1F8b+Tk5BCc0BdqFHFUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/drG6BlamewDuXEE75ODB5sPVaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvZTU5NDE5YzctZjJjZC0z NjlhLThmZDMtZWI2MmYwZWNhODY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOAfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjXOojeySMqiupWaT7egwoK54bwOXAgC/Rll7aB12SXGLKi12fcXL13 3LycLJ20UwreZLHfs+pXDp3G0uUoAi2WCTAJb+mDzDU/srZUMinqs+3VFThX3LXX HDM5xCmjvKuacAL3JyOrDSFDD0yekczZZD69A3JSQ7ezf+EKjFHGnaD1boVx2Goo Q1MgqwldQyyhJoFjmfx92cYZI+VVisxbNE8hTa4P6ETNgi8cj20mPPOmTgwi9Cnb RtM7cI4uiOIbUCHvlVHEYoEiptbfywAuGRViRhbMM7blrqD1ltfr5HWmHWUHgpEh ByEWau3A9kvRdEk9De4ZVSSWK107J5E= -----END CERTIFICATE-----Generated at Sat Apr 26 16:50:43 2025 by rpki-client