$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d6256618-0d5f-35f1-86da-23e44434903b.roa File: d6256618-0d5f-35f1-86da-23e44434903b.roa (raw, json) Hash identifier: e6RVc8lk0QFlSD9gGCPzAXqnrrLtVCLzo/HUMXkUr64= Subject key identifier: F0:CA:BD:7E:B5:FE:51:7B:90:CA:DF:B2:60:9D:F6:EF:3E:3A:A2:3C Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849A1AE88091D2172E8912B7700 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d6256618-0d5f-35f1-86da-23e44434903b.roa Signing time: Thu 24 Apr 2025 10:50:38 +0000 ROA not before: Thu 24 Apr 2025 10:50:38 +0000 ROA not after: Wed 23 Jul 2025 10:50:38 +0000 asID: 43260 IP address blocks: 104.250.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ae:88:09:1d:21:72:e8:91:2b:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 24 10:50:38 2025 GMT Not After : Jul 23 10:50:38 2025 GMT Subject: CN=8b46143c-87ef-49d1-b8b1-4da82641a185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:47:3e:d3:9f:90:c3:04:80:cb:6f:93:9b:3d: 77:c9:0d:45:4c:80:bc:72:92:cf:bd:98:73:15:b0: f9:03:31:4e:8e:61:58:5a:78:57:38:22:27:91:33: 31:82:9a:26:59:4a:ad:05:0b:33:91:17:a1:35:ee: e2:c8:c3:1e:9b:f6:04:82:8b:44:96:6a:8c:7c:fe: a9:99:a8:c8:b2:5c:2e:ef:42:0e:41:16:66:91:f0: d0:63:61:ee:7b:39:84:3a:b0:18:37:8a:61:33:0b: 94:a9:ad:70:1a:63:18:b4:5e:78:c1:c5:90:d5:db: 0b:31:c7:f7:3b:19:be:5d:ae:5b:19:6f:15:9b:b8: 12:73:31:eb:6b:dd:c3:b6:88:b8:7d:0c:9d:02:dc: 87:e3:06:a5:8e:76:2a:c6:c2:ee:7d:dd:8a:94:2a: 57:d7:ab:19:74:99:ad:a5:73:31:68:17:ed:fc:cf: 47:a5:aa:05:87:fa:29:eb:94:f8:34:35:12:b8:ac: 61:71:2c:0a:47:fd:31:30:ab:dc:72:0e:3a:fc:fc: 18:9f:71:14:e0:57:e2:26:1a:c4:1c:09:cc:3b:c9: 7f:e2:24:31:93:06:91:92:04:cf:43:70:0b:5f:36: 3b:6b:16:5d:42:8c:78:fa:85:93:7b:ef:34:35:ac: c9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:CA:BD:7E:B5:FE:51:7B:90:CA:DF:B2:60:9D:F6:EF:3E:3A:A2:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d6256618-0d5f-35f1-86da-23e44434903b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:65:33:18:8c:48:c3:80:5c:87:52:9f:49:c8:7e:ac:84:01: 63:b2:7e:3d:2d:ce:61:d4:9b:21:47:50:81:99:53:3a:82:2b: 01:b9:d5:b0:c0:17:64:06:d4:4d:0d:34:5a:9f:20:ed:25:9e: 6b:d6:34:c9:f3:e7:8e:5e:b9:16:d0:2f:3b:3a:73:59:df:fd: cd:22:73:45:97:75:53:cb:36:8f:29:65:69:2a:e0:ff:d9:86: 37:5f:fe:c5:2f:06:92:74:33:6b:7d:85:16:1e:a2:e8:fe:72: 5c:f5:83:dd:7c:c9:b8:fb:bc:a7:56:6b:80:f0:d7:4f:14:b1: c4:cb:c9:b6:9f:9a:cc:c4:ed:eb:f3:48:3c:da:fd:d7:d6:7f: ce:31:f9:2c:e5:9e:34:0f:5d:45:5c:e2:ac:4a:82:89:7c:8b: fa:93:17:bf:ae:53:11:2e:bb:26:1a:cd:da:9f:dc:f2:a1:10: 35:c1:fb:23:c0:8b:e7:14:0e:af:7e:63:e2:6e:97:a7:5d:d8: 1a:8e:8c:d1:5b:10:ea:c6:53:2b:50:4a:c7:85:99:28:31:32: 32:54:ed:79:10:96:2f:61:f1:45:c5:5f:7a:21:53:35:e7:b2: 78:92:cf:55:e6:ff:a6:f8:5a:36:35:06:45:d8:9e:10:f0:32: 22:58:20:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhrogJHSFy6JErdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQyNDEwNTAzOFoXDTI1MDcyMzEwNTAzOFowLzEtMCsGA1UEAxMk OGI0NjE0M2MtODdlZi00OWQxLWI4YjEtNGRhODI2NDFhMTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kc+05+QwwSAy2+Tmz13yQ1FTIC8cpLPvZhz FbD5AzFOjmFYWnhXOCInkTMxgpomWUqtBQszkRehNe7iyMMem/YEgotElmqMfP6p majIslwu70IOQRZmkfDQY2HuezmEOrAYN4phMwuUqa1wGmMYtF54wcWQ1dsLMcf3 Oxm+Xa5bGW8Vm7gSczHra93Dtoi4fQydAtyH4waljnYqxsLufd2KlCpX16sZdJmt pXMxaBft/M9HpaoFh/op65T4NDUSuKxhcSwKR/0xMKvccg46/PwYn3EU4FfiJhrE HAnMO8l/4iQxkwaRkgTPQ3ALXzY7axZdQox4+oWTe+80NazJeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDKvX61/lF7kMrfsmCd9u8+OqI8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDYyNTY2MTgtMGQ1Zi0z NWYxLTg2ZGEtMjNlNDQ0MzQ5MDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxlMxiMSMOAXIdSn0nIfqyEAWOyfj0tzmHUmyFHUIGZUzqCKwG51bDA F2QG1E0NNFqfIO0lnmvWNMnz545euRbQLzs6c1nf/c0ic0WXdVPLNo8pZWkq4P/Z hjdf/sUvBpJ0M2t9hRYeouj+clz1g918ybj7vKdWa4Dw108UscTLybafmszE7evz SDza/dfWf84x+SzlnjQPXUVc4qxKgol8i/qTF7+uUxEuuyYazdqf3PKhEDXB+yPA i+cUDq9+Y+Jul6dd2BqOjNFbEOrGUytQSseFmSgxMjJU7XkQli9h8UXFX3ohUzXn sniSz1Xm/6b4WjY1BkXYnhDwMiJYIJc= -----END CERTIFICATE-----Generated at Sat Apr 26 16:34:56 2025 by rpki-client