$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/339c5c96-40cd-3f6f-902d-498bcefc3987.roa File: 339c5c96-40cd-3f6f-902d-498bcefc3987.roa (raw, json) Hash identifier: Ev1n+UaZEqZN0pIZC1gtaAsd95YlNzjEH6cuWgr8HlI= Subject key identifier: 06:71:7F:B3:22:A1:6A:E4:1A:7A:E2:1F:BC:C0:04:E6:A3:95:97:8B Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848F4F97274B49948C26DE10B80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/339c5c96-40cd-3f6f-902d-498bcefc3987.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 54004 IP address blocks: 104.37.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f9:72:74:b4:99:48:c2:6d:e1:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=17103201-d56b-4f2f-82da-ec005752fa49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d7:55:72:99:26:e1:36:03:0a:6a:83:9c:44: c4:90:d9:73:9c:9d:76:8b:02:c9:23:ad:03:21:07: 6b:ea:d8:d2:df:83:4f:2f:d0:28:a6:a6:01:57:ca: 3b:16:7b:4e:88:bb:00:f4:c9:a4:41:55:74:49:8b: ad:a7:5f:80:71:ea:46:a6:41:bc:52:15:aa:fc:7a: cd:7f:87:67:01:f1:43:49:c8:bb:70:49:a9:ff:8f: 85:a5:fe:3c:04:52:4e:ca:a7:d8:9f:4c:5c:b5:52: ab:d3:1f:b0:63:7d:c1:c6:27:c7:d4:51:f1:19:9f: 74:d4:36:c2:c1:2f:d9:f3:fa:00:d8:5f:35:a7:9e: dc:da:a0:18:8f:99:ef:16:7e:59:72:c4:1b:f9:a7: 2b:7a:5a:f4:7c:36:cd:18:b9:aa:1b:87:c5:2c:e7: 02:50:09:b0:42:a7:5b:1b:8d:f0:11:b0:b8:6a:cf: a2:b1:94:63:86:ca:18:17:25:22:52:9a:05:49:9c: a3:ed:c4:f3:43:10:d6:87:62:3a:02:ad:6e:63:dc: fd:c5:58:1b:ee:02:58:37:3d:31:41:e8:1b:e5:e4: d7:98:c8:59:db:b0:17:c4:7b:c4:ee:bd:1c:5e:f3: 06:23:56:f9:02:01:22:f1:13:3d:6a:00:82:ff:01: da:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:71:7F:B3:22:A1:6A:E4:1A:7A:E2:1F:BC:C0:04:E6:A3:95:97:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/339c5c96-40cd-3f6f-902d-498bcefc3987.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.37.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:a2:59:4f:bb:44:fd:19:ab:a9:45:39:50:85:aa:99:bb:ec: 05:c8:e1:a8:d2:bf:e9:d5:16:39:a4:06:eb:c2:c0:56:22:7a: 8b:ab:7c:ad:58:10:59:16:42:8b:b7:a7:cc:f6:d5:d6:3d:4a: d7:08:57:60:d9:8f:fc:55:20:5d:39:8b:91:46:26:dc:ed:04: cc:31:82:1e:6e:70:c4:c3:44:15:ef:ca:78:1b:59:44:5e:d4: 23:f6:73:ac:59:00:48:5d:ca:9c:f8:53:33:85:ad:0a:4b:1f: de:9a:01:0e:02:ad:01:74:05:df:30:0b:24:2d:be:e2:54:7b: a5:9e:05:5d:be:07:82:b6:cd:66:93:c8:12:26:1e:0f:10:fc: b4:1a:e7:1d:78:9f:01:9d:8c:77:e0:9b:bb:fb:76:ea:22:fd: ac:ab:2e:13:5d:25:30:71:db:7b:9e:61:02:8d:55:fd:8c:a6: ac:26:03:66:5d:48:c3:78:a6:80:42:5e:e3:c8:60:24:18:2e: c5:1c:0b:a7:c5:05:a7:4f:5d:98:e8:1c:4e:89:a7:a7:ca:41: 73:73:2e:cd:4b:c7:e6:23:b9:96:50:12:59:31:91:08:e6:bf: ef:42:0b:36:1c:84:2d:fa:09:f3:9c:7e:a3:02:6a:51:55:ae: 34:9c:3e:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+XJ0tJlIwm3hC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MTcxMDMyMDEtZDU2Yi00ZjJmLTgyZGEtZWMwMDU3NTJmYTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtdVcpkm4TYDCmqDnETEkNlznJ12iwLJI60D IQdr6tjS34NPL9AopqYBV8o7FntOiLsA9MmkQVV0SYutp1+AcepGpkG8UhWq/HrN f4dnAfFDSci7cEmp/4+Fpf48BFJOyqfYn0xctVKr0x+wY33BxifH1FHxGZ901DbC wS/Z8/oA2F81p57c2qAYj5nvFn5ZcsQb+acrelr0fDbNGLmqG4fFLOcCUAmwQqdb G43wEbC4as+isZRjhsoYFyUiUpoFSZyj7cTzQxDWh2I6Aq1uY9z9xVgb7gJYNz0x Qegb5eTXmMhZ27AXxHvE7r0cXvMGI1b5AgEi8RM9agCC/wHavQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZxf7MioWrkGnriH7zABOajlZeLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzM5YzVjOTYtNDBjZC0z ZjZmLTkwMmQtNDk4YmNlZmMzOTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaCUGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyiWU+7RP0Zq6lFOVCFqpm77AXI4ajSv+nVFjmkBuvCwFYieourfK1Y EFkWQou3p8z21dY9StcIV2DZj/xVIF05i5FGJtztBMwxgh5ucMTDRBXvyngbWURe 1CP2c6xZAEhdypz4UzOFrQpLH96aAQ4CrQF0Bd8wCyQtvuJUe6WeBV2+B4K2zWaT yBImHg8Q/LQa5x14nwGdjHfgm7v7duoi/ayrLhNdJTBx23ueYQKNVf2MpqwmA2Zd SMN4poBCXuPIYCQYLsUcC6fFBadPXZjoHE6Jp6fKQXNzLs1Lx+YjuZZQElkxkQjm v+9CCzYchC36CfOcfqMCalFVrjScPrs= -----END CERTIFICATE-----Generated at Sun Apr 27 02:17:24 2025 by rpki-client