$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/2d1265f0-ff7e-394e-8144-1a0cc5601ef4.roa File: 2d1265f0-ff7e-394e-8144-1a0cc5601ef4.roa (raw, json) Hash identifier: mLiTsQiwpvjpXHwZiu2cqn0RPVN6pylDTG/RMBrxJN8= Subject key identifier: 2A:0A:C5:2B:6C:B3:FA:C7:FC:2F:CF:A4:95:88:C8:C4:C4:D6:83:1E Certificate issuer: /CN=45de47ca-0b52-44ab-af26-767d8a671192 Certificate serial: 010D0C9F43285849B9AA074797EB16B0AC9B3D60 Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/2d1265f0-ff7e-394e-8144-1a0cc5601ef4.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 5645 IP address blocks: 104.222.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:07:47:97:eb:16:b0:ac:9b:3d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=59b3d692-eea7-4eb7-b58a-1845cd687d3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:25:94:17:bc:5e:21:23:ab:f4:6f:8f:6a:37: 97:3b:f1:1e:6a:33:7d:7e:ba:f3:b5:5e:6a:17:31: 9f:cb:ee:95:c7:64:f8:42:72:e4:b8:5d:84:a0:61: 57:cb:c6:ff:a6:bf:c9:c1:70:d1:bb:c4:8c:19:f3: 7a:77:7d:1b:01:75:ce:fe:f1:d8:88:38:86:38:e8: d8:e7:f1:78:d4:c4:56:4b:dc:d0:11:61:29:0c:70: 7b:0c:f8:3e:76:43:82:f1:3b:88:4c:79:34:67:9f: c5:74:03:4b:91:f5:40:c3:9d:85:18:c9:a2:a7:8e: d9:15:35:f4:c4:bf:b5:bc:46:08:b3:0b:52:33:2e: 46:d0:c5:6c:71:26:a4:81:e9:e7:73:1e:7b:c4:3b: 11:02:63:23:21:6c:94:72:60:e5:7e:7e:1b:c2:41: fd:8c:b9:b6:37:1f:a7:50:8c:ce:e1:ab:01:11:48: 0c:e8:e4:dc:72:fb:6a:4c:db:96:b4:1b:93:a7:7d: a4:7e:53:36:33:5a:15:ef:47:34:65:88:47:d9:4c: 5e:3d:53:f6:d1:0f:00:8c:91:e6:2b:e1:05:dd:5a: 66:b1:93:d1:4a:38:0d:f0:02:db:f1:a5:4d:e8:66: b7:bc:e0:e0:1f:6c:3d:d9:1f:82:31:b2:28:f9:1f: 7c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:0A:C5:2B:6C:B3:FA:C7:FC:2F:CF:A4:95:88:C8:C4:C4:D6:83:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/2d1265f0-ff7e-394e-8144-1a0cc5601ef4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl X509v3 Authority Key Identifier: keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer sbgp-ipAddrBlock: critical IPv4: 104.222.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:19:f5:0c:73:f5:8e:11:ba:01:39:43:48:3c:85:fb:06:29: 72:1f:09:57:7a:a8:22:ba:5f:dd:99:f5:da:d3:0d:78:19:ae: 55:1d:20:20:6c:cb:b6:8a:1e:36:bc:26:58:93:fb:dc:6e:6f: fd:d2:00:98:c8:36:34:e0:60:2c:5a:2d:3f:2c:2a:cb:a1:87: 7d:33:84:fb:ee:d5:c1:ea:b7:61:8c:f3:25:72:a7:ed:83:e4: 5c:0f:84:0e:38:ea:d6:84:53:f1:c6:c9:4b:f1:19:4b:ba:c1: 10:48:95:14:b9:f2:e1:90:13:a0:d4:e1:b9:75:13:24:ae:93: 35:f5:e3:1f:f3:ec:12:86:28:19:71:1e:59:36:5a:7d:5f:94: 91:36:d8:2d:e4:74:53:e6:22:c4:f0:bd:2a:a1:03:66:fb:37: 02:c7:c7:e1:f0:36:7f:8b:bf:ad:ca:ed:84:25:08:15:58:b3: 35:e2:29:25:72:46:31:7c:38:64:2d:a0:c8:48:a2:11:b3:bd: 12:e6:24:e8:c7:d6:b4:49:b2:c2:60:5f:fa:76:5b:ea:62:4e: 86:3e:10:48:e8:da:e3:ce:b5:f4:0d:46:f2:a6:72:0e:64:21: 9b:fb:9d:b1:f6:81:a3:e4:09:ff:e8:22:35:c8:cb:4e:c0:51: c4:ec:37:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qgdHl+sWsKybPWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZTQ3Y2EtMGI1Mi00NGFiLWFmMjYtNzY3ZDhhNjcx MTkyMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk NTliM2Q2OTItZWVhNy00ZWI3LWI1OGEtMTg0NWNkNjg3ZDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyWUF7xeISOr9G+PajeXO/EeajN9frrztV5q FzGfy+6Vx2T4QnLkuF2EoGFXy8b/pr/JwXDRu8SMGfN6d30bAXXO/vHYiDiGOOjY 5/F41MRWS9zQEWEpDHB7DPg+dkOC8TuITHk0Z5/FdANLkfVAw52FGMmip47ZFTX0 xL+1vEYIswtSMy5G0MVscSakgenncx57xDsRAmMjIWyUcmDlfn4bwkH9jLm2Nx+n UIzO4asBEUgM6OTccvtqTNuWtBuTp32kflM2M1oV70c0ZYhH2UxePVP20Q8AjJHm K+EF3VpmsZPRSjgN8ALb8aVN6Ga3vODgH2w92R+CMbIo+R98fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoKxStss/rH/C/PpJWIyMTE1oMeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRl NDdjYS0wYjUyLTQ0YWItYWYyNi03NjdkOGE2NzExOTIvMmQxMjY1ZjAtZmY3ZS0z OTRlLTgxNDQtMWEwY2M1NjAxZWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZTQ3Y2EtMGI1Mi00NGFiLWFm MjYtNzY3ZDhhNjcxMTkyLzQ1ZGU0N2NhLTBiNTItNDRhYi1hZjI2LTc2N2Q4YTY3 MTE5Mi5jcmwwHwYDVR0jBBgwFoAUxgiZJ8n+iQwKmkdxsPshppvRgPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRlNDdjYS0wYjUyLTQ0YWItYWYyNi03Njdk OGE2NzExOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaN5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsZ9Qxz9Y4RugE5Q0g8hfsGKXIfCVd6qCK6X92Z9drTDXgZrlUdICBs y7aKHja8JliT+9xub/3SAJjINjTgYCxaLT8sKsuhh30zhPvu1cHqt2GM8yVyp+2D 5FwPhA446taEU/HGyUvxGUu6wRBIlRS58uGQE6DU4bl1EySukzX14x/z7BKGKBlx Hlk2Wn1flJE22C3kdFPmIsTwvSqhA2b7NwLHx+HwNn+Lv63K7YQlCBVYszXiKSVy RjF8OGQtoMhIohGzvRLmJOjH1rRJssJgX/p2W+piToY+EEjo2uPOtfQNRvKmcg5k IZv7nbH2gaPkCf/oIjXIy07AUcTsN20= -----END CERTIFICATE-----Generated at Sat May 10 13:30:36 2025 by rpki-client