$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/fed345fd-8d03-3def-913f-fe4dd7109671.roa File: fed345fd-8d03-3def-913f-fe4dd7109671.roa (raw, json) Hash identifier: Qgv4PYp1hpKPWT+ycyHbUWYDOeUJ6l8T9jD6x6dEh64= Subject key identifier: FB:6C:76:78:5B:D0:FB:85:0D:5C:8C:2A:19:DF:46:BB:02:C0:7E:B0 Certificate issuer: /CN=509fd691-d18e-4244-b269-cdbfdf5bdf42 Certificate serial: 010D0C9F432858499829CC56B48F7FEE8CA9E040 Authority key identifier: 2A:0B:C0:20:8F:22:73:EC:9A:3E:95:73:71:12:75:7C:D5:03:1B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/fed345fd-8d03-3def-913f-fe4dd7109671.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 62533 IP address blocks: 104.219.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:cc:56:b4:8f:7f:ee:8c:a9:e0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509fd691-d18e-4244-b269-cdbfdf5bdf42 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=b2acdb7f-a9c9-48c8-b706-875f394f8e35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a6:8c:b6:c7:da:91:d3:85:03:f4:95:bc:08: b2:96:37:61:47:6a:24:0b:96:f3:26:e8:cc:a1:88: ff:43:84:8b:80:9d:7c:15:e6:fc:ce:69:b7:d1:3a: 40:91:5a:ef:15:ac:26:bc:4c:8a:89:e7:19:e4:bf: fa:6c:f6:75:0b:a1:5e:fb:7a:60:79:8b:a3:25:32: 0a:fc:ad:65:50:7a:1e:41:2e:31:aa:9a:3f:22:ce: d6:0a:3f:fa:09:b9:9a:2d:f8:8c:1a:f1:83:cb:41: 44:95:c5:da:83:89:ac:e2:97:32:22:ce:41:f3:36: e8:2b:59:cf:ea:fb:e7:ba:13:14:c3:44:45:20:f3: 3f:10:2e:d3:e9:31:e9:0a:fe:30:2f:5c:97:d1:dd: 56:50:dc:04:0f:fa:8b:b5:67:77:5a:ee:fe:3c:fd: e1:ab:2b:00:32:19:12:b9:04:59:4b:71:27:d4:c1: d0:0a:00:a0:01:74:46:1e:d0:82:b6:28:9c:39:fc: cd:a7:97:fd:02:e1:ee:ef:00:d0:24:81:6a:b3:b9: eb:b2:86:60:0f:85:3f:63:39:34:70:85:1d:95:42: a7:0c:c5:72:ec:61:9a:5a:43:0e:9a:1d:24:c0:de: c2:7a:81:f3:dc:22:66:52:2d:49:ad:a4:c3:cd:02: 78:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:6C:76:78:5B:D0:FB:85:0D:5C:8C:2A:19:DF:46:BB:02:C0:7E:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/fed345fd-8d03-3def-913f-fe4dd7109671.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.crl X509v3 Authority Key Identifier: keyid:2A:0B:C0:20:8F:22:73:EC:9A:3E:95:73:71:12:75:7C:D5:03:1B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer sbgp-ipAddrBlock: critical IPv4: 104.219.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:38:1d:30:fa:2d:63:20:6d:84:95:76:96:6c:d1:b7:9a:de: 8d:e7:d6:1b:9d:e4:d5:18:7d:2b:85:55:c3:d4:d4:04:25:48: 71:31:22:27:74:55:55:a9:35:d7:de:32:a8:12:5a:78:5f:f9: 38:1d:00:8a:6b:a5:04:7b:f6:eb:cb:13:20:03:51:1f:f2:59: 3b:26:14:df:d6:72:df:db:bb:be:11:69:0c:74:4c:ea:df:f9: 36:ec:da:2f:e2:8c:4f:30:47:79:d9:2f:6f:cb:7b:18:47:66: b5:99:d2:bf:b9:d6:75:5c:e7:ef:b0:96:d8:29:52:60:79:87: 18:d6:1c:8f:ce:a5:91:bf:45:01:24:d0:be:84:1f:fa:88:c5: ae:f8:8c:73:8b:78:ee:93:f2:1c:49:b6:8a:7a:5e:be:15:19: ec:22:82:9c:42:40:bb:08:cb:33:c0:f3:e3:98:ff:ed:90:06: 6f:d9:41:63:b5:94:89:12:ec:b3:6b:2e:1b:e2:11:f4:99:f7: 92:e8:94:26:cf:c9:90:06:c0:fd:01:63:bf:55:96:4a:68:b1: ee:b8:5e:a5:27:8b:d1:c2:79:7a:b7:b8:78:aa:5e:86:eb:b4: b8:44:c9:81:f1:aa:b6:fd:7b:2a:2a:51:f9:cc:55:41:1d:be: dc:4f:bf:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKcxWtI9/7oyp4EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5ZmQ2OTEtZDE4ZS00MjQ0LWIyNjktY2RiZmRmNWJk ZjQyMB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk YjJhY2RiN2YtYTljOS00OGM4LWI3MDYtODc1ZjM5NGY4ZTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaaMtsfakdOFA/SVvAiyljdhR2okC5bzJujM oYj/Q4SLgJ18Feb8zmm30TpAkVrvFawmvEyKiecZ5L/6bPZ1C6Fe+3pgeYujJTIK /K1lUHoeQS4xqpo/Is7WCj/6CbmaLfiMGvGDy0FElcXag4ms4pcyIs5B8zboK1nP 6vvnuhMUw0RFIPM/EC7T6THpCv4wL1yX0d1WUNwED/qLtWd3Wu7+PP3hqysAMhkS uQRZS3En1MHQCgCgAXRGHtCCtiicOfzNp5f9AuHu7wDQJIFqs7nrsoZgD4U/Yzk0 cIUdlUKnDMVy7GGaWkMOmh0kwN7CeoHz3CJmUi1JraTDzQJ4gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPtsdnhb0PuFDVyMKhnfRrsCwH6wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81MDlm ZDY5MS1kMThlLTQyNDQtYjI2OS1jZGJmZGY1YmRmNDIvZmVkMzQ1ZmQtOGQwMy0z ZGVmLTkxM2YtZmU0ZGQ3MTA5NjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTA5ZmQ2OTEtZDE4ZS00MjQ0LWIy NjktY2RiZmRmNWJkZjQyLzUwOWZkNjkxLWQxOGUtNDI0NC1iMjY5LWNkYmZkZjVi ZGY0Mi5jcmwwHwYDVR0jBBgwFoAUKgvAII8ic+yaPpVzcRJ1fNUDG8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81MDlmZDY5MS1kMThlLTQyNDQtYjI2OS1jZGJm ZGY1YmRmNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaNtFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA44HTD6LWMgbYSVdpZs0bea3o3n1hud5NUYfSuFVcPU1AQlSHExIid0 VVWpNdfeMqgSWnhf+TgdAIprpQR79uvLEyADUR/yWTsmFN/Wct/bu74RaQx0TOrf +Tbs2i/ijE8wR3nZL2/LexhHZrWZ0r+51nVc5++wltgpUmB5hxjWHI/OpZG/RQEk 0L6EH/qIxa74jHOLeO6T8hxJtop6Xr4VGewigpxCQLsIyzPA8+OY/+2QBm/ZQWO1 lIkS7LNrLhviEfSZ95LolCbPyZAGwP0BY79Vlkpose64XqUni9HCeXq3uHiqXobr tLhEyYHxqrb9eyoqUfnMVUEdvtxPv7k= -----END CERTIFICATE-----Generated at Wed Apr 30 23:05:02 2025 by rpki-client