$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/8f2c507f-9880-3a0a-8e6a-2d9cc5d1e911.roa File: 8f2c507f-9880-3a0a-8e6a-2d9cc5d1e911.roa (raw, json) Hash identifier: X3boe55or/h9/o8baWGBcnyAGQEE/Vv9+oS41reULPQ= Subject key identifier: 1F:CF:F9:F0:28:02:3B:70:B9:B9:E2:27:2F:83:FA:97:4B:34:D6:DC Certificate issuer: /CN=a295a695-e91a-4c5a-8a31-a920a42ea44d Certificate serial: 010D0C9F43285849ABC885A14E5261A36DD71600 Authority key identifier: C6:B7:63:90:9D:99:42:6E:16:F5:9E:92:2D:20:F5:88:30:C1:AA:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/8f2c507f-9880-3a0a-8e6a-2d9cc5d1e911.roa Signing time: Mon 28 Apr 2025 01:41:05 +0000 ROA not before: Mon 28 Apr 2025 01:41:05 +0000 ROA not after: Sun 27 Jul 2025 01:41:05 +0000 asID: 21748 IP address blocks: 104.37.232.0/21 maxlen: 24 2606:8b40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:c8:85:a1:4e:52:61:a3:6d:d7:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a295a695-e91a-4c5a-8a31-a920a42ea44d Validity Not Before: Apr 28 01:41:05 2025 GMT Not After : Jul 27 01:41:05 2025 GMT Subject: CN=2962427e-dc2c-4e9c-9ca2-07aa46648f2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:62:5e:59:f3:ce:98:d6:42:87:22:40:52:28: e3:39:b2:09:3c:60:81:4b:36:61:fc:e9:aa:cb:44: 46:60:72:9a:dd:04:0c:08:09:26:89:9a:e1:44:b4: fd:b4:94:7d:69:71:32:a3:f5:49:ba:7b:62:58:b0: 62:68:ef:48:0d:6c:bf:42:ce:57:91:ed:df:be:65: d7:42:dc:0e:de:c6:f2:b5:c8:92:a0:09:89:41:85: 2d:b0:b7:90:15:77:b1:98:15:91:e5:a9:8b:ef:c8: 50:ec:43:18:6a:2e:17:43:f1:81:c4:80:25:81:b9: 27:ec:17:46:e9:e6:5a:dd:fc:36:8a:b4:7f:8d:1d: b9:f5:f4:bd:9c:f9:6b:c1:07:9a:f8:e8:91:0d:11: 86:c8:c0:39:25:ce:be:d4:4f:09:5f:1d:3f:5b:0d: 4d:82:1a:7b:fe:1b:a2:eb:18:37:74:c9:fc:39:68: bd:ec:06:d6:06:3a:fa:b9:bb:5e:92:06:2e:78:09: 6b:f7:9e:2c:cc:6c:da:9a:f4:4c:73:22:60:7a:c0: 36:3e:ba:84:3c:94:01:c3:83:70:cd:06:9f:07:4a: f0:d5:3b:7e:2d:21:d4:a2:a7:17:c7:a1:8d:2b:f9: 9a:15:62:3e:9d:fd:17:e3:d6:5d:8c:be:e0:95:13: 04:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:CF:F9:F0:28:02:3B:70:B9:B9:E2:27:2F:83:FA:97:4B:34:D6:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/8f2c507f-9880-3a0a-8e6a-2d9cc5d1e911.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.crl X509v3 Authority Key Identifier: keyid:C6:B7:63:90:9D:99:42:6E:16:F5:9E:92:2D:20:F5:88:30:C1:AA:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer sbgp-ipAddrBlock: critical IPv4: 104.37.232.0/21 IPv6: 2606:8b40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:12:38:54:5b:7b:c7:80:7b:a9:86:18:2b:d7:fd:1a:3e:d4: be:49:bb:87:1f:8c:5e:b9:be:52:10:fc:9e:32:22:41:79:b4: ff:2e:e3:af:67:da:6a:7a:23:c1:c7:ab:c9:5f:cf:b8:ae:97: b8:92:f3:b8:c3:0a:bd:68:c3:a3:31:34:f9:48:59:a1:d3:1f: ca:7a:fe:49:27:9f:77:19:b7:16:c0:34:83:e9:aa:a3:f7:91: e3:b0:d9:a4:12:5a:ff:09:cf:49:46:38:c4:a0:a0:df:2d:7c: 00:4b:92:07:66:f2:44:e0:42:6a:2e:d9:5a:7b:57:fa:26:71: 9a:32:bc:12:1a:b1:c7:49:63:9e:e2:24:15:15:df:af:ec:fc: 3e:d7:a4:1d:67:d4:1d:49:c7:e4:22:10:8f:03:0d:25:63:5c: 09:60:0f:c4:66:a6:41:aa:d2:b9:1f:92:ba:99:4b:3d:4f:22: 6a:f6:03:72:da:32:8d:da:04:1b:ae:57:cd:53:f9:b7:72:b3: 2e:03:d0:8a:30:a5:36:6a:45:7f:2e:19:2e:80:0f:ef:72:86: 54:7c:de:53:e1:30:ed:8b:77:f1:18:1f:2e:a1:ee:11:e2:8f: 0a:39:3a:66:4f:62:81:c6:04:a7:31:1c:1a:b1:1c:4d:f6:40: 31:f4:8a:d4 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEmryIWhTlJho23XFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI5NWE2OTUtZTkxYS00YzVhLThhMzEtYTkyMGE0MmVh NDRkMB4XDTI1MDQyODAxNDEwNVoXDTI1MDcyNzAxNDEwNVowLzEtMCsGA1UEAxMk Mjk2MjQyN2UtZGMyYy00ZTljLTljYTItMDdhYTQ2NjQ4ZjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGJeWfPOmNZChyJAUijjObIJPGCBSzZh/Omq y0RGYHKa3QQMCAkmiZrhRLT9tJR9aXEyo/VJuntiWLBiaO9IDWy/Qs5Xke3fvmXX QtwO3sbytciSoAmJQYUtsLeQFXexmBWR5amL78hQ7EMYai4XQ/GBxIAlgbkn7BdG 6eZa3fw2irR/jR259fS9nPlrwQea+OiRDRGGyMA5Jc6+1E8JXx0/Ww1Nghp7/hui 6xg3dMn8OWi97AbWBjr6ubtekgYueAlr954szGzamvRMcyJgesA2PrqEPJQBw4Nw zQafB0rw1Tt+LSHUoqcXx6GNK/maFWI+nf0X49ZdjL7glRMERwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFB/P+fAoAjtwubniJy+D+pdLNNbcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hMjk1 YTY5NS1lOTFhLTRjNWEtOGEzMS1hOTIwYTQyZWE0NGQvOGYyYzUwN2YtOTg4MC0z YTBhLThlNmEtMmQ5Y2M1ZDFlOTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTI5NWE2OTUtZTkxYS00YzVhLThh MzEtYTkyMGE0MmVhNDRkL2EyOTVhNjk1LWU5MWEtNGM1YS04YTMxLWE5MjBhNDJl YTQ0ZC5jcmwwHwYDVR0jBBgwFoAUxrdjkJ2ZQm4W9Z6SLSD1iDDBqmwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hMjk1YTY5NS1lOTFhLTRjNWEtOGEzMS1hOTIw YTQyZWE0NGQuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDaCXoMA0E AgACMAcDBQAmBotAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBADMSOFRbe8eAe6mGGCvX/Ro+1L5Ju4cfjF65 vlIQ/J4yIkF5tP8u469n2mp6I8HHq8lfz7iul7iS87jDCr1ow6MxNPlIWaHTH8p6 /kknn3cZtxbANIPpqqP3keOw2aQSWv8Jz0lGOMSgoN8tfABLkgdm8kTgQmou2Vp7 V/omcZoyvBIascdJY57iJBUV36/s/D7XpB1n1B1Jx+QiEI8DDSVjXAlgD8RmpkGq 0rkfkrqZSz1PImr2A3LaMo3aBBuuV81T+bdysy4D0IowpTZqRX8uGS6AD+9yhlR8 3lPhMO2Ld/EYHy6h7hHijwo5OmZPYoHGBKcxHBqxHE32QDH0itQ= -----END CERTIFICATE-----Generated at Tue May 13 06:45:26 2025 by rpki-client