$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f51e2479-4af9-4d7f-84b9-1821268b9a84/9300d5d8-9561-3b88-9757-c4e36cba4c4b.roa File: 9300d5d8-9561-3b88-9757-c4e36cba4c4b.roa (raw, json) Hash identifier: LJTO/m/Wk7nnELpj8Xiyav2FpXGR6rT3cuxNdSdNKRM= Subject key identifier: C7:1E:44:E6:A1:D3:24:79:00:11:39:25:15:41:EC:E5:03:2D:08:88 Certificate issuer: /CN=f51e2479-4af9-4d7f-84b9-1821268b9a84 Certificate serial: 010D0C9F43285849A61F4244AE05A591C8059100 Authority key identifier: 4C:AD:46:96:CB:86:10:75:0E:83:D5:5C:8E:64:45:56:74:3B:3D:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f51e2479-4af9-4d7f-84b9-1821268b9a84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f51e2479-4af9-4d7f-84b9-1821268b9a84/9300d5d8-9561-3b88-9757-c4e36cba4c4b.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 31758 IP address blocks: 104.128.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f51e2479-4af9-4d7f-84b9-1821268b9a84/f51e2479-4af9-4d7f-84b9-1821268b9a84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f51e2479-4af9-4d7f-84b9-1821268b9a84/f51e2479-4af9-4d7f-84b9-1821268b9a84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f51e2479-4af9-4d7f-84b9-1821268b9a84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:42:44:ae:05:a5:91:c8:05:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f51e2479-4af9-4d7f-84b9-1821268b9a84 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=a1d536ad-4002-4ace-8104-6400ef3c0a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:95:57:4a:b5:78:93:27:7e:4a:cc:e2:bf:8f: 94:a7:f9:78:75:da:8d:12:93:f1:e2:af:73:c3:2b: 46:81:70:c4:18:9c:f8:5c:98:b3:07:a2:71:63:5a: 8f:0b:ec:73:da:13:fc:d0:d5:aa:db:2e:56:0a:ff: 4c:40:f3:90:da:f2:4b:68:22:40:ca:47:d7:2c:f4: 61:39:b5:4d:1a:9a:83:0a:e5:44:8c:ef:80:1c:5d: fc:d4:1f:bf:99:a5:0b:57:1e:f7:47:37:d9:95:f3: 0e:eb:b0:3e:f8:fc:ee:05:d2:a1:36:b8:2b:a9:07: 59:2b:69:f8:b2:62:ad:b9:a7:a5:30:ca:02:4a:60: d2:3a:a2:2f:62:65:67:b5:13:6f:07:6e:e5:99:c5: 64:ff:91:ca:1e:4e:24:05:4a:02:d7:5a:28:52:86: da:dc:d6:8a:6e:93:c1:86:68:73:f6:68:fb:cd:4c: 2d:c8:c5:db:ef:dc:d9:ca:f8:5a:6a:63:07:c8:b3: 0b:db:07:92:7b:8c:ee:8e:ab:0e:97:f2:57:79:1f: 04:b1:96:d4:00:54:fe:f9:fe:8a:01:70:07:bd:3b: 99:06:93:db:9c:e9:e0:14:e3:65:dc:19:bb:57:13: 69:61:df:ef:e8:65:9c:23:d9:f5:8e:f5:58:9a:bb: 36:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:1E:44:E6:A1:D3:24:79:00:11:39:25:15:41:EC:E5:03:2D:08:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f51e2479-4af9-4d7f-84b9-1821268b9a84/9300d5d8-9561-3b88-9757-c4e36cba4c4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f51e2479-4af9-4d7f-84b9-1821268b9a84/f51e2479-4af9-4d7f-84b9-1821268b9a84.crl X509v3 Authority Key Identifier: keyid:4C:AD:46:96:CB:86:10:75:0E:83:D5:5C:8E:64:45:56:74:3B:3D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f51e2479-4af9-4d7f-84b9-1821268b9a84.cer sbgp-ipAddrBlock: critical IPv4: 104.128.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:77:55:f3:29:80:1b:a1:59:ab:6c:e8:00:d3:63:c8:5c:83: ad:3d:8d:bc:ca:53:c1:e4:28:18:5c:7f:87:b6:16:37:2e:53: 99:8a:a4:97:52:96:d2:e6:27:07:26:5c:cb:ef:8f:d0:6d:68: a5:28:97:56:a6:1a:8c:9e:e2:f1:14:02:14:d6:58:c1:2b:2a: 80:9e:7f:6e:f2:68:c1:27:bc:ca:5f:99:fa:fa:41:33:d5:a4: 72:e1:2e:f9:15:ba:23:97:47:99:f2:69:f9:43:58:2b:29:4c: d9:1d:69:91:44:96:af:0e:22:19:c0:79:ae:17:21:e5:5e:1f: 48:26:ba:40:4e:8c:48:a9:b5:8b:4f:6f:23:b6:14:bb:69:87: f1:a4:a8:d4:c5:b8:36:14:26:12:af:f7:57:9b:a4:5a:59:35: 44:70:63:86:e3:bc:53:65:26:14:48:d5:69:c3:51:5d:9a:b9: 72:c3:6f:e2:c2:95:87:82:6e:2f:23:25:8a:a8:38:ca:27:e0: 55:c7:ab:6b:b8:42:bd:2b:7a:54:bd:41:62:c5:86:cb:cd:af: 0c:33:77:84:8b:cf:3b:30:b4:ac:53:58:8e:ee:52:41:28:16: d1:83:f0:0a:d1:81:8f:2c:76:60:de:93:bb:79:2d:2a:18:d2: e2:27:cd:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmH0JErgWlkcgFkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjUxZTI0NzktNGFmOS00ZDdmLTg0YjktMTgyMTI2OGI5 YTg0MB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk YTFkNTM2YWQtNDAwMi00YWNlLTgxMDQtNjQwMGVmM2MwYTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5VXSrV4kyd+Ssziv4+Up/l4ddqNEpPx4q9z wytGgXDEGJz4XJizB6JxY1qPC+xz2hP80NWq2y5WCv9MQPOQ2vJLaCJAykfXLPRh ObVNGpqDCuVEjO+AHF381B+/maULVx73RzfZlfMO67A++PzuBdKhNrgrqQdZK2n4 smKtuaelMMoCSmDSOqIvYmVntRNvB27lmcVk/5HKHk4kBUoC11ooUoba3NaKbpPB hmhz9mj7zUwtyMXb79zZyvhaamMHyLML2weSe4zujqsOl/JXeR8EsZbUAFT++f6K AXAHvTuZBpPbnOngFONl3Bm7VxNpYd/v6GWcI9n1jvVYmrs2jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMceROah0yR5ABE5JRVB7OUDLQiIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNTFl MjQ3OS00YWY5LTRkN2YtODRiOS0xODIxMjY4YjlhODQvOTMwMGQ1ZDgtOTU2MS0z Yjg4LTk3NTctYzRlMzZjYmE0YzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjUxZTI0NzktNGFmOS00ZDdmLTg0 YjktMTgyMTI2OGI5YTg0L2Y1MWUyNDc5LTRhZjktNGQ3Zi04NGI5LTE4MjEyNjhi OWE4NC5jcmwwHwYDVR0jBBgwFoAUTK1GlsuGEHUOg9VcjmRFVnQ7Pa8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mNTFlMjQ3OS00YWY5LTRkN2YtODRiOS0xODIx MjY4YjlhODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaIAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGV3VfMpgBuhWats6ADTY8hcg609jbzKU8HkKBhcf4e2FjcuU5mKpJdS ltLmJwcmXMvvj9BtaKUol1amGoye4vEUAhTWWMErKoCef27yaMEnvMpfmfr6QTPV pHLhLvkVuiOXR5nyaflDWCspTNkdaZFElq8OIhnAea4XIeVeH0gmukBOjEiptYtP byO2FLtph/GkqNTFuDYUJhKv91ebpFpZNURwY4bjvFNlJhRI1WnDUV2auXLDb+LC lYeCbi8jJYqoOMon4FXHq2u4Qr0relS9QWLFhsvNrwwzd4SLzzswtKxTWI7uUkEo FtGD8ArRgY8sdmDek7t5LSoY0uInzcY= -----END CERTIFICATE-----Generated at Sat May 10 04:46:53 2025 by rpki-client