$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c8142691-c66c-3d3f-a909-53e3d1eea3f4.roa File: c8142691-c66c-3d3f-a909-53e3d1eea3f4.roa (raw, json) Hash identifier: 3ta15SQa2qDMuqWRoseQnuagO9MhiZYae+S9Z9FMSRI= Subject key identifier: 84:57:4A:23:5A:A5:EC:E9:F3:6A:DD:80:86:53:73:5A:80:3C:94:E5 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F43285849A1EF6BB2D5C6CDEB02D5B380 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c8142691-c66c-3d3f-a909-53e3d1eea3f4.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 9009 IP address blocks: 104.251.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:6b:b2:d5:c6:cd:eb:02:d5:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=6bdd89c1-a596-4b53-964b-2da9e4e7a47d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4d:da:a8:f6:d0:a5:8b:c5:82:a7:2d:44:27: 7f:fc:5f:4a:80:78:11:73:86:3c:dd:94:47:c2:53: 62:50:c4:38:a5:b6:a6:f7:55:5b:d5:31:6d:0d:43: 05:56:09:3a:10:fb:67:ee:cf:cb:21:b9:e3:bc:9e: 14:98:f8:c3:3c:bd:30:55:a4:53:69:87:6c:4f:d5: 9e:5a:be:0c:1e:df:c5:de:3d:8b:bb:48:7e:fc:09: 4e:d7:fc:50:05:82:7a:b1:8c:eb:ae:2e:68:ed:7a: 6f:ba:0a:c7:52:8a:97:3e:49:6c:36:df:58:1d:3a: 8c:2b:ff:23:b4:7e:f2:ce:94:24:33:8e:80:3f:92: 69:bf:48:12:9a:9f:4c:6a:fa:33:18:d8:bd:f1:5c: 31:38:84:5f:be:fe:6c:4b:d8:6b:7e:dc:e9:47:65: 1a:96:99:b5:cf:09:40:9e:38:5f:0b:5d:e6:1a:4e: b2:80:8d:18:a2:f0:6c:ba:eb:24:25:25:42:40:2f: 04:c7:98:3d:47:85:23:c3:61:cf:af:97:71:c0:61: a3:ce:2b:1d:c6:a2:5a:10:6f:16:6e:84:55:ba:31: de:71:61:28:aa:29:d8:e6:b6:de:52:4e:4f:41:2b: 0c:d0:27:16:52:a7:ad:1f:f3:06:b9:de:3b:13:97: 2f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:57:4A:23:5A:A5:EC:E9:F3:6A:DD:80:86:53:73:5A:80:3C:94:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c8142691-c66c-3d3f-a909-53e3d1eea3f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.251.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:bf:fa:58:eb:bc:36:f1:37:82:e1:74:ca:97:36:3a:43:5a: de:c9:e7:7e:cb:09:db:4c:9f:29:c8:ec:b8:43:c6:b1:f2:2a: 7b:ec:96:6b:cc:8d:7f:67:73:41:ee:9b:cd:a2:30:4d:12:cb: 67:07:cb:17:f4:56:dc:13:bf:66:09:32:da:f5:ea:3f:d2:94: 30:a2:51:dd:4f:24:7d:60:42:57:02:2b:d0:a3:e1:09:c1:a2: 05:51:f5:c7:dc:21:8e:ec:51:1b:67:cc:df:9c:22:a9:1a:52: d3:19:6b:3b:0d:f0:8a:7d:5b:a6:e2:89:17:56:14:5b:8e:00: 04:d5:cb:41:6c:c4:05:1d:b9:0c:e9:0a:da:c8:30:c0:e8:44: ae:d8:32:8e:a2:01:8c:8c:21:71:4d:6b:04:fa:e4:4a:64:d6: f8:22:ba:0d:39:c3:ed:94:fc:bc:7f:19:6c:93:66:3f:0f:67: 0d:07:d5:5a:35:52:e7:92:3c:1b:58:29:0d:11:6a:a4:50:51: 7e:0a:4c:f6:e7:53:e5:ce:02:54:b5:03:bd:0e:fb:91:4f:7c: e8:b4:ae:2c:96:99:5e:62:f1:63:1e:05:91:dc:cf:f0:30:f2: 87:48:4b:84:0b:3e:09:0a:f9:84:41:13:50:9a:4f:44:78:6a: 19:50:7a:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh72uy1cbN6wLVs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk NmJkZDg5YzEtYTU5Ni00YjUzLTk2NGItMmRhOWU0ZTdhNDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3E3aqPbQpYvFgqctRCd//F9KgHgRc4Y83ZRH wlNiUMQ4pbam91Vb1TFtDUMFVgk6EPtn7s/LIbnjvJ4UmPjDPL0wVaRTaYdsT9We Wr4MHt/F3j2Lu0h+/AlO1/xQBYJ6sYzrri5o7XpvugrHUoqXPklsNt9YHTqMK/8j tH7yzpQkM46AP5Jpv0gSmp9MavozGNi98VwxOIRfvv5sS9hrftzpR2Ualpm1zwlA njhfC13mGk6ygI0YovBsuuskJSVCQC8Ex5g9R4Ujw2HPr5dxwGGjzisdxqJaEG8W boRVujHecWEoqinY5rbeUk5PQSsM0CcWUqetH/MGud47E5cvUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRXSiNapezp82rdgIZTc1qAPJTlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvYzgxNDI2OTEtYzY2Yy0z ZDNmLWE5MDktNTNlM2QxZWVhM2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPtTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2/+ljrvDbxN4LhdMqXNjpDWt7J537LCdtMnynI7LhDxrHyKnvslmvM jX9nc0Hum82iME0Sy2cHyxf0VtwTv2YJMtr16j/SlDCiUd1PJH1gQlcCK9Cj4QnB ogVR9cfcIY7sURtnzN+cIqkaUtMZazsN8Ip9W6biiRdWFFuOAATVy0FsxAUduQzp CtrIMMDoRK7YMo6iAYyMIXFNawT65Epk1vgiug05w+2U/Lx/GWyTZj8PZw0H1Vo1 UueSPBtYKQ0RaqRQUX4KTPbnU+XOAlS1A70O+5FPfOi0riyWmV5i8WMeBZHcz/Aw 8odIS4QLPgkK+YRBE1CaT0R4ahlQev8= -----END CERTIFICATE-----Generated at Sat Apr 26 15:52:41 2025 by rpki-client