$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/9145fb5a-a667-3a3d-9d91-96a829b1d736.roa File: 9145fb5a-a667-3a3d-9d91-96a829b1d736.roa (raw, json) Hash identifier: XiiSnHEtvKm8exHCfqTvkb6m5PnZ4cqpbCKR/JQnG/0= Subject key identifier: 3A:54:97:12:EB:D0:06:92:5A:D4:63:C3:AF:8C:F4:E2:A1:88:D9:D2 Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7 Certificate serial: 010D0C9F432858499F24CB5287B2A55C7CEBDE00 Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/9145fb5a-a667-3a3d-9d91-96a829b1d736.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36040 IP address blocks: 104.237.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:cb:52:87:b2:a5:5c:7c:eb:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=5f89e290-be4c-4d25-8d1d-1fe95b170f1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:24:c7:96:05:67:97:cd:bd:97:9c:ea:15:d3: 32:2a:09:88:44:99:14:03:45:2a:be:69:9a:55:df: e2:3d:54:92:c3:81:85:75:e4:6a:65:59:00:42:3e: 09:5e:12:95:64:82:71:ac:94:81:4f:5e:8c:4f:c9: 44:39:70:9d:49:2f:48:c0:cf:ea:96:53:38:82:1a: 27:a5:a7:81:b7:f1:46:15:78:b2:46:f3:f6:88:38: 2b:12:0d:d0:48:7b:af:93:6d:29:60:7a:48:72:a5: 3f:27:4c:94:d2:ff:74:af:31:c7:c1:ab:cd:d1:66: 02:ea:de:62:30:03:91:1e:35:30:13:ee:9b:0b:86: b0:ac:f1:94:61:cf:c9:00:78:3b:fa:62:1b:07:f3: e3:d5:55:fc:39:cf:98:de:d7:f3:96:4f:3f:50:6b: 2c:63:b8:dd:58:d1:ac:59:96:b7:89:14:f5:d0:82: c7:2a:00:94:aa:aa:87:2b:ca:94:d7:ad:50:25:d9: 06:ba:75:fa:7b:2a:6e:27:cb:20:ac:ca:b5:7b:8d: 74:b4:ad:3c:f1:84:11:04:e0:f3:bb:2f:da:94:a1: de:a0:3c:4d:48:71:4e:4d:6d:09:90:6c:cd:64:49: a7:5c:be:a3:a1:d3:ac:87:cd:7d:1b:b4:32:21:62: 66:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:54:97:12:EB:D0:06:92:5A:D4:63:C3:AF:8C:F4:E2:A1:88:D9:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/9145fb5a-a667-3a3d-9d91-96a829b1d736.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl X509v3 Authority Key Identifier: keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer sbgp-ipAddrBlock: critical IPv4: 104.237.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:7c:a7:01:13:c1:7c:09:07:d1:ea:48:02:ab:6b:c6:9b:78: 50:85:8b:40:54:60:ca:c8:03:16:12:f6:07:e2:08:89:1f:d6: ef:23:36:ef:fc:35:85:45:5b:21:33:ff:3d:b1:9d:2c:08:b6: 89:c7:b1:63:c0:1a:77:35:d8:74:b1:b7:d0:32:e8:0e:a7:62: a7:64:e4:3b:06:a8:0d:1a:b2:6e:2e:60:c1:43:10:e2:24:10: 73:d6:06:c0:13:0f:9f:96:be:c7:e4:72:f2:78:e5:18:f1:ec: a7:c4:a4:18:7a:9a:d7:0e:7d:da:c7:41:21:25:02:83:62:c3: 71:f9:4e:e6:42:ea:d5:b9:54:eb:0e:d5:bb:0b:e4:84:6a:1c: 87:64:13:b8:6d:54:1b:4e:ce:1a:35:91:4f:53:fe:6b:45:53: 68:5b:de:dc:6a:53:e4:5b:4e:e8:d9:0e:a5:63:c1:0a:15:81: ea:8e:06:69:f9:cd:5e:ac:c1:d9:2c:31:27:d9:09:a3:cb:2a: fd:67:7a:6d:f5:25:38:d6:86:5e:bc:60:6b:1f:e7:df:84:00: 79:64:d1:2e:5f:56:92:66:ee:5f:5f:13:6b:35:02:9e:6c:43: 64:b2:0f:9f:e7:43:0c:ee:ba:6b:44:10:13:89:63:f8:0a:74: 4d:0f:08:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJMtSh7KlXHzr3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3 MmI3MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NWY4OWUyOTAtYmU0Yy00ZDI1LThkMWQtMWZlOTViMTcwZjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiTHlgVnl829l5zqFdMyKgmIRJkUA0Uqvmma Vd/iPVSSw4GFdeRqZVkAQj4JXhKVZIJxrJSBT16MT8lEOXCdSS9IwM/qllM4ghon paeBt/FGFXiyRvP2iDgrEg3QSHuvk20pYHpIcqU/J0yU0v90rzHHwavN0WYC6t5i MAORHjUwE+6bC4awrPGUYc/JAHg7+mIbB/Pj1VX8Oc+Y3tfzlk8/UGssY7jdWNGs WZa3iRT10ILHKgCUqqqHK8qU161QJdkGunX6eypuJ8sgrMq1e410tK088YQRBODz uy/alKHeoDxNSHFOTW0JkGzNZEmnXL6jodOsh819G7QyIWJm7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpUlxLr0AaSWtRjw6+M9OKhiNnSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvOTE0NWZiNWEtYTY2Ny0z YTNkLTlkOTEtOTZhODI5YjFkNzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0 NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2 ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO2rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIR8pwETwXwJB9HqSAKra8abeFCFi0BUYMrIAxYS9gfiCIkf1u8jNu/8 NYVFWyEz/z2xnSwItonHsWPAGnc12HSxt9Ay6A6nYqdk5DsGqA0asm4uYMFDEOIk EHPWBsATD5+WvsfkcvJ45Rjx7KfEpBh6mtcOfdrHQSElAoNiw3H5TuZC6tW5VOsO 1bsL5IRqHIdkE7htVBtOzho1kU9T/mtFU2hb3txqU+RbTujZDqVjwQoVgeqOBmn5 zV6swdksMSfZCaPLKv1nem31JTjWhl68YGsf59+EAHlk0S5fVpJm7l9fE2s1Ap5s Q2SyD5/nQwzuumtEEBOJY/gKdE0PCFE= -----END CERTIFICATE-----Generated at Sat May 10 22:18:48 2025 by rpki-client