$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8431538f-53d7-3595-996e-d936b49b3f82.roa File: 8431538f-53d7-3595-996e-d936b49b3f82.roa (raw, json) Hash identifier: u6QiZ3TTBnSjSq0Ixc5VGSjIheuykJTgazTvM0uQb8M= Subject key identifier: DF:64:96:4C:17:3D:20:AB:EA:6E:C1:9B:55:C1:F7:86:54:45:CF:70 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858494733EC97E141DB8BA8FD4600 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8431538f-53d7-3595-996e-d936b49b3f82.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 212238 IP address blocks: 104.250.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:ec:97:e1:41:db:8b:a8:fd:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=919b9d67-668b-4db1-9a4a-8f4e6ff2a146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:54:d2:21:44:01:c9:b2:9f:a7:1b:cc:a7:6f: ac:e9:cf:87:3f:2b:01:0b:be:73:0b:c7:84:ad:ff: bd:f1:cd:b0:66:ae:8f:be:c1:14:0c:5d:89:e1:65: 73:0d:c9:84:d1:20:63:36:67:00:f8:56:a7:95:55: d2:8f:3d:63:83:01:ba:d2:61:5e:f5:38:fa:13:55: bb:4e:e7:b8:99:81:8d:43:57:07:a0:07:fa:49:84: 28:e7:c1:f3:1f:42:3a:6b:03:a2:75:3a:e7:3a:13: 3e:6b:3d:42:ce:bf:25:77:87:0e:18:91:5c:f6:60: 03:29:d5:50:71:ac:ff:5c:c7:62:90:4a:60:77:51: ca:e2:b5:90:1e:47:ce:3f:f6:f6:0e:2a:78:68:52: e9:bb:88:ba:fd:a8:cc:1e:55:f5:0a:56:f1:bd:a5: a5:e7:76:22:39:8f:45:a5:af:b2:d5:8e:71:8e:a7: ac:a5:d5:34:f9:20:39:3b:c2:e3:48:5f:9c:d0:94: 71:e8:bb:58:6b:f8:04:ab:0a:db:08:6c:76:91:87: 20:27:d1:2e:2a:0a:b7:56:b8:36:5d:5c:4d:c0:eb: 07:1b:01:83:cf:5b:e5:d1:c2:02:15:fe:69:60:e4: 9c:0b:d5:c9:13:fe:91:fc:2d:b7:ce:a2:be:a0:2c: c3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:64:96:4C:17:3D:20:AB:EA:6E:C1:9B:55:C1:F7:86:54:45:CF:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8431538f-53d7-3595-996e-d936b49b3f82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:94:0d:71:27:e7:4d:d7:7b:db:6d:9d:76:3f:e0:e8:b7:37: 54:a5:dc:d3:3a:6b:96:a4:a2:df:8e:25:af:dc:9b:15:97:72: ec:53:5a:b3:67:c9:36:2a:01:0f:cb:46:b2:53:f2:28:5b:76: 7e:7c:2f:f8:f2:ff:94:3f:fa:be:4d:60:35:77:f2:3b:a9:03: f0:39:f4:47:13:2f:d8:ca:b0:17:c9:28:c8:37:2e:04:b8:7b: fd:ca:1e:fe:26:f2:af:f2:27:f3:20:b7:80:50:22:fd:37:7e: 5f:f4:f8:48:87:c2:32:58:61:56:56:2e:0f:3f:0b:17:93:1e: 0b:e9:62:2b:0c:69:2c:9e:59:ee:33:b4:cd:37:d0:a8:1d:e8: 36:cb:43:2d:87:65:09:16:60:66:30:d4:53:c4:28:5a:c5:7c: 54:1a:48:e3:9a:e4:48:76:fb:16:c3:57:dc:15:20:25:7b:40: 46:97:08:41:fd:a1:20:19:ed:2f:56:1d:c6:38:8d:40:2f:bb: ab:54:6d:c8:ec:e4:73:26:8d:77:b6:c6:70:a5:f1:40:92:92: 75:98:65:75:bc:94:88:eb:f9:b1:6b:94:25:f9:2c:fa:0a:83: f1:c1:e4:e5:5d:d6:5f:76:a6:e2:3f:ef:b2:ec:fa:76:5a:59: 5a:75:c1:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM+yX4UHbi6j9RgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk OTE5YjlkNjctNjY4Yi00ZGIxLTlhNGEtOGY0ZTZmZjJhMTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1TSIUQBybKfpxvMp2+s6c+HPysBC75zC8eE rf+98c2wZq6PvsEUDF2J4WVzDcmE0SBjNmcA+FanlVXSjz1jgwG60mFe9Tj6E1W7 Tue4mYGNQ1cHoAf6SYQo58HzH0I6awOidTrnOhM+az1Czr8ld4cOGJFc9mADKdVQ caz/XMdikEpgd1HK4rWQHkfOP/b2Dip4aFLpu4i6/ajMHlX1ClbxvaWl53YiOY9F pa+y1Y5xjqespdU0+SA5O8LjSF+c0JRx6LtYa/gEqwrbCGx2kYcgJ9EuKgq3Vrg2 XVxNwOsHGwGDz1vl0cICFf5pYOScC9XJE/6R/C23zqK+oCzDhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9klkwXPSCr6m7Bm1XB94ZURc9wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODQzMTUzOGYtNTNkNy0z NTk1LTk5NmUtZDkzNmI0OWIzZjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPq4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWUDXEn503Xe9ttnXY/4Oi3N1Sl3NM6a5akot+OJa/cmxWXcuxTWrNn yTYqAQ/LRrJT8ihbdn58L/jy/5Q/+r5NYDV38jupA/A59EcTL9jKsBfJKMg3LgS4 e/3KHv4m8q/yJ/Mgt4BQIv03fl/0+EiHwjJYYVZWLg8/CxeTHgvpYisMaSyeWe4z tM030Kgd6DbLQy2HZQkWYGYw1FPEKFrFfFQaSOOa5Eh2+xbDV9wVICV7QEaXCEH9 oSAZ7S9WHcY4jUAvu6tUbcjs5HMmjXe2xnCl8UCSknWYZXW8lIjr+bFrlCX5LPoK g/HB5OVd1l92puI/77Ls+nZaWVp1wZc= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:29 2025 by rpki-client