$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/900359ad-8560-31f7-ab87-02e701d7668d.roa File: 900359ad-8560-31f7-ab87-02e701d7668d.roa (raw, json) Hash identifier: b7g6Iaw7Y94PF1ZNUnogJiCDKa4ed5SyTb3vKT2lCsE= Subject key identifier: DA:90:C3:62:74:10:E0:BA:04:B2:BD:8D:F1:92:A5:20:E1:00:9F:B0 Certificate issuer: /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Certificate serial: 010D0C9F43285849780F15853D3CAC75408CE468 Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/900359ad-8560-31f7-ab87-02e701d7668d.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 393336 IP address blocks: 104.193.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:15:85:3d:3c:ac:75:40:8c:e4:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=38e09f02-6b7b-4c8e-b0e8-9f6ed80df9d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:87:10:b7:cb:a0:83:87:7d:57:13:ee:3a:04: b2:f1:48:f5:25:79:43:4b:c3:8c:42:aa:0c:8c:8a: d4:31:34:10:c0:63:df:df:ee:aa:f2:b3:46:58:ee: c3:73:9f:41:8d:ae:c4:41:da:3f:8d:4f:e9:63:17: d2:72:10:cd:bd:c2:72:9c:a9:cf:40:6c:f9:6b:69: a4:6e:bd:5e:79:50:6e:ea:22:da:12:4f:fd:0b:24: b6:53:a7:ac:38:55:18:16:36:16:9a:b5:48:c6:27: 7f:67:a4:06:d2:fa:d0:2d:40:ed:1a:70:21:ed:64: 89:f6:4e:ed:2e:b6:ea:3b:03:ec:18:4c:03:fc:75: f0:eb:24:ca:36:8f:a8:66:12:5c:b7:64:52:2c:87: 59:5d:29:da:8f:e7:cd:ee:b0:bd:09:07:54:01:31: 88:87:95:b2:b7:63:df:7a:37:92:cc:83:24:23:dd: 50:65:aa:68:cb:fa:d3:8e:0c:89:c6:87:32:f3:96: c4:59:2a:b0:55:c9:00:77:f5:50:34:d4:7d:b7:dc: 25:cb:db:99:b6:16:39:16:c2:c6:eb:2d:66:ac:b0: 67:71:ef:a9:c4:1b:c1:04:59:b9:b6:b7:73:05:b5: 33:55:8b:c9:bf:02:a8:f9:18:a1:03:92:60:1f:bb: 84:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:90:C3:62:74:10:E0:BA:04:B2:BD:8D:F1:92:A5:20:E1:00:9F:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/900359ad-8560-31f7-ab87-02e701d7668d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl X509v3 Authority Key Identifier: keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer sbgp-ipAddrBlock: critical IPv4: 104.193.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:17:47:be:16:49:ee:3d:f6:67:07:14:5d:eb:bf:81:c5:57: c5:cc:31:ea:0f:f7:78:2f:ac:6b:2f:a0:e5:c2:70:c8:de:16: 51:65:9a:30:53:ce:ab:f0:1c:11:59:42:c6:45:64:7c:33:5d: f0:f1:70:c1:e5:6e:aa:53:c1:07:10:77:4f:e7:c3:84:53:ca: b4:c9:ba:46:76:4e:24:ed:89:7f:ff:ef:18:fc:60:d8:e9:81: e0:2a:87:20:58:61:64:05:92:60:39:04:6b:10:f8:88:61:d1: 5b:dc:26:9e:7a:0a:28:ee:78:9e:bc:e5:7a:49:4d:48:9d:a5: 7d:89:71:3f:29:e5:c0:b3:2c:ac:17:7d:b4:b3:71:d3:fd:bb: 5a:2c:5c:93:6b:40:c9:fc:5a:ac:ea:83:9d:ec:44:45:10:51: ed:3b:6f:c3:99:5a:1a:0d:c8:f4:3c:65:8a:55:6e:04:86:cb: 54:45:06:35:64:65:89:f9:b3:3d:a6:ec:d1:1d:c4:44:84:94: c9:9e:c3:8b:dd:64:4d:34:02:78:e2:cb:eb:1e:91:17:27:c1: d5:7f:97:9e:bb:3a:fe:64:cd:a2:fb:4b:c7:64:54:91:c6:e6: d9:a6:d5:9a:d1:11:c9:59:b4:4a:e9:90:76:80:4b:d3:53:5d: 43:4d:ad:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl4DxWFPTysdUCM5GgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk0YjJlZDgtMWEyYS00YmQxLWI3MDktNzQ3OWRiN2M0 ZWE5MB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk MzhlMDlmMDItNmI3Yi00YzhlLWIwZTgtOWY2ZWQ4MGRmOWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqocQt8ugg4d9VxPuOgSy8Uj1JXlDS8OMQqoM jIrUMTQQwGPf3+6q8rNGWO7Dc59Bja7EQdo/jU/pYxfSchDNvcJynKnPQGz5a2mk br1eeVBu6iLaEk/9CyS2U6esOFUYFjYWmrVIxid/Z6QG0vrQLUDtGnAh7WSJ9k7t LrbqOwPsGEwD/HXw6yTKNo+oZhJct2RSLIdZXSnaj+fN7rC9CQdUATGIh5Wyt2Pf ejeSzIMkI91QZapoy/rTjgyJxocy85bEWSqwVckAd/VQNNR9t9wly9uZthY5FsLG 6y1mrLBnce+pxBvBBFm5trdzBbUzVYvJvwKo+RihA5JgH7uE5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqQw2J0EOC6BLK9jfGSpSDhAJ+wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OTRi MmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5ZGI3YzRlYTkvOTAwMzU5YWQtODU2MC0z MWY3LWFiODctMDJlNzAxZDc2NjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTk0YjJlZDgtMWEyYS00YmQxLWI3 MDktNzQ3OWRiN2M0ZWE5Lzk5NGIyZWQ4LTFhMmEtNGJkMS1iNzA5LTc0NzlkYjdj NGVhOS5jcmwwHwYDVR0jBBgwFoAUkH1OvQyn9d0T/0KVHpr0mzPpeXwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85OTRiMmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5 ZGI3YzRlYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMHjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAXR74WSe499mcHFF3rv4HFV8XMMeoP93gvrGsvoOXCcMjeFlFlmjBT zqvwHBFZQsZFZHwzXfDxcMHlbqpTwQcQd0/nw4RTyrTJukZ2TiTtiX//7xj8YNjp geAqhyBYYWQFkmA5BGsQ+Ihh0VvcJp56CijueJ685XpJTUidpX2JcT8p5cCzLKwX fbSzcdP9u1osXJNrQMn8Wqzqg53sREUQUe07b8OZWhoNyPQ8ZYpVbgSGy1RFBjVk ZYn5sz2m7NEdxESElMmew4vdZE00Anjiy+sekRcnwdV/l567Ov5kzaL7S8dkVJHG 5tmm1ZrREclZtErpkHaAS9NTXUNNrQ8= -----END CERTIFICATE-----Generated at Sun Apr 27 22:16:10 2025 by rpki-client