$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/303511ae-00e0-3ae9-9384-2797153592ac.roa File: 303511ae-00e0-3ae9-9384-2797153592ac.roa (raw, json) Hash identifier: +sJW4EUcUXRir6GpKvMFT1vjy2QlaouPQmZcMbFQ/XM= Subject key identifier: E8:70:81:DF:A9:A4:4B:F0:7B:78:23:C8:FE:74:60:8F:25:B3:55:62 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A146576767F98F5CA5631F940 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/303511ae-00e0-3ae9-9384-2797153592ac.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 212238 IP address blocks: 104.243.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:76:76:7f:98:f5:ca:56:31:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=3696a669-03f1-4b67-84fd-4e9fa41dbc5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:24:84:fc:ac:f7:60:72:3a:81:28:cc:19:08: c4:27:20:33:e2:8a:60:4d:9f:f3:50:0b:10:1f:60: 52:28:e8:83:1b:b9:09:d3:a8:2c:ae:61:77:6b:b8: c4:70:c6:ba:d8:39:99:4b:97:e6:77:7b:29:96:0c: 28:43:16:cb:84:56:d8:00:64:29:45:7c:c5:a2:b9: db:ac:0e:01:9c:5e:4b:f5:2d:c5:b4:b5:a4:aa:8e: 0a:c5:1a:cb:41:74:62:23:6f:02:01:2e:5b:a5:63: ba:8e:74:4f:e8:4f:f2:b4:bf:39:d2:ff:6b:d1:2d: a4:02:84:c3:c2:bd:e3:6c:61:2e:e5:48:f4:ab:1e: eb:f8:36:61:dd:63:d8:44:fa:76:4b:11:28:b0:7e: cf:d6:b1:4a:5b:9e:2a:fb:a0:da:56:61:db:ad:5d: 0c:9a:af:8d:e9:65:de:10:d2:1e:31:d0:ea:05:bc: ef:3a:a5:a5:9a:00:ff:06:33:1a:08:9d:ce:15:95: 86:7f:aa:cb:1d:b5:50:ad:67:ba:9e:78:c5:eb:e6: b4:dd:ca:8e:11:9e:f9:fc:4f:cb:b8:7b:63:95:d0: 30:ae:2f:65:fe:50:6e:ca:32:62:e8:17:6a:1e:66: 3b:f7:87:97:c9:53:20:5b:dd:0e:71:af:ee:fc:b3: 34:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:70:81:DF:A9:A4:4B:F0:7B:78:23:C8:FE:74:60:8F:25:B3:55:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/303511ae-00e0-3ae9-9384-2797153592ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.243.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:0c:be:ca:17:a8:99:cb:ca:0e:12:ca:24:2e:87:db:1f:27: ce:0c:4a:3e:d0:07:89:f1:e6:97:56:4a:c1:13:1c:be:36:09: f7:2e:5d:c3:db:c4:81:a8:12:48:8b:08:dd:f9:ce:6c:ab:a9: f7:74:a7:81:a2:12:eb:45:d3:5e:75:84:10:59:96:2c:19:b4: ce:f2:08:4b:ee:5d:e4:df:19:31:e2:85:6d:aa:de:bd:de:dd: 3a:02:11:1e:11:45:c2:30:22:62:7d:ff:4b:8a:10:86:a2:84: 1c:53:47:11:f3:59:9d:35:01:7e:86:65:90:76:1b:a1:f9:90: a6:14:80:d6:e7:f8:ee:07:fd:c2:c4:c7:39:f5:c5:d4:11:b0: 76:5a:0d:d8:a2:31:d0:cd:06:4c:9c:40:97:79:4e:d2:28:58: 67:03:b7:8d:45:91:23:b8:56:5c:28:15:66:e8:f8:3d:3c:d8: 0d:c2:f7:85:70:fa:89:94:4f:a3:ab:bf:90:0d:49:a5:0d:44: 50:1d:c8:08:e2:22:0e:be:0a:ec:e8:06:d0:e8:b9:e3:08:29: 86:16:9a:a6:71:cf:70:18:66:d8:2f:9d:2f:46:47:40:df:dc: 44:cc:b3:ee:a7:09:be:60:34:34:f7:6e:d0:6a:08:36:8f:0c: b2:aa:4e:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZXZ2f5j1ylYx+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk MzY5NmE2NjktMDNmMS00YjY3LTg0ZmQtNGU5ZmE0MWRiYzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCSE/Kz3YHI6gSjMGQjEJyAz4opgTZ/zUAsQ H2BSKOiDG7kJ06gsrmF3a7jEcMa62DmZS5fmd3splgwoQxbLhFbYAGQpRXzFornb rA4BnF5L9S3FtLWkqo4KxRrLQXRiI28CAS5bpWO6jnRP6E/ytL850v9r0S2kAoTD wr3jbGEu5Uj0qx7r+DZh3WPYRPp2SxEosH7P1rFKW54q+6DaVmHbrV0Mmq+N6WXe ENIeMdDqBbzvOqWlmgD/BjMaCJ3OFZWGf6rLHbVQrWe6nnjF6+a03cqOEZ75/E/L uHtjldAwri9l/lBuyjJi6BdqHmY794eXyVMgW90Oca/u/LM0xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhwgd+ppEvwe3gjyP50YI8ls1ViMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzAzNTExYWUtMDBlMC0z YWU5LTkzODQtMjc5NzE1MzU5MmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPP0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcMvsoXqJnLyg4SyiQuh9sfJ84MSj7QB4nx5pdWSsETHL42CfcuXcPb xIGoEkiLCN35zmyrqfd0p4GiEutF0151hBBZliwZtM7yCEvuXeTfGTHihW2q3r3e 3ToCER4RRcIwImJ9/0uKEIaihBxTRxHzWZ01AX6GZZB2G6H5kKYUgNbn+O4H/cLE xzn1xdQRsHZaDdiiMdDNBkycQJd5TtIoWGcDt41FkSO4VlwoFWbo+D082A3C94Vw +omUT6Orv5ANSaUNRFAdyAjiIg6+CuzoBtDoueMIKYYWmqZxz3AYZtgvnS9GR0Df 3ETMs+6nCb5gNDT3btBqCDaPDLKqTlo= -----END CERTIFICATE-----Generated at Sat Jun 7 05:21:04 2025 by rpki-client