$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/3a1403f1-01bc-32f9-9734-b1dfc6dcd6af.roa File: 3a1403f1-01bc-32f9-9734-b1dfc6dcd6af.roa (raw, json) Hash identifier: n0SYuSAgxadv7YdWnbIftfpje0xM7hmCsM51evGdlw4= Subject key identifier: 82:F6:06:8E:99:8C:8A:E3:5D:8C:55:DA:FF:B5:29:A4:8E:8D:9F:A5 Certificate issuer: /CN=b1bde07b-2888-4592-8145-f4bcd3e3a12a Certificate serial: 010D0C9F4328584973DEEF886FF1E0E5EA6D54C0 Authority key identifier: 2B:E4:4F:5A:CB:01:42:DC:52:ED:6B:1B:A3:E9:9E:FD:7C:C6:63:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/3a1403f1-01bc-32f9-9734-b1dfc6dcd6af.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 9712 IP address blocks: 104.251.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/b1bde07b-2888-4592-8145-f4bcd3e3a12a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/b1bde07b-2888-4592-8145-f4bcd3e3a12a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:ef:88:6f:f1:e0:e5:ea:6d:54:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1bde07b-2888-4592-8145-f4bcd3e3a12a Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=52fac31c-ec53-4a57-aac9-2eebb5001ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:66:b0:6b:16:6c:7a:d8:f8:e7:be:85:6f:23: 21:c7:3b:0f:43:2f:1b:2f:12:5a:f2:7d:99:26:f6: c9:2d:63:41:d5:58:06:94:b1:b5:4f:37:83:25:7d: 1b:eb:8b:34:23:cf:8f:05:7a:cc:83:ee:45:d6:e7: d2:67:38:bc:29:c4:c3:bb:74:d0:61:b0:d6:aa:1d: 36:40:7a:57:2c:d6:a7:f3:7b:4f:a5:82:ec:85:49: b7:c1:17:eb:0b:ae:80:e8:20:23:f6:71:58:b7:ae: 54:cd:30:41:31:20:05:ca:c6:99:9e:08:de:59:09: 38:2f:4c:ca:5b:c1:7d:ef:b6:46:8a:3c:22:88:94: 9f:5f:98:9b:40:9c:d3:3e:98:b4:79:a7:68:14:31: cb:02:3f:ee:84:9f:6f:d9:25:dd:df:e1:8e:d7:e3: a1:b1:15:c9:b5:45:27:dc:6e:60:57:d1:f8:c3:db: c7:dd:b4:4f:f5:ae:7f:12:45:2e:52:68:64:57:ac: e9:95:ae:a6:1e:6b:bf:f8:e7:d5:87:87:3f:76:a5: 0c:b1:4e:33:4d:f5:30:a9:f0:1d:8b:1d:d8:16:49: 6a:27:13:ed:db:e5:b1:c8:66:42:74:99:ae:48:31: f7:52:f1:66:f4:d4:e9:b4:7a:e2:31:19:a6:a3:68: ac:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F6:06:8E:99:8C:8A:E3:5D:8C:55:DA:FF:B5:29:A4:8E:8D:9F:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/3a1403f1-01bc-32f9-9734-b1dfc6dcd6af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/b1bde07b-2888-4592-8145-f4bcd3e3a12a.crl X509v3 Authority Key Identifier: keyid:2B:E4:4F:5A:CB:01:42:DC:52:ED:6B:1B:A3:E9:9E:FD:7C:C6:63:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a.cer sbgp-ipAddrBlock: critical IPv4: 104.251.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ec:5b:10:f2:66:53:04:b1:d2:c4:ac:e8:27:29:1c:70:27: bc:8e:7c:22:c1:ab:f7:68:8d:61:c8:de:d3:bd:8c:68:61:f3: d9:2f:00:02:16:f8:65:de:e5:50:eb:18:8c:2f:b6:2d:ab:e5: 11:23:83:01:3b:ae:2a:a9:68:a5:0d:5a:88:59:a2:c9:1d:ec: 41:f5:a9:60:fd:d1:2e:2b:10:70:de:0d:2a:de:7d:aa:57:4c: 1a:be:d2:f1:1c:98:58:35:19:43:fc:f7:5c:1c:64:2c:ee:5f: 25:e6:61:b1:07:2a:d3:dd:d1:8e:a8:88:b4:8c:23:3a:08:5b: 25:40:fc:43:ba:db:ee:23:05:6f:4b:3a:11:4d:55:30:3e:9e: 62:88:1d:12:69:73:70:12:48:48:5e:5b:34:95:49:8f:e3:bd: 00:e4:11:9f:49:c1:e2:38:9c:1b:17:09:8d:d3:68:9d:8e:2b: 78:66:06:44:72:b3:ab:39:d9:b2:17:cd:94:4e:14:a8:75:66: 3c:39:46:f9:a8:ce:c5:5e:4f:cf:97:61:05:96:1b:95:32:d2: f1:0f:e0:23:83:26:96:5e:0a:3f:3b:7a:84:38:f2:91:38:c8: ec:f8:8e:d1:a0:30:2e:4c:32:a0:57:6c:8e:75:0f:46:88:1f: 1f:2c:cd:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz3u+Ib/Hg5eptVMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFiZGUwN2ItMjg4OC00NTkyLTgxNDUtZjRiY2QzZTNh MTJhMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk NTJmYWMzMWMtZWM1My00YTU3LWFhYzktMmVlYmI1MDAxY2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGawaxZsetj4576FbyMhxzsPQy8bLxJa8n2Z JvbJLWNB1VgGlLG1TzeDJX0b64s0I8+PBXrMg+5F1ufSZzi8KcTDu3TQYbDWqh02 QHpXLNan83tPpYLshUm3wRfrC66A6CAj9nFYt65UzTBBMSAFysaZngjeWQk4L0zK W8F977ZGijwiiJSfX5ibQJzTPpi0eadoFDHLAj/uhJ9v2SXd3+GO1+OhsRXJtUUn 3G5gV9H4w9vH3bRP9a5/EkUuUmhkV6zpla6mHmu/+OfVh4c/dqUMsU4zTfUwqfAd ix3YFklqJxPt2+WxyGZCdJmuSDH3UvFm9NTptHriMRmmo2iseQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIL2Bo6ZjIrjXYxV2v+1KaSOjZ+lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMWJk ZTA3Yi0yODg4LTQ1OTItODE0NS1mNGJjZDNlM2ExMmEvM2ExNDAzZjEtMDFiYy0z MmY5LTk3MzQtYjFkZmM2ZGNkNmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjFiZGUwN2ItMjg4OC00NTkyLTgx NDUtZjRiY2QzZTNhMTJhL2IxYmRlMDdiLTI4ODgtNDU5Mi04MTQ1LWY0YmNkM2Uz YTEyYS5jcmwwHwYDVR0jBBgwFoAUK+RPWssBQtxS7Wsbo+me/XzGY7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iMWJkZTA3Yi0yODg4LTQ1OTItODE0NS1mNGJj ZDNlM2ExMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaPs4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbsWxDyZlMEsdLErOgnKRxwJ7yOfCLBq/dojWHI3tO9jGhh89kvAAIW +GXe5VDrGIwvti2r5REjgwE7riqpaKUNWohZoskd7EH1qWD90S4rEHDeDSrefapX TBq+0vEcmFg1GUP891wcZCzuXyXmYbEHKtPd0Y6oiLSMIzoIWyVA/EO62+4jBW9L OhFNVTA+nmKIHRJpc3ASSEheWzSVSY/jvQDkEZ9JweI4nBsXCY3TaJ2OK3hmBkRy s6s52bIXzZROFKh1Zjw5RvmozsVeT8+XYQWWG5Uy0vEP4CODJpZeCj87eoQ48pE4 yOz4jtGgMC5MMqBXbI51D0aIHx8szcE= -----END CERTIFICATE-----Generated at Wed Apr 30 17:41:05 2025 by rpki-client