$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/034976f2-b73d-31c2-a41d-907be371012c.roa File: 034976f2-b73d-31c2-a41d-907be371012c.roa (raw, json) Hash identifier: pv6nV2pdzRfatvtTu+PTv899q0XhNB2Lcqnj9sL2J6s= Subject key identifier: AD:5F:5A:72:CA:AB:21:41:AC:9B:75:02:66:1F:9C:3B:24:30:A0:38 Certificate issuer: /CN=0c3cf342-4337-44bf-ac45-d0772ad75854 Certificate serial: 010D0C9F43285849A1EF74C97B66308A021F9714 Authority key identifier: 33:E5:6D:7B:B8:6A:FB:59:72:2D:35:F7:95:9D:2A:87:95:1F:95:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/034976f2-b73d-31c2-a41d-907be371012c.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 49791 IP address blocks: 104.167.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:74:c9:7b:66:30:8a:02:1f:97:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c3cf342-4337-44bf-ac45-d0772ad75854 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=e98db34e-44b8-494a-aa82-1e8d863791bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:47:f8:ad:f7:65:9f:eb:41:58:85:ec:b1:fd: 16:af:5c:70:f1:8b:4a:de:1d:b5:9a:0f:6b:07:19: be:1e:89:5e:50:d6:04:61:1e:70:c6:1a:0e:f4:bf: 7f:cd:a7:12:2d:ab:23:a1:fd:52:f4:3b:ec:cb:ae: 57:a0:d7:88:5c:87:49:12:18:12:0e:ee:49:e2:f5: e3:20:2e:ef:8d:22:32:b9:87:07:e9:24:70:8e:da: 2e:ec:6b:2a:dd:c3:fb:25:06:e3:dc:67:99:f6:77: 30:fa:16:92:33:18:d0:23:11:af:c5:c6:1e:ac:34: eb:14:2a:4d:f5:f4:52:33:f9:4d:0c:ca:36:5f:e8: 36:bf:53:4a:b0:9c:a8:6f:92:33:60:7e:6c:9b:33: 2f:2a:fa:c3:62:9e:17:ea:23:ac:e1:ad:20:bc:70: bf:1e:ce:6b:63:43:52:51:ce:56:29:13:32:2a:02: 9e:06:e0:fe:3c:b4:6d:c0:95:b5:aa:50:e7:2a:3f: 04:04:01:fb:95:80:06:e7:1d:10:3d:d0:f3:98:82: 3d:c9:8c:ec:ba:2f:b7:66:66:22:ab:0a:f5:36:ca: d1:13:3d:a1:9a:ae:93:11:1b:9c:28:d9:38:e8:ae: 39:73:5a:ed:9b:e2:f7:09:23:1b:16:23:78:95:fc: 5c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:5F:5A:72:CA:AB:21:41:AC:9B:75:02:66:1F:9C:3B:24:30:A0:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/034976f2-b73d-31c2-a41d-907be371012c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.crl X509v3 Authority Key Identifier: keyid:33:E5:6D:7B:B8:6A:FB:59:72:2D:35:F7:95:9D:2A:87:95:1F:95:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer sbgp-ipAddrBlock: critical IPv4: 104.167.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:71:59:91:e0:44:63:48:fb:56:49:59:d5:07:fa:34:f9:82: 0b:01:4b:c6:f7:0a:7b:24:11:c7:6a:f8:14:c7:67:bd:e8:e8: 65:09:36:a1:c6:8c:9f:12:f8:77:a7:d4:f8:3c:ab:18:9a:86: 31:6f:0f:1e:ea:16:a5:15:ef:d2:28:59:f2:36:05:7f:41:9b: 09:45:ac:bb:6e:d1:13:4a:36:a7:b1:f2:54:92:91:dc:5b:3c: 1d:bd:8a:e4:99:ef:e3:7e:e8:ed:fa:68:97:d1:08:e8:60:60: ac:91:42:37:3e:13:b2:21:bc:df:83:1b:65:e3:20:30:a2:6a: 97:f6:8e:68:b4:76:d4:de:3d:2f:88:9d:a9:83:e7:4c:38:09: 67:99:73:4f:9a:ca:51:23:64:3c:93:1a:62:1c:2b:00:1e:c5: 21:00:b5:dc:f3:72:12:8a:8f:46:aa:f9:4a:06:55:ed:61:44: 73:52:85:41:95:dd:b6:8e:3e:6d:f4:74:0d:63:75:ce:c5:cc: f8:ee:84:ba:56:8f:84:4c:4e:9c:98:ea:c3:63:2a:26:22:ec: 1c:0a:99:91:4e:5a:71:72:88:2b:81:d0:fa:6f:f7:b9:b6:b6: a9:90:7e:12:ff:1c:80:02:20:6d:79:fc:18:b6:af:bf:72:5f: 64:43:a8:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh73TJe2YwigIflxQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMzY2YzNDItNDMzNy00NGJmLWFjNDUtZDA3NzJhZDc1 ODU0MB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk ZTk4ZGIzNGUtNDRiOC00OTRhLWFhODItMWU4ZDg2Mzc5MWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkf4rfdln+tBWIXssf0Wr1xw8YtK3h21mg9r Bxm+HoleUNYEYR5wxhoO9L9/zacSLasjof1S9Dvsy65XoNeIXIdJEhgSDu5J4vXj IC7vjSIyuYcH6SRwjtou7Gsq3cP7JQbj3GeZ9ncw+haSMxjQIxGvxcYerDTrFCpN 9fRSM/lNDMo2X+g2v1NKsJyob5IzYH5smzMvKvrDYp4X6iOs4a0gvHC/Hs5rY0NS Uc5WKRMyKgKeBuD+PLRtwJW1qlDnKj8EBAH7lYAG5x0QPdDzmII9yYzsui+3ZmYi qwr1NsrREz2hmq6TERucKNk46K45c1rtm+L3CSMbFiN4lfxcSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1fWnLKqyFBrJt1AmYfnDskMKA4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYzNj ZjM0Mi00MzM3LTQ0YmYtYWM0NS1kMDc3MmFkNzU4NTQvMDM0OTc2ZjItYjczZC0z MWMyLWE0MWQtOTA3YmUzNzEwMTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGMzY2YzNDItNDMzNy00NGJmLWFj NDUtZDA3NzJhZDc1ODU0LzBjM2NmMzQyLTQzMzctNDRiZi1hYzQ1LWQwNzcyYWQ3 NTg1NC5jcmwwHwYDVR0jBBgwFoAUM+Vte7hq+1lyLTX3lZ0qh5UflWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYzNjZjM0Mi00MzM3LTQ0YmYtYWM0NS1kMDc3 MmFkNzU4NTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaKfEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMZxWZHgRGNI+1ZJWdUH+jT5ggsBS8b3CnskEcdq+BTHZ73o6GUJNqHG jJ8S+Hen1Pg8qxiahjFvDx7qFqUV79IoWfI2BX9BmwlFrLtu0RNKNqex8lSSkdxb PB29iuSZ7+N+6O36aJfRCOhgYKyRQjc+E7IhvN+DG2XjIDCiapf2jmi0dtTePS+I namD50w4CWeZc0+aylEjZDyTGmIcKwAexSEAtdzzchKKj0aq+UoGVe1hRHNShUGV 3baOPm30dA1jdc7FzPjuhLpWj4RMTpyY6sNjKiYi7BwKmZFOWnFyiCuB0Ppv97m2 tqmQfhL/HIACIG15/Bi2r79yX2RDqOc= -----END CERTIFICATE-----Generated at Tue May 13 00:25:50 2025 by rpki-client