$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/82ad5cc5-0dc9-3d83-9736-ff3bf4b6c7d4.roa File: 82ad5cc5-0dc9-3d83-9736-ff3bf4b6c7d4.roa (raw, json) Hash identifier: mImW4k/xu56d+Z2QizriIRyPINRPo6nPul+Uz2k9Upw= Subject key identifier: 64:07:66:CC:E7:9B:61:62:85:44:08:1F:2F:6F:C5:93:7D:A9:8E:50 Certificate issuer: /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a Certificate serial: 010D0C9F432858499829C7C08711A242731532C0 Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/82ad5cc5-0dc9-3d83-9736-ff3bf4b6c7d4.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 398852 IP address blocks: 104.243.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:c7:c0:87:11:a2:42:73:15:32:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=d9f248cc-524a-4ce7-a6fa-be0bef743757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1d:32:ab:24:b0:ab:72:d5:9b:0e:c6:b8:ba: 00:c9:52:aa:4d:f2:6d:9f:e0:85:81:55:20:e6:2a: 0c:f5:75:e2:b8:36:5c:8d:6f:d2:c7:d3:88:54:b5: da:66:1b:b8:23:58:b0:5a:9f:e1:b6:bc:cb:2c:86: 2b:d0:bf:5a:ee:cf:3c:49:93:c6:51:32:0d:f4:ce: cc:13:95:ed:7f:ba:61:08:5f:b1:ff:58:f7:49:76: 5b:2e:8a:72:e7:04:41:00:44:79:a1:07:96:cd:a6: ab:ff:5e:50:06:58:36:0a:6d:41:1f:a7:32:11:47: c9:a3:03:df:27:e6:87:46:41:3d:ed:fe:1c:16:3e: 83:37:8e:bc:fe:04:d0:2d:2a:2e:dd:f9:6c:f8:3e: 47:44:6b:45:ce:0a:b3:b7:38:f3:e3:11:e7:86:23: 4a:00:3f:ce:09:27:fb:94:45:34:91:33:08:93:3e: 03:7d:24:fe:44:e0:5b:0a:64:0c:b3:12:f5:d6:99: 9e:7d:a8:3c:04:26:f9:19:4e:82:5e:5c:a8:ed:b1: 88:08:0f:53:15:b5:13:4f:55:56:55:91:ec:a9:93: d3:87:f8:1e:82:c4:4c:b5:85:22:93:fd:08:41:e4: 7b:29:e2:b1:61:81:9b:9d:85:b8:ff:0f:5f:d1:57: d7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:07:66:CC:E7:9B:61:62:85:44:08:1F:2F:6F:C5:93:7D:A9:8E:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/82ad5cc5-0dc9-3d83-9736-ff3bf4b6c7d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl X509v3 Authority Key Identifier: keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer sbgp-ipAddrBlock: critical IPv4: 104.243.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:6d:81:f6:8f:a6:7f:58:3d:66:3c:90:4c:6b:c4:2e:20:38: 7a:fd:c2:c9:00:7b:a6:83:ef:ef:cc:9d:6d:45:f1:db:cb:fa: 96:b6:a0:b2:06:36:98:4c:62:77:37:24:88:fa:54:58:4e:30: de:39:0d:90:e7:aa:24:51:b8:7c:22:d9:2c:4f:5e:2b:1b:f5: 24:7a:05:0c:c4:47:fe:e9:60:3d:3f:0c:bd:fd:2d:bb:a6:75: f2:67:f9:f5:74:b5:1e:fd:24:23:ac:72:78:9d:70:8e:5e:79: 9d:46:bc:b0:d5:cd:41:0d:7c:01:ea:0e:03:48:6e:0e:fa:af: fb:e3:d2:c6:46:62:b6:14:60:7f:d0:18:a0:14:b3:75:e7:23: ee:c6:80:b6:28:0b:a0:29:22:f5:f6:3f:0f:bb:f1:52:33:73: fb:7e:56:8d:a0:bc:77:a2:76:04:72:94:4a:96:8e:60:c1:d3: 62:00:e0:60:72:9b:08:88:c9:ca:e3:e6:24:14:a4:e3:dc:df: ef:5a:13:b6:6b:08:91:ea:0a:89:3e:e4:a9:24:3c:a4:fe:84: 80:71:b6:d2:95:1c:b8:61:8b:92:a4:10:0f:5d:7c:01:a2:6b: ea:bb:70:b6:24:ab:3a:64:9c:c4:77:b1:97:f3:90:0b:bc:56: ba:3e:ad:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKcfAhxGiQnMVMsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVkYWUyYTAtMGNiNy00NmU4LWFlMTctYWJlYjA2MDA3 ZTFhMB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk ZDlmMjQ4Y2MtNTI0YS00Y2U3LWE2ZmEtYmUwYmVmNzQzNzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1x0yqySwq3LVmw7GuLoAyVKqTfJtn+CFgVUg 5ioM9XXiuDZcjW/Sx9OIVLXaZhu4I1iwWp/htrzLLIYr0L9a7s88SZPGUTIN9M7M E5Xtf7phCF+x/1j3SXZbLopy5wRBAER5oQeWzaar/15QBlg2Cm1BH6cyEUfJowPf J+aHRkE97f4cFj6DN468/gTQLSou3fls+D5HRGtFzgqztzjz4xHnhiNKAD/OCSf7 lEU0kTMIkz4DfST+ROBbCmQMsxL11pmefag8BCb5GU6CXlyo7bGICA9TFbUTT1VW VZHsqZPTh/gegsRMtYUik/0IQeR7KeKxYYGbnYW4/w9f0VfXJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQHZsznm2FihUQIHy9vxZN9qY5QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82NWRh ZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmViMDYwMDdlMWEvODJhZDVjYzUtMGRjOS0z ZDgzLTk3MzYtZmYzYmY0YjZjN2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjVkYWUyYTAtMGNiNy00NmU4LWFl MTctYWJlYjA2MDA3ZTFhLzY1ZGFlMmEwLTBjYjctNDZlOC1hZTE3LWFiZWIwNjAw N2UxYS5jcmwwHwYDVR0jBBgwFoAUGkmdi3ejOt8fzU66Ucwao/qj9iUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82NWRhZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmVi MDYwMDdlMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPPTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEltgfaPpn9YPWY8kExrxC4gOHr9wskAe6aD7+/MnW1F8dvL+pa2oLIG NphMYnc3JIj6VFhOMN45DZDnqiRRuHwi2SxPXisb9SR6BQzER/7pYD0/DL39Lbum dfJn+fV0tR79JCOscnidcI5eeZ1GvLDVzUENfAHqDgNIbg76r/vj0sZGYrYUYH/Q GKAUs3XnI+7GgLYoC6ApIvX2Pw+78VIzc/t+Vo2gvHeidgRylEqWjmDB02IA4GBy mwiIycrj5iQUpOPc3+9aE7ZrCJHqCok+5KkkPKT+hIBxttKVHLhhi5KkEA9dfAGi a+q7cLYkqzpknMR3sZfzkAu8Vro+rYg= -----END CERTIFICATE-----Generated at Tue May 6 20:05:32 2025 by rpki-client