$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/73ca0919-a04c-37ff-94f3-29d436366d7d.roa File: 73ca0919-a04c-37ff-94f3-29d436366d7d.roa (raw, json) Hash identifier: Twaom9S0w/k8UveZCk9J4zr7FuJmMqRK60MxYtg3/5I= Subject key identifier: 2F:E1:AA:BB:23:67:9D:35:B1:68:EF:D5:DC:56:24:38:C1:3A:7F:53 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849350E9AD829EF6D6E7327FE80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/73ca0919-a04c-37ff-94f3-29d436366d7d.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 212238 IP address blocks: 104.243.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:9a:d8:29:ef:6d:6e:73:27:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=fb9782ac-8630-44ed-ba59-793bafa52f4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ba:a8:a0:1a:9e:75:89:16:5e:97:db:22:9e: 5f:16:65:cd:75:14:e1:c7:18:00:2d:20:2f:07:ac: a1:81:c5:2e:9c:db:45:48:93:c0:9d:6b:6c:d9:75: ca:fb:82:ec:88:82:76:08:c7:8f:eb:e5:ef:59:18: b4:41:6f:aa:07:b8:8a:ca:b3:c7:bb:18:bf:2a:77: d0:10:31:1b:3d:c8:38:7c:c7:80:1b:ec:c5:94:39: 26:60:da:15:66:9c:b6:ca:3c:90:b6:8d:64:76:99: b7:63:ba:d6:19:d0:74:63:90:b4:91:83:f4:de:1c: 05:f1:fd:57:d7:a6:4a:67:17:b5:10:3e:92:5b:71: cc:0e:51:ee:fb:67:6a:ac:a2:ea:ac:d0:d8:af:d4: 38:a8:5f:aa:92:07:c4:4f:71:49:49:74:c7:ab:6a: 4a:a1:b8:4d:9e:a9:a9:34:8d:90:29:b9:aa:8e:1c: ac:68:08:9e:06:0f:57:ee:2f:e9:22:19:27:57:c4: 91:6c:ce:e5:03:e8:57:80:cf:e5:eb:ba:f4:ed:d8: 55:5f:19:79:e2:80:9b:32:4a:9e:1a:de:8d:9d:49: e0:21:19:a5:30:6d:be:ae:d0:97:c4:5d:06:59:ea: 2a:da:65:0b:51:98:d8:f6:0a:77:58:59:63:10:46: f5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E1:AA:BB:23:67:9D:35:B1:68:EF:D5:DC:56:24:38:C1:3A:7F:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/73ca0919-a04c-37ff-94f3-29d436366d7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.243.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:9f:91:1d:19:5c:cf:e5:3e:24:65:c4:3f:42:e6:b5:b5:2f: dd:f9:71:6c:2f:07:b5:7a:fd:0c:0c:d0:c5:c7:e5:81:45:aa: 0d:10:88:5a:4b:91:56:1c:c8:4d:0c:ca:3d:e0:3e:de:63:33: 36:52:7e:d7:34:51:7b:5e:7e:12:b2:3d:b7:43:d7:5e:4e:56: f3:d3:72:ae:28:1b:02:a1:53:56:d7:eb:28:2a:26:f7:a6:a7: 9f:42:2b:d9:bd:ad:2b:e4:7b:0a:8a:84:f5:ac:bf:1f:b4:d4: f7:df:17:c8:5a:70:50:cd:13:28:93:d8:dc:68:fa:08:95:34: a4:a2:ff:3d:71:43:23:a8:80:16:b7:13:81:c2:8b:93:69:19: ac:5c:35:8a:54:e2:e8:63:0c:b6:02:17:44:3b:31:b8:8a:9e: 23:03:52:da:7f:aa:31:67:ec:e5:db:2c:e2:12:f1:01:b5:48: 00:ea:cc:f1:45:5a:e5:32:8f:19:50:0f:67:3c:8c:b3:03:26: 83:e7:a8:1f:bb:e2:76:ad:f7:e1:28:49:fa:b1:56:ff:4f:34: 9a:b3:11:89:35:3d:45:16:99:15:d7:e7:77:d1:6b:c4:97:98: 6c:24:46:d9:03:28:f8:3c:42:bc:84:9c:68:ca:7b:0f:36:59: ff:f4:2e:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DprYKe9tbnMn/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk ZmI5NzgyYWMtODYzMC00NGVkLWJhNTktNzkzYmFmYTUyZjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrqooBqedYkWXpfbIp5fFmXNdRThxxgALSAv B6yhgcUunNtFSJPAnWts2XXK+4LsiIJ2CMeP6+XvWRi0QW+qB7iKyrPHuxi/KnfQ EDEbPcg4fMeAG+zFlDkmYNoVZpy2yjyQto1kdpm3Y7rWGdB0Y5C0kYP03hwF8f1X 16ZKZxe1ED6SW3HMDlHu+2dqrKLqrNDYr9Q4qF+qkgfET3FJSXTHq2pKobhNnqmp NI2QKbmqjhysaAieBg9X7i/pIhknV8SRbM7lA+hXgM/l67r07dhVXxl54oCbMkqe Gt6NnUngIRmlMG2+rtCXxF0GWeoq2mULUZjY9gp3WFljEEb1GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/hqrsjZ501sWjv1dxWJDjBOn9TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNzNjYTA5MTktYTA0Yy0z N2ZmLTk0ZjMtMjlkNDM2MzY2ZDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPPyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKfkR0ZXM/lPiRlxD9C5rW1L935cWwvB7V6/QwM0MXH5YFFqg0QiFpL kVYcyE0Myj3gPt5jMzZSftc0UXtefhKyPbdD115OVvPTcq4oGwKhU1bX6ygqJvem p59CK9m9rSvkewqKhPWsvx+01PffF8hacFDNEyiT2Nxo+giVNKSi/z1xQyOogBa3 E4HCi5NpGaxcNYpU4uhjDLYCF0Q7MbiKniMDUtp/qjFn7OXbLOIS8QG1SADqzPFF WuUyjxlQD2c8jLMDJoPnqB+74nat9+EoSfqxVv9PNJqzEYk1PUUWmRXX53fRa8SX mGwkRtkDKPg8QryEnGjKew82Wf/0LtA= -----END CERTIFICATE-----Generated at Sat Apr 26 22:17:10 2025 by rpki-client