$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/750aa516-d178-3a5d-a10f-6629232da190.roa File: 750aa516-d178-3a5d-a10f-6629232da190.roa (raw, json) Hash identifier: W4OX8Ffpz/Ous/oss8yi6zZEyLvhKAbn4LAGvueBmdo= Subject key identifier: 71:EB:06:29:17:07:6F:D3:8F:98:0B:CE:98:AF:9B:BE:D1:98:98:0B Certificate issuer: /CN=bb49c202-f644-4fa6-8a36-084312761f72 Certificate serial: 010D0C9F43285849D42FB6EB2357093BA8354700 Authority key identifier: CF:B3:27:7C:51:09:97:90:36:B3:FB:CF:B2:8C:86:C0:AB:F0:6B:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/750aa516-d178-3a5d-a10f-6629232da190.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 20473 IP address blocks: 104.245.232.0/21 maxlen: 24 172.98.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/bb49c202-f644-4fa6-8a36-084312761f72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/bb49c202-f644-4fa6-8a36-084312761f72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:b6:eb:23:57:09:3b:a8:35:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb49c202-f644-4fa6-8a36-084312761f72 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=0a0df568-ff07-410c-b58c-05599341dfac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a3:14:42:40:d5:65:c2:56:7a:9a:ac:48:ab: a0:88:ce:b9:bd:4a:93:18:43:7b:17:51:18:7b:64: 72:c3:eb:d5:8d:2b:7c:e4:36:89:fc:42:c7:8b:3e: 20:8d:1f:06:84:cb:3d:95:da:af:13:f0:79:7e:02: b8:e8:bc:28:ac:0f:bf:05:42:d3:4f:b5:b1:bc:9d: e8:83:47:9a:4e:4c:b6:35:22:cb:dc:c4:6e:a7:6a: 8c:78:2e:d0:5f:fb:57:e0:8e:91:48:3d:f5:53:45: 4e:58:1b:dd:51:48:77:83:fd:ec:81:ee:ae:a6:76: 4e:b7:14:fe:01:2c:b7:12:e3:87:c7:54:ae:66:61: 0d:f4:a3:8d:c2:92:3f:08:2c:93:19:86:66:a2:fb: 5c:73:86:55:16:78:f6:f4:ec:4a:7b:4f:57:25:71: 29:b0:85:df:1d:46:89:35:2c:b0:8c:d7:ed:c2:a5: 72:80:d2:19:b8:a5:9a:ed:45:09:44:9f:15:e6:ca: f4:2b:48:2f:7d:29:8b:21:b0:61:1e:a3:97:d3:fd: 93:9a:e4:24:7f:2c:90:58:f6:15:be:7b:0a:58:3a: 93:24:1e:33:39:d1:79:ba:1e:52:95:76:83:16:fc: 2a:ef:35:0c:98:4d:54:51:1d:a8:4e:89:e8:8e:b7: 57:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:EB:06:29:17:07:6F:D3:8F:98:0B:CE:98:AF:9B:BE:D1:98:98:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/750aa516-d178-3a5d-a10f-6629232da190.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/bb49c202-f644-4fa6-8a36-084312761f72.crl X509v3 Authority Key Identifier: keyid:CF:B3:27:7C:51:09:97:90:36:B3:FB:CF:B2:8C:86:C0:AB:F0:6B:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72.cer sbgp-ipAddrBlock: critical IPv4: 104.245.232.0/21 172.98.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:46:60:bc:d2:73:c0:a4:4b:bb:96:8e:fb:c8:55:7d:12:c6: c4:aa:3e:29:e2:ee:ae:f9:9e:32:31:a8:40:09:25:65:36:d9: ce:b0:d9:f4:53:51:4c:2c:35:85:32:39:e9:53:8f:33:e2:89: 38:fe:74:42:b6:f1:70:a1:f6:e1:46:fc:30:69:61:cb:ad:de: 71:76:14:23:38:84:79:cb:05:21:1b:62:51:40:77:43:33:64: 16:8b:fb:58:ea:f3:59:ed:e1:29:65:d7:a7:19:b0:8c:31:45: ca:0c:77:88:52:6b:7f:26:9d:a0:bd:01:34:28:2f:60:2e:3a: 2e:6c:8a:32:00:0e:6d:ed:cf:77:f9:7b:1f:e8:7e:a0:c0:51: 0a:2f:3c:81:e7:a2:68:28:b0:ef:e0:b5:c8:95:b4:09:d8:78: e5:ee:c1:6d:4a:38:b8:f7:1a:37:3a:8b:fe:fb:2c:b0:49:75: d8:bc:ec:44:b0:99:e8:76:ff:7b:15:e9:76:9a:5e:fd:01:90: d6:46:6b:60:4a:4f:e2:4f:49:7c:5e:b1:f4:cd:0b:2c:33:e3: 2a:fd:cc:c0:e3:75:5a:0f:a0:b0:6a:da:cf:e3:0f:1b:b9:72: af:65:8b:96:ae:96:3e:ba:d1:be:25:56:b4:08:c3:58:00:29: e3:b2:e0:c3 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnUL7brI1cJO6g1RwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmI0OWMyMDItZjY0NC00ZmE2LThhMzYtMDg0MzEyNzYx ZjcyMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MGEwZGY1NjgtZmYwNy00MTBjLWI1OGMtMDU1OTkzNDFkZmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6MUQkDVZcJWepqsSKugiM65vUqTGEN7F1EY e2Ryw+vVjSt85DaJ/ELHiz4gjR8GhMs9ldqvE/B5fgK46LworA+/BULTT7WxvJ3o g0eaTky2NSLL3MRup2qMeC7QX/tX4I6RSD31U0VOWBvdUUh3g/3sge6upnZOtxT+ ASy3EuOHx1SuZmEN9KONwpI/CCyTGYZmovtcc4ZVFnj29OxKe09XJXEpsIXfHUaJ NSywjNftwqVygNIZuKWa7UUJRJ8V5sr0K0gvfSmLIbBhHqOX0/2TmuQkfyyQWPYV vnsKWDqTJB4zOdF5uh5SlXaDFvwq7zUMmE1UUR2oTonojrdXQQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHHrBikXB2/Tj5gLzpivm77RmJgLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iYjQ5 YzIwMi1mNjQ0LTRmYTYtOGEzNi0wODQzMTI3NjFmNzIvNzUwYWE1MTYtZDE3OC0z YTVkLWExMGYtNjYyOTIzMmRhMTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmI0OWMyMDItZjY0NC00ZmE2LThh MzYtMDg0MzEyNzYxZjcyL2JiNDljMjAyLWY2NDQtNGZhNi04YTM2LTA4NDMxMjc2 MWY3Mi5jcmwwHwYDVR0jBBgwFoAUz7MnfFEJl5A2s/vPsoyGwKvwa6gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iYjQ5YzIwMi1mNjQ0LTRmYTYtOGEzNi0wODQz MTI3NjFmNzIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDaPXoAwQD rGLQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHVGYLzSc8CkS7uWjvvIVX0SxsSqPini7q75njIxqEAJJWU2 2c6w2fRTUUwsNYUyOelTjzPiiTj+dEK28XCh9uFG/DBpYcut3nF2FCM4hHnLBSEb YlFAd0MzZBaL+1jq81nt4Sll16cZsIwxRcoMd4hSa38mnaC9ATQoL2AuOi5sijIA Dm3tz3f5ex/ofqDAUQovPIHnomgosO/gtciVtAnYeOXuwW1KOLj3Gjc6i/77LLBJ ddi87ESwmeh2/3sV6XaaXv0BkNZGa2BKT+JPSXxesfTNCywz4yr9zMDjdVoPoLBq 2s/jDxu5cq9li5aulj660b4lVrQIw1gAKeOy4MM= -----END CERTIFICATE-----Generated at Mon May 12 17:45:21 2025 by rpki-client