$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dcfab806-7448-3e2f-bb1a-7e1efbfcc23d.roa File: dcfab806-7448-3e2f-bb1a-7e1efbfcc23d.roa (raw, json) Hash identifier: BHRTj31PAwBOxh1a9yKbFEOf+vUMFJm8/Jj8i8o9YnE= Subject key identifier: 7E:C8:D3:EA:18:69:61:9E:59:E4:40:13:5C:21:28:54:7F:3C:A6:92 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584981D45FD4F61BB6FFF3D82680 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dcfab806-7448-3e2f-bb1a-7e1efbfcc23d.roa Signing time: Sun 13 Apr 2025 01:00:44 +0000 ROA not before: Sun 13 Apr 2025 01:00:44 +0000 ROA not after: Sat 12 Jul 2025 01:00:44 +0000 asID: 398478 IP address blocks: 104.233.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:81:d4:5f:d4:f6:1b:b6:ff:f3:d8:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Apr 13 01:00:44 2025 GMT Not After : Jul 12 01:00:44 2025 GMT Subject: CN=9c2b67e5-3750-4fcb-aa2e-449943525728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:67:4b:c8:94:5a:97:ea:07:7e:1b:11:94:55: d7:fd:9c:47:a4:bc:42:7a:bb:0d:04:de:46:ef:34: 00:fa:3a:b8:f1:77:66:2b:2f:5f:28:23:4e:39:58: 46:9b:85:3c:ac:66:6a:19:9d:d6:bd:92:47:f8:89: 8b:2a:b2:db:5c:81:38:c8:80:1b:b8:d4:8f:1f:ee: ab:89:3d:0c:11:bb:af:e6:c1:47:cd:db:12:bb:eb: 31:6c:1b:78:2e:85:cd:7a:be:47:21:bc:cd:f0:1b: 49:76:29:9c:0f:eb:ca:61:6b:c5:d5:90:90:90:bb: 68:80:92:ef:ec:86:4c:d1:33:9a:a4:d7:d1:a1:43: f2:f2:cf:25:ef:71:ff:0b:af:e5:8f:6b:90:d3:2d: 93:fa:cc:0b:83:39:fa:58:b6:af:5f:1b:0b:7d:eb: 3f:49:f2:df:fe:4a:cc:28:a4:d2:64:fb:d2:10:72: 3f:b9:02:98:fc:70:e7:08:de:11:58:2a:13:e6:a0: fb:9e:24:87:2c:bd:20:c8:df:03:ff:a0:e9:d4:0b: 8c:55:c6:26:2b:e7:e1:f0:9b:50:6f:db:b6:fa:ac: 63:b7:77:c5:30:0b:cd:4b:1e:c7:61:29:95:ef:6e: 2d:6b:e4:32:b9:81:9a:17:d2:7e:bf:e4:38:f6:13: ab:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C8:D3:EA:18:69:61:9E:59:E4:40:13:5C:21:28:54:7F:3C:A6:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dcfab806-7448-3e2f-bb1a-7e1efbfcc23d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 104.233.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:f1:eb:ff:0e:50:41:31:f0:0e:f2:1d:11:40:36:78:28:cd: 47:a8:8d:15:86:ef:d7:18:e4:0f:e2:c7:53:dc:89:f0:db:f6: 58:f7:cb:00:7d:a9:1e:cc:f5:1e:57:1d:70:24:20:1a:c4:7c: 61:80:4b:1f:43:26:05:02:59:9e:da:f7:a6:50:38:ea:43:cb: a0:f2:1b:d3:d0:e9:58:06:cc:42:05:0b:a5:7c:cc:aa:cc:46: 87:c8:66:0b:ce:b9:b6:27:b6:9a:06:cd:cb:91:22:d8:12:15: 29:58:99:71:68:81:f2:c7:c0:6f:13:63:22:14:44:39:f7:99: 69:24:3a:16:14:9d:11:08:71:8b:26:cf:ff:ab:1b:19:e3:91: 47:f2:49:1c:74:32:0e:76:50:5f:54:9f:a1:5c:98:20:06:d5: f8:88:82:5b:fb:6f:c3:65:82:e3:ba:d0:f0:68:35:34:4d:64: 14:7d:04:ca:5c:fe:1f:fe:99:cb:08:90:23:8c:fc:1a:ee:69: 39:98:12:bd:5b:27:ce:0e:e2:19:66:21:e8:69:fc:89:39:3d: cb:15:34:8f:c5:3a:d8:02:45:9b:3b:df:7c:ef:b8:e6:3b:7f: 12:11:54:3b:18:b9:9c:c3:02:ac:62:e4:d0:21:02:8d:c7:eb: 90:2b:b0:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmB1F/U9hu2//PYJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk OWMyYjY3ZTUtMzc1MC00ZmNiLWFhMmUtNDQ5OTQzNTI1NzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymdLyJRal+oHfhsRlFXX/ZxHpLxCersNBN5G 7zQA+jq48XdmKy9fKCNOOVhGm4U8rGZqGZ3WvZJH+ImLKrLbXIE4yIAbuNSPH+6r iT0MEbuv5sFHzdsSu+sxbBt4LoXNer5HIbzN8BtJdimcD+vKYWvF1ZCQkLtogJLv 7IZM0TOapNfRoUPy8s8l73H/C6/lj2uQ0y2T+swLgzn6WLavXxsLfes/SfLf/krM KKTSZPvSEHI/uQKY/HDnCN4RWCoT5qD7niSHLL0gyN8D/6Dp1AuMVcYmK+fh8JtQ b9u2+qxjt3fFMAvNSx7HYSmV724ta+QyuYGaF9J+v+Q49hOr0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7I0+oYaWGeWeRAE1whKFR/PKaSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvZGNmYWI4MDYtNzQ0OC0z ZTJmLWJiMWEtN2UxZWZiZmNjMjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaOn8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzx6/8OUEEx8A7yHRFANngozUeojRWG79cY5A/ix1PcifDb9lj3ywB9 qR7M9R5XHXAkIBrEfGGASx9DJgUCWZ7a96ZQOOpDy6DyG9PQ6VgGzEIFC6V8zKrM RofIZgvOubYntpoGzcuRItgSFSlYmXFogfLHwG8TYyIURDn3mWkkOhYUnREIcYsm z/+rGxnjkUfySRx0Mg52UF9Un6FcmCAG1fiIglv7b8NlguO60PBoNTRNZBR9BMpc /h/+mcsIkCOM/BruaTmYEr1bJ84O4hlmIehp/Ik5PcsVNI/FOtgCRZs733zvuOY7 fxIRVDsYuZzDAqxi5NAhAo3H65ArsKU= -----END CERTIFICATE-----Generated at Sun Apr 27 12:55:46 2025 by rpki-client