$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/dc85d078-3c0f-3902-98d0-203d1cb2755a.roa File: dc85d078-3c0f-3902-98d0-203d1cb2755a.roa (raw, json) Hash identifier: wRfuFYJwYy4bbTIeB87tQFDGcADj2k3H8rMnd7H6XqU= Subject key identifier: 9B:61:3A:20:E6:67:37:EE:92:C8:D7:72:30:E7:8A:C1:59:E8:5E:71 Certificate issuer: /CN=d4558eff-6c26-4a17-bb9e-54377ea2aef1 Certificate serial: 010D0C9F43285849A8E9DF1F75AE2E17B42A5000 Authority key identifier: DC:06:EB:8D:D4:86:04:61:98:24:E0:81:39:DF:98:1A:AC:54:39:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/dc85d078-3c0f-3902-98d0-203d1cb2755a.roa Signing time: Sun 27 Apr 2025 01:00:46 +0000 ROA not before: Sun 27 Apr 2025 01:00:46 +0000 ROA not after: Sat 26 Jul 2025 01:00:46 +0000 asID: 46505 IP address blocks: 104.225.208.0/24 maxlen: 24 2602:fa89::/36 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/d4558eff-6c26-4a17-bb9e-54377ea2aef1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/d4558eff-6c26-4a17-bb9e-54377ea2aef1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:e9:df:1f:75:ae:2e:17:b4:2a:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4558eff-6c26-4a17-bb9e-54377ea2aef1 Validity Not Before: Apr 27 01:00:46 2025 GMT Not After : Jul 26 01:00:46 2025 GMT Subject: CN=993c081b-60e3-4189-87bc-0aebac924ca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:aa:8f:4b:9d:83:84:b7:11:cf:f3:80:0a:af: 76:7b:ad:70:de:99:c9:4d:e4:28:4c:6f:fa:7d:29: b9:6e:1a:ee:8f:05:13:23:75:fa:6a:8b:ac:bd:44: df:72:2a:2a:16:04:4d:21:a5:d6:53:3f:eb:38:e3: 57:68:39:40:92:f4:4b:c7:b5:f0:66:bd:84:0d:f5: 36:ac:08:15:4b:74:cc:d0:6b:af:61:75:43:3b:c4: 47:85:e7:36:62:5f:e0:9a:d0:0f:24:45:f9:b3:56: 8a:f1:61:3e:a4:c3:8e:0b:11:a0:46:04:6c:43:4b: a3:3e:e8:4d:10:c3:8c:93:80:f5:c8:12:7e:23:bd: 3f:c9:d6:d4:94:63:82:0f:a0:c4:98:8c:e3:40:8e: d0:1a:0a:a8:55:b8:25:0b:5d:89:5e:f5:6e:f7:9c: 83:51:34:31:26:1c:96:07:f9:b3:66:dc:13:72:1f: 18:b6:99:f2:e1:16:88:b8:51:56:42:7c:69:bf:b7: 49:2d:b6:04:49:2b:a2:b2:58:6b:d0:ed:7d:65:45: be:6d:68:1a:a9:4b:25:be:85:b4:9e:5b:84:85:b5: 16:3a:05:5a:ed:90:05:1c:e2:7f:de:40:33:0a:d7: ae:72:11:88:76:83:14:59:84:9f:e4:4c:f0:45:29: e9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:61:3A:20:E6:67:37:EE:92:C8:D7:72:30:E7:8A:C1:59:E8:5E:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/dc85d078-3c0f-3902-98d0-203d1cb2755a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/d4558eff-6c26-4a17-bb9e-54377ea2aef1.crl X509v3 Authority Key Identifier: keyid:DC:06:EB:8D:D4:86:04:61:98:24:E0:81:39:DF:98:1A:AC:54:39:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1.cer sbgp-ipAddrBlock: critical IPv4: 104.225.208.0/24 IPv6: 2602:fa89::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:e7:eb:4a:0e:5e:df:cf:1a:00:3e:bd:41:1b:b9:d0:b9:d9: ad:9f:14:9b:40:6a:d1:6e:9e:59:de:52:fa:e0:b7:30:1d:87: 48:d3:22:4d:9d:e4:b6:94:23:25:28:32:1f:85:c9:42:26:1a: 19:03:a5:42:3a:93:a6:52:36:36:47:ce:c6:7a:61:e5:0a:b4: 2d:0d:71:e4:8c:90:2c:b3:19:7d:c2:a0:40:05:ed:99:e0:77: 89:f8:cd:e9:6d:7b:25:d5:ff:62:eb:84:60:5f:46:a5:62:54: cd:17:b9:9a:64:c8:24:12:50:e5:ec:02:15:a5:73:06:66:00: 41:a7:b4:31:52:f0:2f:d4:43:6e:8c:ac:bc:d1:cd:a6:87:97: 79:59:67:f8:6b:3f:fc:8b:0e:6a:d9:dc:ed:4f:02:28:01:30: 44:ef:e8:f6:4d:01:86:dc:f8:c1:4d:17:a5:c4:ef:ef:dd:fa: 11:5e:4f:e5:08:2d:04:78:99:ea:68:a8:05:32:aa:9e:f7:16: 77:b4:ac:c9:c4:93:5c:3c:70:ca:5c:27:34:30:29:30:29:46: eb:d7:2b:9a:d2:11:85:37:f5:d8:c0:fd:ab:85:25:11:93:d3: a1:25:ff:63:66:de:1e:f4:b6:ec:30:28:96:0b:4f:37:ee:e3: b6:de:47:56 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEmo6d8fda4uF7QqUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NThlZmYtNmMyNi00YTE3LWJiOWUtNTQzNzdlYTJh ZWYxMB4XDTI1MDQyNzAxMDA0NloXDTI1MDcyNjAxMDA0NlowLzEtMCsGA1UEAxMk OTkzYzA4MWItNjBlMy00MTg5LTg3YmMtMGFlYmFjOTI0Y2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KqPS52DhLcRz/OACq92e61w3pnJTeQoTG/6 fSm5bhrujwUTI3X6aousvUTfcioqFgRNIaXWUz/rOONXaDlAkvRLx7XwZr2EDfU2 rAgVS3TM0GuvYXVDO8RHhec2Yl/gmtAPJEX5s1aK8WE+pMOOCxGgRgRsQ0ujPuhN EMOMk4D1yBJ+I70/ydbUlGOCD6DEmIzjQI7QGgqoVbglC12JXvVu95yDUTQxJhyW B/mzZtwTch8Ytpny4RaIuFFWQnxpv7dJLbYESSuislhr0O19ZUW+bWgaqUslvoW0 nluEhbUWOgVa7ZAFHOJ/3kAzCteuchGIdoMUWYSf5EzwRSnpHwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFJthOiDmZzfuksjXcjDnisFZ6F5xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNDU1 OGVmZi02YzI2LTRhMTctYmI5ZS01NDM3N2VhMmFlZjEvZGM4NWQwNzgtM2MwZi0z OTAyLTk4ZDAtMjAzZDFjYjI3NTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDQ1NThlZmYtNmMyNi00YTE3LWJi OWUtNTQzNzdlYTJhZWYxL2Q0NTU4ZWZmLTZjMjYtNGExNy1iYjllLTU0Mzc3ZWEy YWVmMS5jcmwwHwYDVR0jBBgwFoAU3AbrjdSGBGGYJOCBOd+YGqxUOXYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNDU1OGVmZi02YzI2LTRhMTctYmI5ZS01NDM3 N2VhMmFlZjEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAaOHQMA4E AgACMAgDBgQmAvqJADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCD5+tKDl7fzxoAPr1BG7nQudmtnxSbQGrR bp5Z3lL64LcwHYdI0yJNneS2lCMlKDIfhclCJhoZA6VCOpOmUjY2R87GemHlCrQt DXHkjJAssxl9wqBABe2Z4HeJ+M3pbXsl1f9i64RgX0alYlTNF7maZMgkElDl7AIV pXMGZgBBp7QxUvAv1ENujKy80c2mh5d5WWf4az/8iw5q2dztTwIoATBE7+j2TQGG 3PjBTRelxO/v3foRXk/lCC0EeJnqaKgFMqqe9xZ3tKzJxJNcPHDKXCc0MCkwKUbr 1yua0hGFN/XYwP2rhSURk9OhJf9jZt4e9LbsMCiWC0837uO23kdW -----END CERTIFICATE-----Generated at Mon May 12 02:10:42 2025 by rpki-client