$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/407efa0a-c8e5-3548-a20d-e972dc73fbb4.roa File: 407efa0a-c8e5-3548-a20d-e972dc73fbb4.roa (raw, json) Hash identifier: p3BXfYvAL0w+CcUPUsrrJ3vw1reaCGenG6JqE9ZYwM4= Subject key identifier: 09:15:B7:EF:68:35:75:CA:C7:3A:16:BB:6E:D7:0A:A8:8D:A8:FB:E7 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F43285849A61F42686ED90F7FB7C90300 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/407efa0a-c8e5-3548-a20d-e972dc73fbb4.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 16433 IP address blocks: 104.243.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:42:68:6e:d9:0f:7f:b7:c9:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=b881a7bf-9839-4cfc-98c1-306269585ada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:50:5b:d5:d1:43:05:ef:9e:3f:1b:cd:65:44: fd:03:0a:3c:77:2f:d5:ce:d7:2b:da:bc:97:de:be: 8d:70:9f:2b:17:da:72:53:d5:bb:81:68:df:30:3c: 3f:a3:74:9a:5e:0f:db:4d:99:5d:40:dc:f0:7c:a2: a7:cb:ae:da:ef:10:81:bd:5c:60:24:f6:a9:40:7e: 3d:c6:5e:bc:cd:a8:73:4a:c8:93:0e:76:c4:d7:73: 07:33:9f:96:09:89:9a:41:55:e0:28:5e:91:8f:b6: 30:cb:f0:77:70:53:53:84:eb:53:ec:22:9a:9d:5e: 17:93:c5:12:c8:e1:8b:9e:ac:3a:a1:d7:26:eb:28: db:3e:01:3d:c8:cc:73:be:6d:dc:3f:59:f9:4e:40: 5b:c8:b7:f2:ca:4e:c2:7b:95:8e:bd:1f:f5:4a:45: 4a:26:18:92:04:26:86:a1:20:7d:5f:2a:fe:50:5f: 1a:10:96:e2:a6:92:4b:61:d3:0d:a6:02:61:ad:b2: 4a:58:49:6f:34:11:84:6e:62:1b:f8:92:e9:0e:5f: 86:b0:71:8c:b4:11:73:ff:ec:95:e9:d7:c0:c0:5f: ed:bf:44:06:d1:56:65:49:30:5c:1a:13:2e:39:dd: e6:fd:6b:79:42:df:73:b3:1a:6c:6a:9e:c8:4f:be: 20:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:15:B7:EF:68:35:75:CA:C7:3A:16:BB:6E:D7:0A:A8:8D:A8:FB:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/407efa0a-c8e5-3548-a20d-e972dc73fbb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 104.243.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:0d:45:10:b4:d8:f1:1d:b2:cd:4f:eb:10:af:97:49:4e:7d: 6b:a4:5a:1c:5a:da:02:28:47:7e:03:07:2a:f0:7d:ab:93:2e: a5:23:e8:88:2b:42:af:89:7f:10:fe:ed:60:34:a2:f5:5e:a0: d0:62:20:36:0a:82:61:a4:f4:dd:7f:47:40:e5:6d:2d:da:2b: cf:88:d1:8a:71:c6:1b:cd:0c:f0:80:3f:b5:1d:51:69:50:f7: 2a:fe:01:65:14:2b:7e:e3:b0:dd:6b:18:2b:e3:ce:ef:00:d2: 45:ae:65:65:57:15:05:c2:f7:5e:fe:59:3b:98:43:e2:a1:09: 2c:7f:e7:52:cd:6c:79:95:79:25:4d:d1:b7:0c:e0:69:08:fa: ab:cc:ee:be:7f:8a:af:19:81:e1:01:ec:8f:e6:47:f9:f1:1c: c1:e6:35:2c:f6:66:a3:32:4f:b3:68:cc:8e:b2:38:20:0a:1d: bb:8a:3d:09:7a:a7:73:c2:05:ce:38:7b:ca:13:7e:6a:70:3f: a2:6b:4a:3c:cc:07:b3:53:1c:6e:3f:ea:0d:b4:3c:ce:c0:8e: 13:a0:4b:7b:23:a9:5a:d4:1e:5f:b4:6b:7d:4e:7e:01:a7:07: 5c:d3:48:4b:bb:9b:f2:a7:d6:27:70:2c:51:57:48:3f:4e:06: 40:33:1e:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmH0JobtkPf7fJAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk Yjg4MWE3YmYtOTgzOS00Y2ZjLTk4YzEtMzA2MjY5NTg1YWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lBb1dFDBe+ePxvNZUT9Awo8dy/Vztcr2ryX 3r6NcJ8rF9pyU9W7gWjfMDw/o3SaXg/bTZldQNzwfKKny67a7xCBvVxgJPapQH49 xl68zahzSsiTDnbE13MHM5+WCYmaQVXgKF6Rj7Ywy/B3cFNThOtT7CKanV4Xk8US yOGLnqw6odcm6yjbPgE9yMxzvm3cP1n5TkBbyLfyyk7Ce5WOvR/1SkVKJhiSBCaG oSB9Xyr+UF8aEJbippJLYdMNpgJhrbJKWElvNBGEbmIb+JLpDl+GsHGMtBFz/+yV 6dfAwF/tv0QG0VZlSTBcGhMuOd3m/Wt5Qt9zsxpsap7IT74gUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkVt+9oNXXKxzoWu27XCqiNqPvnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvNDA3ZWZhMGEtYzhlNS0z NTQ4LWEyMGQtZTk3MmRjNzNmYmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaPNAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcNRRC02PEdss1P6xCvl0lOfWukWhxa2gIoR34DByrwfauTLqUj6Igr Qq+JfxD+7WA0ovVeoNBiIDYKgmGk9N1/R0DlbS3aK8+I0YpxxhvNDPCAP7UdUWlQ 9yr+AWUUK37jsN1rGCvjzu8A0kWuZWVXFQXC917+WTuYQ+KhCSx/51LNbHmVeSVN 0bcM4GkI+qvM7r5/iq8ZgeEB7I/mR/nxHMHmNSz2ZqMyT7NozI6yOCAKHbuKPQl6 p3PCBc44e8oTfmpwP6JrSjzMB7NTHG4/6g20PM7AjhOgS3sjqVrUHl+0a31OfgGn B1zTSEu7m/Kn1idwLFFXSD9OBkAzHss= -----END CERTIFICATE-----Generated at Sun Jun 15 15:24:50 2025 by rpki-client