$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/643b1254-d7f1-376e-9ab7-2d0174638962.roa File: 643b1254-d7f1-376e-9ab7-2d0174638962.roa (raw, json) Hash identifier: tjMQVoOEXkL/IbQxdtUIExh/eDfq7MFudGrfRr5iDdc= Subject key identifier: 7D:2B:75:54:BC:FC:DB:42:25:3D:98:75:B9:5B:E8:0E:89:94:E5:11 Certificate issuer: /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Certificate serial: 010D0C9F4328584981D457AE65C15BA9FD0C2D00 Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/643b1254-d7f1-376e-9ab7-2d0174638962.roa Signing time: Sun 13 Apr 2025 01:00:44 +0000 ROA not before: Sun 13 Apr 2025 01:00:44 +0000 ROA not after: Sat 12 Jul 2025 01:00:44 +0000 asID: 397423 IP address blocks: 104.245.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:81:d4:57:ae:65:c1:5b:a9:fd:0c:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Validity Not Before: Apr 13 01:00:44 2025 GMT Not After : Jul 12 01:00:44 2025 GMT Subject: CN=6d710b58-99c1-48ae-927c-02fbcacb2d83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:2c:74:c0:9c:05:59:18:8a:21:6d:49:47:74: 47:8e:f4:3a:31:96:4e:17:f7:9d:55:b5:5a:16:af: 15:d1:d0:e8:43:96:f2:af:97:d0:2f:3a:69:52:44: 32:ed:e8:57:8a:02:9c:3c:0c:46:60:4f:64:09:0f: 4c:f3:05:42:0e:10:cc:8a:78:a7:9b:1e:73:93:b6: 6f:ed:3c:ef:4e:31:18:29:68:28:41:17:3b:b4:c9: ba:7b:06:cd:2d:ed:27:31:74:f4:1a:1c:34:52:96: f3:80:87:0d:45:d2:cd:da:79:62:00:09:b7:dd:ab: 8a:37:c7:44:4b:21:4e:4d:1d:54:47:65:e8:d1:8a: 32:3f:a1:a4:5f:77:11:85:31:dc:21:f8:69:ca:8a: 41:1f:8c:74:55:c7:25:eb:48:a2:5e:49:bb:bd:bf: ff:34:55:24:cd:3c:4e:5f:c1:ac:4c:10:82:08:e9: 3c:d1:ef:09:fb:a4:e2:f0:d6:7c:ed:03:23:75:4d: bf:f3:4d:8d:ce:87:1e:9d:e2:43:e3:12:45:c3:de: 35:c9:bf:f5:5b:3b:1a:f2:2c:ff:45:8a:52:37:b2: 33:e2:5a:ee:5e:6c:07:8a:b6:95:39:d1:0f:f1:cf: 27:8e:22:20:84:79:42:93:db:8f:91:03:b2:e2:d7: 7c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:2B:75:54:BC:FC:DB:42:25:3D:98:75:B9:5B:E8:0E:89:94:E5:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/643b1254-d7f1-376e-9ab7-2d0174638962.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl X509v3 Authority Key Identifier: keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer sbgp-ipAddrBlock: critical IPv4: 104.245.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:84:42:d3:85:7b:76:08:ed:ef:6f:0e:5b:08:d7:12:11:63: 0b:53:d2:d9:ef:3b:d9:86:a6:21:bb:df:12:7e:8d:34:84:40: 39:b9:5e:d2:1d:f9:86:82:a8:8e:76:5d:d1:29:18:54:13:b5: 64:ef:ae:72:ee:aa:4b:c3:19:5f:1f:c4:b4:ab:25:81:d1:94: a1:1e:a9:60:59:b4:d0:a5:7e:19:34:1a:52:66:f5:2e:5f:2e: 67:09:33:ca:9f:bc:7c:f6:59:ed:e4:7c:3f:9e:aa:c5:a1:22: bb:e8:72:27:ad:e1:5b:1f:48:6a:0e:90:56:d7:d9:bf:f9:05: 09:e6:1e:e9:f9:be:61:42:d6:4b:af:42:c6:0a:e0:b3:2c:80: a8:9e:60:62:d8:31:8e:9f:2a:6c:f6:58:4a:f1:aa:4d:6f:6d: 34:3e:29:5d:3b:9f:6d:6d:8a:de:d9:7c:86:ea:56:88:59:4f: 14:9f:ce:8a:9f:55:ea:b9:65:30:58:5b:63:1a:ae:4a:b8:53: d9:62:3d:79:d8:2e:0c:65:dc:b6:57:fb:36:b7:11:3d:2b:b6: b9:5b:4f:94:73:52:5e:97:28:d7:0c:da:93:f8:64:44:90:34: b9:8c:db:9a:65:4a:5d:80:96:75:50:98:eb:1b:54:fd:c8:82: d6:46:96:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmB1FeuZcFbqf0MLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YWFmMTEtMWM3NC00OTZlLTk5YzYtNjE1MmNiMjky Yjg2MB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk NmQ3MTBiNTgtOTljMS00OGFlLTkyN2MtMDJmYmNhY2IyZDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Sx0wJwFWRiKIW1JR3RHjvQ6MZZOF/edVbVa Fq8V0dDoQ5byr5fQLzppUkQy7ehXigKcPAxGYE9kCQ9M8wVCDhDMininmx5zk7Zv 7TzvTjEYKWgoQRc7tMm6ewbNLe0nMXT0Ghw0UpbzgIcNRdLN2nliAAm33auKN8dE SyFOTR1UR2Xo0YoyP6GkX3cRhTHcIfhpyopBH4x0Vccl60iiXkm7vb//NFUkzTxO X8GsTBCCCOk80e8J+6Ti8NZ87QMjdU2/802NzoceneJD4xJFw941yb/1Wzsa8iz/ RYpSN7Iz4lruXmwHiraVOdEP8c8njiIghHlCk9uPkQOy4td8cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH0rdVS8/NtCJT2Ydblb6A6JlOURMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlh YWYxMS0xYzc0LTQ5NmUtOTljNi02MTUyY2IyOTJiODYvNjQzYjEyNTQtZDdmMS0z NzZlLTlhYjctMmQwMTc0NjM4OTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YWFmMTEtMWM3NC00OTZlLTk5 YzYtNjE1MmNiMjkyYjg2LzVkOWFhZjExLTFjNzQtNDk2ZS05OWM2LTYxNTJjYjI5 MmI4Ni5jcmwwHwYDVR0jBBgwFoAUvf1qpElM4JfqWhVE4pRpobkfBIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlhYWYxMS0xYzc0LTQ5NmUtOTljNi02MTUy Y2IyOTJiODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPX0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+EQtOFe3YI7e9vDlsI1xIRYwtT0tnvO9mGpiG73xJ+jTSEQDm5XtId +YaCqI52XdEpGFQTtWTvrnLuqkvDGV8fxLSrJYHRlKEeqWBZtNClfhk0GlJm9S5f LmcJM8qfvHz2We3kfD+eqsWhIrvociet4VsfSGoOkFbX2b/5BQnmHun5vmFC1kuv QsYK4LMsgKieYGLYMY6fKmz2WErxqk1vbTQ+KV07n21tit7ZfIbqVohZTxSfzoqf Veq5ZTBYW2Markq4U9liPXnYLgxl3LZX+za3ET0rtrlbT5RzUl6XKNcM2pP4ZESQ NLmM25plSl2AlnVQmOsbVP3IgtZGlrE= -----END CERTIFICATE-----Generated at Sat Apr 26 19:09:10 2025 by rpki-client