$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8431538f-53d7-3595-996e-d936b49b3f82.roa File: 8431538f-53d7-3595-996e-d936b49b3f82.roa (raw, json) Hash identifier: 3nYF1U4+eRsYWSIYro2y/zYWeXLldELAMP20ZWC3d/I= Subject key identifier: 60:BB:82:80:3B:F6:E9:7C:3A:88:06:69:59:41:6E:0A:7F:6D:4F:D3 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A268AC14C3B989B3204CE13C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8431538f-53d7-3595-996e-d936b49b3f82.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 212238 IP address blocks: 104.250.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:c1:4c:3b:98:9b:32:04:ce:13:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=d20ce958-e9d8-42a0-be74-9b177a6b6f35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fa:6b:a7:91:7b:5a:96:51:75:80:10:a3:3b: 59:19:8d:84:bf:ad:b6:2b:b9:d8:29:c7:78:29:11: c1:1b:65:fc:df:55:02:45:a6:a1:98:6b:e3:4b:2c: 23:41:f8:fa:0b:dc:ea:be:e1:95:35:19:ff:8d:d0: a6:a3:88:25:c5:71:bb:de:31:91:ff:9e:08:a1:00: 4e:dd:92:e9:b1:a1:d6:4e:0a:53:1a:80:7a:3c:5b: f7:a8:36:7f:e1:9c:7f:a7:14:de:8a:f4:e0:f3:93: 10:84:ab:1f:e7:64:89:4d:39:01:0b:32:1e:5d:e1: 8b:96:c9:b9:f8:de:43:96:f6:14:9c:7c:b7:8e:19: aa:b1:88:e5:41:07:c4:07:b8:a2:b0:1f:ad:53:ca: 96:7d:e2:92:29:4b:9a:c1:81:7e:76:4a:35:a1:e1: 51:ab:76:2e:1e:3d:10:9c:30:88:8a:ba:45:d1:90: be:ad:a1:77:f7:c6:fd:b0:10:09:b4:e8:a1:0d:46: 99:a6:88:fa:6d:37:bb:6f:8d:8e:3c:c8:31:30:33: bf:93:1e:43:00:f2:45:b1:7a:e6:16:1d:11:24:03: 93:5d:ba:c7:c3:6b:cd:71:a9:43:29:b6:c6:34:fa: b6:12:9c:43:b3:dd:38:fc:c1:b0:42:57:dd:08:db: 4a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:BB:82:80:3B:F6:E9:7C:3A:88:06:69:59:41:6E:0A:7F:6D:4F:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8431538f-53d7-3595-996e-d936b49b3f82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:b9:ec:6d:29:9b:e7:b6:d3:b9:bf:ad:3e:db:cb:88:5f:f8: 9d:b5:23:a5:8a:4d:52:bc:5f:78:77:5f:ce:a8:6d:2b:e8:c4: e2:0f:9a:d8:e9:da:75:1b:27:c3:6d:bb:17:3f:8a:7e:5a:a8: 05:80:42:e9:e4:a1:9f:e1:b7:94:8c:08:ad:a8:16:b2:c3:2e: 33:b1:ee:94:6d:aa:4a:6a:41:26:33:ee:92:09:7e:2b:e0:b6: b9:14:06:84:4f:4b:d1:8f:8d:e2:64:94:56:5a:bd:3c:ed:22: e8:65:dc:2d:8d:89:3b:87:71:c3:e7:b3:86:30:4e:bf:7e:f0: 08:37:6a:2e:22:eb:02:14:3d:39:71:65:c0:4b:d3:32:6a:3e: c2:c3:32:24:48:4f:56:fb:cd:29:99:a1:c6:91:1b:0e:03:e7: 09:a9:7b:4f:d1:05:26:5c:25:4d:0b:e8:25:68:69:8c:0c:26: 59:8c:c6:43:6a:24:cc:9b:ea:be:57:4e:2c:b9:1b:07:b6:99: f9:ee:aa:9e:ff:1b:30:fb:89:9e:74:ac:71:c8:3e:8a:f6:f2: fd:86:06:cb:a0:b3:94:ef:7f:9e:bd:52:b4:c7:08:f3:de:98: ff:fc:b0:d3:4a:34:8b:31:90:7a:94:21:a9:c5:db:a8:6c:07: e6:c9:ff:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomisFMO5ibMgTOE8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk ZDIwY2U5NTgtZTlkOC00MmEwLWJlNzQtOWIxNzdhNmI2ZjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfprp5F7WpZRdYAQoztZGY2Ev622K7nYKcd4 KRHBG2X831UCRaahmGvjSywjQfj6C9zqvuGVNRn/jdCmo4glxXG73jGR/54IoQBO 3ZLpsaHWTgpTGoB6PFv3qDZ/4Zx/pxTeivTg85MQhKsf52SJTTkBCzIeXeGLlsm5 +N5DlvYUnHy3jhmqsYjlQQfEB7iisB+tU8qWfeKSKUuawYF+dko1oeFRq3YuHj0Q nDCIirpF0ZC+raF398b9sBAJtOihDUaZpoj6bTe7b42OPMgxMDO/kx5DAPJFsXrm Fh0RJAOTXbrHw2vNcalDKbbGNPq2EpxDs904/MGwQlfdCNtKRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGC7goA79ul8OogGaVlBbgp/bU/TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODQzMTUzOGYtNTNkNy0z NTk1LTk5NmUtZDkzNmI0OWIzZjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPq4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE257G0pm+e207m/rT7by4hf+J21I6WKTVK8X3h3X86obSvoxOIPmtjp 2nUbJ8Ntuxc/in5aqAWAQunkoZ/ht5SMCK2oFrLDLjOx7pRtqkpqQSYz7pIJfivg trkUBoRPS9GPjeJklFZavTztIuhl3C2NiTuHccPns4YwTr9+8Ag3ai4i6wIUPTlx ZcBL0zJqPsLDMiRIT1b7zSmZocaRGw4D5wmpe0/RBSZcJU0L6CVoaYwMJlmMxkNq JMyb6r5XTiy5Gwe2mfnuqp7/GzD7iZ50rHHIPor28v2GBsugs5Tvf569UrTHCPPe mP/8sNNKNIsxkHqUIanF26hsB+bJ/8c= -----END CERTIFICATE-----Generated at Sat Jun 14 17:31:50 2025 by rpki-client