$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/34164e83-730c-3084-85e5-2ac39df4113c.roa File: 34164e83-730c-3084-85e5-2ac39df4113c.roa (raw, json) Hash identifier: q60XhizHu2Ru25mVRE7yp3/djLZf0mb0jOzC5M5SCSk= Subject key identifier: 2D:C7:20:D3:33:9E:35:FC:61:AA:E7:F0:5E:EC:12:64:EC:30:46:89 Certificate issuer: /CN=a90f006a-b108-4757-9dfd-b36376534658 Certificate serial: 010D0C9F43285848C9B0DC1EE0816AEC3AA8A900 Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/34164e83-730c-3084-85e5-2ac39df4113c.roa Signing time: Thu 06 Feb 2025 02:00:39 +0000 ROA not before: Thu 06 Feb 2025 02:00:39 +0000 ROA not after: Wed 07 May 2025 01:00:39 +0000 asID: 0 IP address blocks: 104.192.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c9:b0:dc:1e:e0:81:6a:ec:3a:a8:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658 Validity Not Before: Feb 6 02:00:39 2025 GMT Not After : May 7 01:00:39 2025 GMT Subject: CN=065a144e-2372-499c-9d74-96860b4df841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:14:bb:8c:7c:a3:57:ba:9b:46:67:0a:a5:d1: 5a:32:4e:80:8a:ec:16:3b:3e:32:60:d1:92:9f:08: 15:a0:84:50:3c:5d:8f:7e:9f:ca:2a:5e:aa:f6:03: 37:7d:e2:f3:2f:dc:66:ba:e8:03:b7:b7:89:d3:a4: 27:c9:5c:05:cc:95:85:8b:a6:d0:cd:60:5a:67:90: 1f:ac:1b:63:be:70:12:b7:5d:5b:1d:c2:dd:85:a0: 75:e3:bc:f6:0d:69:34:00:bb:3b:ef:35:2a:49:c3: d6:37:bc:49:e0:ce:c6:67:fc:d0:76:16:97:5f:39: cf:21:df:81:c9:db:a7:b9:80:62:0d:95:ca:d4:79: 85:87:ad:2d:94:86:ec:ba:20:3b:55:26:4e:73:57: 92:81:2f:2b:6e:5f:d4:c3:45:c2:bf:6a:2b:55:dc: d2:5f:6d:be:7e:9a:57:6d:97:a3:62:02:a1:04:bf: b5:9b:2d:34:0e:67:f2:06:a8:fb:15:85:4d:58:5d: 94:57:b3:54:cc:57:78:16:5f:91:e9:e7:0f:6f:07: d5:a2:a7:1a:e7:a5:67:2d:ae:75:7f:6b:6f:0f:0e: e1:b1:f6:72:fe:62:83:2a:1b:92:2b:ee:90:9e:0e: 93:ed:02:b4:42:20:a3:16:8c:93:05:f8:c4:0d:0d: 62:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C7:20:D3:33:9E:35:FC:61:AA:E7:F0:5E:EC:12:64:EC:30:46:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/34164e83-730c-3084-85e5-2ac39df4113c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl X509v3 Authority Key Identifier: keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer sbgp-ipAddrBlock: critical IPv4: 104.192.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:09:79:9e:92:8e:b9:c6:a6:1e:d1:be:1b:9b:b4:b7:25:8f: 83:4e:3b:c8:36:90:61:f4:5d:2a:e2:44:be:65:a6:b3:86:66: 09:0c:f3:fd:1f:ac:3d:45:9f:31:2c:96:1d:67:1a:06:ea:93: 42:21:28:e8:d0:d7:95:94:5f:7c:2e:4a:c3:d8:99:88:9e:6a: 70:76:80:bf:2c:f2:f8:31:de:dd:ff:27:13:43:36:a0:ba:a9: 12:59:9e:cf:18:c0:95:85:7a:76:be:bc:e4:39:96:aa:61:31: fc:8b:66:63:84:09:c0:9a:5f:e3:52:95:4b:24:bc:31:76:7b: 63:bc:7e:ad:cf:8a:43:fa:39:02:ef:61:79:82:1d:9d:a4:83: 34:07:68:a1:b1:1a:48:81:15:47:2c:b1:5b:2b:d2:d4:ba:0f: aa:c3:81:a0:97:70:9b:f7:4e:eb:6a:6a:af:90:19:3d:38:2a: 5b:74:56:95:db:79:01:f5:de:29:02:fe:04:01:38:7d:37:43: 4f:c1:00:94:6d:54:5e:44:36:30:77:d9:1b:4d:26:05:22:ea: c0:53:3e:2b:88:76:5f:10:a3:e7:e7:ec:6c:a0:2c:c7:7f:6c: da:64:da:0e:d5:1c:b7:e1:e5:cf:e4:be:03:af:56:ce:79:90: 78:c4:5f:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjJsNwe4IFq7DqoqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTkwZjAwNmEtYjEwOC00NzU3LTlkZmQtYjM2Mzc2NTM0 NjU4MB4XDTI1MDIwNjAyMDAzOVoXDTI1MDUwNzAxMDAzOVowLzEtMCsGA1UEAxMk MDY1YTE0NGUtMjM3Mi00OTljLTlkNzQtOTY4NjBiNGRmODQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBS7jHyjV7qbRmcKpdFaMk6AiuwWOz4yYNGS nwgVoIRQPF2Pfp/KKl6q9gM3feLzL9xmuugDt7eJ06QnyVwFzJWFi6bQzWBaZ5Af rBtjvnASt11bHcLdhaB147z2DWk0ALs77zUqScPWN7xJ4M7GZ/zQdhaXXznPId+B ydunuYBiDZXK1HmFh60tlIbsuiA7VSZOc1eSgS8rbl/Uw0XCv2orVdzSX22+fppX bZejYgKhBL+1my00DmfyBqj7FYVNWF2UV7NUzFd4Fl+R6ecPbwfVoqca56VnLa51 f2tvDw7hsfZy/mKDKhuSK+6Qng6T7QK0QiCjFoyTBfjEDQ1iCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3HINMznjX8Yarn8F7sEmTsMEaJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBm MDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYzNzY1MzQ2NTgvMzQxNjRlODMtNzMwYy0z MDg0LTg1ZTUtMmFjMzlkZjQxMTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTkwZjAwNmEtYjEwOC00NzU3LTlk ZmQtYjM2Mzc2NTM0NjU4L2E5MGYwMDZhLWIxMDgtNDc1Ny05ZGZkLWIzNjM3NjUz NDY1OC5jcmwwHwYDVR0jBBgwFoAUVrt1Gou+kg2JmSYj+7Wl+6n3GPgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBmMDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYz NzY1MzQ2NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMBlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK0JeZ6SjrnGph7RvhubtLclj4NOO8g2kGH0XSriRL5lprOGZgkM8/0f rD1FnzEslh1nGgbqk0IhKOjQ15WUX3wuSsPYmYieanB2gL8s8vgx3t3/JxNDNqC6 qRJZns8YwJWFena+vOQ5lqphMfyLZmOECcCaX+NSlUskvDF2e2O8fq3PikP6OQLv YXmCHZ2kgzQHaKGxGkiBFUcssVsr0tS6D6rDgaCXcJv3Tutqaq+QGT04Klt0VpXb eQH13ikC/gQBOH03Q0/BAJRtVF5ENjB32RtNJgUi6sBTPiuIdl8Qo+fn7GygLMd/ bNpk2g7VHLfh5c/kvgOvVs55kHjEXxs= -----END CERTIFICATE-----Generated at Sat Apr 26 12:58:36 2025 by rpki-client