$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/f746411c-82dc-320f-833f-056441f592f0.roa File: f746411c-82dc-320f-833f-056441f592f0.roa (raw, json) Hash identifier: sGaZlq4/xju8+8TyBz/NRrp0aTFNSOrhl62ifP+e4Is= Subject key identifier: 76:F0:7D:8A:91:8B:35:1C:B3:D9:D5:9C:8E:FD:BC:F9:C3:4F:A3:76 Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F432858499DBF3087E411F655AB6880C0 Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/f746411c-82dc-320f-833f-056441f592f0.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 40342 IP address blocks: 104.200.218.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:30:87:e4:11:f6:55:ab:68:80:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=29c5abb1-bd18-4934-871d-1842ad765748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0a:fb:1c:d0:56:0e:c2:96:df:81:52:de:9d: c3:47:10:fe:58:53:45:3d:bf:f1:81:39:9b:a0:5c: d2:e7:3b:ea:e5:4e:41:a3:34:dd:c1:60:ab:dc:a2: ae:ec:0e:cf:2b:95:0c:91:ed:08:8f:93:e6:9a:15: 26:b9:8e:d4:40:e3:91:9d:7e:2a:50:84:18:e8:40: 7e:b8:1c:5e:23:cb:b4:c9:f9:23:3b:ec:c0:12:5d: 27:db:bf:fb:40:27:9d:4b:59:52:d9:a1:b8:2d:53: f5:19:ea:81:03:1b:3f:b9:56:29:72:e3:f8:27:10: 03:3f:57:5c:01:4e:52:3b:67:bd:79:4e:0f:85:df: 4d:5d:e5:3d:c4:5b:d4:5d:df:bf:98:fa:9b:17:03: f4:0b:46:52:93:be:87:0c:6d:77:14:54:3d:d3:62: 47:e0:a1:71:ab:d2:dc:be:93:fc:43:1d:26:73:20: bd:f0:39:2b:e1:16:2f:e0:36:50:49:ce:ab:93:2f: e3:5c:57:28:dc:c2:1f:6d:3f:44:39:d6:33:ef:b4: 3f:71:68:12:b4:93:12:d6:bf:b0:c5:d9:c2:69:3e: 57:e3:0f:91:fc:0d:fb:48:b3:56:5b:cb:70:8b:41: e4:a9:e9:2e:56:4a:c9:32:c0:e8:fc:6d:ab:f0:c5: 74:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F0:7D:8A:91:8B:35:1C:B3:D9:D5:9C:8E:FD:BC:F9:C3:4F:A3:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/f746411c-82dc-320f-833f-056441f592f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 104.200.218.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:fc:81:8d:a9:cd:5a:6e:f1:fc:bf:8f:ff:61:80:03:1a:fb: 44:7c:10:58:0c:e1:10:bb:52:37:f4:8e:60:88:2f:a7:cc:ac: 97:90:74:e4:c3:33:8b:37:f9:05:eb:78:58:81:49:89:f2:c6: 89:63:c3:a2:c5:1a:d4:7e:52:71:78:e2:34:3e:16:61:7b:dd: 9a:99:be:ef:b2:24:ca:40:f8:10:b3:de:e2:12:fc:45:a8:cb: d9:af:2c:f0:47:9e:fc:cd:ab:d3:07:3e:7f:20:48:3c:61:d3: f7:4e:fd:e9:40:25:e4:00:77:e3:a9:bc:b1:14:0f:a5:1f:5c: 58:75:bf:e9:54:b4:ba:eb:fe:5e:c0:1e:71:cd:1c:8f:db:08: 0a:91:39:53:6f:47:17:54:f7:52:40:c8:88:aa:ab:be:bd:59: 59:53:95:74:d0:ca:68:f4:a6:bc:52:76:1a:2a:f7:1d:5b:5f: da:70:3e:9a:18:3a:4f:70:ed:b0:04:4d:1d:28:a5:52:fa:a3: e1:71:ae:c4:71:ff:2f:84:c7:12:2a:68:96:45:08:ad:e1:66: a5:4f:07:b8:01:e8:a1:8e:0e:de:f7:ae:cc:b5:26:3c:a5:85: 71:15:f0:1c:b0:fe:8a:d7:87:81:1c:3d:ff:64:66:1a:a4:d2: 1a:55:ab:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzCH5BH2VatogMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk MjljNWFiYjEtYmQxOC00OTM0LTg3MWQtMTg0MmFkNzY1NzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAr7HNBWDsKW34FS3p3DRxD+WFNFPb/xgTmb oFzS5zvq5U5BozTdwWCr3KKu7A7PK5UMke0Ij5PmmhUmuY7UQOORnX4qUIQY6EB+ uBxeI8u0yfkjO+zAEl0n27/7QCedS1lS2aG4LVP1GeqBAxs/uVYpcuP4JxADP1dc AU5SO2e9eU4Phd9NXeU9xFvUXd+/mPqbFwP0C0ZSk76HDG13FFQ902JH4KFxq9Lc vpP8Qx0mcyC98Dkr4RYv4DZQSc6rky/jXFco3MIfbT9EOdYz77Q/cWgStJMS1r+w xdnCaT5X4w+R/A37SLNWW8twi0HkqekuVkrJMsDo/G2r8MV08wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbwfYqRizUcs9nVnI79vPnDT6N2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvZjc0NjQxMWMtODJkYy0z MjBmLTgzM2YtMDU2NDQxZjU5MmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaMjaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJz8gY2pzVpu8fy/j/9hgAMa+0R8EFgM4RC7Ujf0jmCIL6fMrJeQdOTD M4s3+QXreFiBSYnyxoljw6LFGtR+UnF44jQ+FmF73ZqZvu+yJMpA+BCz3uIS/EWo y9mvLPBHnvzNq9MHPn8gSDxh0/dO/elAJeQAd+OpvLEUD6UfXFh1v+lUtLrr/l7A HnHNHI/bCAqROVNvRxdU91JAyIiqq769WVlTlXTQymj0prxSdhoq9x1bX9pwPpoY Ok9w7bAETR0opVL6o+FxrsRx/y+ExxIqaJZFCK3hZqVPB7gB6KGODt73rsy1Jjyl hXEV8Byw/orXh4EcPf9kZhqk0hpVqzs= -----END CERTIFICATE-----Generated at Sun Apr 27 12:58:43 2025 by rpki-client