$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/3835268a-a25e-35a1-9357-9942576a6214.roa File: 3835268a-a25e-35a1-9357-9942576a6214.roa (raw, json) Hash identifier: JjJcaKGReIzskCOqlw4reFl2HiY4WLL77h88VyiXg70= Subject key identifier: 19:47:FA:83:95:73:12:3C:A4:10:7D:44:CC:FC:5A:48:0E:1C:26:43 Certificate issuer: /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2 Certificate serial: 010D0C9F432858499A8796C4D07F41C2BEE7FB40 Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/3835268a-a25e-35a1-9357-9942576a6214.roa Signing time: Mon 21 Apr 2025 21:21:30 +0000 ROA not before: Mon 21 Apr 2025 21:21:30 +0000 ROA not after: Sun 20 Jul 2025 21:21:30 +0000 asID: 201106 IP address blocks: 104.37.29.0/24 maxlen: 32 104.143.94.0/24 maxlen: 32 104.194.206.0/24 maxlen: 32 104.194.207.0/24 maxlen: 32 104.194.219.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:87:96:c4:d0:7f:41:c2:be:e7:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2 Validity Not Before: Apr 21 21:21:30 2025 GMT Not After : Jul 20 21:21:30 2025 GMT Subject: CN=2858b25d-d9cf-4eed-9af3-1efd1e3c4a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:63:de:36:84:0b:1f:e1:6d:12:c3:f5:0e:c9: e2:fc:dd:98:cd:22:39:7a:6a:a7:2f:47:5c:1d:13: 12:fc:c5:e7:5f:5e:95:91:7b:1a:6a:84:95:0f:c5: 30:43:af:dd:8d:bd:67:98:56:3f:f8:9b:d6:c1:d5: 84:81:d1:51:67:a6:2a:b0:d6:32:a6:8c:c7:bc:6e: 25:f2:64:69:16:36:ea:3f:8c:2c:63:a1:fa:1c:cf: b0:48:cc:31:4d:1c:e5:72:67:9e:f6:8e:c9:2f:83: 89:2d:90:3e:84:10:75:fe:40:74:08:ae:6d:33:2f: 2c:9e:50:46:7e:0b:e2:a5:ee:62:13:c8:9a:76:44: c8:7d:da:6d:c5:2e:b0:15:cf:ce:2e:58:45:40:08: f9:c6:5b:b7:80:8f:13:9f:16:74:12:e1:df:9f:ff: 72:e0:c9:f9:4b:c6:d9:89:9f:ff:6d:68:73:8c:db: 2d:07:20:9b:fd:30:a3:40:eb:ba:7a:1a:40:64:f5: 9b:4b:bc:bb:d5:f1:0c:54:8f:86:45:02:a4:9c:96: 19:e2:34:26:75:ba:d4:23:7b:b7:74:41:9b:4b:ff: 0e:05:d1:a5:12:b9:2d:23:2c:91:61:47:ea:56:f8: 3d:73:8c:ea:6e:ec:b1:3c:8e:0b:a2:b4:fa:39:b7: 73:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:47:FA:83:95:73:12:3C:A4:10:7D:44:CC:FC:5A:48:0E:1C:26:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/3835268a-a25e-35a1-9357-9942576a6214.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl X509v3 Authority Key Identifier: keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer sbgp-ipAddrBlock: critical IPv4: 104.37.29.0/24 104.143.94.0/24 104.194.206.0/23 104.194.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:55:f8:96:1a:12:ed:68:c0:07:b8:17:ac:d9:62:5a:bb:a8: 14:ef:f4:57:92:cb:0a:d8:da:7e:bf:31:b8:b8:9a:c8:70:c7: 2d:38:27:31:fa:c3:44:c8:8b:9e:6e:b9:58:ff:c4:6e:95:4c: 3a:f5:2d:6f:7a:5c:c1:a5:82:dd:03:45:0d:2a:72:b9:bb:e5: dd:9e:3a:97:e7:6d:e2:bf:5f:64:8e:e4:a8:7f:10:4b:2f:b0: 7b:60:bb:cc:ea:5f:b7:80:49:cd:fb:4c:41:cb:55:7c:ec:82: c3:b7:1c:37:63:1b:43:03:bc:fc:ec:62:fb:de:ca:1e:29:f1: 5f:ed:07:4d:1a:7f:b4:06:17:47:b4:69:e7:d0:e6:bb:6f:21: 7d:b6:f4:da:3c:5e:65:2f:27:62:7f:67:c4:77:c3:df:9e:f7: d5:7d:41:41:60:75:df:98:b0:a5:f3:b2:2a:58:fa:6a:9e:ed: 95:9e:83:aa:0d:01:ce:f7:13:ea:20:a0:91:61:80:bf:c5:c2: 86:04:a3:24:ae:9d:8c:ab:fd:00:4a:96:89:53:19:6c:e2:e7: 82:cc:d0:7a:ef:7a:77:1f:c5:f2:79:77:32:d7:22:26:e1:4e: e0:5b:5b:69:0e:1e:bb:23:14:85:9c:dd:0e:b1:75:d2:ab:c0: 28:31:bb:a1 -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEmah5bE0H9Bwr7n+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY3OTk5YzgtZTRhNS00NWZjLTljYzItYzRmZTdmMThi ZmUyMB4XDTI1MDQyMTIxMjEzMFoXDTI1MDcyMDIxMjEzMFowLzEtMCsGA1UEAxMk Mjg1OGIyNWQtZDljZi00ZWVkLTlhZjMtMWVmZDFlM2M0YTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimPeNoQLH+FtEsP1Dsni/N2YzSI5emqnL0dc HRMS/MXnX16VkXsaaoSVD8UwQ6/djb1nmFY/+JvWwdWEgdFRZ6YqsNYypozHvG4l 8mRpFjbqP4wsY6H6HM+wSMwxTRzlcmee9o7JL4OJLZA+hBB1/kB0CK5tMy8snlBG fgvipe5iE8iadkTIfdptxS6wFc/OLlhFQAj5xlu3gI8TnxZ0EuHfn/9y4Mn5S8bZ iZ//bWhzjNstByCb/TCjQOu6ehpAZPWbS7y71fEMVI+GRQKknJYZ4jQmdbrUI3u3 dEGbS/8OBdGlErktIyyRYUfqVvg9c4zqbuyxPI4LorT6ObdzIwIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFBlH+oOVcxI8pBB9RMz8WkgOHCZDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5 OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZlN2YxOGJmZTIvMzgzNTI2OGEtYTI1ZS0z NWExLTkzNTctOTk0MjU3NmE2MjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGY3OTk5YzgtZTRhNS00NWZjLTlj YzItYzRmZTdmMThiZmUyL2RmNzk5OWM4LWU0YTUtNDVmYy05Y2MyLWM0ZmU3ZjE4 YmZlMi5jcmwwHwYDVR0jBBgwFoAUGekERPSo9doFk24jLmU0Yzeeu6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZl N2YxOGJmZTIuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAaCUdAwQA aI9eAwQBaMLOAwQAaMLbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEZV+JYaEu1owAe4F6zZYlq7qBTv9FeS ywrY2n6/Mbi4mshwxy04JzH6w0TIi55uuVj/xG6VTDr1LW96XMGlgt0DRQ0qcrm7 5d2eOpfnbeK/X2SO5Kh/EEsvsHtgu8zqX7eASc37TEHLVXzsgsO3HDdjG0MDvPzs Yvveyh4p8V/tB00af7QGF0e0aefQ5rtvIX229No8XmUvJ2J/Z8R3w9+e99V9QUFg dd+YsKXzsipY+mqe7ZWeg6oNAc73E+ogoJFhgL/FwoYEoySunYyr/QBKlolTGWzi 54LM0HrvencfxfJ5dzLXIibhTuBbW2kOHrsjFIWc3Q6xddKrwCgxu6E= -----END CERTIFICATE-----Generated at Wed May 7 03:48:39 2025 by rpki-client