$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/3ffe2b76-e774-3c56-aae6-c2359820c5cf.roa File: 3ffe2b76-e774-3c56-aae6-c2359820c5cf.roa (raw, json) Hash identifier: f7BYOFd5SglEwOkg7SEs++sE2bqgH6/eAdMtl4F3K28= Subject key identifier: F3:FA:65:F7:5C:2C:0D:30:C6:55:A1:0A:01:53:48:4D:BC:0C:63:EE Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F43285849CBCF9A55AF5C1925F0AFF870 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/3ffe2b76-e774-3c56-aae6-c2359820c5cf.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 20127 IP address blocks: 104.152.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:9a:55:af:5c:19:25:f0:af:f8:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=5e417d1f-033e-4dec-8555-d1971182046c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:93:83:fb:cf:6a:5a:fe:62:24:94:7a:d6:0d: 38:1f:9e:b8:67:0b:30:ff:3c:ed:68:a3:c2:46:fd: eb:92:5f:d1:3f:73:ef:dd:b4:ce:0d:52:f8:f7:ea: 0a:2b:70:56:d4:78:38:62:f8:c2:5b:c2:4e:b9:1a: f8:f4:c3:98:80:ed:93:03:12:c8:4e:f5:65:2b:b9: 26:4f:8b:6c:1b:87:17:e8:70:d3:38:df:e8:8d:63: 80:ed:7d:77:4d:a5:4f:31:9d:64:b3:9f:f7:7e:87: c7:88:56:f4:b1:29:cf:66:ee:83:fb:3d:0b:52:f0: 12:8d:cc:70:b3:ae:e0:81:34:87:24:7c:97:ba:8d: 73:53:e2:97:a2:49:67:0b:f1:dc:37:d6:fe:51:ee: a5:99:4c:b2:ab:7b:e8:64:ad:6b:d9:5c:41:bd:88: 96:14:bb:96:24:18:d3:a1:fa:88:96:4e:d3:c9:d9: 24:43:7c:55:49:37:42:ac:86:ed:da:da:50:d2:d3: ca:ce:ec:09:2e:95:c3:65:c2:07:2d:15:4b:81:10: 0b:d2:7f:b6:0a:0f:1b:a2:a8:21:65:bf:9d:21:92: af:0a:04:2f:7b:a3:28:07:cb:80:47:d3:0d:26:b3: ba:04:2e:ae:10:ce:a9:18:37:f7:8a:92:b0:f7:50: bd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:FA:65:F7:5C:2C:0D:30:C6:55:A1:0A:01:53:48:4D:BC:0C:63:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/3ffe2b76-e774-3c56-aae6-c2359820c5cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 104.152.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:9a:81:5e:70:5a:f6:27:e5:c2:37:60:c9:ac:31:a4:69:d0: 79:44:2b:f7:c2:c9:08:ef:e1:55:b8:25:c2:b2:d1:20:b3:b2: 08:88:31:1d:35:7f:27:7c:56:6c:e6:86:d5:3c:c6:f8:87:a4: db:0d:f6:1b:5f:35:30:80:d3:5f:cf:fc:e1:50:d5:82:46:6b: 2a:7d:60:62:8c:7d:1b:18:3b:22:15:94:95:bf:f9:d0:d3:81: 2f:21:83:59:14:d0:b0:ae:62:8b:da:63:87:a4:74:99:a9:4f: 91:89:f8:f5:1b:7b:e0:d9:4d:20:f1:f3:79:cc:44:11:36:88: d7:8f:d8:f6:9c:d0:32:a9:bc:8e:a4:42:6c:16:36:a4:5c:ec: 09:bb:3b:f5:6a:e9:7e:3f:94:09:e6:54:51:49:8e:d7:70:39: a1:ee:5c:fc:74:15:d1:31:89:85:7c:04:3e:a8:67:8a:25:d1: e9:7b:1a:53:19:ef:00:ef:a2:d9:c4:f3:92:ad:97:3f:73:bc: e9:d2:bc:28:de:4a:78:40:2a:85:d2:b9:95:19:9a:52:91:1c: e7:23:ef:a4:46:eb:e8:9a:b3:18:45:2f:68:7c:aa:95:77:c6: bb:04:81:74:e4:4a:45:fa:88:e9:35:51:99:9b:21:84:25:5b: 72:ac:b8:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz5pVr1wZJfCv+HAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk NWU0MTdkMWYtMDMzZS00ZGVjLTg1NTUtZDE5NzExODIwNDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpOD+89qWv5iJJR61g04H564Zwsw/zztaKPC Rv3rkl/RP3Pv3bTODVL49+oKK3BW1Hg4YvjCW8JOuRr49MOYgO2TAxLITvVlK7km T4tsG4cX6HDTON/ojWOA7X13TaVPMZ1ks5/3fofHiFb0sSnPZu6D+z0LUvASjcxw s67ggTSHJHyXuo1zU+KXoklnC/HcN9b+Ue6lmUyyq3voZK1r2VxBvYiWFLuWJBjT ofqIlk7TydkkQ3xVSTdCrIbt2tpQ0tPKzuwJLpXDZcIHLRVLgRAL0n+2Cg8boqgh Zb+dIZKvCgQve6MoB8uAR9MNJrO6BC6uEM6pGDf3ipKw91C9hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPP6ZfdcLA0wxlWhCgFTSE28DGPuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvM2ZmZTJiNzYtZTc3NC0z YzU2LWFhZTYtYzIzNTk4MjBjNWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJjFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2agV5wWvYn5cI3YMmsMaRp0HlEK/fCyQjv4VW4JcKy0SCzsgiIMR01 fyd8VmzmhtU8xviHpNsN9htfNTCA01/P/OFQ1YJGayp9YGKMfRsYOyIVlJW/+dDT gS8hg1kU0LCuYovaY4ekdJmpT5GJ+PUbe+DZTSDx83nMRBE2iNeP2Pac0DKpvI6k QmwWNqRc7Am7O/Vq6X4/lAnmVFFJjtdwOaHuXPx0FdExiYV8BD6oZ4ol0el7GlMZ 7wDvotnE85Ktlz9zvOnSvCjeSnhAKoXSuZUZmlKRHOcj76RG6+iasxhFL2h8qpV3 xrsEgXTkSkX6iOk1UZmbIYQlW3KsuL8= -----END CERTIFICATE-----Generated at Sat May 10 07:23:52 2025 by rpki-client