$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/306f4639-2ca2-3128-acf0-ed21010e43ec.roa File: 306f4639-2ca2-3128-acf0-ed21010e43ec.roa (raw, json) Hash identifier: 0Oh3aDlvXV/90i62lqHLi+7mCpwjF7/RPLUdRdeiZpk= Subject key identifier: B3:03:19:7D:50:D5:88:14:87:03:6C:92:DD:20:18:9F:75:3A:0A:50 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848EB3108CB9FC56FCC83763700 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/306f4639-2ca2-3128-acf0-ed21010e43ec.roa Signing time: Tue 18 Feb 2025 02:00:38 +0000 ROA not before: Tue 18 Feb 2025 02:00:38 +0000 ROA not after: Mon 19 May 2025 01:00:38 +0000 asID: 53356 IP address blocks: 104.243.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:eb:31:08:cb:9f:c5:6f:cc:83:76:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 18 02:00:38 2025 GMT Not After : May 19 01:00:38 2025 GMT Subject: CN=aa905417-9ef9-47c3-b05b-6c1e58e12bfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:47:e7:91:3b:d0:8d:bd:ce:c9:59:ae:46:73: 17:0f:08:b5:84:4d:71:7e:79:19:71:a5:24:ef:43: d0:ea:97:63:38:dd:28:09:fa:37:38:bf:90:48:be: 26:7f:f2:e2:4c:a6:58:42:d5:82:9d:23:80:fa:ab: f6:b9:b6:18:8e:7f:40:d6:1b:05:81:20:a9:e4:25: 17:f0:bf:a5:0f:c3:6a:3a:43:5c:23:16:d4:00:36: 99:92:c3:9f:7a:1c:ee:75:c2:81:94:30:a8:30:ec: 8d:27:f2:c2:40:32:89:0a:48:14:47:0c:dd:7c:09: 7d:c7:5d:ae:ce:73:df:af:f9:d2:a8:09:dd:d6:9b: a6:01:d0:35:38:40:1e:9e:0b:99:b6:a6:e0:45:11: 69:47:26:8f:d9:68:76:3a:4c:3d:6b:a7:c9:73:d6: e6:ed:a5:57:4d:99:f5:42:76:db:b4:70:64:75:0f: ac:e7:10:2f:bb:a2:2c:96:be:8c:22:86:cb:8e:87: 1a:6e:42:ac:7c:e6:b6:6c:9c:12:95:89:f8:a6:11: 80:4d:2d:bc:69:44:35:5b:4e:01:9b:87:03:fb:e3: 22:7d:f7:cb:77:c5:b8:82:57:a3:fe:88:39:9b:c6: c2:dd:3f:f7:8a:b6:10:29:e9:2c:6d:31:04:4d:9d: bd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:03:19:7D:50:D5:88:14:87:03:6C:92:DD:20:18:9F:75:3A:0A:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/306f4639-2ca2-3128-acf0-ed21010e43ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.243.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:1c:49:92:b8:33:d3:82:d5:04:1f:67:4d:05:66:77:9e:a5: 59:1c:eb:0a:fd:46:5e:85:ef:48:7d:3f:c5:20:45:7b:ac:be: 9d:c5:27:81:ea:74:95:76:c9:96:bc:1a:1b:da:69:61:dc:c1: 6c:86:f4:00:18:4e:05:f6:3d:ce:64:74:89:23:3a:5a:1e:22: fe:61:69:19:36:d0:6e:7a:0f:84:53:67:9d:b3:7c:ba:56:fb: c4:47:a2:b6:37:05:24:3f:2e:2b:51:22:2b:20:9c:aa:df:94: 78:ad:e2:2c:47:3b:0d:5a:ed:57:4d:f2:dc:e2:d2:d7:f9:07: ca:16:2c:6f:eb:ec:9a:50:ac:9c:1f:5b:ff:4d:e9:00:35:5d: 39:41:ed:6b:e8:ec:56:a6:cb:42:da:f8:97:36:62:53:ef:76: 9b:3a:33:68:17:72:96:bd:2c:c7:3e:00:01:5d:2e:19:a4:c2: 26:49:ab:2c:dc:54:73:f7:01:22:1d:6e:51:f2:c7:ef:a9:49: de:ca:77:6a:c5:96:21:bb:a8:61:06:24:22:02:f2:14:c8:fb: cd:2b:8b:fa:bb:2a:6f:bb:f7:37:f9:fa:f5:1b:2e:24:f9:86: 68:fa:4d:d7:d4:13:b7:1b:5f:41:65:b5:0a:56:97:0c:08:1e: e7:13:45:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjrMQjLn8VvzIN2NwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIxODAyMDAzOFoXDTI1MDUxOTAxMDAzOFowLzEtMCsGA1UEAxMk YWE5MDU0MTctOWVmOS00N2MzLWIwNWItNmMxZTU4ZTEyYmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUfnkTvQjb3OyVmuRnMXDwi1hE1xfnkZcaUk 70PQ6pdjON0oCfo3OL+QSL4mf/LiTKZYQtWCnSOA+qv2ubYYjn9A1hsFgSCp5CUX 8L+lD8NqOkNcIxbUADaZksOfehzudcKBlDCoMOyNJ/LCQDKJCkgURwzdfAl9x12u znPfr/nSqAnd1pumAdA1OEAenguZtqbgRRFpRyaP2Wh2Okw9a6fJc9bm7aVXTZn1 QnbbtHBkdQ+s5xAvu6Islr6MIobLjocabkKsfOa2bJwSlYn4phGATS28aUQ1W04B m4cD++MifffLd8W4glej/og5m8bC3T/3irYQKeksbTEETZ29yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMDGX1Q1YgUhwNskt0gGJ91OgpQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzA2ZjQ2MzktMmNhMi0z MTI4LWFjZjAtZWQyMTAxMGU0M2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPP5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAcSZK4M9OC1QQfZ00FZneepVkc6wr9Rl6F70h9P8UgRXusvp3FJ4Hq dJV2yZa8GhvaaWHcwWyG9AAYTgX2Pc5kdIkjOloeIv5haRk20G56D4RTZ52zfLpW +8RHorY3BSQ/LitRIisgnKrflHit4ixHOw1a7VdN8tzi0tf5B8oWLG/r7JpQrJwf W/9N6QA1XTlB7Wvo7Famy0La+Jc2YlPvdps6M2gXcpa9LMc+AAFdLhmkwiZJqyzc VHP3ASIdblHyx++pSd7Kd2rFliG7qGEGJCIC8hTI+80ri/q7Km+79zf5+vUbLiT5 hmj6TdfUE7cbX0FltQpWlwwIHucTRa0= -----END CERTIFICATE-----Generated at Sat Apr 26 22:31:50 2025 by rpki-client