$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3d74456c-9d78-3b96-bb4a-45625f3bc693.roa File: 3d74456c-9d78-3b96-bb4a-45625f3bc693.roa (raw, json) Hash identifier: pI1mtuMxdpdwwYtEJBC9/LDAllD4Isq9ffPADRCbPrI= Subject key identifier: 6B:72:C9:8A:05:7C:AE:C6:E1:33:6F:41:98:3B:45:25:63:8F:4D:90 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858499B876ECA7E915758A4B7E980 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3d74456c-9d78-3b96-bb4a-45625f3bc693.roa Signing time: Tue 22 Apr 2025 05:57:00 +0000 ROA not before: Tue 22 Apr 2025 05:57:00 +0000 ROA not after: Mon 21 Jul 2025 05:57:00 +0000 asID: 215224 IP address blocks: 104.37.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9b:87:6e:ca:7e:91:57:58:a4:b7:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 22 05:57:00 2025 GMT Not After : Jul 21 05:57:00 2025 GMT Subject: CN=e16298c3-a6d2-4731-87aa-1ff682ac855e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:35:85:4c:a4:ed:51:87:5b:68:50:19:6f:8d: 66:d2:8f:d1:39:53:4d:e3:17:7c:c3:13:7e:de:99: e6:de:ca:38:9c:c1:b6:1b:5d:c7:04:d6:06:42:82: 0e:70:80:c5:af:da:42:4f:92:cd:68:54:60:51:bb: 61:c8:bc:03:26:ac:57:c9:02:a9:31:e2:3d:7b:13: 3d:80:a4:ef:9e:f0:6e:52:1e:1e:f4:09:67:79:4a: 18:60:ca:50:93:a7:40:46:1a:68:fb:ea:10:e5:77: 80:5e:d3:36:6b:56:a4:e9:c8:d8:61:4d:f8:6a:92: 56:ff:53:e5:a7:e2:d5:ee:fb:75:13:8b:f9:89:9b: 70:d0:7f:8f:c2:49:4e:ab:11:c8:72:40:f0:68:17: 88:9d:52:62:0d:5d:97:30:8b:17:ca:e4:2b:fe:ad: a7:ba:46:ef:fb:53:5b:19:ed:9f:db:cf:71:f1:c4: f0:e9:86:ef:6d:26:9b:8c:98:54:d0:9a:6b:33:42: 80:6f:61:01:47:30:df:be:c5:c8:93:e6:b5:fd:1d: b2:e2:09:e5:cf:94:95:0e:c3:c9:ef:ed:2f:55:05: 71:70:2d:09:3b:af:5e:72:29:00:3a:ca:9b:29:04: 49:0b:c9:04:6c:17:d4:2d:88:d6:1e:59:fb:2c:85: 6f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:72:C9:8A:05:7C:AE:C6:E1:33:6F:41:98:3B:45:25:63:8F:4D:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3d74456c-9d78-3b96-bb4a-45625f3bc693.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.37.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:f3:73:29:0a:65:39:b4:d0:fd:30:d4:7f:37:d4:20:3c:3f: 50:c2:2a:1c:9c:6d:ea:e0:ef:2a:9e:8d:02:fa:d5:0a:a8:83: bf:59:80:9f:21:3a:1a:f5:74:d9:e2:9f:f5:0f:cf:b7:7b:c0: ca:52:e3:5a:e2:8b:52:65:10:6a:79:7c:8b:28:d6:90:13:ee: d6:b5:2b:64:c2:a9:60:f6:7b:0d:33:fc:1c:68:8f:b9:f6:9a: 76:66:9d:f7:6f:91:4c:f9:ee:2c:7b:48:d9:57:9c:66:6f:23: 16:ad:86:92:88:71:3c:50:ac:9f:a7:d6:60:b6:a2:f4:98:5e: 9d:6a:ca:d3:54:39:5d:c8:38:a7:11:08:26:fa:bf:53:66:27: ce:ba:2c:7a:8a:28:bb:5b:33:2f:a4:3b:6c:85:6a:0f:4b:0d: d2:a2:38:bf:4b:ff:68:56:1a:8a:00:9d:86:11:a7:05:8f:f2: b5:d4:ad:a4:ce:10:a0:9a:af:c9:a4:6c:94:a7:b0:a7:f5:42: 70:fb:88:3c:61:9c:fe:86:cb:48:33:6c:e2:33:7c:31:ea:34: fa:73:6d:34:7c:e0:0d:78:d1:51:5b:c9:ff:55:2a:c2:56:9d: 5f:69:f5:65:9e:57:34:e6:1f:d4:f2:b4:46:d3:79:58:f4:a6: 1c:8e:82:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmbh27KfpFXWKS36YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQyMjA1NTcwMFoXDTI1MDcyMTA1NTcwMFowLzEtMCsGA1UEAxMk ZTE2Mjk4YzMtYTZkMi00NzMxLTg3YWEtMWZmNjgyYWM4NTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzWFTKTtUYdbaFAZb41m0o/ROVNN4xd8wxN+ 3pnm3so4nMG2G13HBNYGQoIOcIDFr9pCT5LNaFRgUbthyLwDJqxXyQKpMeI9exM9 gKTvnvBuUh4e9AlneUoYYMpQk6dARhpo++oQ5XeAXtM2a1ak6cjYYU34apJW/1Pl p+LV7vt1E4v5iZtw0H+PwklOqxHIckDwaBeInVJiDV2XMIsXyuQr/q2nukbv+1Nb Ge2f289x8cTw6YbvbSabjJhU0JprM0KAb2EBRzDfvsXIk+a1/R2y4gnlz5SVDsPJ 7+0vVQVxcC0JO69ecikAOsqbKQRJC8kEbBfULYjWHln7LIVvWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtyyYoFfK7G4TNvQZg7RSVjj02QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvM2Q3NDQ1NmMtOWQ3OC0z Yjk2LWJiNGEtNDU2MjVmM2JjNjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaCUBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInzcykKZTm00P0w1H831CA8P1DCKhycberg7yqejQL61Qqog79ZgJ8h Ohr1dNnin/UPz7d7wMpS41rii1JlEGp5fIso1pAT7ta1K2TCqWD2ew0z/Bxoj7n2 mnZmnfdvkUz57ix7SNlXnGZvIxathpKIcTxQrJ+n1mC2ovSYXp1qytNUOV3IOKcR CCb6v1NmJ866LHqKKLtbMy+kO2yFag9LDdKiOL9L/2hWGooAnYYRpwWP8rXUraTO EKCar8mkbJSnsKf1QnD7iDxhnP6Gy0gzbOIzfDHqNPpzbTR84A140VFbyf9VKsJW nV9p9WWeVzTmH9TytEbTeVj0phyOgl8= -----END CERTIFICATE-----Generated at Sun Apr 27 02:17:33 2025 by rpki-client