$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1e5f12cb-e855-3565-b100-bec476c1f053.roa File: 1e5f12cb-e855-3565-b100-bec476c1f053.roa (raw, json) Hash identifier: dwQ/YCYD6ow4hOQW/LXrj5GbHVtqHANbLkdit4Z3e48= Subject key identifier: 68:E0:8B:D9:D2:B2:E3:79:63:4E:98:AA:18:9A:D6:98:72:78:28:80 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584905B6B43E5769338E8DE25880 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1e5f12cb-e855-3565-b100-bec476c1f053.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 3223 IP address blocks: 104.243.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:b4:3e:57:69:33:8e:8d:e2:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=2325b526-18af-4b32-adc7-c6040c4b8050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:34:fe:24:47:29:c6:51:83:96:0b:1b:ea:32: 31:08:a0:d6:07:c7:1a:21:37:4e:4f:dc:60:98:a2: 9d:e1:f1:28:27:35:e7:d3:33:5e:9b:74:a1:1d:cf: db:f0:ea:e6:83:8b:9c:7f:8c:de:fc:3e:15:11:e3: e1:21:f4:93:3b:ef:12:ea:fb:6c:46:59:c6:30:8c: 30:b1:82:f4:66:cf:46:b9:a2:3d:51:b8:ef:bb:67: 17:e2:9d:dc:01:8b:8b:a9:1d:51:f2:31:39:c3:00: d8:6c:2e:6c:c5:06:20:7b:28:76:b1:18:06:c2:17: fe:9c:30:df:92:bf:8e:3e:09:19:0f:14:1d:ac:d7: 58:c6:b1:66:2b:64:be:54:70:1c:9a:73:93:cf:5f: ca:0b:c8:d0:96:f3:fd:4d:4f:1a:8d:36:8c:46:6a: b4:94:5a:44:8a:2d:2e:7b:50:46:54:54:8e:68:ab: a3:76:bb:04:45:62:bb:8a:d4:da:e1:e7:a2:40:00: 28:80:e0:ec:14:96:24:63:1f:ed:26:5d:cb:64:dd: ec:d5:1d:42:7e:bc:4a:38:89:af:aa:56:bb:37:95: a1:6f:a1:09:1c:e1:f4:fc:9d:2d:ab:e0:f7:de:5f: 00:00:c3:ca:95:06:3e:d0:a8:e0:76:5a:7d:2b:c9: 68:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E0:8B:D9:D2:B2:E3:79:63:4E:98:AA:18:9A:D6:98:72:78:28:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1e5f12cb-e855-3565-b100-bec476c1f053.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.243.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:7f:8a:94:d6:ba:61:d5:e8:33:2e:2c:aa:3d:7e:d6:db:d3: ad:af:d3:ba:01:c7:32:96:d6:2f:35:38:8e:60:11:5f:16:92: 40:a4:23:07:eb:b7:8a:c1:f4:36:72:ca:78:20:35:88:84:fa: 66:c4:81:b0:30:c9:7d:26:00:c1:21:e1:97:df:52:f1:29:dd: 05:b0:b6:5e:6b:43:2f:10:d5:73:09:66:4e:e3:ab:7a:17:cd: db:fb:4c:a8:ec:85:77:41:84:a9:8e:15:17:5d:ea:31:21:53: 2b:e9:84:a8:cc:88:c0:5f:d5:4f:9a:95:7a:97:d9:1b:ad:32: c7:61:f5:cd:90:56:98:86:5c:94:83:0e:51:e8:bf:32:a4:60: f5:ad:58:0d:39:63:ba:8b:ee:fd:3d:63:90:0d:80:26:7d:9c: a6:8f:f2:3e:0e:7e:ca:b1:46:01:1d:56:c7:62:2a:6f:58:a2: 5a:ca:17:bf:ba:b8:06:ac:22:f1:4f:25:0e:cb:73:e2:0b:e7: 37:88:3c:38:a8:3e:02:67:5b:c0:68:b1:19:41:7c:f2:3f:78: 94:88:63:c9:9f:15:1c:a9:df:e1:67:dd:2f:52:3a:68:89:3e: cb:80:9b:e0:4e:16:1b:71:fd:8a:26:f0:e7:80:f7:30:21:67: 4f:48:b9:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtrQ+V2kzjo3iWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk MjMyNWI1MjYtMThhZi00YjMyLWFkYzctYzYwNDBjNGI4MDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDT+JEcpxlGDlgsb6jIxCKDWB8caITdOT9xg mKKd4fEoJzXn0zNem3ShHc/b8Ormg4ucf4ze/D4VEePhIfSTO+8S6vtsRlnGMIww sYL0Zs9GuaI9Ubjvu2cX4p3cAYuLqR1R8jE5wwDYbC5sxQYgeyh2sRgGwhf+nDDf kr+OPgkZDxQdrNdYxrFmK2S+VHAcmnOTz1/KC8jQlvP9TU8ajTaMRmq0lFpEii0u e1BGVFSOaKujdrsERWK7itTa4eeiQAAogODsFJYkYx/tJl3LZN3s1R1CfrxKOImv qla7N5Whb6EJHOH0/J0tq+D33l8AAMPKlQY+0Kjgdlp9K8loBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjgi9nSsuN5Y06Yqhia1phyeCiAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMWU1ZjEyY2ItZTg1NS0z NTY1LWIxMDAtYmVjNDc2YzFmMDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPP4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5/ipTWumHV6DMuLKo9ftbb062v07oBxzKW1i81OI5gEV8WkkCkIwfr t4rB9DZyynggNYiE+mbEgbAwyX0mAMEh4ZffUvEp3QWwtl5rQy8Q1XMJZk7jq3oX zdv7TKjshXdBhKmOFRdd6jEhUyvphKjMiMBf1U+alXqX2RutMsdh9c2QVpiGXJSD DlHovzKkYPWtWA05Y7qL7v09Y5ANgCZ9nKaP8j4OfsqxRgEdVsdiKm9YolrKF7+6 uAasIvFPJQ7Lc+IL5zeIPDioPgJnW8BosRlBfPI/eJSIY8mfFRyp3+Fn3S9SOmiJ PsuAm+BOFhtx/Yom8OeA9zAhZ09IuTk= -----END CERTIFICATE-----Generated at Sat Apr 5 13:19:59 2025 by rpki-client