$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/df64e67f-d3d6-364f-a088-ad6e4759cafb.roa File: df64e67f-d3d6-364f-a088-ad6e4759cafb.roa (raw, json) Hash identifier: GI11tlSE4vcyt+oSwrGpz0nysLVA4JtNlDgLJSv7dw8= Subject key identifier: B6:F0:29:DC:92:60:84:45:A3:28:7E:7F:6D:81:D1:19:B5:7D:02:63 Certificate issuer: /CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc Certificate serial: 010D0C9F432858491AA6B0D8984B6A57C79ED248 Authority key identifier: 60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/df64e67f-d3d6-364f-a088-ad6e4759cafb.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 53454 IP address blocks: 104.225.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:b0:d8:98:4b:6a:57:c7:9e:d2:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=bde22dce-84de-4c0f-95fa-b22be2a38a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ac:55:a5:58:d2:62:d2:a5:71:80:21:65:a3: 31:87:f1:53:b5:7a:34:97:69:3c:01:9f:8f:a0:4d: bb:3b:1c:44:55:4d:bd:43:b0:38:50:c4:45:e4:41: 80:da:57:72:5c:e9:80:dc:25:68:74:04:7b:6c:ac: 2e:55:53:d2:f4:33:a0:f6:22:34:15:8a:f5:a3:27: 99:d0:b2:db:70:87:3a:66:14:c5:7b:4c:e8:07:00: d6:a1:0d:62:ec:03:d9:aa:82:c1:2e:29:68:33:8e: 3e:3b:bb:37:f3:da:cb:3e:67:ef:f6:31:a0:f3:b0: 12:c5:65:c4:c7:5a:fb:9f:37:1e:61:cd:46:ef:52: 32:92:ac:97:9b:a7:78:5d:9a:c0:67:61:7a:27:8f: 0b:1c:56:24:38:3b:49:fc:24:8e:a1:43:8f:34:44: d0:94:67:8c:8e:76:7b:df:57:c5:6b:38:4d:4c:8a: 85:ec:9a:22:0b:bf:6a:bb:f9:72:8a:ab:c0:17:d6: 3f:b2:8f:aa:a8:f3:9e:7e:a5:42:82:6f:66:74:93: 59:f3:2b:4a:56:da:ae:3a:f3:6a:9f:d9:ca:28:7e: 64:0f:b6:bb:41:1f:31:58:58:b9:e7:b1:b6:58:ad: fd:2c:dd:bd:ae:ac:f4:60:92:1c:c6:f2:c2:ab:d8: b8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F0:29:DC:92:60:84:45:A3:28:7E:7F:6D:81:D1:19:B5:7D:02:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/df64e67f-d3d6-364f-a088-ad6e4759cafb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl X509v3 Authority Key Identifier: keyid:60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer sbgp-ipAddrBlock: critical IPv4: 104.225.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:b8:fd:37:77:06:03:17:a2:f6:94:c3:1e:8f:3a:32:d9:e8: 0b:1a:51:b9:85:8b:fe:af:73:8d:38:b7:12:34:87:5f:ae:18: 9e:21:7d:e7:1f:ae:61:09:ff:51:7b:de:c8:74:39:86:46:73: 31:12:c7:83:d0:bf:b0:5f:65:ea:a8:82:25:76:d3:89:1d:14: fd:c9:1d:e6:75:73:4a:5d:a4:cc:9c:0d:5f:3e:e3:27:ce:cf: 3a:3c:3a:ba:07:55:ae:e0:ee:79:b7:28:c4:58:8e:60:af:3e: 1f:69:c1:b2:ee:e2:64:16:a0:7c:a1:26:92:fc:f2:b0:83:a6: a3:49:9f:af:a0:3c:8a:a3:81:bc:64:72:c7:a2:e1:ee:0f:38: 3c:f1:07:3b:62:6b:ba:6a:25:7e:39:3c:61:44:ad:81:9f:53: 94:18:11:66:d0:a1:01:ab:a4:32:2f:83:8b:ea:0b:5a:ad:76: 07:63:15:91:84:80:18:ff:82:31:fa:a4:2b:95:70:3c:41:32: 64:d6:e2:07:ce:63:d9:e9:07:50:3b:6b:fb:ed:dd:42:e6:36: 87:56:48:99:da:60:b9:92:15:b2:0f:dd:a9:59:0a:70:35:48: cf:62:f2:12:82:7e:aa:d4:41:96:b1:dd:a8:c4:46:02:75:6c: 33:30:f5:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaprDYmEtqV8ee0kgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZmMGMwNDItY2YzNi00ZDZmLTk1NGEtYmVlNjFhNWIz ZGNjMB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk YmRlMjJkY2UtODRkZS00YzBmLTk1ZmEtYjIyYmUyYTM4YTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6xVpVjSYtKlcYAhZaMxh/FTtXo0l2k8AZ+P oE27OxxEVU29Q7A4UMRF5EGA2ldyXOmA3CVodAR7bKwuVVPS9DOg9iI0FYr1oyeZ 0LLbcIc6ZhTFe0zoBwDWoQ1i7APZqoLBLiloM44+O7s389rLPmfv9jGg87ASxWXE x1r7nzceYc1G71IykqyXm6d4XZrAZ2F6J48LHFYkODtJ/CSOoUOPNETQlGeMjnZ7 31fFazhNTIqF7JoiC79qu/lyiqvAF9Y/so+qqPOefqVCgm9mdJNZ8ytKVtquOvNq n9nKKH5kD7a7QR8xWFi557G2WK39LN29rqz0YJIcxvLCq9i4fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbwKdySYIRFoyh+f22B0Rm1fQJjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hZmYw YzA0Mi1jZjM2LTRkNmYtOTU0YS1iZWU2MWE1YjNkY2MvZGY2NGU2N2YtZDNkNi0z NjRmLWEwODgtYWQ2ZTQ3NTljYWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYWZmMGMwNDItY2YzNi00ZDZmLTk1 NGEtYmVlNjFhNWIzZGNjL2FmZjBjMDQyLWNmMzYtNGQ2Zi05NTRhLWJlZTYxYTVi M2RjYy5jcmwwHwYDVR0jBBgwFoAUYMltwESmb70vbssD6msX/LpsLokwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hZmYwYzA0Mi1jZjM2LTRkNmYtOTU0YS1iZWU2 MWE1YjNkY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaOH+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFe4/Td3BgMXovaUwx6POjLZ6AsaUbmFi/6vc404txI0h1+uGJ4hfecf rmEJ/1F73sh0OYZGczESx4PQv7BfZeqogiV204kdFP3JHeZ1c0pdpMycDV8+4yfO zzo8OroHVa7g7nm3KMRYjmCvPh9pwbLu4mQWoHyhJpL88rCDpqNJn6+gPIqjgbxk csei4e4PODzxBztia7pqJX45PGFErYGfU5QYEWbQoQGrpDIvg4vqC1qtdgdjFZGE gBj/gjH6pCuVcDxBMmTW4gfOY9npB1A7a/vt3ULmNodWSJnaYLmSFbIP3alZCnA1 SM9i8hKCfqrUQZax3ajERgJ1bDMw9Uw= -----END CERTIFICATE-----Generated at Mon Apr 28 09:22:53 2025 by rpki-client