$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4af2d60d-7d3a-30e8-a88e-9268b7441016.roa File: 4af2d60d-7d3a-30e8-a88e-9268b7441016.roa (raw, json) Hash identifier: BNpD3lkSV8e82Ay0B+qCuKViGgnLpn7yDk/9Ims24oQ= Subject key identifier: 9E:E2:54:1C:8F:15:3B:F6:B0:B0:44:2D:7E:CD:85:C4:65:5F:F2:70 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285848E0068B01DCB7749409A67B00 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4af2d60d-7d3a-30e8-a88e-9268b7441016.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 33363 IP address blocks: 104.137.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:8b:01:dc:b7:74:94:09:a6:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=adb126fa-0584-4c35-8eba-94e5d4e248c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:81:65:cf:b7:f5:2d:36:2d:ab:12:fe:db:59: bc:f4:58:82:40:65:ff:dd:90:de:1a:6f:05:ad:02: d2:69:39:db:09:5d:5c:ac:24:c6:52:65:c7:2f:11: 37:3c:f1:91:75:98:fb:b0:d5:5c:69:09:e7:84:b2: 48:b3:40:f4:88:36:55:bd:36:c6:39:11:8c:fb:f9: 43:bc:09:22:00:ce:38:82:5d:8d:f0:e6:e5:a0:05: 8e:cc:b8:c8:6c:f4:01:e6:43:c8:f8:40:92:4e:05: 14:99:17:95:4b:9f:62:2e:e7:bd:02:0c:00:02:0c: 6d:14:59:3b:f7:82:fa:d4:39:09:ad:4c:c3:47:c1: e8:90:c5:c2:7e:36:e6:3c:48:b0:a4:54:44:a9:9f: 16:9c:10:8f:67:f6:88:dd:f3:95:be:ff:b0:25:49: 51:44:4a:30:b7:d2:79:c7:6a:f9:4a:ad:dc:18:7f: 7c:70:ad:ca:c1:1b:a2:4b:1a:12:fe:68:01:8d:87: 92:8d:06:10:f1:16:4e:12:0b:09:0f:80:42:c1:3b: ca:6d:dc:15:0d:1b:00:ea:31:a6:3e:ca:d3:e0:7d: bd:be:a2:f9:34:e3:fc:65:67:30:96:cd:d8:86:28: df:b0:03:38:8e:b5:3c:e8:2c:10:f6:d7:6d:63:24: ad:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E2:54:1C:8F:15:3B:F6:B0:B0:44:2D:7E:CD:85:C4:65:5F:F2:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4af2d60d-7d3a-30e8-a88e-9268b7441016.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 104.137.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:74:f2:b3:c6:9f:38:04:01:ad:71:a4:bf:1f:c1:aa:40:90: ed:43:f1:4e:bd:b6:31:a2:02:6c:20:3d:f7:3c:a4:d2:bd:8d: 38:71:be:84:7d:e3:bf:36:fb:69:47:bc:ce:d2:e1:08:22:d3: 51:64:55:d4:fe:e1:cf:01:6f:01:9a:c8:e3:2f:83:bc:5e:63: 06:c0:bb:45:5e:ff:8b:90:30:34:ff:2b:85:75:b0:73:17:e1: 80:47:aa:7a:af:3d:93:20:2f:a1:6c:c8:b1:db:c0:84:49:e8: d7:17:22:d1:4a:59:55:16:70:b1:59:e2:7c:6f:16:82:6d:de: 12:d8:40:34:f9:bd:74:45:45:e8:1d:89:3a:3c:18:32:37:84: d9:1d:3e:71:60:93:30:e6:66:d9:09:88:fb:3a:63:ae:d9:8b: 3b:53:70:81:50:9f:dc:e3:b4:15:ff:0a:15:4b:2f:4c:e4:72: eb:a5:9e:9c:cd:33:a6:d1:c7:94:52:b6:5e:28:b2:9f:d5:d2: 6f:df:1e:ff:9b:5f:36:c1:00:6c:93:00:47:5a:1a:e3:12:eb: 3f:e1:36:ca:8f:49:bc:f5:65:52:d8:12:db:5c:18:08:b5:db: 6d:34:a6:cb:d1:11:c9:e6:81:dc:91:04:53:cc:29:bb:d8:7f: 79:2a:40:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBosB3Ld0lAmmewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk YWRiMTI2ZmEtMDU4NC00YzM1LThlYmEtOTRlNWQ0ZTI0OGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4Flz7f1LTYtqxL+21m89FiCQGX/3ZDeGm8F rQLSaTnbCV1crCTGUmXHLxE3PPGRdZj7sNVcaQnnhLJIs0D0iDZVvTbGORGM+/lD vAkiAM44gl2N8ObloAWOzLjIbPQB5kPI+ECSTgUUmReVS59iLue9AgwAAgxtFFk7 94L61DkJrUzDR8HokMXCfjbmPEiwpFREqZ8WnBCPZ/aI3fOVvv+wJUlRREowt9J5 x2r5Sq3cGH98cK3KwRuiSxoS/mgBjYeSjQYQ8RZOEgsJD4BCwTvKbdwVDRsA6jGm PsrT4H29vqL5NOP8ZWcwls3YhijfsAM4jrU86CwQ9tdtYyStXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7iVByPFTv2sLBELX7NhcRlX/JwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNGFmMmQ2MGQtN2QzYS0z MGU4LWE4OGUtOTI2OGI3NDQxMDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaIlQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC108rPGnzgEAa1xpL8fwapAkO1D8U69tjGiAmwgPfc8pNK9jThxvoR9 4782+2lHvM7S4Qgi01FkVdT+4c8BbwGayOMvg7xeYwbAu0Ve/4uQMDT/K4V1sHMX 4YBHqnqvPZMgL6FsyLHbwIRJ6NcXItFKWVUWcLFZ4nxvFoJt3hLYQDT5vXRFRegd iTo8GDI3hNkdPnFgkzDmZtkJiPs6Y67ZiztTcIFQn9zjtBX/ChVLL0zkcuulnpzN M6bRx5RStl4osp/V0m/fHv+bXzbBAGyTAEdaGuMS6z/hNsqPSbz1ZVLYEttcGAi1 2200psvREcnmgdyRBFPMKbvYf3kqQPg= -----END CERTIFICATE-----Generated at Tue Apr 29 12:47:36 2025 by rpki-client