$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/11f297f1-e2e1-3d90-99a4-085567eae50e.roa File: 11f297f1-e2e1-3d90-99a4-085567eae50e.roa (raw, json) Hash identifier: HURhBdaYtFevNA4JxNodj0xuVeC4RuAwY/Ou/1vavGk= Subject key identifier: 92:24:97:74:B8:36:F1:10:7C:85:29:28:FF:14:D0:EA:A0:A2:75:0C Certificate issuer: /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Certificate serial: 010D0C9F43285849D42FB1832919EB7D2B224A80 Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/11f297f1-e2e1-3d90-99a4-085567eae50e.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 201814 IP address blocks: 104.245.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:b1:83:29:19:eb:7d:2b:22:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=8f8cecf8-fa85-4208-a7d6-eebcecffad71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6e:05:f4:08:8f:07:d3:f8:52:f6:a6:aa:e6: 1a:3c:fd:c8:08:b0:a9:5d:22:47:82:26:19:74:60: ff:d1:a7:04:34:c8:1e:be:d9:ed:98:36:a0:81:ad: 3d:59:aa:3d:2f:3a:15:8c:a5:38:b4:a5:fb:71:f1: 03:39:20:36:a7:03:31:71:ca:03:bf:2e:0b:49:42: 0a:e0:32:2a:eb:af:e5:c1:cb:5f:62:1a:de:9c:b2: de:52:8f:36:63:9a:ee:d6:63:0e:e2:0a:93:ea:1d: 16:f8:74:c4:46:50:a9:5b:fb:e7:41:67:37:a2:18: 23:4c:8b:e5:55:82:00:20:bd:ab:61:29:58:f2:72: 5a:9b:49:96:87:3e:7f:c4:90:63:b8:7b:57:04:26: 30:c2:df:e0:56:4b:9d:79:c6:40:6e:fd:7e:df:ea: c3:93:6a:a3:f0:d3:52:03:8b:3a:34:17:01:3d:ad: cd:7b:c9:c8:0d:b9:f4:db:86:36:7b:72:77:60:47: 7a:86:3c:16:18:5e:43:56:bd:a5:cc:94:17:2a:b6: 11:cd:d8:60:2b:80:f9:e3:82:ae:3e:d9:b4:e4:56: c2:0b:c7:4f:0d:60:c3:bd:39:e2:f5:03:41:61:d4: 6c:2b:51:c7:a5:9f:65:83:f1:8f:4e:34:3e:e8:30: 76:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:24:97:74:B8:36:F1:10:7C:85:29:28:FF:14:D0:EA:A0:A2:75:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/11f297f1-e2e1-3d90-99a4-085567eae50e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl X509v3 Authority Key Identifier: keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer sbgp-ipAddrBlock: critical IPv4: 104.245.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:0e:f9:c7:db:e1:97:37:ce:ad:6e:ff:ba:ea:6d:07:2f:d9: fa:f1:92:1c:d0:50:2d:85:b6:18:2d:85:b0:a8:e7:35:10:d9: e6:de:7c:a6:c4:8f:11:a3:0a:0a:85:b1:30:bb:77:44:2a:c7: c3:55:74:0a:86:ae:0b:b9:dc:99:15:45:34:8f:e9:f8:0b:78: 8a:4c:d3:8e:3e:3a:6c:d8:12:7e:7d:8d:6c:b9:15:1e:58:3f: 40:0c:04:80:1c:8e:15:2a:ec:81:95:eb:f1:48:70:67:02:b2: f2:ec:4d:0c:b5:53:ed:cf:f8:c4:3e:c6:00:cc:20:ea:5e:1c: 43:91:38:fd:fd:c0:70:3e:e1:df:0d:08:38:35:d1:c2:37:fa: 09:5c:5f:b0:27:14:e9:d8:bb:8b:59:a0:04:d6:97:c4:b0:42: e5:ac:e6:20:78:29:eb:a8:c8:d6:a6:9c:f6:37:d2:1d:89:d9: e0:4c:31:28:96:31:9d:8f:2f:95:bf:ad:c8:93:e2:eb:61:44: a2:2e:a6:74:5b:fa:7b:7f:85:9f:40:c5:43:9c:0f:3c:92:00: ce:26:23:29:0e:2b:4f:31:4a:aa:30:8c:3a:03:d2:b0:96:f6: db:c0:62:21:20:f3:ff:c6:96:b5:d3:09:9d:47:3a:e3:64:b3: 7f:6a:75:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL7GDKRnrfSsiSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YWFmMTEtMWM3NC00OTZlLTk5YzYtNjE1MmNiMjky Yjg2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk OGY4Y2VjZjgtZmE4NS00MjA4LWE3ZDYtZWViY2VjZmZhZDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzG4F9AiPB9P4UvamquYaPP3ICLCpXSJHgiYZ dGD/0acENMgevtntmDagga09Wao9LzoVjKU4tKX7cfEDOSA2pwMxccoDvy4LSUIK 4DIq66/lwctfYhrenLLeUo82Y5ru1mMO4gqT6h0W+HTERlCpW/vnQWc3ohgjTIvl VYIAIL2rYSlY8nJam0mWhz5/xJBjuHtXBCYwwt/gVkudecZAbv1+3+rDk2qj8NNS A4s6NBcBPa3Ne8nIDbn024Y2e3J3YEd6hjwWGF5DVr2lzJQXKrYRzdhgK4D544Ku Ptm05FbCC8dPDWDDvTni9QNBYdRsK1HHpZ9lg/GPTjQ+6DB2vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJIkl3S4NvEQfIUpKP8U0OqgonUMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlh YWYxMS0xYzc0LTQ5NmUtOTljNi02MTUyY2IyOTJiODYvMTFmMjk3ZjEtZTJlMS0z ZDkwLTk5YTQtMDg1NTY3ZWFlNTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YWFmMTEtMWM3NC00OTZlLTk5 YzYtNjE1MmNiMjkyYjg2LzVkOWFhZjExLTFjNzQtNDk2ZS05OWM2LTYxNTJjYjI5 MmI4Ni5jcmwwHwYDVR0jBBgwFoAUvf1qpElM4JfqWhVE4pRpobkfBIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlhYWYxMS0xYzc0LTQ5NmUtOTljNi02MTUy Y2IyOTJiODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPX1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANgO+cfb4Zc3zq1u/7rqbQcv2frxkhzQUC2FthgthbCo5zUQ2ebefKbE jxGjCgqFsTC7d0Qqx8NVdAqGrgu53JkVRTSP6fgLeIpM044+OmzYEn59jWy5FR5Y P0AMBIAcjhUq7IGV6/FIcGcCsvLsTQy1U+3P+MQ+xgDMIOpeHEOROP39wHA+4d8N CDg10cI3+glcX7AnFOnYu4tZoATWl8SwQuWs5iB4KeuoyNamnPY30h2J2eBMMSiW MZ2PL5W/rciT4uthRKIupnRb+nt/hZ9AxUOcDzySAM4mIykOK08xSqowjDoD0rCW 9tvAYiEg8//GlrXTCZ1HOuNks39qdQU= -----END CERTIFICATE-----Generated at Sun Jun 15 11:32:41 2025 by rpki-client