$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/d040ec9d-d8f4-31f2-a2d8-fd6142194dea.roa File: d040ec9d-d8f4-31f2-a2d8-fd6142194dea.roa (raw, json) Hash identifier: XBRxFPxtDCaDckOXtM8VSUULBAhxwrdCRtK1CHP6fjY= Subject key identifier: 73:8C:FA:E1:A5:2D:C5:89:0C:03:84:09:26:41:81:C6:53:C9:55:8F Certificate issuer: /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c Certificate serial: 010D0C9F432858498769B75B46286CF3651F0700 Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/d040ec9d-d8f4-31f2-a2d8-fd6142194dea.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 6208 IP address blocks: 104.238.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:b7:5b:46:28:6c:f3:65:1f:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=ebdbf6e7-a784-4f63-b340-8cf1e1905414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f4:b3:2d:6f:45:ef:69:bb:1f:b0:7f:08:95: 9b:d3:bd:de:39:fe:ee:19:fc:40:aa:f4:00:ab:3a: f5:26:3f:20:e5:53:ae:b7:35:67:eb:e7:9e:ea:96: 1f:52:27:28:05:da:2a:37:67:36:fd:bf:3e:d6:5a: 38:1f:66:f3:9a:58:88:a8:4e:86:91:3a:06:a4:e2: ea:17:07:c8:7d:40:3b:f6:da:c9:6d:b1:6c:55:93: a0:cc:9f:ae:de:a9:f0:ca:57:f3:77:81:71:54:89: 1c:44:9e:9e:91:dc:97:c6:2c:ee:9a:82:3b:35:52: ea:5a:7c:03:a8:1b:db:5e:d4:af:59:c5:91:c6:12: c4:7e:b0:fb:d9:88:16:78:d0:d5:bc:d7:d3:15:ff: 93:39:47:df:d1:24:1b:60:90:e3:1f:33:f2:86:07: b9:d3:69:22:59:95:a6:60:38:3e:a5:03:92:8a:dc: c7:27:e1:21:14:53:dc:47:c3:f3:7c:55:56:e1:93: af:e0:15:e4:59:11:eb:1d:18:d5:2a:6a:10:ec:5f: c5:9f:04:66:75:03:6d:75:ed:b8:76:c8:12:22:06: 80:4c:06:ea:f3:e1:28:7a:c7:c7:ee:16:04:fb:f4: 21:87:97:cc:91:18:69:a4:86:fd:11:fe:cf:37:cc: 22:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:8C:FA:E1:A5:2D:C5:89:0C:03:84:09:26:41:81:C6:53:C9:55:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/d040ec9d-d8f4-31f2-a2d8-fd6142194dea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl X509v3 Authority Key Identifier: keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer sbgp-ipAddrBlock: critical IPv4: 104.238.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:70:a7:da:76:24:86:30:b6:d8:ed:b6:4e:06:33:e0:2a:1e: 3c:e4:a0:06:2c:a4:63:09:fe:36:ac:20:13:9f:55:6c:68:ad: 02:24:47:7d:4a:3b:9a:48:e6:f6:92:b7:74:b3:ff:3b:ea:52: 16:b1:81:7e:7c:6d:5e:99:f2:c4:76:2b:5e:20:76:bd:6e:86: 52:c9:02:0d:c1:28:f6:c4:eb:65:6c:4e:ba:7a:c2:71:0a:87: 2d:b2:1c:67:7e:1d:e7:c3:ff:2b:75:d6:9a:71:43:ea:bd:d8: f1:91:f2:59:30:e1:c0:ab:e6:78:00:5b:93:54:96:6d:a9:5e: da:59:2e:f3:31:84:7f:69:21:62:80:c1:0e:88:ab:df:67:cf: 04:26:82:42:da:11:63:a2:4d:f2:3f:f6:11:74:7f:b5:0a:43: bb:0a:88:aa:39:d0:1b:34:ce:4f:92:22:8c:13:7b:3e:fb:96: 23:d4:03:5f:6f:61:c9:24:06:c7:ce:87:af:28:78:28:4e:e2: a0:b6:14:9d:d8:e0:99:48:98:05:b4:1b:86:07:9d:d5:3f:4d: 13:6f:f7:8b:e2:8e:b7:52:1e:0e:a0:97:a0:14:bf:b4:d0:ac: 9a:e5:cf:d4:8c:66:64:f7:fa:74:06:90:d6:d0:5d:27:73:a1: 0c:ef:60:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHabdbRihs82UfBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTMwMWJkMGYtYzgwYS00MTU4LTlhZGEtZjUwNmJhZTBh YTNjMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk ZWJkYmY2ZTctYTc4NC00ZjYzLWIzNDAtOGNmMWUxOTA1NDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvSzLW9F72m7H7B/CJWb073eOf7uGfxAqvQA qzr1Jj8g5VOutzVn6+ee6pYfUicoBdoqN2c2/b8+1lo4H2bzmliIqE6GkToGpOLq FwfIfUA79trJbbFsVZOgzJ+u3qnwylfzd4FxVIkcRJ6ekdyXxizumoI7NVLqWnwD qBvbXtSvWcWRxhLEfrD72YgWeNDVvNfTFf+TOUff0SQbYJDjHzPyhge502kiWZWm YDg+pQOSitzHJ+EhFFPcR8PzfFVW4ZOv4BXkWRHrHRjVKmoQ7F/FnwRmdQNtde24 dsgSIgaATAbq8+EoesfH7hYE+/Qhh5fMkRhppIb9Ef7PN8wigQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOM+uGlLcWJDAOECSZBgcZTyVWPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzAx YmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2YmFlMGFhM2MvZDA0MGVjOWQtZDhmNC0z MWYyLWEyZDgtZmQ2MTQyMTk0ZGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTMwMWJkMGYtYzgwYS00MTU4LTlh ZGEtZjUwNmJhZTBhYTNjL2UzMDFiZDBmLWM4MGEtNDE1OC05YWRhLWY1MDZiYWUw YWEzYy5jcmwwHwYDVR0jBBgwFoAU2+tyG9DCXdrpdTdqrZ80dv4slR8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMzAxYmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2 YmFlMGFhM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO7CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtwp9p2JIYwttjttk4GM+AqHjzkoAYspGMJ/jasIBOfVWxorQIkR31K O5pI5vaSt3Sz/zvqUhaxgX58bV6Z8sR2K14gdr1uhlLJAg3BKPbE62VsTrp6wnEK hy2yHGd+HefD/yt11ppxQ+q92PGR8lkw4cCr5ngAW5NUlm2pXtpZLvMxhH9pIWKA wQ6Iq99nzwQmgkLaEWOiTfI/9hF0f7UKQ7sKiKo50Bs0zk+SIowTez77liPUA19v YckkBsfOh68oeChO4qC2FJ3Y4JlImAW0G4YHndU/TRNv94vijrdSHg6gl6AUv7TQ rJrlz9SMZmT3+nQGkNbQXSdzoQzvYD8= -----END CERTIFICATE-----Generated at Thu May 8 21:11:21 2025 by rpki-client