$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4c8fab89-95b2-3396-a9be-461ce805ad75.roa File: 4c8fab89-95b2-3396-a9be-461ce805ad75.roa (raw, json) Hash identifier: rxcXpbcQSEGGpDzOmVsJxXPMqUkAgM2sVVkoc2oJxR4= Subject key identifier: 59:20:92:B6:60:10:7F:83:77:50:B1:79:A9:CD:D9:A5:40:9D:52:7C Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858491941917C8380D45400978140 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4c8fab89-95b2-3396-a9be-461ce805ad75.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 20473 IP address blocks: 104.243.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:91:7c:83:80:d4:54:00:97:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=f3a58059-dc06-41e7-a6a2-04218cae3483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:61:b9:76:98:69:8c:24:52:78:35:ec:e2:29: 9d:5a:bb:12:9c:78:78:95:d9:8d:f6:84:48:f3:92: 7b:ce:61:7b:66:00:dd:12:fd:ea:1b:53:65:62:51: 9e:1e:94:79:80:bf:10:4c:33:56:ed:6d:e5:a9:6a: 9c:7f:da:df:5b:75:7a:f6:41:aa:a1:39:fe:6c:d2: de:b4:ba:65:4e:b8:d1:f8:46:2a:50:cb:03:77:55: db:68:8c:a4:53:8a:3d:dc:51:ad:cc:c2:13:73:6a: 47:9a:ce:e4:12:ec:68:70:e0:e5:ab:a4:9a:81:32: 18:e6:59:8e:93:05:e0:0f:93:cc:0b:13:b1:65:6e: 8d:76:37:0c:ff:99:c7:97:37:3c:c0:3f:6b:45:c5: 1f:52:fe:e7:de:38:9d:58:2d:19:46:a7:4a:f2:21: 01:3b:63:9e:4b:2c:b7:a9:e1:1b:1b:a1:f8:08:73: 05:cc:6b:7a:03:24:5d:c5:2b:ca:25:eb:a8:28:8c: f5:6f:b5:3e:bf:e3:05:f1:25:b6:ee:bc:ce:db:37: 71:12:57:fe:38:5d:78:87:9f:ac:d2:1d:c8:a7:93: be:dc:a3:79:a6:9b:36:69:2d:71:ad:71:7e:23:05: 38:61:74:56:4c:04:68:7c:cd:01:67:0f:20:51:18: a5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:20:92:B6:60:10:7F:83:77:50:B1:79:A9:CD:D9:A5:40:9D:52:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4c8fab89-95b2-3396-a9be-461ce805ad75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.243.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:39:3e:3e:6c:5d:8a:89:08:5b:ae:b5:7f:90:d2:88:b6:b2: 89:1d:1c:8f:98:01:58:a4:0b:6b:b0:3d:1e:fb:5b:5c:42:23: cd:de:13:a2:89:30:b0:4d:38:88:79:68:62:14:28:9d:7d:61: 84:05:bd:a1:82:55:e1:44:ad:9e:6f:48:a8:58:61:7a:ff:19: 2b:62:7b:46:95:7f:ef:29:3e:31:88:1d:86:dc:0f:b6:67:78: 95:bc:a5:14:ec:f5:48:52:c7:e4:31:45:c5:cf:57:f8:c1:34: 5e:53:0a:8d:a8:ba:a8:b9:8f:4f:8b:0f:4f:08:61:7b:26:35: 4d:dc:d4:d3:54:19:bd:bc:16:6b:3e:f6:94:75:8c:b6:11:08: 85:98:7a:24:7b:9c:13:b5:e7:57:ed:c2:7d:35:02:a9:0e:d0: b6:91:64:42:e5:ac:80:c7:68:0a:e4:74:71:f3:93:a4:44:d2: 4e:2c:c7:66:bf:ff:03:26:d4:2c:8e:b3:ba:51:b0:22:25:87: 53:d4:49:ce:5c:88:35:68:a6:3b:7b:43:8b:b5:79:70:89:a8: 78:54:23:78:92:64:91:10:84:93:0c:4c:24:18:12:06:d0:9d: aa:16:e1:82:ab:64:8b:34:d6:10:b6:cf:e1:4b:15:94:1f:50: 63:91:b2:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZQZF8g4DUVACXgUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk ZjNhNTgwNTktZGMwNi00MWU3LWE2YTItMDQyMThjYWUzNDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2G5dphpjCRSeDXs4imdWrsSnHh4ldmN9oRI 85J7zmF7ZgDdEv3qG1NlYlGeHpR5gL8QTDNW7W3lqWqcf9rfW3V69kGqoTn+bNLe tLplTrjR+EYqUMsDd1XbaIykU4o93FGtzMITc2pHms7kEuxocODlq6SagTIY5lmO kwXgD5PMCxOxZW6NdjcM/5nHlzc8wD9rRcUfUv7n3jidWC0ZRqdK8iEBO2OeSyy3 qeEbG6H4CHMFzGt6AyRdxSvKJeuoKIz1b7U+v+MF8SW27rzO2zdxElf+OF14h5+s 0h3Ip5O+3KN5pps2aS1xrXF+IwU4YXRWTARofM0BZw8gURil6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFkgkrZgEH+Dd1CxeanN2aVAnVJ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNGM4ZmFiODktOTViMi0z Mzk2LWE5YmUtNDYxY2U4MDVhZDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPPxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE85Pj5sXYqJCFuutX+Q0oi2sokdHI+YAVikC2uwPR77W1xCI83eE6KJ MLBNOIh5aGIUKJ19YYQFvaGCVeFErZ5vSKhYYXr/GStie0aVf+8pPjGIHYbcD7Zn eJW8pRTs9UhSx+QxRcXPV/jBNF5TCo2ouqi5j0+LD08IYXsmNU3c1NNUGb28Fms+ 9pR1jLYRCIWYeiR7nBO151ftwn01AqkO0LaRZELlrIDHaArkdHHzk6RE0k4sx2a/ /wMm1CyOs7pRsCIlh1PUSc5ciDVopjt7Q4u1eXCJqHhUI3iSZJEQhJMMTCQYEgbQ naoW4YKrZIs01hC2z+FLFZQfUGORsr8= -----END CERTIFICATE-----Generated at Fri Mar 14 10:07:06 2025 by rpki-client