$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/056b4a57-8f48-3ba3-a977-03d23e70c276.roa File: 056b4a57-8f48-3ba3-a977-03d23e70c276.roa (raw, json) Hash identifier: BHnbtj36ltb1X9iYUQZX2vMyX6n2r/pBWLNzl6K8bLc= Subject key identifier: D3:30:C9:A0:BE:49:FE:F7:4A:03:3D:38:46:08:F3:A3:75:34:46:A4 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A1991C485B2786E48986F4BC0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/056b4a57-8f48-3ba3-a977-03d23e70c276.roa Signing time: Fri 06 Jun 2025 09:29:40 +0000 ROA not before: Fri 06 Jun 2025 09:29:40 +0000 ROA not after: Thu 04 Sep 2025 09:29:40 +0000 asID: 329007 IP address blocks: 104.243.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:19:91:c4:85:b2:78:6e:48:98:6f:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 6 09:29:40 2025 GMT Not After : Sep 4 09:29:40 2025 GMT Subject: CN=32efea29-664e-4b7e-83ab-fde6c293b037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9d:83:8c:ec:3c:bb:ce:3a:07:01:18:9c:03: d1:3e:be:a9:bb:a8:34:14:fe:ee:a5:20:e8:f9:02: a1:4b:22:89:17:01:eb:ab:1b:8c:3a:b4:e9:77:b6: ca:cb:49:eb:69:77:8e:0b:87:89:67:5f:b7:28:13: 0c:ed:4b:1c:39:cc:f1:e8:1e:f8:ee:bb:e7:b4:4a: 5e:ce:b4:29:7c:db:ba:68:22:08:40:78:d4:67:b1: 0d:2d:9e:4a:0c:4c:ec:0c:92:32:12:fe:dc:e1:7e: c0:f2:7a:af:1a:c6:d0:fb:68:0c:cb:c3:ef:02:08: 39:8a:d3:04:15:e3:c5:16:6b:8c:66:fb:1e:5f:fb: 17:b5:9a:52:d1:ea:f3:17:b7:1f:2b:a4:52:23:e7: 61:33:3e:81:5e:3b:5c:42:b9:4d:57:82:a1:77:23: 38:36:41:f0:43:ed:51:66:92:6c:71:f5:93:ed:af: 78:68:1a:ac:88:2c:71:de:3d:b6:f9:13:12:d9:1c: 5d:b5:cb:72:19:ff:a7:73:ce:ee:f6:9f:71:2e:cc: 40:ed:06:7f:7f:40:c7:7e:a4:33:27:b5:e0:f1:c3: 78:8a:a6:4b:7c:e6:69:17:16:eb:74:fe:3d:d6:9b: ce:3d:e8:b0:42:3f:8d:47:51:d1:f6:3d:e6:e8:dc: f0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:30:C9:A0:BE:49:FE:F7:4A:03:3D:38:46:08:F3:A3:75:34:46:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/056b4a57-8f48-3ba3-a977-03d23e70c276.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.243.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:1d:03:22:7d:96:54:59:2b:41:c9:b3:da:de:f7:73:d3:58: c7:55:ee:a1:86:c7:e9:fe:a7:2e:60:4e:5b:d3:30:44:1b:b5: 1e:27:9c:32:29:cb:41:ec:83:bf:f9:f6:85:74:27:63:61:7d: 6a:65:56:70:fc:b2:96:7d:e2:c3:c8:bc:bf:eb:97:8c:26:dc: 90:fa:a2:c2:02:e0:13:03:05:c2:04:62:76:ba:c7:dd:f0:e0: 21:71:d4:09:e6:40:51:47:d9:73:ec:77:60:c9:84:7a:63:ab: 7a:51:43:12:a6:90:cd:c1:0b:66:c7:df:91:2b:9e:53:dc:77: 61:7f:07:0e:f0:17:b8:fa:e1:a8:14:b4:85:85:57:e9:ee:8d: de:42:fe:12:4c:bf:d2:c9:42:d9:58:93:bd:ef:1d:5c:72:a4: f1:32:45:18:87:c9:ea:33:c3:56:68:b1:b9:ac:54:51:bf:3a: 28:fa:51:8f:df:54:bd:1d:b7:8b:75:37:17:84:04:4a:04:19: c5:6f:5f:09:57:0c:af:af:d7:cd:fa:84:7c:9e:19:e1:8a:56: 5a:eb:d4:9f:7b:4c:ba:72:bd:93:28:45:39:af:f3:8e:d0:c5: 58:d2:5e:53:c7:b4:f7:f5:93:3c:57:48:b4:08:6c:d0:39:c4: 62:bb:e8:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoZkcSFsnhuSJhvS8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYwNjA5Mjk0MFoXDTI1MDkwNDA5Mjk0MFowLzEtMCsGA1UEAxMk MzJlZmVhMjktNjY0ZS00YjdlLTgzYWItZmRlNmMyOTNiMDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ2DjOw8u846BwEYnAPRPr6pu6g0FP7upSDo +QKhSyKJFwHrqxuMOrTpd7bKy0nraXeOC4eJZ1+3KBMM7UscOczx6B747rvntEpe zrQpfNu6aCIIQHjUZ7ENLZ5KDEzsDJIyEv7c4X7A8nqvGsbQ+2gMy8PvAgg5itME FePFFmuMZvseX/sXtZpS0erzF7cfK6RSI+dhMz6BXjtcQrlNV4KhdyM4NkHwQ+1R ZpJscfWT7a94aBqsiCxx3j22+RMS2RxdtctyGf+nc87u9p9xLsxA7QZ/f0DHfqQz J7Xg8cN4iqZLfOZpFxbrdP491pvOPeiwQj+NR1HR9j3m6NzwnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMwyaC+Sf73SgM9OEYI86N1NEakMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDU2YjRhNTctOGY0OC0z YmEzLWE5NzctMDNkMjNlNzBjMjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPP5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4dAyJ9llRZK0HJs9re93PTWMdV7qGGx+n+py5gTlvTMEQbtR4nnDIp y0Hsg7/59oV0J2NhfWplVnD8spZ94sPIvL/rl4wm3JD6osIC4BMDBcIEYna6x93w 4CFx1AnmQFFH2XPsd2DJhHpjq3pRQxKmkM3BC2bH35ErnlPcd2F/Bw7wF7j64agU tIWFV+nujd5C/hJMv9LJQtlYk73vHVxypPEyRRiHyeozw1ZosbmsVFG/Oij6UY/f VL0dt4t1NxeEBEoEGcVvXwlXDK+v1836hHyeGeGKVlrr1J97TLpyvZMoRTmv847Q xVjSXlPHtPf1kzxXSLQIbNA5xGK76Ew= -----END CERTIFICATE-----Generated at Sat Jun 7 04:06:35 2025 by rpki-client