$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/1914fa1b-2879-398b-99ae-9b5c6baf805d.roa File: 1914fa1b-2879-398b-99ae-9b5c6baf805d.roa (raw, json) Hash identifier: CKQTsuIm2jSkOSQxvdXI/pYLX+voV0++cl7Zn2YaLWo= Subject key identifier: 42:86:4B:78:FB:A7:0C:3F:8A:4F:94:FF:57:FE:6B:A2:1D:BD:A1:C9 Certificate issuer: /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e Certificate serial: 010D0C9F43285849CE9A62131E02694DEC372F00 Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/1914fa1b-2879-398b-99ae-9b5c6baf805d.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 398465 IP address blocks: 104.171.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:62:13:1e:02:69:4d:ec:37:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=d9e2298f-477f-448e-a3fc-005bc7a5973a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9b:42:59:af:11:89:ca:f9:63:01:6b:50:5b: 6a:30:46:75:3f:e3:cb:27:1d:ac:32:eb:85:5e:1b: 76:ff:db:af:84:6d:bc:d9:13:0d:a1:ec:e5:3b:0d: d8:6b:ec:32:6b:9a:74:e5:1e:d0:e2:06:62:75:60: d0:d0:53:6f:61:23:e7:36:72:7b:69:f5:8a:13:61: b3:8b:2e:48:d0:e0:93:f8:2b:cf:e9:ba:d1:0f:87: 63:d0:4d:36:cc:fe:75:21:42:3c:5d:5d:65:2c:88: 80:cf:ab:b0:ac:23:a4:5a:e7:79:3b:dc:6d:63:0d: a7:d7:37:05:13:f3:75:30:22:c9:d0:39:32:91:d3: ae:75:bb:09:04:30:ff:19:4f:c6:01:68:cb:da:1e: 00:33:e3:53:4c:4a:9a:36:a0:63:5b:e5:d4:11:43: 47:be:0e:cd:d6:36:ac:d2:9c:b5:51:53:4b:0f:70: 9c:11:ef:83:59:1f:74:a7:c8:3f:ec:d4:53:7e:c3: fb:a7:f3:04:f0:e6:c2:b7:30:39:eb:65:03:35:3f: 8b:f2:af:1e:d4:2c:c0:a8:21:60:11:a7:9b:83:b0: c9:ce:2d:82:13:c5:a6:3a:b1:11:58:23:e6:fd:58: b8:b6:28:da:3e:69:4c:67:11:29:26:d7:87:99:55: ba:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:86:4B:78:FB:A7:0C:3F:8A:4F:94:FF:57:FE:6B:A2:1D:BD:A1:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/1914fa1b-2879-398b-99ae-9b5c6baf805d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl X509v3 Authority Key Identifier: keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer sbgp-ipAddrBlock: critical IPv4: 104.171.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:fd:b3:eb:b1:a0:92:01:55:12:03:2a:54:f0:dc:16:01:c5: b4:c7:d0:eb:66:b9:4e:67:ab:40:9d:4b:6f:8a:eb:29:7a:79: 99:13:35:4c:38:1a:8c:54:52:d6:52:03:a0:b2:b9:75:4d:f9: 18:1c:5b:3b:e8:c8:17:1a:11:d9:d7:30:4e:73:ee:e6:6a:78: 60:7d:ff:db:b6:3c:aa:36:d2:8d:f8:70:ee:e2:c7:91:b1:32: ca:6d:be:1a:70:a8:2e:82:86:ea:11:44:a4:6d:68:e0:31:db: c0:76:68:45:6c:01:73:d8:eb:29:12:63:65:e1:e2:3e:4e:50: ff:3b:51:00:42:33:e5:05:66:ca:b1:6e:ee:63:26:95:77:1b: cf:96:7d:d0:21:d4:66:f8:a3:25:f5:53:cd:3a:9d:6d:fb:4b: 2f:c1:dc:4e:55:23:07:9e:fa:4e:ce:19:d4:bf:71:fc:cd:04: 80:8c:b9:3c:14:96:68:b5:99:0b:88:ff:6f:fb:91:18:1f:56: 55:ae:e3:c4:6b:37:c4:6f:1e:da:9d:c0:b7:32:28:ce:e3:18: c2:4e:90:d1:dc:49:22:f8:14:a9:19:1d:98:b2:84:47:d1:64: ec:b7:83:3c:0e:fe:7e:72:f4:c2:db:1e:45:e4:64:f9:74:fc: 6c:bb:8d:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmmITHgJpTew3LwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWVlMmU0YjAtNmY5YS00M2M3LWI2YmUtNmVmZjQ4ODc2 NjNlMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ZDllMjI5OGYtNDc3Zi00NDhlLWEzZmMtMDA1YmM3YTU5NzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJtCWa8Ricr5YwFrUFtqMEZ1P+PLJx2sMuuF Xht2/9uvhG282RMNoezlOw3Ya+wya5p05R7Q4gZidWDQ0FNvYSPnNnJ7afWKE2Gz iy5I0OCT+CvP6brRD4dj0E02zP51IUI8XV1lLIiAz6uwrCOkWud5O9xtYw2n1zcF E/N1MCLJ0DkykdOudbsJBDD/GU/GAWjL2h4AM+NTTEqaNqBjW+XUEUNHvg7N1jas 0py1UVNLD3CcEe+DWR90p8g/7NRTfsP7p/ME8ObCtzA562UDNT+L8q8e1CzAqCFg Eaebg7DJzi2CE8WmOrERWCPm/Vi4tijaPmlMZxEpJteHmVW6DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKGS3j7pww/ik+U/1f+a6IdvaHJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZWUy ZTRiMC02ZjlhLTQzYzctYjZiZS02ZWZmNDg4NzY2M2UvMTkxNGZhMWItMjg3OS0z OThiLTk5YWUtOWI1YzZiYWY4MDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWVlMmU0YjAtNmY5YS00M2M3LWI2 YmUtNmVmZjQ4ODc2NjNlLzVlZTJlNGIwLTZmOWEtNDNjNy1iNmJlLTZlZmY0ODg3 NjYzZS5jcmwwHwYDVR0jBBgwFoAUDhljVY9E40F4e1TAZyFIXjijozAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZWUyZTRiMC02ZjlhLTQzYzctYjZiZS02ZWZm NDg4NzY2M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKukMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIn9s+uxoJIBVRIDKlTw3BYBxbTH0OtmuU5nq0CdS2+K6yl6eZkTNUw4 GoxUUtZSA6CyuXVN+RgcWzvoyBcaEdnXME5z7uZqeGB9/9u2PKo20o34cO7ix5Gx MsptvhpwqC6ChuoRRKRtaOAx28B2aEVsAXPY6ykSY2Xh4j5OUP87UQBCM+UFZsqx bu5jJpV3G8+WfdAh1Gb4oyX1U806nW37Sy/B3E5VIwee+k7OGdS/cfzNBICMuTwU lmi1mQuI/2/7kRgfVlWu48RrN8RvHtqdwLcyKM7jGMJOkNHcSSL4FKkZHZiyhEfR ZOy3gzwO/n5y9MLbHkXkZPl0/Gy7jZw= -----END CERTIFICATE-----Generated at Sun May 11 22:00:31 2025 by rpki-client