$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8e3abafb-0537-359d-8d8b-e2f18b9d66e8.roa File: 8e3abafb-0537-359d-8d8b-e2f18b9d66e8.roa (raw, json) Hash identifier: XsCjTF6vZVnvMqQ4dJZfvTAkWP/vMYLSGx0JJoQH4Es= Subject key identifier: 8D:88:DF:58:5F:5A:93:D7:92:A5:ED:69:52:3C:9D:E5:AF:26:A7:B1 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285848E0068AE1DA9ACF2031ED9C80 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8e3abafb-0537-359d-8d8b-e2f18b9d66e8.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 33363 IP address blocks: 104.137.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:8a:e1:da:9a:cf:20:31:ed:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=45a40d39-f393-4889-8c72-a05965b7b78d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:46:59:44:67:75:46:d8:6a:bc:93:ee:e6:7a: ff:52:46:f8:6a:a3:bb:76:01:83:f6:0f:bd:5b:3a: 0a:f5:78:7c:4c:c8:1e:a8:09:55:19:ab:b4:df:17: 6b:35:b1:0a:2c:e0:0c:2d:f7:55:f6:f0:a2:a3:cf: 7e:53:54:4d:ca:5a:88:f0:f0:9f:1a:b6:a2:22:2f: d4:69:ed:05:e0:c1:05:a4:79:3e:ba:dd:06:f8:2e: 9b:7b:58:a1:b9:fc:8f:ac:76:45:5c:f7:6f:f7:90: 04:3e:55:f7:1a:26:01:9c:f2:4e:13:aa:52:d4:d4: 5c:ec:cc:49:01:ac:36:94:1b:8c:54:4b:56:9c:0f: fd:be:24:b8:2d:21:54:9a:9e:9c:be:f0:85:4e:e5: 93:50:a9:63:cf:3d:fd:ec:3a:c1:37:c0:ab:f2:14: cc:b2:59:fb:93:c8:37:59:8e:76:43:f7:75:74:c2: 5e:0a:8c:a2:2f:01:95:8c:79:78:2d:5c:85:81:9a: c5:66:8d:47:8b:44:ae:50:17:a4:7d:e1:ad:ec:cd: 25:d8:d5:fe:b5:f9:58:6f:8d:9e:92:b7:a1:40:42: a5:31:3c:64:fc:27:3b:07:b7:c2:68:11:7d:71:4f: 29:12:ee:4c:52:a2:70:73:de:a4:4a:a8:fe:85:86: 57:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:88:DF:58:5F:5A:93:D7:92:A5:ED:69:52:3C:9D:E5:AF:26:A7:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8e3abafb-0537-359d-8d8b-e2f18b9d66e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 104.137.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:11:c0:42:e7:03:54:a5:d2:49:bf:a2:c3:78:83:de:26:9e: 3d:a9:92:32:f6:fa:94:ae:9f:bd:28:e3:22:1c:f5:fb:43:9f: be:89:10:e8:7e:7b:78:e2:44:14:bc:78:dc:aa:2f:54:50:24: 96:5c:8e:6c:aa:79:e0:75:6a:fc:ae:9b:81:82:b9:55:16:4e: a4:cb:c9:0b:f6:36:54:38:35:4e:37:c3:f3:ca:8b:fc:6b:db: 2c:74:50:47:f3:57:d6:b6:c9:da:dc:91:05:4c:3b:f7:63:30: f7:ff:31:6d:83:27:18:05:36:15:38:54:ec:6c:39:00:21:08: 23:eb:fb:3e:53:97:15:62:8c:0d:30:df:ce:82:8f:9d:c3:0a: 1f:1c:1b:42:8c:02:97:60:46:27:79:35:a5:88:57:34:72:63: 34:2f:c8:8a:37:df:62:58:a9:71:ba:16:3d:ce:eb:94:8f:36: e4:9d:49:e6:dc:6a:b1:97:af:10:21:44:f1:ea:ab:50:79:c9: 22:0a:89:d0:ef:b1:81:1f:10:89:32:b0:32:c7:32:c2:76:7f: f5:69:bf:b9:83:32:1b:24:83:d2:ad:db:bd:eb:bf:a6:e7:bd: 28:3c:ba:5b:a1:49:9c:64:cc:ae:50:d9:7d:6a:4f:e0:c4:e9: 26:a8:d4:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBorh2prPIDHtnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk NDVhNDBkMzktZjM5My00ODg5LThjNzItYTA1OTY1YjdiNzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0ZZRGd1RthqvJPu5nr/Ukb4aqO7dgGD9g+9 WzoK9Xh8TMgeqAlVGau03xdrNbEKLOAMLfdV9vCio89+U1RNylqI8PCfGraiIi/U ae0F4MEFpHk+ut0G+C6be1ihufyPrHZFXPdv95AEPlX3GiYBnPJOE6pS1NRc7MxJ Aaw2lBuMVEtWnA/9viS4LSFUmp6cvvCFTuWTUKljzz397DrBN8Cr8hTMsln7k8g3 WY52Q/d1dMJeCoyiLwGVjHl4LVyFgZrFZo1Hi0SuUBekfeGt7M0l2NX+tflYb42e krehQEKlMTxk/Cc7B7fCaBF9cU8pEu5MUqJwc96kSqj+hYZXrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2I31hfWpPXkqXtaVI8neWvJqexMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvOGUzYWJhZmItMDUzNy0z NTlkLThkOGItZTJmMThiOWQ2NmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaIlYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYRwELnA1Sl0km/osN4g94mnj2pkjL2+pSun70o4yIc9ftDn76JEOh+ e3jiRBS8eNyqL1RQJJZcjmyqeeB1avyum4GCuVUWTqTLyQv2NlQ4NU43w/PKi/xr 2yx0UEfzV9a2ydrckQVMO/djMPf/MW2DJxgFNhU4VOxsOQAhCCPr+z5TlxVijA0w 386Cj53DCh8cG0KMApdgRid5NaWIVzRyYzQvyIo332JYqXG6Fj3O65SPNuSdSebc arGXrxAhRPHqq1B5ySIKidDvsYEfEIkysDLHMsJ2f/Vpv7mDMhskg9Kt273rv6bn vSg8uluhSZxkzK5Q2X1qT+DE6Sao1GY= -----END CERTIFICATE-----Generated at Tue Apr 29 12:53:48 2025 by rpki-client