$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28e68c3f-20e0-38e6-9057-bf4b7475db74.roa File: 28e68c3f-20e0-38e6-9057-bf4b7475db74.roa (raw, json) Hash identifier: bVVYnbBZtujqOkwCBk4btGfbDw8zcaT0m2sgSZWM1lg= Subject key identifier: B1:89:29:82:6D:86:2C:EB:DF:D3:65:CB:B7:7E:67:9B:59:6C:68:77 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584981D460D33119326415EA6C40 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28e68c3f-20e0-38e6-9057-bf4b7475db74.roa Signing time: Sun 13 Apr 2025 01:00:44 +0000 ROA not before: Sun 13 Apr 2025 01:00:44 +0000 ROA not after: Sat 12 Jul 2025 01:00:44 +0000 asID: 5650 IP address blocks: 104.251.84.0/24 maxlen: 24 104.251.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:81:d4:60:d3:31:19:32:64:15:ea:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Apr 13 01:00:44 2025 GMT Not After : Jul 12 01:00:44 2025 GMT Subject: CN=9e67d118-f9c5-4bb7-a455-04f89559f47b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:dd:23:60:70:e2:22:2f:63:48:12:1c:14:19: 45:68:ce:54:94:b0:74:92:b8:ad:2a:26:39:23:46: b9:03:3f:b0:be:68:3a:2f:d2:aa:f5:8a:cb:09:d1: 12:f0:cd:08:01:78:f8:cb:f4:f4:dd:23:1c:35:46: ee:e9:e9:b4:86:5a:26:25:30:6d:10:d7:34:18:48: d6:e1:50:5d:99:98:aa:77:5c:78:6b:17:fd:26:28: cb:a0:df:45:f6:d5:3a:c5:80:59:4b:ed:9a:81:1b: bf:0c:09:a2:dd:1b:ce:a9:31:2e:42:a4:1a:07:07: b3:61:08:33:f8:70:31:af:7d:6f:22:ed:72:a8:85: e0:47:d9:64:9f:92:36:b6:8b:0b:cf:ca:5e:da:ca: c7:1e:8a:55:88:ed:b9:2d:05:a1:93:d3:52:2c:3e: 85:c7:20:ed:c3:da:0c:ea:0c:49:37:49:f4:b4:a1: ce:86:da:e6:c4:00:6a:6a:a0:d4:40:cc:cb:70:82: 10:2c:33:e0:88:47:73:0e:82:94:03:59:b4:cd:3d: f0:7d:f9:17:c2:36:d5:4f:1b:b3:e4:0f:01:b7:fc: 6c:85:14:cb:5b:72:d0:31:6d:70:98:46:93:65:2d: e1:f2:02:33:57:ba:f1:5e:ca:45:5b:c4:e3:5b:97: 7e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:89:29:82:6D:86:2C:EB:DF:D3:65:CB:B7:7E:67:9B:59:6C:68:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28e68c3f-20e0-38e6-9057-bf4b7475db74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.251.84.0/24 104.251.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:d8:cf:aa:da:9f:a0:2f:f9:d2:04:7a:88:ca:72:04:f3:5e: 81:1a:51:50:9e:82:81:74:70:a1:f6:61:a8:61:ce:45:1c:17: 2f:ce:d1:33:b5:70:1a:1d:c6:08:11:c8:bd:f0:f1:67:53:01: 25:2b:c6:17:13:84:75:a5:1e:3a:ee:c0:06:8c:e4:53:10:97: 64:03:5b:4a:c4:3f:9b:78:75:ac:6e:ee:34:dc:ec:6b:38:f5: 36:e2:b1:e5:e2:23:86:85:a9:31:06:97:dc:49:32:82:eb:df: 9e:b3:7c:0e:1b:1d:70:74:81:1c:72:e8:3c:c0:5b:9e:f4:82: 37:cf:10:5c:50:24:7a:16:0e:bb:64:80:75:83:53:60:57:17: d4:40:c9:39:55:06:9b:ef:ca:d8:1e:48:55:ae:ef:8d:02:d8: 2e:d1:1e:71:23:3b:78:b9:a8:98:4e:3f:1f:18:9e:fb:76:40: 69:bd:3b:8a:66:44:81:34:bf:09:ad:d0:8a:e6:28:04:bf:f9: b0:e7:99:ec:a8:f5:96:0d:df:c7:a6:a9:95:3d:b6:ce:9e:d3: fa:23:e9:9a:78:cb:7c:15:ac:8b:a5:27:d7:41:47:ac:5a:74: f8:f1:5d:6c:7f:31:e9:ce:b2:eb:f3:67:ec:bc:c3:6e:50:60: 25:cf:2b:ea -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEmB1GDTMRkyZBXqbEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk OWU2N2QxMTgtZjljNS00YmI3LWE0NTUtMDRmODk1NTlmNDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt0jYHDiIi9jSBIcFBlFaM5UlLB0kritKiY5 I0a5Az+wvmg6L9Kq9YrLCdES8M0IAXj4y/T03SMcNUbu6em0hlomJTBtENc0GEjW 4VBdmZiqd1x4axf9JijLoN9F9tU6xYBZS+2agRu/DAmi3RvOqTEuQqQaBwezYQgz +HAxr31vIu1yqIXgR9lkn5I2tosLz8pe2srHHopViO25LQWhk9NSLD6FxyDtw9oM 6gxJN0n0tKHOhtrmxABqaqDUQMzLcIIQLDPgiEdzDoKUA1m0zT3wffkXwjbVTxuz 5A8Bt/xshRTLW3LQMW1wmEaTZS3h8gIzV7rxXspFW8TjW5d+7wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLGJKYJthizr39Nly7d+Z5tZbGh3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMjhlNjhjM2YtMjBlMC0z OGU2LTkwNTctYmY0Yjc0NzVkYjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaPtUAwQA aPtcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABbYz6ran6Av+dIEeojKcgTzXoEaUVCegoF0cKH2YahhzkUc Fy/O0TO1cBodxggRyL3w8WdTASUrxhcThHWlHjruwAaM5FMQl2QDW0rEP5t4daxu 7jTc7Gs49TbiseXiI4aFqTEGl9xJMoLr356zfA4bHXB0gRxy6DzAW570gjfPEFxQ JHoWDrtkgHWDU2BXF9RAyTlVBpvvytgeSFWu740C2C7RHnEjO3i5qJhOPx8Ynvt2 QGm9O4pmRIE0vwmt0IrmKAS/+bDnmeyo9ZYN38emqZU9ts6e0/oj6Zp4y3wVrIul J9dBR6xadPjxXWx/MenOsuvzZ+y8w25QYCXPK+o= -----END CERTIFICATE-----Generated at Sun Apr 27 07:21:56 2025 by rpki-client