$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/87e18ed9-a210-3d88-b807-6e991937baa5.roa File: 87e18ed9-a210-3d88-b807-6e991937baa5.roa (raw, json) Hash identifier: L9a+79yLrIFAh5IBQMaQwppmXrDkNv9ZlY7uRzYKPOo= Subject key identifier: 43:30:E7:C8:19:61:0C:1B:B8:7C:BF:62:5E:EF:21:C4:D7:2A:84:5F Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584981D45FA7F9DFDB76228E8800 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/87e18ed9-a210-3d88-b807-6e991937baa5.roa Signing time: Sun 13 Apr 2025 01:00:44 +0000 ROA not before: Sun 13 Apr 2025 01:00:44 +0000 ROA not after: Sat 12 Jul 2025 01:00:44 +0000 asID: 398993 IP address blocks: 104.233.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:81:d4:5f:a7:f9:df:db:76:22:8e:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Apr 13 01:00:44 2025 GMT Not After : Jul 12 01:00:44 2025 GMT Subject: CN=abd7d284-c2ae-49d9-8082-65e20d907eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c5:1b:39:4c:e1:a6:30:15:d2:2f:eb:55:ad: af:49:24:3f:d2:43:d5:6c:c9:3d:c8:17:9c:a1:aa: 98:e8:b7:13:2c:3c:40:d2:6a:22:77:b2:3c:71:8d: 1c:a6:12:9f:7e:65:22:94:80:61:54:3a:ef:d7:28: 07:fd:d4:b3:72:a9:21:5e:ca:4c:69:1b:87:7a:b2: 0e:95:93:9e:cd:5c:06:4f:1a:6e:99:66:3f:06:0d: 47:7e:1a:d5:3d:0c:11:c2:a4:12:75:a7:96:b9:d8: 1e:c0:21:fe:be:6a:fe:ca:c5:76:90:54:2b:1c:af: 59:43:69:21:1c:40:ae:7f:f7:63:3f:cb:45:5f:50: 44:ad:65:72:4c:b6:2d:5c:42:44:83:45:c6:fc:79: f5:54:0a:46:24:5d:53:db:61:99:44:8d:ab:e6:5c: b1:c6:6f:19:12:df:53:f5:06:f4:28:27:2c:8f:a5: d0:71:e1:12:1a:37:95:80:b0:d5:b0:0d:ae:6c:f3: 94:44:a8:c8:d9:00:22:1b:f7:da:7a:25:0f:ed:c5: de:dd:32:54:08:c2:16:38:5d:d3:fb:e0:0b:a5:ee: 89:f6:e0:ea:f9:be:e8:63:0b:e8:0c:37:b6:8a:9e: 9e:95:b0:af:52:e1:62:e6:ed:d6:4e:99:4a:e1:98: bb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:30:E7:C8:19:61:0C:1B:B8:7C:BF:62:5E:EF:21:C4:D7:2A:84:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/87e18ed9-a210-3d88-b807-6e991937baa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 104.233.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:ee:29:77:71:16:d1:cd:6a:33:c4:ae:fd:89:f9:bc:5d:f7: 0e:bd:7e:4d:da:39:86:c6:04:02:13:f3:2c:df:eb:f7:06:dc: 16:ba:55:a6:0d:a4:da:f5:14:47:65:19:9c:91:45:23:8e:de: 6e:89:33:bc:34:3a:56:e3:eb:9c:4d:bf:f2:db:e4:ae:32:bf: 0d:35:78:65:d1:8c:5c:aa:59:29:d8:a8:2a:8b:b0:3e:00:bd: 93:2b:14:a1:da:6b:6d:99:ab:09:c4:6f:e1:d2:a0:38:8e:59: a9:41:2f:57:c2:ff:1f:d0:80:d6:69:14:ca:fd:57:29:62:1d: 1e:6e:a0:fb:16:92:ce:19:84:12:cb:08:6b:99:48:15:d5:1a: 18:33:f1:d0:9e:90:8a:a1:88:bb:65:69:32:13:4e:04:03:40: 79:66:1e:12:9e:fc:0d:d0:d6:a2:1b:0b:18:06:b8:0f:ae:da: af:d1:d5:49:ce:20:af:06:66:ed:6c:6e:48:41:db:0f:04:62: ab:ed:f7:4d:0f:77:d0:99:72:58:5a:d3:44:63:b9:bd:83:9d: 19:49:bb:e5:c1:ab:3e:a6:de:3c:4f:7c:88:6c:12:35:c0:fb: 71:4c:2c:9a:c1:87:4a:13:d5:76:ff:64:4a:fe:72:5f:7c:af: a2:39:60:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmB1F+n+d/bdiKOiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk YWJkN2QyODQtYzJhZS00OWQ5LTgwODItNjVlMjBkOTA3ZWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8UbOUzhpjAV0i/rVa2vSSQ/0kPVbMk9yBec oaqY6LcTLDxA0moid7I8cY0cphKffmUilIBhVDrv1ygH/dSzcqkhXspMaRuHerIO lZOezVwGTxpumWY/Bg1HfhrVPQwRwqQSdaeWudgewCH+vmr+ysV2kFQrHK9ZQ2kh HECuf/djP8tFX1BErWVyTLYtXEJEg0XG/Hn1VApGJF1T22GZRI2r5lyxxm8ZEt9T 9Qb0KCcsj6XQceESGjeVgLDVsA2ubPOURKjI2QAiG/faeiUP7cXe3TJUCMIWOF3T ++ALpe6J9uDq+b7oYwvoDDe2ip6elbCvUuFi5u3WTplK4Zi7AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMw58gZYQwbuHy/Yl7vIcTXKoRfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvODdlMThlZDktYTIxMC0z ZDg4LWI4MDctNmU5OTE5MzdiYWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaOmsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/uKXdxFtHNajPErv2J+bxd9w69fk3aOYbGBAIT8yzf6/cG3Ba6VaYN pNr1FEdlGZyRRSOO3m6JM7w0Olbj65xNv/Lb5K4yvw01eGXRjFyqWSnYqCqLsD4A vZMrFKHaa22ZqwnEb+HSoDiOWalBL1fC/x/QgNZpFMr9VyliHR5uoPsWks4ZhBLL CGuZSBXVGhgz8dCekIqhiLtlaTITTgQDQHlmHhKe/A3Q1qIbCxgGuA+u2q/R1UnO IK8GZu1sbkhB2w8EYqvt900Pd9CZclha00Rjub2DnRlJu+XBqz6m3jxPfIhsEjXA +3FMLJrBh0oT1Xb/ZEr+cl98r6I5YNM= -----END CERTIFICATE-----Generated at Mon Apr 28 08:35:02 2025 by rpki-client