$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d19c4072-3e37-34cc-8546-7e22c3dbb489.roa File: d19c4072-3e37-34cc-8546-7e22c3dbb489.roa (raw, json) Hash identifier: 2YD5n5puQj4CROY8cYfQIXtCQ8URD6UEc1xw9IgD14I= Subject key identifier: C3:48:9C:6A:F4:44:2C:1B:67:BE:F5:9F:6E:10:13:64:99:7A:61:BC Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848E1476A107DA79B4855289140 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d19c4072-3e37-34cc-8546-7e22c3dbb489.roa Signing time: Fri 14 Feb 2025 12:47:39 +0000 ROA not before: Fri 14 Feb 2025 12:47:39 +0000 ROA not after: Thu 15 May 2025 11:47:39 +0000 asID: 213676 IP address blocks: 104.250.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:47:6a:10:7d:a7:9b:48:55:28:91:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 14 12:47:39 2025 GMT Not After : May 15 11:47:39 2025 GMT Subject: CN=7703816c-a119-4ff5-8e05-9aa1aec3a922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:af:be:be:80:c9:63:a9:04:7d:81:19:22:97: 0c:4c:d1:be:dc:85:4a:ee:5b:aa:11:35:52:cf:f6: d2:58:03:e8:6a:8c:aa:2d:3f:e9:f9:df:e3:57:2d: 88:d0:cd:0b:be:42:d3:9f:7b:cc:e8:97:07:41:d1: f2:cf:96:d8:4e:c8:d6:6b:37:4a:20:b1:e2:79:54: 0a:00:02:15:4d:52:be:9c:b8:7b:54:de:79:2d:7d: dc:67:d3:98:fd:9d:6a:45:8c:a2:53:42:fc:c0:fa: ee:af:66:fb:eb:95:91:ec:41:ec:b2:27:06:fe:9c: 75:85:38:37:e5:0a:8f:30:b0:c6:ba:43:a8:9a:e7: 71:3a:9b:86:07:a1:49:10:8f:dd:b3:f6:ab:14:70: 17:d6:b6:d0:6e:b9:2c:48:8c:eb:f3:ce:2d:d5:88: bc:d9:bc:59:d7:42:9a:23:a7:1d:59:0d:a8:51:69: 85:38:ab:22:3b:57:c8:9d:63:46:93:90:6d:ba:0c: f7:34:e6:2c:05:13:7c:4e:30:ab:8e:f7:72:b9:2b: 61:ad:23:9a:e8:eb:61:a2:61:cd:9b:a4:e5:60:79: 78:46:69:ca:cc:0d:50:92:e9:00:55:fb:5b:24:5c: 08:63:9d:60:8b:72:20:4e:59:91:bc:d5:ab:a3:3c: 70:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:48:9C:6A:F4:44:2C:1B:67:BE:F5:9F:6E:10:13:64:99:7A:61:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d19c4072-3e37-34cc-8546-7e22c3dbb489.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:e7:88:8d:ef:6b:7d:d3:e5:df:2b:33:ed:3c:43:c6:a6:ed: f7:96:70:54:6f:ae:1f:7f:36:6e:8a:46:65:48:a7:17:44:2a: 53:f2:54:00:f7:8d:98:1e:b4:99:7a:ce:16:f1:d2:a0:b7:b1: 62:c8:3f:31:8c:f2:61:a7:3a:d5:c2:88:87:1f:38:40:37:9f: da:5c:aa:71:e1:24:19:dc:0d:1b:ba:6b:aa:a9:08:b5:95:0e: 29:37:9f:ac:83:50:dd:39:cd:2d:09:2e:e0:62:86:04:63:18: f7:12:fe:a5:70:c5:a4:92:d4:4c:c9:50:ce:9a:8b:3f:b3:62: 33:55:69:1f:47:f7:6f:3b:7e:96:8b:9b:cd:1e:a4:eb:b3:f1: ba:25:ea:a6:96:57:35:1c:6e:87:1e:31:9e:76:e6:e3:7e:f5: be:f3:1d:d7:5f:35:4b:f0:db:fa:0c:11:4a:bd:cb:95:5c:6f: eb:b2:f0:e5:52:98:05:22:7e:81:e8:33:95:a0:df:f1:6a:64: 0d:94:7d:d5:41:17:6d:5e:d0:3e:b1:d5:e2:cb:1c:be:5b:89: 15:64:82:51:92:c6:b9:54:78:cd:09:81:c0:86:e7:55:73:09: cb:0f:a7:af:a0:7b:0b:27:cb:18:7d:45:94:9d:b6:a6:23:ce: e5:e4:70:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjhR2oQfaebSFUokUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIxNDEyNDczOVoXDTI1MDUxNTExNDczOVowLzEtMCsGA1UEAxMk NzcwMzgxNmMtYTExOS00ZmY1LThlMDUtOWFhMWFlYzNhOTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6++voDJY6kEfYEZIpcMTNG+3IVK7luqETVS z/bSWAPoaoyqLT/p+d/jVy2I0M0LvkLTn3vM6JcHQdHyz5bYTsjWazdKILHieVQK AAIVTVK+nLh7VN55LX3cZ9OY/Z1qRYyiU0L8wPrur2b765WR7EHssicG/px1hTg3 5QqPMLDGukOomudxOpuGB6FJEI/ds/arFHAX1rbQbrksSIzr884t1Yi82bxZ10Ka I6cdWQ2oUWmFOKsiO1fInWNGk5Btugz3NOYsBRN8TjCrjvdyuSthrSOa6OthomHN m6TlYHl4RmnKzA1QkukAVftbJFwIY51gi3IgTlmRvNWrozxwnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNInGr0RCwbZ771n24QE2SZemG8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDE5YzQwNzItM2UzNy0z NGNjLTg1NDYtN2UyMmMzZGJiNDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzniI3va33T5d8rM+08Q8am7feWcFRvrh9/Nm6KRmVIpxdEKlPyVAD3 jZgetJl6zhbx0qC3sWLIPzGM8mGnOtXCiIcfOEA3n9pcqnHhJBncDRu6a6qpCLWV Dik3n6yDUN05zS0JLuBihgRjGPcS/qVwxaSS1EzJUM6aiz+zYjNVaR9H9287fpaL m80epOuz8bol6qaWVzUcboceMZ525uN+9b7zHddfNUvw2/oMEUq9y5Vcb+uy8OVS mAUifoHoM5Wg3/FqZA2UfdVBF21e0D6x1eLLHL5biRVkglGSxrlUeM0JgcCG51Vz CcsPp6+gewsnyxh9RZSdtqYjzuXkcKI= -----END CERTIFICATE-----Generated at Sun Apr 27 01:34:36 2025 by rpki-client