$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/0b95849b-a821-3b29-86e2-82b650dfd913.roa File: 0b95849b-a821-3b29-86e2-82b650dfd913.roa (raw, json) Hash identifier: 5L5C43KaUVsuYtYBQqu7wu+nAvrrBCk2r8gRBhFl4v4= Subject key identifier: 2D:D9:AF:C9:31:3D:1D:FA:EC:F0:8D:CB:83:94:C1:2C:1D:5E:64:42 Certificate issuer: /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72 Certificate serial: 010D0C9F432858499F2498A7ADAAD0A3610BC600 Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/0b95849b-a821-3b29-86e2-82b650dfd913.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 59920 IP address blocks: 104.167.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:98:a7:ad:aa:d0:a3:61:0b:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=0bff6366-48f7-45b0-bf60-2d2f02767a65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:39:dc:49:40:eb:67:03:7f:60:cf:c1:ad:a6: 9a:1d:27:c1:e6:bc:ae:32:b5:56:79:54:d6:4b:4f: e5:f3:8f:df:3e:48:42:58:80:a5:37:ec:ed:2b:8a: 74:66:6b:9f:26:e3:a1:d6:a6:3d:9c:46:bf:de:1b: 76:0b:92:41:c2:4e:9f:a7:0d:43:d9:59:b8:49:1a: 8a:7f:3e:f9:e4:b9:44:25:4b:88:23:8d:4f:ef:fa: 15:8f:a7:45:21:93:4b:97:aa:41:79:de:19:98:4c: 51:33:5b:aa:94:62:53:99:bf:6e:3d:e7:99:45:c5: 2d:0c:c5:79:4b:10:4b:b9:ba:05:e7:a5:33:84:0f: c5:ea:40:ca:00:33:75:f2:3b:58:e0:00:62:45:74: 85:fd:15:e3:a7:1b:22:41:6f:b8:e5:9f:b2:50:e6: e5:33:ae:36:59:8f:13:fb:82:35:ce:6c:c3:16:d7: 86:c5:69:37:94:55:91:0d:96:0b:c9:fe:3c:08:b1: 65:29:65:3c:50:43:59:71:68:e3:9a:80:9c:e7:4c: 20:10:3f:63:ae:6d:1a:fe:12:96:43:21:b0:3d:d1: 35:7c:eb:b8:76:10:f5:8e:ff:20:af:8a:99:7e:ab: 3f:44:ab:2b:a0:5a:11:2e:02:f7:66:1c:be:b9:87: 09:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D9:AF:C9:31:3D:1D:FA:EC:F0:8D:CB:83:94:C1:2C:1D:5E:64:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/0b95849b-a821-3b29-86e2-82b650dfd913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl X509v3 Authority Key Identifier: keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer sbgp-ipAddrBlock: critical IPv4: 104.167.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:47:9a:d5:3d:9e:01:9e:04:ed:a6:bf:1d:89:76:97:55:35: 70:51:f5:5c:98:f4:b7:ca:32:13:0e:c9:5a:30:9d:ff:60:e6: d2:c5:80:9c:24:b0:c3:dc:69:aa:96:5c:8b:45:15:f3:a0:f8: 5e:38:2c:79:58:16:87:0f:62:63:27:7b:47:26:e7:77:36:28: c6:29:5e:f3:e4:39:69:a3:76:9e:f3:7f:c2:44:10:41:d6:c6: b4:79:e5:fb:b2:4c:4e:62:3e:ff:d8:71:ff:30:ea:aa:6a:f0: 70:2a:ad:1a:8b:0c:63:c1:d1:4d:60:ce:8c:84:99:c6:a9:83: db:af:33:7d:c4:d6:9f:5e:03:f5:90:e6:5a:12:27:16:1f:19: 61:c5:0f:4f:5d:f0:5f:72:f4:fd:da:bc:18:58:5c:d0:73:f3: 39:49:f4:a6:51:b8:58:2b:95:b3:a5:c2:96:28:66:8f:63:df: e5:87:45:ec:bf:2d:50:d5:a3:5b:d0:7c:21:2b:9e:6a:b8:f6: d2:cf:76:3e:46:91:f7:bb:ef:6a:25:4b:bf:24:de:86:87:89: 2a:b4:fa:28:5b:c2:9e:6f:70:33:be:ab:4a:b0:e8:c3:7f:71: f3:4d:a1:bb:f6:e3:a2:57:85:fd:80:c8:7a:ab:16:d5:c0:3b: 1b:97:e8:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJJinrarQo2ELxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmYzZDI1YTAtZjdlNS00MjFkLTg4NDItZmM5NjdiZjA4 ZjcyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk MGJmZjYzNjYtNDhmNy00NWIwLWJmNjAtMmQyZjAyNzY3YTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjncSUDrZwN/YM/BraaaHSfB5ryuMrVWeVTW S0/l84/fPkhCWIClN+ztK4p0ZmufJuOh1qY9nEa/3ht2C5JBwk6fpw1D2Vm4SRqK fz755LlEJUuII41P7/oVj6dFIZNLl6pBed4ZmExRM1uqlGJTmb9uPeeZRcUtDMV5 SxBLuboF56UzhA/F6kDKADN18jtY4ABiRXSF/RXjpxsiQW+45Z+yUOblM642WY8T +4I1zmzDFteGxWk3lFWRDZYLyf48CLFlKWU8UENZcWjjmoCc50wgED9jrm0a/hKW QyGwPdE1fOu4dhD1jv8gr4qZfqs/RKsroFoRLgL3Zhy+uYcJmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3Zr8kxPR367PCNy4OUwSwdXmRCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNk MjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2N2JmMDhmNzIvMGI5NTg0OWItYTgyMS0z YjI5LTg2ZTItODJiNjUwZGZkOTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNmYzZDI1YTAtZjdlNS00MjFkLTg4 NDItZmM5NjdiZjA4ZjcyLzZmM2QyNWEwLWY3ZTUtNDIxZC04ODQyLWZjOTY3YmYw OGY3Mi5jcmwwHwYDVR0jBBgwFoAUV9Ck+WN+PQBHgSzdpn7Mfk696aowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNkMjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2 N2JmMDhmNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKfWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJHmtU9ngGeBO2mvx2JdpdVNXBR9VyY9LfKMhMOyVownf9g5tLFgJwk sMPcaaqWXItFFfOg+F44LHlYFocPYmMne0cm53c2KMYpXvPkOWmjdp7zf8JEEEHW xrR55fuyTE5iPv/Ycf8w6qpq8HAqrRqLDGPB0U1gzoyEmcapg9uvM33E1p9eA/WQ 5loSJxYfGWHFD09d8F9y9P3avBhYXNBz8zlJ9KZRuFgrlbOlwpYoZo9j3+WHRey/ LVDVo1vQfCErnmq49tLPdj5Gkfe772olS78k3oaHiSq0+ihbwp5vcDO+q0qw6MN/ cfNNobv246JXhf2AyHqrFtXAOxuX6BM= -----END CERTIFICATE-----Generated at Sun Apr 27 23:55:23 2025 by rpki-client