$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/1eee4c65-0c74-314b-b00e-38be39219370.roa File: 1eee4c65-0c74-314b-b00e-38be39219370.roa (raw, json) Hash identifier: zdW7FuMfA/6GysrHKid1v7yaM3P2N2LTukt3+8rnEcw= Subject key identifier: 9F:76:15:3B:AA:B3:C2:4B:5A:98:13:62:D4:47:33:8C:30:BC:A9:49 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F43285849A1EF6E34AA3405A26D273C80 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/1eee4c65-0c74-314b-b00e-38be39219370.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 9009 IP address blocks: 104.251.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:6e:34:aa:34:05:a2:6d:27:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=dc82e470-6e00-4e57-ba8c-f85a580b30ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6c:cc:00:ca:35:2d:0b:8b:42:27:c9:79:26: 89:6b:45:64:cf:12:ed:6e:cc:85:ff:81:af:33:ae: 00:3f:79:ab:c0:6a:89:09:08:ad:f6:3d:9b:7e:22: c6:ea:96:c0:37:9e:57:72:97:c7:06:db:29:58:6b: 91:38:43:e0:8b:3e:16:db:72:ef:a3:b4:9d:fc:2d: 19:c7:a4:1f:94:fb:03:1f:47:bc:87:4c:91:a1:da: 83:83:f6:c8:fc:33:28:66:33:ec:02:be:6b:d3:b4: 57:e3:68:2d:ab:09:07:22:3e:40:18:10:65:43:fc: ae:54:cd:83:f9:74:a4:cb:1d:66:f8:2d:e7:c6:67: b7:f3:d2:ab:01:2e:0f:ee:63:64:9b:28:b9:ba:7f: 58:ce:15:97:96:71:aa:b8:da:ed:2a:64:45:e8:79: 4a:6c:e7:11:f4:f6:d0:8e:ae:fa:b1:bd:2b:6b:78: f8:b3:0a:fd:37:47:41:ea:9b:a7:2e:ea:85:4c:e5: bd:f8:c0:cd:cf:69:9e:6a:98:f5:2b:95:9a:2e:e1: 81:37:de:01:d8:ad:a8:25:cc:f5:8a:23:d9:f4:5c: d2:c1:fe:ce:93:5c:7f:92:f5:db:83:2a:a2:8c:f6: 68:08:67:f9:d4:28:f9:15:d5:2d:5b:86:4a:54:89: 30:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:76:15:3B:AA:B3:C2:4B:5A:98:13:62:D4:47:33:8C:30:BC:A9:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/1eee4c65-0c74-314b-b00e-38be39219370.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.251.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:f5:de:e4:b4:46:d1:51:ca:64:24:7a:98:14:c4:5a:d9:22: af:5e:59:d5:af:5b:c2:48:2f:e7:18:43:14:97:c0:c6:a0:01: c7:9d:19:f6:94:46:8a:e3:da:e0:3a:a7:09:91:89:82:21:80: cb:64:12:e9:5e:91:f5:35:1f:71:87:da:01:b7:14:6e:07:29: 80:ec:93:5f:23:35:34:f3:c9:a0:06:99:c9:95:b9:70:b9:c2: 9f:f3:12:20:93:90:fc:ca:90:57:03:fa:ff:49:90:2c:c1:38: ac:29:31:01:d2:07:e0:a5:c1:39:e7:67:2f:64:94:e2:1b:19: b7:c7:88:2e:09:b2:bc:fe:40:d3:00:00:9c:19:0f:c1:7d:47: 04:f6:c6:54:78:05:7e:ed:3e:bb:be:73:f0:0e:1a:22:95:05: 24:15:c6:75:c5:99:5e:23:7d:74:ae:bb:8b:a0:cd:e3:54:2f: b9:0a:6b:d6:19:05:f1:28:a2:ce:c8:1f:a3:96:11:5c:8e:bf: 59:10:db:e9:1a:04:fd:ac:90:b2:ae:cb:f3:a8:24:9f:46:af: f7:ba:19:13:e1:8d:ec:a1:69:98:1a:cf:f2:29:b8:29:f2:84: cc:f9:09:af:67:a4:60:7a:b9:a8:8f:45:5a:ba:8e:80:36:7b: 61:3a:1d:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh7240qjQFom0nPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk ZGM4MmU0NzAtNmUwMC00ZTU3LWJhOGMtZjg1YTU4MGIzMGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2zMAMo1LQuLQifJeSaJa0VkzxLtbsyF/4Gv M64AP3mrwGqJCQit9j2bfiLG6pbAN55XcpfHBtspWGuROEPgiz4W23Lvo7Sd/C0Z x6QflPsDH0e8h0yRodqDg/bI/DMoZjPsAr5r07RX42gtqwkHIj5AGBBlQ/yuVM2D +XSkyx1m+C3nxme389KrAS4P7mNkmyi5un9YzhWXlnGquNrtKmRF6HlKbOcR9PbQ jq76sb0ra3j4swr9N0dB6punLuqFTOW9+MDNz2meapj1K5WaLuGBN94B2K2oJcz1 iiPZ9FzSwf7Ok1x/kvXbgyqijPZoCGf51Cj5FdUtW4ZKVIkwVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ92FTuqs8JLWpgTYtRHM4wwvKlJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMWVlZTRjNjUtMGM3NC0z MTRiLWIwMGUtMzhiZTM5MjE5MzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPtfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE313uS0RtFRymQkepgUxFrZIq9eWdWvW8JIL+cYQxSXwMagAcedGfaU Rorj2uA6pwmRiYIhgMtkEulekfU1H3GH2gG3FG4HKYDsk18jNTTzyaAGmcmVuXC5 wp/zEiCTkPzKkFcD+v9JkCzBOKwpMQHSB+ClwTnnZy9klOIbGbfHiC4Jsrz+QNMA AJwZD8F9RwT2xlR4BX7tPru+c/AOGiKVBSQVxnXFmV4jfXSuu4ugzeNUL7kKa9YZ BfEoos7IH6OWEVyOv1kQ2+kaBP2skLKuy/OoJJ9Gr/e6GRPhjeyhaZgaz/IpuCny hMz5Ca9npGB6uaiPRVq6joA2e2E6HUQ= -----END CERTIFICATE-----Generated at Wed May 7 21:39:06 2025 by rpki-client