$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/19f810fe-b691-34eb-8a5a-af302da8a8aa.roa File: 19f810fe-b691-34eb-8a5a-af302da8a8aa.roa (raw, json) Hash identifier: xDQgpwNpBCoZXbvOjisx8U/wZMhII57N3PsSLsv8EUE= Subject key identifier: 20:DF:F4:37:F7:6A:9E:E5:DC:03:8B:BE:F3:80:16:3F:A4:2C:BE:1C Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F43285849A1EF6BFD9A9B2EA87CB6DEC0 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/19f810fe-b691-34eb-8a5a-af302da8a8aa.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 46261 IP address blocks: 104.251.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:6b:fd:9a:9b:2e:a8:7c:b6:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=d51f76f9-873b-477e-84a3-537a8cd740c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f1:ee:8a:d8:7e:ec:e4:99:51:30:e8:89:4e: b4:61:34:bb:61:09:44:c5:10:06:b7:68:82:d2:8a: 2c:7f:c2:e7:f5:8d:62:3e:fc:43:43:2d:4f:16:88: 35:d2:71:e2:ae:1e:4e:17:7a:c0:19:db:cc:94:f8: 65:d3:02:84:90:11:da:c8:48:ca:4e:88:4c:9b:5a: d4:10:80:8f:7f:6d:f7:94:b1:6e:f9:4d:ee:bc:7d: a6:08:86:ab:b8:ed:e0:db:2f:0f:c3:c3:f8:ef:f0: af:de:ea:d4:ab:75:2a:15:b8:95:1c:80:cb:fc:4d: ec:cd:ea:48:72:8c:38:bd:7d:54:cb:02:ec:42:be: ee:02:a9:11:a2:4c:29:73:7b:6f:37:42:a2:97:86: 49:04:40:30:70:b8:d3:73:de:88:50:db:8e:af:34: 9e:1f:59:e9:43:01:b8:cd:bf:6a:0d:d1:46:44:a9: 8f:9c:2b:7f:d1:b5:5a:0e:02:de:08:53:1d:ba:5f: 3d:cd:53:76:ba:dd:7b:62:f8:53:28:3b:8b:80:fd: 09:e1:c6:58:cb:90:3c:23:4c:50:ed:01:f6:ea:16: 36:87:84:2d:11:6d:dc:45:33:40:c9:69:8f:7f:03: f0:28:44:99:23:60:0d:a4:01:29:cb:b3:67:7c:a1: 7a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:DF:F4:37:F7:6A:9E:E5:DC:03:8B:BE:F3:80:16:3F:A4:2C:BE:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/19f810fe-b691-34eb-8a5a-af302da8a8aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.251.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:6e:95:3c:1c:48:db:70:cc:88:22:7c:30:b3:dc:2c:25:ee: d6:c7:a3:c4:fd:fc:79:ce:d4:6e:df:10:be:6b:19:63:00:c3: 38:e7:c6:ae:a4:07:e1:76:17:7d:cc:ba:97:6a:a4:84:b3:8e: b8:8c:ab:70:b5:63:93:93:d4:34:18:37:77:ba:c2:81:5e:fc: 1b:b2:e5:58:c6:a4:ff:6f:e6:e4:7e:57:a0:a5:32:5d:87:34: cf:78:7c:c6:b9:36:f0:4c:6a:4c:54:bf:2a:f6:35:a0:6e:e5: c2:b8:b1:f7:3d:6e:8b:d0:27:aa:d1:ad:c7:f2:e8:33:63:19: 39:93:eb:d4:19:dd:3a:03:c6:92:ca:d0:b8:90:d0:10:64:e0: c7:3b:0e:f2:91:25:dd:19:79:e5:b0:e4:dd:90:41:e9:12:0a: 40:46:a5:19:e1:52:0f:ac:69:96:9f:86:9c:b3:7c:ef:63:5a: 83:83:13:6f:45:6c:1e:fc:12:5b:36:2d:7b:49:75:95:6a:ac: fc:21:d3:9e:f8:8c:86:b5:66:b5:14:9c:f7:04:de:89:f3:88: 83:6c:15:5d:cc:57:5d:57:37:91:96:99:0d:65:52:be:9c:52: e0:53:56:3b:4d:76:db:3d:00:bd:0e:f7:c0:ec:b1:04:10:52: 54:19:48:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh72v9mpsuqHy23sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk ZDUxZjc2ZjktODczYi00NzdlLTg0YTMtNTM3YThjZDc0MGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PHuith+7OSZUTDoiU60YTS7YQlExRAGt2iC 0oosf8Ln9Y1iPvxDQy1PFog10nHirh5OF3rAGdvMlPhl0wKEkBHayEjKTohMm1rU EICPf233lLFu+U3uvH2mCIaruO3g2y8Pw8P47/Cv3urUq3UqFbiVHIDL/E3szepI cow4vX1UywLsQr7uAqkRokwpc3tvN0Kil4ZJBEAwcLjTc96IUNuOrzSeH1npQwG4 zb9qDdFGRKmPnCt/0bVaDgLeCFMdul89zVN2ut17YvhTKDuLgP0J4cZYy5A8I0xQ 7QH26hY2h4QtEW3cRTNAyWmPfwPwKESZI2ANpAEpy7NnfKF6RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDf9Df3ap7l3AOLvvOAFj+kLL4cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMTlmODEwZmUtYjY5MS0z NGViLThhNWEtYWYzMDJkYThhOGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPtXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9ulTwcSNtwzIgifDCz3Cwl7tbHo8T9/HnO1G7fEL5rGWMAwzjnxq6k B+F2F33MupdqpISzjriMq3C1Y5OT1DQYN3e6woFe/Buy5VjGpP9v5uR+V6ClMl2H NM94fMa5NvBMakxUvyr2NaBu5cK4sfc9bovQJ6rRrcfy6DNjGTmT69QZ3ToDxpLK 0LiQ0BBk4Mc7DvKRJd0ZeeWw5N2QQekSCkBGpRnhUg+saZafhpyzfO9jWoODE29F bB78Els2LXtJdZVqrPwh0574jIa1ZrUUnPcE3onziINsFV3MV11XN5GWmQ1lUr6c UuBTVjtNdts9AL0O98DssQQQUlQZSI0= -----END CERTIFICATE-----Generated at Tue May 6 06:34:13 2025 by rpki-client