$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/50ff23d6-c143-3056-90c8-553c1e77ad8a.roa File: 50ff23d6-c143-3056-90c8-553c1e77ad8a.roa (raw, json) Hash identifier: fpluAU/AzsthDcQEIxTe2qjS9gr24+IVTwNqQXNeJT0= Subject key identifier: B4:A8:E0:DF:71:2B:BD:F9:B4:00:F1:D0:E3:6F:F8:A4:20:01:7C:A8 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584973DEEA9F48859C4414281C10 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/50ff23d6-c143-3056-90c8-553c1e77ad8a.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 8100 IP address blocks: 104.238.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:ea:9f:48:85:9c:44:14:28:1c:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=3529db51-f662-4b31-9178-11de1169862f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f8:1b:73:3b:7a:32:e0:9a:4d:1e:41:b2:aa: 5e:1c:12:de:ad:9c:4b:1e:ec:7e:63:99:95:10:fb: 85:8d:70:69:45:9e:3c:b7:9b:96:15:2f:3f:74:59: 0d:c2:b2:9c:85:e8:ec:3a:9c:68:af:e2:78:3c:ef: 94:51:01:95:f6:be:11:ee:38:bb:35:5a:65:76:52: cd:d1:54:17:05:3c:da:27:7d:fe:9b:88:ff:66:3e: 49:58:d5:4d:61:6f:dd:57:24:27:3c:61:12:f8:c0: b4:a1:94:d3:47:94:0f:d1:83:ee:28:d6:df:51:3c: d1:16:d0:fe:2b:29:13:14:c0:bc:61:eb:e2:b4:54: 2b:a1:a0:6f:0c:20:d9:9c:b0:77:01:d8:0a:17:a9: a8:66:82:ae:b5:2f:4a:43:a8:1b:cf:7a:f8:af:32: 66:0e:db:dd:c6:ca:9d:86:0b:2a:2e:e6:db:18:df: 54:2c:25:42:0f:b4:c5:fe:be:20:0b:c1:a1:0a:42: 18:5c:52:c6:33:4e:5c:79:55:7b:93:97:67:d5:9c: 8f:06:1a:8e:9c:a8:c2:71:ad:87:f4:10:ea:c7:75: d8:63:25:31:55:dc:5d:20:dd:10:47:1d:bc:5c:db: 83:07:c2:0e:55:a4:e0:a2:e7:bf:f0:7a:99:5b:c7: 60:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A8:E0:DF:71:2B:BD:F9:B4:00:F1:D0:E3:6F:F8:A4:20:01:7C:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/50ff23d6-c143-3056-90c8-553c1e77ad8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 104.238.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:19:52:9c:02:6c:f6:38:2e:2e:9b:b6:aa:00:c9:b9:0e:c5: 0e:d1:ce:ce:3d:14:d1:38:5d:d4:4a:ed:7d:6e:51:cb:f7:a2: fc:86:8e:a9:25:a0:c2:e1:f3:97:34:52:96:6f:21:88:15:f7: 54:fd:3b:71:26:fa:d5:20:49:3c:e8:af:e6:8b:b4:f3:7c:70: f4:3b:78:fa:d2:00:c6:07:7a:ba:7f:b3:11:3c:57:ad:09:9d: a5:5c:fb:51:d1:9d:c0:11:b0:ad:c3:ab:a3:b0:64:bb:5e:06: 35:7d:87:5a:90:bd:78:93:48:04:ee:39:51:34:04:5d:e5:54: fc:1d:31:c7:84:b1:98:02:0c:4d:08:66:e3:d7:6e:81:9b:14: c0:ec:ac:9c:3b:65:e8:aa:5c:08:11:02:8f:41:be:a2:da:27: ff:47:fe:39:ca:2c:28:91:7c:6a:ed:95:c2:b3:7d:66:75:26: b5:ef:4b:78:a9:b1:4a:44:ad:bb:3a:a5:f1:06:e3:51:a3:7d: 03:ad:33:a7:94:6a:73:23:f4:66:c0:cb:bc:48:e3:7c:c6:7e: d3:b5:65:9a:42:cf:1f:88:d1:49:d4:df:67:c7:8d:cf:db:6b: 8c:35:d9:5a:57:92:3f:5c:c2:dc:76:7e:b6:47:0e:2b:a0:92: 2b:13:32:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz3uqfSIWcRBQoHBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk MzUyOWRiNTEtZjY2Mi00YjMxLTkxNzgtMTFkZTExNjk4NjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/gbczt6MuCaTR5BsqpeHBLerZxLHux+Y5mV EPuFjXBpRZ48t5uWFS8/dFkNwrKchejsOpxor+J4PO+UUQGV9r4R7ji7NVpldlLN 0VQXBTzaJ33+m4j/Zj5JWNVNYW/dVyQnPGES+MC0oZTTR5QP0YPuKNbfUTzRFtD+ KykTFMC8YevitFQroaBvDCDZnLB3AdgKF6moZoKutS9KQ6gbz3r4rzJmDtvdxsqd hgsqLubbGN9ULCVCD7TF/r4gC8GhCkIYXFLGM05ceVV7k5dn1ZyPBhqOnKjCca2H 9BDqx3XYYyUxVdxdIN0QRx28XNuDB8IOVaTgoue/8HqZW8dgAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSo4N9xK735tADx0ONv+KQgAXyoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNTBmZjIzZDYtYzE0My0z MDU2LTkwYzgtNTUzYzFlNzdhZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO75MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKcZUpwCbPY4Li6btqoAybkOxQ7Rzs49FNE4XdRK7X1uUcv3ovyGjqkl oMLh85c0UpZvIYgV91T9O3Em+tUgSTzor+aLtPN8cPQ7ePrSAMYHerp/sxE8V60J naVc+1HRncARsK3Dq6OwZLteBjV9h1qQvXiTSATuOVE0BF3lVPwdMceEsZgCDE0I ZuPXboGbFMDsrJw7ZeiqXAgRAo9BvqLaJ/9H/jnKLCiRfGrtlcKzfWZ1JrXvS3ip sUpErbs6pfEG41GjfQOtM6eUanMj9GbAy7xI43zGftO1ZZpCzx+I0UnU32fHjc/b a4w12VpXkj9cwtx2frZHDiugkisTMlQ= -----END CERTIFICATE-----Generated at Sat Apr 26 20:25:35 2025 by rpki-client