$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1414f136-8e5f-33be-a48e-615e862a5b02.roa File: 1414f136-8e5f-33be-a48e-615e862a5b02.roa (raw, json) Hash identifier: VkaQ6eBohpWYKD1OPLEgDtxs8bMkwLuY63s7cOblfi8= Subject key identifier: 71:8F:42:F0:88:78:86:AD:EC:B7:32:E1:45:69:27:26:D8:64:8D:1E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848F926ABF9335078C3C48B3600 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1414f136-8e5f-33be-a48e-615e862a5b02.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 9009 IP address blocks: 104.250.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:ab:f9:33:50:78:c3:c4:8b:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=9d5fa209-7445-4d52-950a-10e62730cc97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7d:26:89:fd:aa:ba:ab:42:1f:44:43:11:a8: bb:29:e4:66:73:54:3c:0d:fe:c8:78:d4:93:3b:f3: 13:d6:8e:48:51:88:16:94:de:c2:ee:ea:b3:f0:ca: 3b:c8:07:49:b8:30:a2:18:9f:b2:9c:bd:a3:43:16: 3d:c1:1c:88:f4:b2:75:f5:4e:45:57:82:26:0c:37: be:e2:20:15:33:59:b9:dd:c9:dd:bb:1d:8b:57:08: 3d:b5:c4:53:41:c0:aa:31:3a:d0:84:d9:b5:fe:ec: 6a:b9:6c:2b:83:17:4e:4b:03:88:58:9e:63:8d:46: 68:19:fe:38:22:03:4e:ea:ea:77:18:8f:fd:fe:51: 7f:04:ac:76:2b:88:aa:af:66:c0:e5:00:c4:3d:96: 90:69:89:d0:21:85:3e:2b:ef:06:08:c0:65:7f:3d: ba:85:18:4b:1a:6b:78:a6:6e:46:f3:22:a5:76:4e: 6e:b7:26:23:0e:3f:8c:12:11:64:32:aa:db:ad:9a: 13:d4:e3:da:4d:55:dd:62:10:b2:11:cc:cc:e3:ec: c4:6d:dd:35:a1:92:58:82:de:04:b7:76:45:b7:f1: dc:70:2f:aa:12:9a:c1:db:b6:93:75:34:57:d0:8d: d9:aa:14:9d:83:41:3f:29:0a:81:9a:db:0d:59:16: 86:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:8F:42:F0:88:78:86:AD:EC:B7:32:E1:45:69:27:26:D8:64:8D:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1414f136-8e5f-33be-a48e-615e862a5b02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:42:26:e6:a6:1e:10:7c:26:f7:ba:6a:cd:76:82:3a:54:ce: b8:95:58:4a:fd:20:67:8b:e9:9f:e4:39:18:cf:32:da:e7:a0: 14:da:ae:32:8a:05:2a:dd:19:11:fc:7b:79:65:0a:2b:ff:01: 54:63:c2:1c:b4:1e:81:ce:d8:5f:99:a8:8c:5c:22:54:cb:e7: 20:58:fe:40:7a:80:cd:12:e8:c3:54:97:bc:6b:13:7b:0d:79: 9c:49:7a:60:72:9f:42:a7:7b:a9:46:8b:5c:bc:df:3f:2f:87: 7b:3b:1c:e1:8d:e2:61:c5:77:8c:ba:dd:46:4c:5a:8f:ee:89: 5e:46:9e:26:7a:29:f9:26:2e:f8:9f:d5:f0:d8:ba:83:48:f7: b2:e4:a3:36:9b:57:35:43:38:75:d3:f9:c5:27:43:94:9a:9d: b2:32:48:6a:da:88:37:d9:12:14:5a:20:de:0c:f0:74:5e:d9: 0e:08:57:af:3b:22:74:c3:8a:2b:4a:b2:7a:31:a3:08:82:26: 08:96:08:12:86:4f:a7:ff:f4:59:c2:40:4a:22:93:f9:3c:89: a6:db:89:9f:30:cd:dd:72:72:29:b4:75:93:80:e6:1b:d5:45: 12:f9:4d:f5:28:08:19:b3:4d:bc:22:0d:81:f8:45:3b:1c:b1: 78:92:1e:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5Jqv5M1B4w8SLNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk OWQ1ZmEyMDktNzQ0NS00ZDUyLTk1MGEtMTBlNjI3MzBjYzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhX0mif2quqtCH0RDEai7KeRmc1Q8Df7IeNST O/MT1o5IUYgWlN7C7uqz8Mo7yAdJuDCiGJ+ynL2jQxY9wRyI9LJ19U5FV4ImDDe+ 4iAVM1m53cndux2LVwg9tcRTQcCqMTrQhNm1/uxquWwrgxdOSwOIWJ5jjUZoGf44 IgNO6up3GI/9/lF/BKx2K4iqr2bA5QDEPZaQaYnQIYU+K+8GCMBlfz26hRhLGmt4 pm5G8yKldk5utyYjDj+MEhFkMqrbrZoT1OPaTVXdYhCyEczM4+zEbd01oZJYgt4E t3ZFt/HccC+qEprB27aTdTRX0I3ZqhSdg0E/KQqBmtsNWRaGxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGPQvCIeIat7Lcy4UVpJybYZI0eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTQxNGYxMzYtOGU1Zi0z M2JlLWE0OGUtNjE1ZTg2MmE1YjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPq+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVCJuamHhB8Jve6as12gjpUzriVWEr9IGeL6Z/kORjPMtrnoBTarjKK BSrdGRH8e3llCiv/AVRjwhy0HoHO2F+ZqIxcIlTL5yBY/kB6gM0S6MNUl7xrE3sN eZxJemByn0Kne6lGi1y83z8vh3s7HOGN4mHFd4y63UZMWo/uiV5GniZ6KfkmLvif 1fDYuoNI97LkozabVzVDOHXT+cUnQ5SanbIySGraiDfZEhRaIN4M8HRe2Q4IV687 InTDiitKsnoxowiCJgiWCBKGT6f/9FnCQEoik/k8iabbiZ8wzd1ycim0dZOA5hvV RRL5TfUoCBmzTbwiDYH4RTscsXiSHv8= -----END CERTIFICATE-----Generated at Fri Apr 11 22:35:36 2025 by rpki-client