$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c638a4ea-7b45-4ddf-8d7e-0483500e3457/55bb85af-e229-3204-8d45-55c5342b50eb.roa File: 55bb85af-e229-3204-8d45-55c5342b50eb.roa (raw, json) Hash identifier: OALJBaqK1EiP6agB7bRvhkXRz8BiZ6Nw7bSrYuA5qNI= Subject key identifier: BF:6F:18:50:C5:5B:22:FE:07:6C:72:2C:4A:DE:53:5D:3C:87:32:9A Certificate issuer: /CN=c638a4ea-7b45-4ddf-8d7e-0483500e3457 Certificate serial: 010D0C9F432858499AF472B49D790880B2967F00 Authority key identifier: 1D:F1:22:25:80:48:59:A8:B3:0D:CC:20:FA:70:E1:A6:EE:7E:68:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c638a4ea-7b45-4ddf-8d7e-0483500e3457.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c638a4ea-7b45-4ddf-8d7e-0483500e3457/55bb85af-e229-3204-8d45-55c5342b50eb.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 51082 IP address blocks: 104.218.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c638a4ea-7b45-4ddf-8d7e-0483500e3457/c638a4ea-7b45-4ddf-8d7e-0483500e3457.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c638a4ea-7b45-4ddf-8d7e-0483500e3457/c638a4ea-7b45-4ddf-8d7e-0483500e3457.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c638a4ea-7b45-4ddf-8d7e-0483500e3457.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:72:b4:9d:79:08:80:b2:96:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c638a4ea-7b45-4ddf-8d7e-0483500e3457 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=2ace2dec-a97a-44e2-9e80-e548a7bf4aca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:92:b4:6c:c2:46:58:f7:9b:2a:f7:77:3a:fe: 9b:68:40:8c:e6:0a:cd:6d:95:95:6f:40:9b:40:09: 23:1a:ec:70:47:a2:e3:46:14:fb:0e:d0:75:cb:f2: 7f:7d:24:eb:26:70:ec:44:b6:bd:50:e0:34:d6:bc: a1:19:02:ea:a4:24:47:04:ec:16:46:10:ca:7a:87: e1:f5:5d:29:a9:d7:80:cc:3e:01:b8:4e:a7:92:c2: 3d:12:c0:3e:bd:8e:00:8d:1e:72:2b:87:43:39:b4: 5f:74:8b:d3:a4:9b:d8:7b:4a:27:ef:19:68:42:50: 19:e1:40:5e:d0:6d:24:d0:71:56:4a:b5:ef:0d:16: 40:a1:7d:8c:46:4d:62:4d:ed:df:83:e1:1f:ae:37: ec:68:99:06:f0:e5:a1:c5:6d:fc:c3:ee:17:90:02: 25:27:20:47:fb:b1:82:a8:0f:e8:4d:39:0c:95:a6: 61:f5:01:d6:6a:7c:86:5f:41:4a:50:3e:b7:ef:c9: 5e:8c:1b:51:ee:cc:c0:33:25:07:a6:81:8a:68:a8: c5:bb:31:11:df:77:43:a7:61:41:13:b0:21:6c:aa: 33:98:78:23:41:b9:b7:e0:bb:12:b7:53:0c:40:d6: 49:6e:6e:df:e7:57:4d:2c:91:0d:b0:d2:57:a8:d8: 58:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:6F:18:50:C5:5B:22:FE:07:6C:72:2C:4A:DE:53:5D:3C:87:32:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c638a4ea-7b45-4ddf-8d7e-0483500e3457/55bb85af-e229-3204-8d45-55c5342b50eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c638a4ea-7b45-4ddf-8d7e-0483500e3457/c638a4ea-7b45-4ddf-8d7e-0483500e3457.crl X509v3 Authority Key Identifier: keyid:1D:F1:22:25:80:48:59:A8:B3:0D:CC:20:FA:70:E1:A6:EE:7E:68:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c638a4ea-7b45-4ddf-8d7e-0483500e3457.cer sbgp-ipAddrBlock: critical IPv4: 104.218.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:f2:8d:eb:01:b2:19:9f:28:39:7d:af:ae:81:55:01:00:c2: ae:3c:6a:c9:19:d1:e3:c8:39:35:b4:c2:eb:f3:61:cd:10:b2: e3:ee:17:8d:33:27:34:67:79:5c:4c:51:0c:32:48:c5:38:3c: d8:ac:9b:e6:b5:e2:a7:86:39:cc:95:5e:4b:14:5c:0b:aa:e2: 83:0a:bf:fa:06:0f:78:b3:d4:eb:8e:ad:89:2f:43:07:ae:8b: b2:e8:d8:c2:7c:5c:0b:33:61:2e:28:a5:35:bc:fe:9a:a1:59: f2:62:e3:91:a7:e0:ef:62:f4:69:ad:cc:17:71:98:cf:de:38: 60:4f:44:68:9b:58:08:51:6c:8f:2c:aa:61:20:5e:1f:14:d8: 84:c6:80:e6:6b:9f:2f:08:40:c0:a2:81:78:ff:a2:25:b9:4b: 09:e1:d3:61:09:70:f1:59:b5:c4:eb:8f:9b:a0:3f:a9:a3:3a: 80:62:9c:3d:d8:ba:bc:29:d9:cc:f4:de:e1:e7:6b:83:66:94: a4:15:03:b2:b9:1a:f0:58:d1:c8:ca:71:c0:d9:da:5d:b4:f4: d3:27:7c:a4:86:a3:0b:af:15:ed:ce:74:45:60:cc:6c:bf:e5: 57:14:5b:c0:1a:5a:fd:c4:e3:a0:b3:b2:ea:35:ff:cd:cd:f9: 17:08:cf:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9HK0nXkIgLKWfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzYzOGE0ZWEtN2I0NS00ZGRmLThkN2UtMDQ4MzUwMGUz NDU3MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk MmFjZTJkZWMtYTk3YS00NGUyLTllODAtZTU0OGE3YmY0YWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJK0bMJGWPebKvd3Ov6baECM5grNbZWVb0Cb QAkjGuxwR6LjRhT7DtB1y/J/fSTrJnDsRLa9UOA01ryhGQLqpCRHBOwWRhDKeofh 9V0pqdeAzD4BuE6nksI9EsA+vY4AjR5yK4dDObRfdIvTpJvYe0on7xloQlAZ4UBe 0G0k0HFWSrXvDRZAoX2MRk1iTe3fg+EfrjfsaJkG8OWhxW38w+4XkAIlJyBH+7GC qA/oTTkMlaZh9QHWanyGX0FKUD6378lejBtR7szAMyUHpoGKaKjFuzER33dDp2FB E7AhbKozmHgjQbm34LsSt1MMQNZJbm7f51dNLJENsNJXqNhYBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9vGFDFWyL+B2xyLEreU108hzKaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNjM4 YTRlYS03YjQ1LTRkZGYtOGQ3ZS0wNDgzNTAwZTM0NTcvNTViYjg1YWYtZTIyOS0z MjA0LThkNDUtNTVjNTM0MmI1MGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzYzOGE0ZWEtN2I0NS00ZGRmLThk N2UtMDQ4MzUwMGUzNDU3L2M2MzhhNGVhLTdiNDUtNGRkZi04ZDdlLTA0ODM1MDBl MzQ1Ny5jcmwwHwYDVR0jBBgwFoAUHfEiJYBIWaizDcwg+nDhpu5+aCgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNjM4YTRlYS03YjQ1LTRkZGYtOGQ3ZS0wNDgz NTAwZTM0NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaNrsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInyjesBshmfKDl9r66BVQEAwq48askZ0ePIOTW0wuvzYc0QsuPuF40z JzRneVxMUQwySMU4PNism+a14qeGOcyVXksUXAuq4oMKv/oGD3iz1OuOrYkvQweu i7Lo2MJ8XAszYS4opTW8/pqhWfJi45Gn4O9i9GmtzBdxmM/eOGBPRGibWAhRbI8s qmEgXh8U2ITGgOZrny8IQMCigXj/oiW5Swnh02EJcPFZtcTrj5ugP6mjOoBinD3Y urwp2cz03uHna4NmlKQVA7K5GvBY0cjKccDZ2l209NMnfKSGowuvFe3OdEVgzGy/ 5VcUW8AaWv3E46Czsuo1/83N+RcIz84= -----END CERTIFICATE-----Generated at Mon Apr 28 00:26:13 2025 by rpki-client