$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/ecefeada-cbdb-3f8a-9abe-50ea35a728f3.roa File: ecefeada-cbdb-3f8a-9abe-50ea35a728f3.roa (raw, json) Hash identifier: Ic2ZnOgVgCp/CDBXN53L2fKBRmGmisBmKgk/Rm89MHE= Subject key identifier: 2B:91:75:AE:85:85:B1:6A:97:36:66:70:11:9D:5B:C7:5A:A5:F0:7F Certificate issuer: /CN=a5ffb160-7d08-4282-966a-137e7328c1b0 Certificate serial: 010D0C9F43285849B149F0C6882E385AFF163B60 Authority key identifier: 3C:2E:40:AC:19:47:1C:23:8C:42:39:6E:D3:35:EC:B6:BB:E5:D6:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/ecefeada-cbdb-3f8a-9abe-50ea35a728f3.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 63330 IP address blocks: 104.222.64.0/20 maxlen: 24 2605:e580::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/a5ffb160-7d08-4282-966a-137e7328c1b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/a5ffb160-7d08-4282-966a-137e7328c1b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:f0:c6:88:2e:38:5a:ff:16:3b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ffb160-7d08-4282-966a-137e7328c1b0 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=6f0dcdc1-eb16-4742-acb6-20e762a921b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e1:a1:ba:c8:7b:78:82:2f:5f:88:98:61:57: 42:cf:8a:de:91:e6:13:05:4a:5f:1a:89:53:3c:da: 60:c1:6a:6b:dc:cf:f8:f4:68:5a:74:82:60:e0:cb: 52:3a:7e:fe:98:03:34:c4:73:bb:a8:f8:96:c6:70: 11:a8:60:43:fe:80:68:d1:11:07:67:cc:3f:81:9c: 37:f1:57:22:47:c5:d3:e9:28:85:9d:2a:e3:00:f4: c5:3b:a5:cd:51:eb:1d:16:c9:ed:04:0e:24:14:d3: 7d:0b:f4:30:53:44:de:64:07:36:e3:20:a0:1d:15: 2d:4a:2a:68:70:9c:f6:96:2c:b6:db:a4:cd:fe:a9: 12:d6:51:ac:8f:fa:71:46:81:03:0d:08:ab:24:73: 1a:d2:3a:8d:8d:26:a2:63:71:21:64:86:4f:aa:31: 33:3d:27:b4:8a:d7:59:f8:67:97:67:2b:01:22:00: c1:75:c3:05:70:f4:0b:07:ff:57:96:da:15:e2:97: 44:20:35:ae:7f:09:77:d2:63:f0:9a:88:e9:17:8f: 0f:8a:c1:e9:6a:0e:48:09:23:85:dd:b1:b4:87:66: 9b:57:c8:31:5f:d2:53:71:7a:60:6d:dc:5d:e0:b2: 6b:a8:0e:9e:76:23:89:e1:23:86:33:23:f1:bc:28: 90:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:91:75:AE:85:85:B1:6A:97:36:66:70:11:9D:5B:C7:5A:A5:F0:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/ecefeada-cbdb-3f8a-9abe-50ea35a728f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/a5ffb160-7d08-4282-966a-137e7328c1b0.crl X509v3 Authority Key Identifier: keyid:3C:2E:40:AC:19:47:1C:23:8C:42:39:6E:D3:35:EC:B6:BB:E5:D6:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0.cer sbgp-ipAddrBlock: critical IPv4: 104.222.64.0/20 IPv6: 2605:e580::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:db:55:83:71:46:13:36:ac:f1:1b:28:0f:bb:be:9b:5a:c5: a4:69:ec:21:7a:c5:c2:fd:ec:60:00:90:fa:01:5c:20:29:52: 93:77:e9:cd:8b:8e:83:70:ed:49:e1:10:98:30:93:c2:1d:8a: f4:09:c9:71:93:49:36:3c:b5:9e:32:43:43:66:e2:f6:0a:01: a2:4c:eb:f1:35:18:34:da:06:9e:f5:e2:c8:a3:a3:f8:fd:77: 6c:46:02:fb:f7:8a:a3:3d:b6:76:dd:99:05:8f:15:de:d8:82: f5:1f:e2:cf:72:91:33:47:47:77:ab:b0:53:f7:6d:7e:4a:d0: 19:36:3e:34:d5:1b:68:ca:3b:65:db:11:5f:6d:6d:31:ee:63: 8d:c3:99:9c:0f:e8:51:2c:1d:53:67:78:2d:de:c8:a5:eb:60: d1:63:96:9c:12:09:50:6a:7e:9e:05:8d:9b:1a:44:0a:d3:2f: 3b:df:71:33:34:23:b8:4e:3e:69:39:12:8e:fb:c2:aa:b5:fb: 3f:c8:38:c7:1b:d3:f1:88:0f:17:2a:a6:43:0f:53:d2:d0:9d: 1c:3c:fa:84:1c:a6:50:6e:0a:88:bc:41:37:b7:09:15:b3:d4: 01:83:27:d1:89:be:09:e1:4a:77:d4:e0:fa:44:6c:56:be:3f: ab:73:6e:5d -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEmxSfDGiC44Wv8WO2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTVmZmIxNjAtN2QwOC00MjgyLTk2NmEtMTM3ZTczMjhj MWIwMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NmYwZGNkYzEtZWIxNi00NzQyLWFjYjYtMjBlNzYyYTkyMWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+Ghush7eIIvX4iYYVdCz4rekeYTBUpfGolT PNpgwWpr3M/49GhadIJg4MtSOn7+mAM0xHO7qPiWxnARqGBD/oBo0REHZ8w/gZw3 8VciR8XT6SiFnSrjAPTFO6XNUesdFsntBA4kFNN9C/QwU0TeZAc24yCgHRUtSipo cJz2liy226TN/qkS1lGsj/pxRoEDDQirJHMa0jqNjSaiY3EhZIZPqjEzPSe0itdZ +GeXZysBIgDBdcMFcPQLB/9XltoV4pdEIDWufwl30mPwmojpF48PisHpag5ICSOF 3bG0h2abV8gxX9JTcXpgbdxd4LJrqA6ediOJ4SOGMyPxvCiQiQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFCuRda6FhbFqlzZmcBGdW8dapfB/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hNWZm YjE2MC03ZDA4LTQyODItOTY2YS0xMzdlNzMyOGMxYjAvZWNlZmVhZGEtY2JkYi0z ZjhhLTlhYmUtNTBlYTM1YTcyOGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTVmZmIxNjAtN2QwOC00MjgyLTk2 NmEtMTM3ZTczMjhjMWIwL2E1ZmZiMTYwLTdkMDgtNDI4Mi05NjZhLTEzN2U3MzI4 YzFiMC5jcmwwHwYDVR0jBBgwFoAUPC5ArBlHHCOMQjlu0zXstrvl1jwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hNWZmYjE2MC03ZDA4LTQyODItOTY2YS0xMzdl NzMyOGMxYjAuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEaN5AMA0E AgACMAcDBQAmBeWAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAHzbVYNxRhM2rPEbKA+7vptaxaRp7CF6xcL9 7GAAkPoBXCApUpN36c2LjoNw7UnhEJgwk8IdivQJyXGTSTY8tZ4yQ0Nm4vYKAaJM 6/E1GDTaBp714sijo/j9d2xGAvv3iqM9tnbdmQWPFd7YgvUf4s9ykTNHR3ersFP3 bX5K0Bk2PjTVG2jKO2XbEV9tbTHuY43DmZwP6FEsHVNneC3eyKXrYNFjlpwSCVBq fp4FjZsaRArTLzvfcTM0I7hOPmk5Eo77wqq1+z/IOMcb0/GIDxcqpkMPU9LQnRw8 +oQcplBuCoi8QTe3CRWz1AGDJ9GJvgnhSnfU4PpEbFa+P6tzbl0= -----END CERTIFICATE-----Generated at Sun May 11 02:25:02 2025 by rpki-client