$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/d459f45e-a006-338c-9b08-b1327ea9704d.roa File: d459f45e-a006-338c-9b08-b1327ea9704d.roa (raw, json) Hash identifier: RY5yOzdHGp9iTWumhVL4cymbEr49+Mmz5BgKZuy6hXE= Subject key identifier: 4D:53:37:E2:46:0B:0A:5B:C9:A5:6C:BA:88:A5:5A:35:CE:F5:88:0E Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F432858498769AF3D66349E4A3547D3C0 Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/d459f45e-a006-338c-9b08-b1327ea9704d.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 22773 IP address blocks: 104.200.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:af:3d:66:34:9e:4a:35:47:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=ab37e461-5e09-4cd6-826f-a18711a07497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ac:41:fe:43:37:f1:4a:4d:08:6d:cf:fa:9d: 58:71:9e:e7:de:e3:de:7a:71:f0:9d:bd:97:e1:b6: a2:a6:20:d6:34:cc:ec:92:00:e9:8c:51:41:65:e9: 30:54:29:d2:1e:f4:63:69:e4:40:0c:4d:c0:56:27: 7f:c4:11:a2:39:e1:ee:99:20:3b:e6:8d:15:88:72: 0e:5a:1b:ec:bb:42:ef:d7:2c:00:4f:dd:61:85:f2: 9e:00:13:ba:93:4c:cb:65:90:d8:40:93:99:cd:b8: ba:18:78:76:4c:f9:dd:cd:43:20:f3:bc:a8:4f:13: 86:f9:ae:fb:f9:b2:1c:c6:18:bd:05:1b:b5:04:59: e4:0a:fe:17:df:91:b9:d6:a7:88:ef:5f:ad:05:29: e6:8f:4d:b1:a5:80:ea:99:0d:0a:2d:27:26:e9:5e: 39:26:4d:45:45:df:de:58:bb:0a:5d:c6:40:96:70: e8:a0:a0:d5:26:7b:c8:fd:e0:76:4d:74:4c:c2:7a: e9:61:74:f6:01:d7:14:10:11:6d:3e:bd:4b:f6:43: eb:8b:98:a0:c1:bc:54:8c:53:fa:8c:3f:52:e6:b0: 42:85:db:df:ac:d6:c9:01:4b:53:f8:e8:fa:b4:4f: 7f:09:68:be:dc:9e:b1:67:84:58:d3:32:62:65:c7: a7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:53:37:E2:46:0B:0A:5B:C9:A5:6C:BA:88:A5:5A:35:CE:F5:88:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/d459f45e-a006-338c-9b08-b1327ea9704d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 104.200.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:89:e3:a8:6e:93:c4:50:c9:5d:50:05:03:a4:5f:7e:e2:d1: 87:dc:4d:45:c1:f9:3d:65:fb:d1:ca:de:72:37:a0:1c:c3:3b: 4b:7b:0e:c8:2e:ab:df:80:77:63:0e:70:c1:8b:c8:69:3f:e8: ac:d5:36:56:8e:69:54:3b:dd:0c:66:ea:4a:33:11:87:de:db: c2:a8:98:4d:92:b8:81:bf:03:e9:1a:cf:d6:18:30:dc:9d:12: 5c:21:80:db:28:e3:f5:50:ff:f1:5f:04:a0:df:ac:33:fc:9d: a2:5d:9c:83:70:4a:b0:5d:17:2e:c3:bc:c3:d7:bf:ff:f0:e6: 0e:f0:cb:ac:c4:fc:6c:ad:72:d3:dc:43:5a:8d:73:53:48:ec: 5a:09:37:a8:9b:f4:8c:91:12:e7:82:0b:0f:7b:0c:9e:db:b1: 5e:57:a3:37:29:c2:23:7b:a3:0e:2f:45:bf:04:80:5f:46:52: ea:b2:8f:90:77:7e:4a:77:8d:41:b1:75:3a:ee:cd:b3:72:88: dc:c0:63:5d:78:3a:ab:b4:79:d0:ba:2b:0a:bd:bb:e0:ab:c8: e7:ef:c2:4b:48:1a:8a:db:09:37:52:72:7f:65:74:ae:62:cd: 0f:4b:0f:1a:af:8a:8f:73:b8:fb:09:5b:3f:63:77:95:e2:02: 5e:58:79:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHaa89ZjSeSjVH08AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk YWIzN2U0NjEtNWUwOS00Y2Q2LTgyNmYtYTE4NzExYTA3NDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqxB/kM38UpNCG3P+p1YcZ7n3uPeenHwnb2X 4baipiDWNMzskgDpjFFBZekwVCnSHvRjaeRADE3AVid/xBGiOeHumSA75o0ViHIO Whvsu0Lv1ywAT91hhfKeABO6k0zLZZDYQJOZzbi6GHh2TPndzUMg87yoTxOG+a77 +bIcxhi9BRu1BFnkCv4X35G51qeI71+tBSnmj02xpYDqmQ0KLScm6V45Jk1FRd/e WLsKXcZAlnDooKDVJnvI/eB2TXRMwnrpYXT2AdcUEBFtPr1L9kPri5igwbxUjFP6 jD9S5rBChdvfrNbJAUtT+Oj6tE9/CWi+3J6xZ4RY0zJiZcen1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1TN+JGCwpbyaVsuoilWjXO9YgOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvZDQ1OWY0NWUtYTAwNi0z MzhjLTliMDgtYjEzMjdlYTk3MDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaMjYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+J46huk8RQyV1QBQOkX37i0YfcTUXB+T1l+9HK3nI3oBzDO0t7Dsgu q9+Ad2MOcMGLyGk/6KzVNlaOaVQ73Qxm6kozEYfe28KomE2SuIG/A+kaz9YYMNyd ElwhgNso4/VQ//FfBKDfrDP8naJdnINwSrBdFy7DvMPXv//w5g7wy6zE/GytctPc Q1qNc1NI7FoJN6ib9IyREueCCw97DJ7bsV5XozcpwiN7ow4vRb8EgF9GUuqyj5B3 fkp3jUGxdTruzbNyiNzAY114Oqu0edC6Kwq9u+CryOfvwktIGorbCTdScn9ldK5i zQ9LDxqvio9zuPsJWz9jd5XiAl5YeSg= -----END CERTIFICATE-----Generated at Sun Apr 27 02:53:32 2025 by rpki-client