$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/cb0085db-84a3-3eed-9a41-b2fb4a2b89f5.roa File: cb0085db-84a3-3eed-9a41-b2fb4a2b89f5.roa (raw, json) Hash identifier: qMzsYwCFAv9PvoMh4JnGhu6bj2xD9onJy9IiiBG/P8k= Subject key identifier: CC:FA:4C:27:F2:C7:F2:66:E5:C9:BE:20:B7:80:6B:FB:EC:26:1D:07 Certificate issuer: /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Certificate serial: 010D0C9F432858499829CFA5787733DB6047E580 Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/cb0085db-84a3-3eed-9a41-b2fb4a2b89f5.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 26512 IP address blocks: 104.244.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:cf:a5:78:77:33:db:60:47:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=1cc5a6c2-b110-4c2e-9dc5-b42e5a7f92f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5a:14:be:b3:e2:aa:8b:54:18:9f:56:9d:ac: 4b:96:f8:11:2e:a3:bc:89:cd:d6:70:ff:36:48:a7: 3a:36:3e:71:43:ba:87:18:d5:1d:1a:dc:ca:84:15: 1c:50:11:38:9e:a6:41:bb:a8:31:02:f9:17:f5:dc: 04:a0:c3:11:7c:5b:84:4d:ca:6a:98:43:04:6e:b8: 8e:b1:d0:03:4b:9d:cd:ee:75:48:34:01:d0:8a:a0: a0:1a:45:66:f2:7c:2b:44:0d:48:48:73:95:da:90: 70:25:74:fa:08:ff:35:fd:70:5f:bb:0a:fe:36:a2: d9:d9:a4:d1:6e:02:83:31:db:fe:91:8b:30:c7:e4: 65:03:3e:78:ec:34:e8:32:d7:41:16:ec:75:63:a4: 1c:32:45:f7:24:de:90:ea:55:eb:ef:61:80:31:d2: 17:72:81:43:99:74:4c:1c:9b:0e:ee:17:81:dd:b1: ed:53:30:82:a2:73:ff:b8:17:98:39:62:d6:cd:77: bb:a3:a1:fe:a6:55:34:ae:dd:ff:44:4c:d9:23:bf: 24:7f:ff:7f:17:1b:17:59:8f:ba:47:d8:05:e0:a5: a0:0a:dc:90:71:70:74:a1:1a:dd:5a:fc:85:36:4f: aa:5c:6e:e4:4b:fb:cb:c5:30:44:f5:72:0a:8b:e5: 0e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:FA:4C:27:F2:C7:F2:66:E5:C9:BE:20:B7:80:6B:FB:EC:26:1D:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/cb0085db-84a3-3eed-9a41-b2fb4a2b89f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl X509v3 Authority Key Identifier: keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.244.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:d6:cd:ef:ad:4f:a1:f8:fc:4b:c0:97:19:9b:77:4e:a5:96: ae:96:26:f0:a3:65:9f:85:99:42:52:f9:e9:a1:5d:2c:fe:ae: ae:e5:45:3b:cd:56:58:05:70:56:5c:ca:3d:db:25:19:da:2b: 0e:9c:13:e5:32:73:5c:07:86:5c:ef:a1:e1:a8:32:ea:01:27: 49:6e:c3:5d:f8:1c:5f:83:ac:21:be:5c:d8:93:ab:9b:fa:9d: 78:b3:da:03:85:a0:c0:38:d3:8b:67:7f:3d:b3:af:f1:55:da: 72:ea:2b:b4:13:7d:c8:63:9a:56:ac:73:d5:3d:67:a1:2b:75: 44:79:60:14:c7:41:57:9f:e6:b5:17:36:a6:2e:0d:fa:65:0b: 3b:11:d2:92:7d:75:bc:57:d0:b9:c0:80:1c:ad:be:8a:36:9b: fd:2f:27:cb:e5:4b:4d:d7:c5:e5:9e:d2:4d:72:85:48:00:78: 2b:02:13:e4:a0:f5:1b:ed:82:79:8c:f6:ae:07:92:56:67:ef: f7:03:89:2b:8e:29:a2:f4:d2:a4:3e:b2:90:b8:53:b9:80:a0: e9:ec:2a:19:e0:53:b2:a6:c9:21:4f:3a:33:9b:96:2a:8b:cd: 67:d1:89:42:e9:5c:f5:ee:91:37:69:c4:12:bf:9b:b3:56:f9: 97:ad:ee:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKc+leHcz22BH5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVmMmM4MDQtYjNiOS00YjU2LWE3MTktZGQ3MjI2MmE3 YTZkMB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk MWNjNWE2YzItYjExMC00YzJlLTlkYzUtYjQyZTVhN2Y5MmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFoUvrPiqotUGJ9WnaxLlvgRLqO8ic3WcP82 SKc6Nj5xQ7qHGNUdGtzKhBUcUBE4nqZBu6gxAvkX9dwEoMMRfFuETcpqmEMEbriO sdADS53N7nVINAHQiqCgGkVm8nwrRA1ISHOV2pBwJXT6CP81/XBfuwr+NqLZ2aTR bgKDMdv+kYswx+RlAz547DToMtdBFux1Y6QcMkX3JN6Q6lXr72GAMdIXcoFDmXRM HJsO7heB3bHtUzCConP/uBeYOWLWzXe7o6H+plU0rt3/REzZI78kf/9/FxsXWY+6 R9gF4KWgCtyQcXB0oRrdWvyFNk+qXG7kS/vLxTBE9XIKi+UOlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMz6TCfyx/Jm5cm+ILeAa/vsJh0HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNWYy YzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcyMjYyYTdhNmQvY2IwMDg1ZGItODRhMy0z ZWVkLTlhNDEtYjJmYjRhMmI4OWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjVmMmM4MDQtYjNiOS00YjU2LWE3 MTktZGQ3MjI2MmE3YTZkL2Y1ZjJjODA0LWIzYjktNGI1Ni1hNzE5LWRkNzIyNjJh N2E2ZC5jcmwwHwYDVR0jBBgwFoAUxGAfl7n2ifTPOb15P9g9I3XsQiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNWYyYzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcy MjYyYTdhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPQTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/Wze+tT6H4/EvAlxmbd06llq6WJvCjZZ+FmUJS+emhXSz+rq7lRTvN VlgFcFZcyj3bJRnaKw6cE+Uyc1wHhlzvoeGoMuoBJ0luw134HF+DrCG+XNiTq5v6 nXiz2gOFoMA404tnfz2zr/FV2nLqK7QTfchjmlasc9U9Z6ErdUR5YBTHQVef5rUX NqYuDfplCzsR0pJ9dbxX0LnAgBytvoo2m/0vJ8vlS03XxeWe0k1yhUgAeCsCE+Sg 9RvtgnmM9q4HklZn7/cDiSuOKaL00qQ+spC4U7mAoOnsKhngU7KmySFPOjObliqL zWfRiULpXPXukTdpxBK/m7NW+Zet7jk= -----END CERTIFICATE-----Generated at Mon Apr 28 12:42:08 2025 by rpki-client