$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/4da8ae0a-9cd3-393c-8e4d-a951f4ad360c.roa File: 4da8ae0a-9cd3-393c-8e4d-a951f4ad360c.roa (raw, json) Hash identifier: dCYAZRkZgS5ev+sRFKODjXBlJSQBiexgf1uZUOMsu/Q= Subject key identifier: AC:28:43:3C:7E:BE:3D:33:72:C6:70:E5:D7:12:28:DD:0C:22:9B:99 Certificate issuer: /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Certificate serial: 010D0C9F43285849CBCF9C841737CED40D49BA00 Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/4da8ae0a-9cd3-393c-8e4d-a951f4ad360c.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 26512 IP address blocks: 104.244.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:9c:84:17:37:ce:d4:0d:49:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=b9501951-2411-40be-a6f4-9c5a1dfc0bd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b7:26:00:c5:3f:b5:8a:b4:22:04:7a:a1:f7: eb:59:b7:30:e9:f4:c7:df:d0:5b:f3:2b:fe:af:05: f0:fe:a0:cb:6b:10:d7:25:0b:7a:fc:2a:5c:a2:bd: 75:76:11:29:d1:02:b8:ff:8d:8d:d5:ec:94:12:25: 3f:88:28:3b:70:cc:1c:c2:ee:05:77:d3:88:7e:bd: dd:e1:0e:af:33:a1:fa:d1:23:ad:c3:89:f1:dd:b9: 9c:b9:03:ab:46:83:65:33:48:70:5b:6b:d3:df:fb: 1e:8d:de:e5:e0:48:a2:93:f3:db:98:15:8f:44:fc: 85:14:65:00:b0:b9:81:dd:b9:d1:b5:68:b6:8e:c6: a9:fa:7c:c2:d2:13:eb:7d:2b:65:d0:a0:e6:ee:c3: 60:37:4f:33:71:80:9f:64:af:8a:b5:01:50:fb:2c: 3f:03:15:88:99:cf:16:33:6d:6e:f1:c7:1a:13:ad: f0:84:ca:28:48:c3:cc:f9:c8:70:84:19:c6:57:7b: 24:29:41:eb:f4:1a:0d:d4:46:9c:5b:8b:d0:32:23: e6:4c:2e:e2:99:57:cb:ea:43:9a:f9:31:19:bc:0f: d5:52:6f:79:ae:c6:ca:ff:83:29:10:d3:95:40:10: 1b:27:c6:65:4a:70:e1:41:3b:40:5b:8e:18:01:2c: 10:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:28:43:3C:7E:BE:3D:33:72:C6:70:E5:D7:12:28:DD:0C:22:9B:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/4da8ae0a-9cd3-393c-8e4d-a951f4ad360c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl X509v3 Authority Key Identifier: keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.244.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:a1:10:0e:b2:73:06:ba:14:4a:e1:d4:56:13:83:7a:10:49: 8d:28:54:26:df:b4:6f:85:92:c3:f3:f7:2b:7a:00:3b:c1:97: d7:6f:c2:c8:9f:a9:a1:7b:c5:2f:f6:fb:13:8d:58:1a:37:aa: 32:3b:e0:10:09:b7:39:2b:e5:f6:87:ae:94:dc:ce:e3:53:5c: 48:21:3c:79:b9:91:5a:b7:95:35:32:2d:e8:57:43:bb:88:78: b0:10:99:4c:c9:5c:0d:ae:fc:28:53:94:15:7a:13:d3:61:59: 59:9e:cb:8c:d2:a1:e8:88:25:6b:97:2c:4a:45:55:98:15:f8: 68:e3:f3:be:7c:f3:9a:82:6c:cb:4c:a0:ef:75:9d:46:3a:cb: 68:1b:c7:a1:bf:2b:d3:3c:00:a4:84:1e:7b:21:7b:8c:b8:22: 34:55:9c:78:12:57:25:88:6d:ab:21:42:0f:6e:7d:42:43:1c: 68:6f:b3:90:0f:5d:93:9f:51:33:b3:42:3d:16:a9:81:fd:97: c9:37:0b:bd:90:f3:2d:38:71:1e:c8:d1:5c:c9:c6:b3:56:12: 1a:c3:25:c6:6e:01:70:18:52:7f:76:21:bf:33:d1:fe:e5:7c: 5a:8d:5b:19:52:fd:3f:32:b3:bc:13:21:07:6e:f3:c2:17:7b: 57:1b:92:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz5yEFzfO1A1JugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVmMmM4MDQtYjNiOS00YjU2LWE3MTktZGQ3MjI2MmE3 YTZkMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk Yjk1MDE5NTEtMjQxMS00MGJlLWE2ZjQtOWM1YTFkZmMwYmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrcmAMU/tYq0IgR6offrWbcw6fTH39Bb8yv+ rwXw/qDLaxDXJQt6/Cpcor11dhEp0QK4/42N1eyUEiU/iCg7cMwcwu4Fd9OIfr3d 4Q6vM6H60SOtw4nx3bmcuQOrRoNlM0hwW2vT3/sejd7l4Eiik/PbmBWPRPyFFGUA sLmB3bnRtWi2jsap+nzC0hPrfStl0KDm7sNgN08zcYCfZK+KtQFQ+yw/AxWImc8W M21u8ccaE63whMooSMPM+chwhBnGV3skKUHr9BoN1EacW4vQMiPmTC7imVfL6kOa +TEZvA/VUm95rsbK/4MpENOVQBAbJ8ZlSnDhQTtAW44YASwQkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwoQzx+vj0zcsZw5dcSKN0MIpuZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNWYy YzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcyMjYyYTdhNmQvNGRhOGFlMGEtOWNkMy0z OTNjLThlNGQtYTk1MWY0YWQzNjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjVmMmM4MDQtYjNiOS00YjU2LWE3 MTktZGQ3MjI2MmE3YTZkL2Y1ZjJjODA0LWIzYjktNGI1Ni1hNzE5LWRkNzIyNjJh N2E2ZC5jcmwwHwYDVR0jBBgwFoAUxGAfl7n2ifTPOb15P9g9I3XsQiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNWYyYzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcy MjYyYTdhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6hEA6ycwa6FErh1FYTg3oQSY0oVCbftG+FksPz9yt6ADvBl9dvwsif qaF7xS/2+xONWBo3qjI74BAJtzkr5faHrpTczuNTXEghPHm5kVq3lTUyLehXQ7uI eLAQmUzJXA2u/ChTlBV6E9NhWVmey4zSoeiIJWuXLEpFVZgV+Gjj875885qCbMtM oO91nUY6y2gbx6G/K9M8AKSEHnshe4y4IjRVnHgSVyWIbashQg9ufUJDHGhvs5AP XZOfUTOzQj0WqYH9l8k3C72Q8y04cR7I0VzJxrNWEhrDJcZuAXAYUn92Ib8z0f7l fFqNWxlS/T8ys7wTIQdu88IXe1cbkic= -----END CERTIFICATE-----Generated at Sun May 11 17:29:53 2025 by rpki-client