$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/32b29642-ba16-320d-b3e0-0bc5925f2e4b.roa File: 32b29642-ba16-320d-b3e0-0bc5925f2e4b.roa (raw, json) Hash identifier: 915waV+LHE1hlK3CnuNvCRC76d7Mj5OKbJC8D1dG4S0= Subject key identifier: 3D:49:F9:A1:8D:8E:06:DA:49:5E:54:0C:0D:4E:81:48:DF:2C:FF:6E Certificate issuer: /CN=2775f7c3-c238-47d5-98c9-835a28d9095e Certificate serial: 010D0C9F43285849BD001824562BDE0968621EB6 Authority key identifier: D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/32b29642-ba16-320d-b3e0-0bc5925f2e4b.roa Signing time: Sun 04 May 2025 05:41:48 +0000 ROA not before: Sun 04 May 2025 05:41:48 +0000 ROA not after: Sat 02 Aug 2025 05:41:48 +0000 asID: 26286 IP address blocks: 104.167.241.0/24 maxlen: 24 104.167.242.0/24 maxlen: 24 2602:fccf::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:00:18:24:56:2b:de:09:68:62:1e:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2775f7c3-c238-47d5-98c9-835a28d9095e Validity Not Before: May 4 05:41:48 2025 GMT Not After : Aug 2 05:41:48 2025 GMT Subject: CN=d9c0e872-2f66-4656-998a-942fdc14fe5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f8:5b:cf:33:71:2e:12:17:80:12:75:cb:1d: 01:ea:6c:29:d3:07:e4:1e:d1:4d:a8:a2:8b:05:7f: 3d:dd:28:16:94:2e:26:41:b9:14:d8:c3:5d:f7:84: ca:89:d4:28:d0:bd:84:a0:d7:66:0b:33:44:6c:f2: 85:dc:a5:9d:6e:fe:cf:94:1f:88:a8:8f:36:a3:bd: 01:f6:a8:47:5c:c6:68:b7:06:9b:a9:1a:69:c1:9d: 6b:9d:68:1c:0c:46:96:95:47:4c:9e:39:7f:4f:83: 96:d3:e4:e2:ce:76:67:ad:63:a9:e8:2f:b8:d3:e9: 47:0e:cc:96:49:04:48:6b:4d:4e:6b:8c:6f:2d:79: 1f:db:38:ae:11:78:b5:9e:14:25:29:7d:c5:d4:cb: 9a:b2:74:00:c6:d8:1d:3b:95:3c:b1:23:c8:0b:58: 15:ef:59:cb:c6:8d:5c:25:69:cb:1b:f0:93:e7:0a: 28:8b:1d:0a:27:2c:c7:ea:bc:c3:c9:af:d4:12:2c: 2f:96:4c:c7:21:2f:96:d4:06:7f:0f:e4:27:72:00: b9:58:b0:5e:92:d3:3a:24:ae:58:15:18:9f:12:4c: cf:c8:50:2f:4c:90:ad:a8:55:63:0a:d1:85:87:af: cd:39:b3:d8:98:06:e1:54:de:95:f7:09:3c:c5:84: e9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:49:F9:A1:8D:8E:06:DA:49:5E:54:0C:0D:4E:81:48:DF:2C:FF:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/32b29642-ba16-320d-b3e0-0bc5925f2e4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.crl X509v3 Authority Key Identifier: keyid:D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer sbgp-ipAddrBlock: critical IPv4: 104.167.241.0-104.167.242.255 IPv6: 2602:fccf::/37 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:53:a6:d1:af:6b:7a:50:1d:c5:4a:4d:ba:dc:53:f4:a2:58: bd:3a:5f:75:9d:97:2a:8b:8b:41:be:74:a2:84:20:ab:47:97: 67:a9:71:6d:c3:e7:9a:1a:bb:59:1b:b4:52:ff:fa:6d:59:83: 8e:d0:b7:a5:47:d6:dc:44:cd:ec:7e:23:7d:20:6f:33:6b:1a: f8:b7:f7:ea:ae:d0:5c:48:ca:e6:80:02:9b:f4:f8:74:c5:97: 4c:a7:a4:e6:76:d6:8b:dc:f8:77:a9:f9:0e:41:1c:ca:8c:2e: 19:cc:16:78:3d:d2:1a:1e:4e:bb:aa:0c:e3:d6:30:6f:c2:63: 3a:1c:b6:ed:f9:51:c2:63:44:3b:53:d5:27:ef:a3:6e:23:3a: 56:0d:e2:c9:f6:3b:b1:93:de:44:72:35:37:39:f6:6a:e4:45: ff:58:5c:03:74:63:54:6c:19:0b:ca:6d:02:e5:72:f9:00:bc: a5:17:2a:34:cf:dc:6a:6c:27:92:96:64:72:e3:a9:29:92:96: 3f:2f:a7:a0:e8:7c:93:db:cb:90:61:23:09:28:3d:99:30:cd: 16:71:39:29:d9:52:e2:cf:eb:97:41:59:1a:e9:57:37:6a:fc: cc:42:d2:e3:2b:eb:c0:11:e1:c9:2b:e4:07:2e:0e:7c:59:26: 67:1a:60:ba -----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEm9ABgkViveCWhiHrYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjc3NWY3YzMtYzIzOC00N2Q1LTk4YzktODM1YTI4ZDkw OTVlMB4XDTI1MDUwNDA1NDE0OFoXDTI1MDgwMjA1NDE0OFowLzEtMCsGA1UEAxMk ZDljMGU4NzItMmY2Ni00NjU2LTk5OGEtOTQyZmRjMTRmZTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvhbzzNxLhIXgBJ1yx0B6mwp0wfkHtFNqKKL BX893SgWlC4mQbkU2MNd94TKidQo0L2EoNdmCzNEbPKF3KWdbv7PlB+IqI82o70B 9qhHXMZotwabqRppwZ1rnWgcDEaWlUdMnjl/T4OW0+TiznZnrWOp6C+40+lHDsyW SQRIa01Oa4xvLXkf2ziuEXi1nhQlKX3F1MuasnQAxtgdO5U8sSPIC1gV71nLxo1c JWnLG/CT5wooix0KJyzH6rzDya/UEiwvlkzHIS+W1AZ/D+QncgC5WLBektM6JK5Y FRifEkzPyFAvTJCtqFVjCtGFh6/NObPYmAbhVN6V9wk8xYTprwIDAQABo4IDbTCC A2kwHQYDVR0OBBYEFD1J+aGNjgbaSV5UDA1OgUjfLP9uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNzc1 ZjdjMy1jMjM4LTQ3ZDUtOThjOS04MzVhMjhkOTA5NWUvMzJiMjk2NDItYmExNi0z MjBkLWIzZTAtMGJjNTkyNWYyZTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjc3NWY3YzMtYzIzOC00N2Q1LTk4 YzktODM1YTI4ZDkwOTVlLzI3NzVmN2MzLWMyMzgtNDdkNS05OGM5LTgzNWEyOGQ5 MDk1ZS5jcmwwHwYDVR0jBBgwFoAU0STfzH9bgNKN7P7ujM9SM461IUQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNzc1ZjdjMy1jMjM4LTQ3ZDUtOThjOS04MzVh MjhkOTA5NWUuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAUBAIAATAOMAwDBABop/ED BABop/IwDgQCAAIwCAMGAyYC/M8AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHJTptGva3pQHcVKTbrcU/Si WL06X3WdlyqLi0G+dKKEIKtHl2epcW3D55oau1kbtFL/+m1Zg47Qt6VH1txEzex+ I30gbzNrGvi39+qu0FxIyuaAApv0+HTFl0ynpOZ21ovc+Hep+Q5BHMqMLhnMFng9 0hoeTruqDOPWMG/CYzoctu35UcJjRDtT1Sfvo24jOlYN4sn2O7GT3kRyNTc59mrk Rf9YXAN0Y1RsGQvKbQLlcvkAvKUXKjTP3GpsJ5KWZHLjqSmSlj8vp6DofJPby5Bh IwkoPZkwzRZxOSnZUuLP65dBWRrpVzdq/MxC0uMr68AR4ckr5AcuDnxZJmcaYLo= -----END CERTIFICATE-----Generated at Sun May 11 10:16:14 2025 by rpki-client