$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/f2dcfaef-7a0d-3b67-b729-b755b39db468.roa File: f2dcfaef-7a0d-3b67-b729-b755b39db468.roa (raw, json) Hash identifier: VjtLkWhk8CfwZtTDfilBL7Ozd6Rg26tVfVWsY8rU4UQ= Subject key identifier: 73:E8:FA:59:BC:FC:54:28:1A:BA:EF:63:01:16:AB:CA:62:B2:D8:E5 Certificate issuer: /CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Certificate serial: 010D0C9F43285848E9CBEA778693961D4D4B9300 Authority key identifier: BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/f2dcfaef-7a0d-3b67-b729-b755b39db468.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 396018 IP address blocks: 104.237.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:ea:77:86:93:96:1d:4d:4b:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=0e3d5166-db9a-4516-8b58-e002ea1f9bd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:37:5d:85:36:c9:89:04:be:a0:e8:2e:91:e8: 0e:93:47:9b:37:11:c5:3f:f4:d8:14:9b:81:3b:2f: d1:e7:77:7d:37:85:6d:72:cd:60:65:b7:e7:33:8c: 77:bd:a7:fe:29:13:06:c5:dc:a2:52:62:ae:26:e2: 42:03:4a:a0:37:12:31:c0:bf:ab:c9:bb:a2:24:41: 2f:ca:8d:a2:c4:8b:ad:bd:35:c1:f3:60:59:d7:f8: 68:51:63:44:23:7d:d7:da:88:c0:55:c9:e7:77:65: 7a:a0:39:7b:6b:f9:26:52:66:d4:ee:77:6a:86:e0: 16:ed:81:70:84:8e:72:ec:9f:f2:b1:ef:70:70:7b: b3:d7:86:96:de:0e:d7:8c:2f:56:b6:ba:59:a5:8e: 17:94:c8:b1:56:30:b5:68:92:ef:e1:a3:2e:b4:0c: ee:de:6b:43:9b:0b:40:ae:e2:cd:bf:d7:55:3b:1a: 7f:86:6d:89:4c:96:ac:b8:d3:e6:ce:e8:80:cc:ef: ed:1c:d7:a5:7d:6e:a7:cb:f9:0c:c6:a1:ef:47:85: 07:04:2c:48:f9:2c:cd:84:d2:8c:21:a7:4c:4f:63: 82:ca:93:3c:2b:51:26:2b:47:45:ee:84:bf:f7:27: 04:18:10:d2:94:a9:bb:9e:03:01:c6:a0:73:8e:81: 07:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E8:FA:59:BC:FC:54:28:1A:BA:EF:63:01:16:AB:CA:62:B2:D8:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/f2dcfaef-7a0d-3b67-b729-b755b39db468.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl X509v3 Authority Key Identifier: keyid:BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer sbgp-ipAddrBlock: critical IPv4: 104.237.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:e8:33:a3:cf:5a:5b:42:f6:5b:50:83:48:b0:b5:16:87:59: 1c:6d:74:03:b2:81:29:67:99:bd:61:54:34:2d:73:8b:d9:94: db:d3:e0:e7:16:8d:8e:79:0b:9e:c0:49:24:92:ef:02:f8:eb: e2:ca:95:51:d1:18:29:b8:50:d9:c1:37:40:ec:1d:25:41:a1: f9:3d:d3:1b:8e:24:f7:fd:48:10:79:34:c4:ee:52:ad:6f:7e: 8c:be:0d:58:14:bd:32:17:20:93:67:45:04:20:06:78:c9:ea: 60:38:cf:39:2c:e5:0a:01:ab:5e:f9:69:69:bd:d0:e9:70:7a: 2a:4f:bf:3a:1f:63:c4:e8:91:50:ef:02:90:6f:c4:25:11:05: 89:19:d5:55:85:47:2a:a0:b1:b3:13:a8:19:eb:50:fe:66:3b: 75:56:14:06:2f:3a:42:e2:45:3a:3b:48:9d:c2:86:52:67:ee: e4:10:44:7b:eb:a9:6e:99:dc:f8:f2:27:5f:82:1e:97:74:7d: d0:f0:75:0b:8f:49:e6:a8:57:cf:d9:16:4e:13:91:c3:61:37: cb:05:5d:cd:e8:3d:d5:88:eb:c7:d1:9a:06:af:02:a4:96:a8: a1:9e:be:e5:aa:a0:b8:3c:82:34:5a:0a:73:e2:64:8b:22:e0: a8:79:4f:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy+p3hpOWHU1LkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUxZTU1YzEtYWQ4Zi00YjE4LWEwMGUtMGE4ZGYxYmVj MTU1MB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk MGUzZDUxNjYtZGI5YS00NTE2LThiNTgtZTAwMmVhMWY5YmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TddhTbJiQS+oOgukegOk0ebNxHFP/TYFJuB Oy/R53d9N4Vtcs1gZbfnM4x3vaf+KRMGxdyiUmKuJuJCA0qgNxIxwL+rybuiJEEv yo2ixIutvTXB82BZ1/hoUWNEI33X2ojAVcnnd2V6oDl7a/kmUmbU7ndqhuAW7YFw hI5y7J/yse9wcHuz14aW3g7XjC9WtrpZpY4XlMixVjC1aJLv4aMutAzu3mtDmwtA ruLNv9dVOxp/hm2JTJasuNPmzuiAzO/tHNelfW6ny/kMxqHvR4UHBCxI+SzNhNKM IadMT2OCypM8K1EmK0dF7oS/9ycEGBDSlKm7ngMBxqBzjoEHTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPo+lm8/FQoGrrvYwEWq8pistjlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NTFl NTVjMS1hZDhmLTRiMTgtYTAwZS0wYThkZjFiZWMxNTUvZjJkY2ZhZWYtN2EwZC0z YjY3LWI3MjktYjc1NWIzOWRiNDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDUxZTU1YzEtYWQ4Zi00YjE4LWEw MGUtMGE4ZGYxYmVjMTU1LzQ1MWU1NWMxLWFkOGYtNGIxOC1hMDBlLTBhOGRmMWJl YzE1NS5jcmwwHwYDVR0jBBgwFoAUu5jk8Qfoypch1BHov4c3CYbe8KcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80NTFlNTVjMS1hZDhmLTRiMTgtYTAwZS0wYThk ZjFiZWMxNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaO0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7oM6PPWltC9ltQg0iwtRaHWRxtdAOygSlnmb1hVDQtc4vZlNvT4OcW jY55C57ASSSS7wL46+LKlVHRGCm4UNnBN0DsHSVBofk90xuOJPf9SBB5NMTuUq1v foy+DVgUvTIXIJNnRQQgBnjJ6mA4zzks5QoBq175aWm90OlweipPvzofY8TokVDv ApBvxCURBYkZ1VWFRyqgsbMTqBnrUP5mO3VWFAYvOkLiRTo7SJ3ChlJn7uQQRHvr qW6Z3PjyJ1+CHpd0fdDwdQuPSeaoV8/ZFk4TkcNhN8sFXc3oPdWI68fRmgavAqSW qKGevuWqoLg8gjRaCnPiZIsi4Kh5T8A= -----END CERTIFICATE-----Generated at Wed May 7 23:19:15 2025 by rpki-client