$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/a5eff7b2-f77b-3a6f-953a-48c6eccb51de.roa File: a5eff7b2-f77b-3a6f-953a-48c6eccb51de.roa (raw, json) Hash identifier: HlAXmcu7nQnrF4UmUQ8iUYw5EAjLJqTKwDGo9cFQBio= Subject key identifier: 72:F9:00:FC:B1:8E:67:DD:CF:82:B7:E3:78:E5:94:6F:69:83:87:A3 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F43285848EC96942F055BB162DB0BC700 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/a5eff7b2-f77b-3a6f-953a-48c6eccb51de.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 40627 IP address blocks: 104.245.56.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:94:2f:05:5b:b1:62:db:0b:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=83ee1fd5-f5b6-485c-9c60-03174ae024cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a9:ff:fb:c8:98:1d:80:a0:00:dd:ad:47:14: 45:d9:26:6e:a1:76:51:6d:61:c5:9d:5d:f1:07:e9: 03:f1:ea:39:0b:b2:61:c8:d1:18:4b:25:4d:18:73: 42:5b:7d:b8:a7:e6:3e:f7:7b:67:ec:bc:89:11:c8: 53:26:97:b4:0f:44:c6:e9:41:57:c5:0c:5d:e3:23: b2:99:d3:7c:03:7a:87:50:9c:1b:28:a4:b1:c3:d3: 3d:09:c4:1d:05:c5:98:40:18:01:1a:a8:df:32:d5: 56:3d:a7:3f:53:16:e4:9e:b0:82:65:e7:5d:12:34: 5e:56:e8:15:3e:e8:f3:58:d1:35:40:a6:35:4a:0f: 18:2b:ee:4b:36:dc:8c:33:42:13:16:98:03:87:43: 3a:3b:c3:b4:5d:01:ad:ac:75:75:ad:7d:91:07:7e: 83:5e:2f:11:aa:80:67:4f:97:73:82:47:0f:a5:9b: 5d:a0:68:2f:3e:69:ef:9d:26:d1:60:53:26:aa:d4: 8b:14:aa:4a:e7:67:f1:94:97:6f:fe:87:f3:3a:7f: 8f:59:69:cb:b8:9a:7c:bc:37:b1:68:48:f3:83:11: 16:5c:fe:9e:b0:03:7f:87:39:5b:74:2e:15:0a:53: 11:fa:62:be:7c:77:5c:dd:76:7c:e5:f9:98:27:57: 04:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F9:00:FC:B1:8E:67:DD:CF:82:B7:E3:78:E5:94:6F:69:83:87:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/a5eff7b2-f77b-3a6f-953a-48c6eccb51de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 104.245.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:c3:fa:f0:8b:5a:42:7f:32:89:0c:4b:65:a9:7f:c9:8c:fe: f9:a3:5c:ac:0a:37:1e:f3:d7:17:25:eb:88:0c:d8:68:cd:a3: 68:96:d3:15:ef:92:ea:51:c8:04:d3:2b:cb:7c:64:54:03:3e: 31:46:0c:60:e1:b1:cf:f1:6f:18:64:0c:e9:12:3d:96:b1:04: 70:dd:02:34:ca:e9:18:a8:68:fb:61:83:8a:1b:90:8b:78:ea: f0:62:3b:6e:cc:a3:23:19:a2:ff:a2:80:a5:16:ca:6f:bb:2c: 5a:71:a5:85:90:4a:3f:a0:ef:0e:15:83:33:06:d9:aa:c4:46: d2:e1:75:57:6d:0b:fd:64:de:8a:cd:61:9e:12:25:42:a8:00: ba:a6:3f:f2:be:41:7a:c5:54:0e:9e:c3:ab:58:d7:5c:7e:c6: f1:99:16:22:98:8a:55:79:3c:83:7f:63:1a:56:f1:99:0f:b7: bd:c8:6c:38:34:5e:21:12:74:f7:45:dc:62:14:42:34:83:5b: b1:0f:4f:fd:01:ea:90:10:ba:ad:82:61:95:1e:3d:1e:2f:34: e5:05:25:8d:92:d0:7f:30:53:d9:11:a3:ff:a2:7b:d7:e9:39: 95:5f:99:61:f3:04:63:70:87:3c:4d:63:61:5a:e8:24:08:61: 08:96:90:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslpQvBVuxYtsLxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk ODNlZTFmZDUtZjViNi00ODVjLTljNjAtMDMxNzRhZTAyNGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApan/+8iYHYCgAN2tRxRF2SZuoXZRbWHFnV3x B+kD8eo5C7JhyNEYSyVNGHNCW324p+Y+93tn7LyJEchTJpe0D0TG6UFXxQxd4yOy mdN8A3qHUJwbKKSxw9M9CcQdBcWYQBgBGqjfMtVWPac/UxbknrCCZeddEjReVugV PujzWNE1QKY1Sg8YK+5LNtyMM0ITFpgDh0M6O8O0XQGtrHV1rX2RB36DXi8RqoBn T5dzgkcPpZtdoGgvPmnvnSbRYFMmqtSLFKpK52fxlJdv/ofzOn+PWWnLuJp8vDex aEjzgxEWXP6esAN/hzlbdC4VClMR+mK+fHdc3XZ85fmYJ1cEmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHL5APyxjmfdz4K343jllG9pg4ejMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvYTVlZmY3YjItZjc3Yi0z YTZmLTk1M2EtNDhjNmVjY2I1MWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaPU4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErD+vCLWkJ/MokMS2Wpf8mM/vmjXKwKNx7z1xcl64gM2GjNo2iW0xXv kupRyATTK8t8ZFQDPjFGDGDhsc/xbxhkDOkSPZaxBHDdAjTK6RioaPthg4obkIt4 6vBiO27MoyMZov+igKUWym+7LFpxpYWQSj+g7w4VgzMG2arERtLhdVdtC/1k3orN YZ4SJUKoALqmP/K+QXrFVA6ew6tY11x+xvGZFiKYilV5PIN/YxpW8ZkPt73IbDg0 XiESdPdF3GIUQjSDW7EPT/0B6pAQuq2CYZUePR4vNOUFJY2S0H8wU9kRo/+ie9fp OZVfmWHzBGNwhzxNY2Fa6CQIYQiWkLE= -----END CERTIFICATE-----Generated at Sat Apr 5 06:19:49 2025 by rpki-client