$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/309d58ec-9dfe-3f07-b602-f7d2c3980950.roa File: 309d58ec-9dfe-3f07-b602-f7d2c3980950.roa (raw, json) Hash identifier: COgJneaOVWhlOlmVMTMY8/IAsH7dc1axv4tXpgZfa+I= Subject key identifier: 18:5E:6B:10:C5:5C:D6:D4:26:76:72:95:6B:E6:C5:F2:9A:E1:EA:E9 Certificate issuer: /CN=df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e Certificate serial: 010D0C9F43285848EF61335793CFF55BA0A096C0 Authority key identifier: 6A:2F:21:21:3F:15:F9:77:C2:6B:EF:1A:58:1F:41:1C:58:6B:7E:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/309d58ec-9dfe-3f07-b602-f7d2c3980950.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 63362 IP address blocks: 104.254.204.0/22 maxlen: 22 104.254.204.0/23 maxlen: 23 104.254.206.0/24 maxlen: 24 104.254.207.0/24 maxlen: 24 205.143.40.0/22 maxlen: 22 205.143.40.0/23 maxlen: 23 205.143.42.0/23 maxlen: 23 205.143.42.0/24 maxlen: 24 205.143.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:33:57:93:cf:f5:5b:a0:a0:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=f13d3dd4-f747-4ad0-a8bc-099955e9d8ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:88:56:15:14:d9:18:6e:94:d6:f9:09:4a:f7: 55:00:b8:30:ba:c0:77:fc:c9:b0:ad:01:bb:df:a1: 70:5f:f6:b5:e6:25:c7:e9:55:67:8c:46:20:02:ff: a8:63:05:47:3a:64:7f:4b:c4:f4:5e:da:ea:62:db: 0a:86:d2:3a:9a:91:65:a8:18:ea:e9:f4:06:c0:2b: f9:33:77:25:63:db:44:3b:64:ab:3c:d1:7f:b8:6b: e5:4d:8a:b4:76:76:fa:ff:13:f7:68:a6:db:dc:57: 9d:13:04:bc:4f:38:a4:d8:75:38:5d:0a:92:4f:f7: 72:d5:6d:9e:13:0f:c6:c2:a9:b3:df:7b:64:0e:8d: 5f:01:c6:03:f3:00:cd:e8:bc:b2:82:6e:03:6e:07: 1a:11:82:e7:c7:2d:cc:65:08:71:e2:c7:d9:3c:53: fd:29:73:1b:45:68:ae:c9:6c:4a:d2:ff:8f:50:d1: fa:e8:20:87:31:ee:23:da:a5:ec:61:01:e2:0e:33: 06:b7:1d:a0:9e:8e:dc:18:ac:aa:00:7e:8c:08:4b: a3:ca:81:59:25:14:2f:36:c8:73:9c:ba:18:67:7e: cd:f3:d0:ae:10:d4:c2:da:48:35:24:a4:ba:70:55: b9:64:96:38:1b:be:a2:f8:5f:99:88:55:ff:08:86: d0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:5E:6B:10:C5:5C:D6:D4:26:76:72:95:6B:E6:C5:F2:9A:E1:EA:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/309d58ec-9dfe-3f07-b602-f7d2c3980950.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.crl X509v3 Authority Key Identifier: keyid:6A:2F:21:21:3F:15:F9:77:C2:6B:EF:1A:58:1F:41:1C:58:6B:7E:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.cer sbgp-ipAddrBlock: critical IPv4: 104.254.204.0/22 205.143.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:5e:3b:02:6d:46:33:9a:6a:e9:eb:0a:96:04:74:e4:54:9e: bb:80:fe:43:5c:b9:e1:14:57:ec:40:73:8d:14:71:e5:0b:ef: 77:cb:92:b5:65:1f:39:ad:7d:f3:8b:2d:51:04:bf:2e:e7:01: 72:f5:d5:d8:b7:30:f5:61:66:c1:04:7c:83:d4:6b:3b:e4:bb: 89:35:58:10:28:6e:16:84:e0:b4:9e:4b:b6:53:03:4d:4d:90: 2e:9a:93:fe:00:3e:6c:89:58:70:b6:d4:ce:26:c2:52:f1:59: 3b:2d:13:25:c7:ff:88:56:73:53:6b:89:e3:fe:ea:ee:66:98: f2:b1:98:0f:ef:d6:27:82:83:87:7a:04:d3:a8:f8:d1:15:46: 15:80:d3:25:5c:92:fb:e3:5a:c0:97:b5:4e:db:17:0d:54:d1: 94:3e:31:1a:6d:e5:e4:6f:10:7d:95:d8:d3:c5:ed:a1:56:d9: f8:bb:bd:61:81:6c:09:53:b8:1c:d2:be:ec:26:97:69:8d:2f: cc:b0:0e:5e:95:c0:1f:bd:6e:d5:0b:9c:d3:8c:ce:b4:2f:d9: a5:09:73:18:22:81:43:ae:a7:64:82:fd:8f:6b:de:97:4e:21: 39:c1:33:b9:c9:6a:51:0f:84:64:57:09:8f:75:66:b3:bd:56: f1:6d:21:4e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEjvYTNXk8/1W6CglsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY5Njk2ZjYtN2NhNS00ZWI3LWJkMjEtZWFlZTNiMWUz ZjhlMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk ZjEzZDNkZDQtZjc0Ny00YWQwLWE4YmMtMDk5OTU1ZTlkOGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIhWFRTZGG6U1vkJSvdVALgwusB3/MmwrQG7 36FwX/a15iXH6VVnjEYgAv+oYwVHOmR/S8T0XtrqYtsKhtI6mpFlqBjq6fQGwCv5 M3clY9tEO2SrPNF/uGvlTYq0dnb6/xP3aKbb3FedEwS8Tzik2HU4XQqST/dy1W2e Ew/Gwqmz33tkDo1fAcYD8wDN6Lyygm4DbgcaEYLnxy3MZQhx4sfZPFP9KXMbRWiu yWxK0v+PUNH66CCHMe4j2qXsYQHiDjMGtx2gno7cGKyqAH6MCEujyoFZJRQvNshz nLoYZ37N89CuENTC2kg1JKS6cFW5ZJY4G76i+F+ZiFX/CIbQDQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBheaxDFXNbUJnZylWvmxfKa4erpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kZjk2 OTZmNi03Y2E1LTRlYjctYmQyMS1lYWVlM2IxZTNmOGUvMzA5ZDU4ZWMtOWRmZS0z ZjA3LWI2MDItZjdkMmMzOTgwOTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZGY5Njk2ZjYtN2NhNS00ZWI3LWJk MjEtZWFlZTNiMWUzZjhlL2RmOTY5NmY2LTdjYTUtNGViNy1iZDIxLWVhZWUzYjFl M2Y4ZS5jcmwwHwYDVR0jBBgwFoAUai8hIT8V+XfCa+8aWB9BHFhrfqMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kZjk2OTZmNi03Y2E1LTRlYjctYmQyMS1lYWVl M2IxZTNmOGUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCaP7MAwQC zY8oMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABNeOwJtRjOaaunrCpYEdORUnruA/kNcueEUV+xAc40UceUL 73fLkrVlHzmtffOLLVEEvy7nAXL11di3MPVhZsEEfIPUazvku4k1WBAobhaE4LSe S7ZTA01NkC6ak/4APmyJWHC21M4mwlLxWTstEyXH/4hWc1NrieP+6u5mmPKxmA/v 1ieCg4d6BNOo+NEVRhWA0yVckvvjWsCXtU7bFw1U0ZQ+MRpt5eRvEH2V2NPF7aFW 2fi7vWGBbAlTuBzSvuwml2mNL8ywDl6VwB+9btULnNOMzrQv2aUJcxgigUOup2SC /Y9r3pdOITnBM7nJalEPhGRXCY91ZrO9VvFtIU4= -----END CERTIFICATE-----Generated at Fri May 9 09:58:09 2025 by rpki-client