$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f68f6e01-5422-3936-ab82-458179ed5da6.roa File: f68f6e01-5422-3936-ab82-458179ed5da6.roa (raw, json) Hash identifier: 5HErJyGb0LBX0KF1ws7Zk0biXhJY7yA/COMu+1sI6Bw= Subject key identifier: 35:AD:6C:E1:61:37:88:BC:F7:1B:A1:8D:5F:07:29:A5:34:AA:A7:D6 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285849A1EF7613A0710C99CA234600 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f68f6e01-5422-3936-ab82-458179ed5da6.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 399114 IP address blocks: 104.249.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:76:13:a0:71:0c:99:ca:23:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=672b965b-61c7-486e-b17f-232483ad8168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d2:83:fd:ea:22:e7:f2:e2:e8:0f:03:ad:1c: 76:fa:aa:e4:16:fc:b7:43:4a:16:93:e8:c5:8b:39: db:6a:c3:bf:58:5c:45:0b:7a:4b:ec:88:bd:18:06: 45:97:98:b8:24:83:b1:f6:55:7f:9a:fb:f8:68:1d: 44:d2:07:0a:b4:24:39:b0:ef:4c:05:74:3b:cb:0b: 5c:23:6e:b0:f6:d2:67:49:73:39:cf:8f:47:04:46: 76:07:9f:41:04:72:f1:1f:7e:f4:d7:77:9b:1d:ea: 94:78:23:1a:9f:25:f7:1f:c5:a3:c8:dc:a5:27:19: af:56:48:39:5b:ad:9e:70:e3:a2:58:c4:c9:ae:45: 7a:9d:78:28:4f:f8:2a:70:8a:b6:c5:1b:9b:dd:52: d9:4f:9a:ed:24:3c:13:72:2a:7c:82:7a:ec:4f:b8: 62:2e:e5:94:5e:7f:10:c3:39:fc:68:14:24:92:3a: fd:44:c5:c0:a2:75:92:29:34:f1:c6:d0:a0:ab:69: b4:f8:52:30:80:da:fe:e4:11:51:20:9e:4d:c0:df: ae:49:17:06:12:4b:fb:3d:f0:72:a7:65:29:12:1b: e9:a0:35:32:99:03:23:cc:77:3f:3f:5c:47:75:e8: 9d:4d:84:c4:b4:67:4b:f9:e1:ac:4f:3d:c0:b9:8e: b6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:AD:6C:E1:61:37:88:BC:F7:1B:A1:8D:5F:07:29:A5:34:AA:A7:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f68f6e01-5422-3936-ab82-458179ed5da6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 104.249.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:b4:8d:51:cb:01:d5:85:72:ad:dd:0d:27:70:67:f8:12:9e: aa:36:eb:de:78:38:77:83:3c:25:c7:d9:22:a7:db:7b:ba:0a: 3f:2b:1a:c9:47:2d:b3:96:c2:69:2c:b6:d4:a1:52:b8:53:6f: 27:12:ae:0e:6b:74:9d:37:ec:4c:51:41:bb:9b:60:0f:7d:0a: 4f:c7:bd:e5:2c:64:d3:08:70:fe:47:b0:5c:af:bf:25:f8:d1: 4d:ea:6a:38:ec:78:be:7c:2c:95:53:60:36:17:d5:02:95:6d: 6e:10:21:08:17:ce:32:a0:f7:3a:aa:7b:d6:8f:24:de:62:79: 92:47:d5:80:1b:65:99:c0:8e:07:06:1d:d2:73:26:0f:ef:be: d9:dd:69:72:ef:1a:16:ab:76:4c:cd:e6:51:24:08:2e:89:fc: c4:32:2e:b1:5e:df:a1:e8:5a:b6:60:9d:08:66:87:d3:17:d3: b7:17:23:25:d1:ee:c8:30:1d:0a:68:00:4f:5d:51:36:07:09: bd:7f:37:b7:42:d5:13:58:45:65:98:67:44:3c:2a:8e:8a:fc: bd:94:27:3d:52:34:69:de:6c:45:f9:cb:89:a1:46:10:25:c1: 83:e2:4d:df:09:16:39:01:a6:8c:26:93:64:40:d6:0d:2a:d9: 13:5e:7f:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh73YToHEMmcojRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk NjcyYjk2NWItNjFjNy00ODZlLWIxN2YtMjMyNDgzYWQ4MTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNKD/eoi5/Li6A8DrRx2+qrkFvy3Q0oWk+jF iznbasO/WFxFC3pL7Ii9GAZFl5i4JIOx9lV/mvv4aB1E0gcKtCQ5sO9MBXQ7ywtc I26w9tJnSXM5z49HBEZ2B59BBHLxH37013ebHeqUeCManyX3H8WjyNylJxmvVkg5 W62ecOOiWMTJrkV6nXgoT/gqcIq2xRub3VLZT5rtJDwTcip8gnrsT7hiLuWUXn8Q wzn8aBQkkjr9RMXAonWSKTTxxtCgq2m0+FIwgNr+5BFRIJ5NwN+uSRcGEkv7PfBy p2UpEhvpoDUymQMjzHc/P1xHdeidTYTEtGdL+eGsTz3AuY62tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWtbOFhN4i89xuhjV8HKaU0qqfWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvZjY4ZjZlMDEtNTQyMi0z OTM2LWFiODItNDU4MTc5ZWQ1ZGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPmBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC20jVHLAdWFcq3dDSdwZ/gSnqo26954OHeDPCXH2SKn23u6Cj8rGslH LbOWwmksttShUrhTbycSrg5rdJ037ExRQbubYA99Ck/HveUsZNMIcP5HsFyvvyX4 0U3qajjseL58LJVTYDYX1QKVbW4QIQgXzjKg9zqqe9aPJN5ieZJH1YAbZZnAjgcG HdJzJg/vvtndaXLvGhardkzN5lEkCC6J/MQyLrFe36HoWrZgnQhmh9MX07cXIyXR 7sgwHQpoAE9dUTYHCb1/N7dC1RNYRWWYZ0Q8Ko6K/L2UJz1SNGnebEX5y4mhRhAl wYPiTd8JFjkBpowmk2RA1g0q2RNef/Y= -----END CERTIFICATE-----Generated at Mon Apr 28 03:13:25 2025 by rpki-client