$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/c4c053a5-5bb3-3370-8a92-c6235b9ede13.roa File: c4c053a5-5bb3-3370-8a92-c6235b9ede13.roa (raw, json) Hash identifier: H5aP8ThlB9Mba5FPaywB7zVI2/ZxM/KRXnR26foojfk= Subject key identifier: 36:94:84:05:14:B3:8C:42:DB:78:F5:D9:25:83:39:A0:5D:DA:A5:D7 Certificate issuer: /CN=a92c0e3e-e786-40f1-a211-bf8a9b31315b Certificate serial: 010D0C9F432858499F2498C12D1BBBDDBC644900 Authority key identifier: 2C:1F:35:C9:C3:29:F1:59:1E:9C:2E:E5:82:25:B0:79:F5:67:BA:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/c4c053a5-5bb3-3370-8a92-c6235b9ede13.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 29848 IP address blocks: 104.201.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/a92c0e3e-e786-40f1-a211-bf8a9b31315b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/a92c0e3e-e786-40f1-a211-bf8a9b31315b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:98:c1:2d:1b:bb:dd:bc:64:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a92c0e3e-e786-40f1-a211-bf8a9b31315b Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=bdd4c638-24a9-4344-8644-3dc5eca54193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f3:48:99:d9:24:14:f0:2e:eb:18:fa:be:d8: 2f:71:50:c1:9e:63:96:6e:17:2c:b5:1a:6b:49:57: 4c:52:91:69:68:9b:ac:96:ad:26:e9:50:74:23:53: 84:68:17:37:69:c4:a4:b2:8b:8c:48:86:f8:f2:98: 19:9c:fa:06:07:4c:a9:c1:7e:97:bf:a4:b1:a1:1b: b7:ac:4f:76:3c:99:8a:fa:7f:2e:ab:4b:86:c5:d0: ee:80:7b:2e:ce:d9:2d:38:2f:e6:df:88:31:9c:58: d5:b7:1b:97:0e:1f:31:44:d3:17:4a:a8:ba:03:b0: 47:8d:f7:c7:af:1d:bf:1c:c2:23:6c:e7:b9:70:d9: 57:57:61:bd:30:1a:e1:20:dd:13:ec:8c:80:4c:db: 67:5b:ff:b6:8c:32:ae:43:9d:b3:1a:78:90:0c:7d: fc:fa:6e:8b:33:c7:a3:ea:88:3b:2f:ec:47:cc:30: 66:89:47:c7:56:9b:0a:83:fb:c7:54:92:9a:89:f5: 85:e5:5d:e2:8f:16:f9:1a:d7:9e:ae:41:cd:d0:42: a4:d4:d2:9b:8e:fe:19:46:9c:13:1e:d1:32:63:86: 4d:6d:bb:6b:1b:ce:80:1f:71:64:25:28:bc:9a:d3: 14:9b:7a:46:90:99:cd:c7:e2:f9:2a:8d:8a:76:1f: ac:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:94:84:05:14:B3:8C:42:DB:78:F5:D9:25:83:39:A0:5D:DA:A5:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/c4c053a5-5bb3-3370-8a92-c6235b9ede13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/a92c0e3e-e786-40f1-a211-bf8a9b31315b.crl X509v3 Authority Key Identifier: keyid:2C:1F:35:C9:C3:29:F1:59:1E:9C:2E:E5:82:25:B0:79:F5:67:BA:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b.cer sbgp-ipAddrBlock: critical IPv4: 104.201.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:45:c3:f2:04:d7:f8:49:d3:ba:45:32:84:91:7a:f4:15:18: a6:bf:08:5d:ac:5d:54:18:aa:11:56:d8:51:43:1d:b2:5d:d3: 5b:8a:9d:f5:2e:42:d2:1f:2e:b5:47:1f:cb:48:5f:1d:26:c1: eb:a4:dd:c9:eb:40:9b:cf:5c:ad:b8:e9:4e:15:77:5a:24:f4: 9d:bd:1c:3e:a8:f5:2a:4a:ef:6d:07:fb:d2:21:ff:95:58:d5: f3:7d:bc:0d:2a:93:6c:db:e1:fa:ee:c0:f7:5c:a0:02:23:23: 5a:19:10:ef:00:36:82:ad:6c:c6:22:ad:82:26:fb:b6:6e:f1: 3f:8e:fc:42:4d:1f:71:da:c2:d2:95:4c:af:9d:1d:b3:a5:58: a7:47:a6:eb:da:dd:87:bb:20:2d:ed:10:87:82:8e:73:59:62: 69:50:3b:23:7c:7d:c9:a8:22:b7:26:dd:06:c7:1f:ee:87:4f: 3c:27:dd:dc:45:89:c9:d9:63:f1:a0:e3:a4:37:02:00:c0:92: 45:bc:d2:e4:48:01:0a:6b:67:e1:c0:ad:28:12:62:d1:d6:6c: e4:1e:97:17:55:b8:8b:38:8e:46:d6:ff:11:a2:91:4a:83:cd: 90:0a:4e:0e:09:de:e9:0b:d8:54:99:a6:6b:79:ff:77:77:9e: d0:88:24:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJJjBLRu73bxkSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTkyYzBlM2UtZTc4Ni00MGYxLWEyMTEtYmY4YTliMzEz MTViMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk YmRkNGM2MzgtMjRhOS00MzQ0LTg2NDQtM2RjNWVjYTU0MTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivNImdkkFPAu6xj6vtgvcVDBnmOWbhcstRpr SVdMUpFpaJuslq0m6VB0I1OEaBc3acSksouMSIb48pgZnPoGB0ypwX6Xv6SxoRu3 rE92PJmK+n8uq0uGxdDugHsuztktOC/m34gxnFjVtxuXDh8xRNMXSqi6A7BHjffH rx2/HMIjbOe5cNlXV2G9MBrhIN0T7IyATNtnW/+2jDKuQ52zGniQDH38+m6LM8ej 6og7L+xHzDBmiUfHVpsKg/vHVJKaifWF5V3ijxb5GteerkHN0EKk1NKbjv4ZRpwT HtEyY4ZNbbtrG86AH3FkJSi8mtMUm3pGkJnNx+L5Ko2Kdh+sgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDaUhAUUs4xC23j12SWDOaBd2qXXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hOTJj MGUzZS1lNzg2LTQwZjEtYTIxMS1iZjhhOWIzMTMxNWIvYzRjMDUzYTUtNWJiMy0z MzcwLThhOTItYzYyMzViOWVkZTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTkyYzBlM2UtZTc4Ni00MGYxLWEy MTEtYmY4YTliMzEzMTViL2E5MmMwZTNlLWU3ODYtNDBmMS1hMjExLWJmOGE5YjMx MzE1Yi5jcmwwHwYDVR0jBBgwFoAULB81ycMp8VkenC7lgiWwefVnunUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hOTJjMGUzZS1lNzg2LTQwZjEtYTIxMS1iZjhh OWIzMTMxNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHaMmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKdFw/IE1/hJ07pFMoSRevQVGKa/CF2sXVQYqhFW2FFDHbJd01uKnfUu QtIfLrVHH8tIXx0mweuk3cnrQJvPXK246U4Vd1ok9J29HD6o9SpK720H+9Ih/5VY 1fN9vA0qk2zb4fruwPdcoAIjI1oZEO8ANoKtbMYirYIm+7Zu8T+O/EJNH3HawtKV TK+dHbOlWKdHpuva3Ye7IC3tEIeCjnNZYmlQOyN8fcmoIrcm3QbHH+6HTzwn3dxF icnZY/Gg46Q3AgDAkkW80uRIAQprZ+HArSgSYtHWbOQelxdVuIs4jkbW/xGikUqD zZAKTg4J3ukL2FSZpmt5/3d3ntCIJKc= -----END CERTIFICATE-----Generated at Wed Apr 30 05:53:11 2025 by rpki-client