$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/339c5c96-40cd-3f6f-902d-498bcefc3987.roa File: 339c5c96-40cd-3f6f-902d-498bcefc3987.roa (raw, json) Hash identifier: d5Wu8BssxC9KhNZN9TBoogUB8kDONiZzIvVjyMaiE5M= Subject key identifier: 17:85:E7:ED:B4:1F:EB:55:85:71:8D:04:9C:E3:90:7D:D9:5E:97:04 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849D42FB6A6478983B4502AE700 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/339c5c96-40cd-3f6f-902d-498bcefc3987.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 54004 IP address blocks: 104.37.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:b6:a6:47:89:83:b4:50:2a:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=5b3415fd-4999-432d-bc11-f82bf05591cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c9:b3:65:b2:a8:d5:57:f1:5e:44:be:3c:4b: ab:40:c9:f1:3d:d9:d2:76:0f:92:c6:0d:6d:9a:b4: 47:0d:18:29:b1:cb:64:2b:db:ce:ae:ae:45:bb:49: d2:cf:3e:b9:43:f2:bf:5c:de:23:20:8d:02:9f:ed: de:3f:d0:9a:51:da:5e:cd:ec:4a:0b:bd:c2:f4:30: 93:f5:35:b8:a6:fa:92:7d:b6:9b:e4:d2:41:0a:d0: f4:9b:d4:68:41:b5:58:9c:2e:4a:64:5d:43:c7:76: 42:86:ea:cd:cb:0d:65:13:ce:74:99:9b:55:c4:33: 6b:28:54:1e:97:a6:45:4d:53:5c:41:07:de:80:77: 5a:d5:f3:54:b7:91:97:48:51:01:84:aa:63:14:4e: db:da:bb:20:6d:74:11:75:52:fa:6d:e9:13:c4:3f: 90:66:49:10:76:88:63:3b:da:67:7c:ba:e9:8e:a1: 55:2b:4b:29:ad:a2:75:e9:1d:7d:24:d6:27:73:ab: e0:4b:19:13:92:d6:24:9b:ab:a1:d9:84:f1:86:af: 7e:19:9b:ad:97:73:db:05:6b:10:73:6f:8f:a1:72: 48:02:c1:52:a3:3d:dc:8a:f2:f8:68:b7:26:2c:c6: cd:b6:d0:7f:d9:25:da:c4:dc:16:0a:ba:29:f3:18: 98:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:85:E7:ED:B4:1F:EB:55:85:71:8D:04:9C:E3:90:7D:D9:5E:97:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/339c5c96-40cd-3f6f-902d-498bcefc3987.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.37.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:e6:ab:d6:00:6c:a7:c8:70:bf:2e:92:d6:27:90:2e:a0:d1: cc:96:1e:34:c8:ed:f2:f1:3f:99:b4:23:94:e5:a0:99:a8:bb: c8:ab:b5:89:c9:2c:47:67:30:94:e6:a4:5e:36:e0:e8:f9:c7: f2:d8:3f:f1:36:b9:61:7d:3a:cd:5c:94:0b:3c:b3:f6:31:7c: 77:74:fc:e0:fe:6b:b1:3c:94:5b:61:24:60:2c:1f:22:49:e8: c4:63:c8:dd:cb:22:21:f4:b4:d3:95:e6:a9:db:a4:e6:a5:d9: 7e:e8:48:a3:8d:23:58:43:29:80:ee:c3:ef:73:a8:32:38:60: 38:7e:03:1a:10:3b:5e:ee:f0:78:21:ad:ae:cf:9f:35:76:14: 05:fd:e6:9e:37:48:79:fd:11:5b:ef:41:a9:47:e0:9d:48:74: 40:d8:f4:87:35:e4:0d:10:57:b6:73:16:b2:da:ff:9c:f6:15: 01:8a:f8:ed:31:b1:ec:82:5a:11:64:cc:35:f0:2c:65:34:7e: 33:5b:6a:1c:90:d7:05:fe:47:84:4b:d1:ee:42:6d:eb:b2:a7: 86:75:fd:64:dc:74:09:e5:da:08:71:03:d5:31:c1:c6:6e:08: cb:3a:5b:67:91:56:23:22:89:79:9e:d3:31:54:0c:75:ec:bc: 4f:fb:15:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL7amR4mDtFAq5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NWIzNDE1ZmQtNDk5OS00MzJkLWJjMTEtZjgyYmYwNTU5MWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsmzZbKo1VfxXkS+PEurQMnxPdnSdg+Sxg1t mrRHDRgpsctkK9vOrq5Fu0nSzz65Q/K/XN4jII0Cn+3eP9CaUdpezexKC73C9DCT 9TW4pvqSfbab5NJBCtD0m9RoQbVYnC5KZF1Dx3ZChurNyw1lE850mZtVxDNrKFQe l6ZFTVNcQQfegHda1fNUt5GXSFEBhKpjFE7b2rsgbXQRdVL6bekTxD+QZkkQdohj O9pnfLrpjqFVK0spraJ16R19JNYnc6vgSxkTktYkm6uh2YTxhq9+GZutl3PbBWsQ c2+PoXJIAsFSoz3civL4aLcmLMbNttB/2SXaxNwWCrop8xiYTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeF5+20H+tVhXGNBJzjkH3ZXpcEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzM5YzVjOTYtNDBjZC0z ZjZmLTkwMmQtNDk4YmNlZmMzOTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaCUGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvmq9YAbKfIcL8uktYnkC6g0cyWHjTI7fLxP5m0I5TloJmou8irtYnJ LEdnMJTmpF424Oj5x/LYP/E2uWF9Os1clAs8s/YxfHd0/OD+a7E8lFthJGAsHyJJ 6MRjyN3LIiH0tNOV5qnbpOal2X7oSKONI1hDKYDuw+9zqDI4YDh+AxoQO17u8Hgh ra7PnzV2FAX95p43SHn9EVvvQalH4J1IdEDY9Ic15A0QV7ZzFrLa/5z2FQGK+O0x seyCWhFkzDXwLGU0fjNbahyQ1wX+R4RL0e5Cbeuyp4Z1/WTcdAnl2ghxA9UxwcZu CMs6W2eRViMiiXme0zFUDHXsvE/7Fe0= -----END CERTIFICATE-----Generated at Sun Jun 15 21:59:50 2025 by rpki-client