$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/97415ebd-8daf-3045-bcc3-885321a5aa2a.roa File: 97415ebd-8daf-3045-bcc3-885321a5aa2a.roa (raw, json) Hash identifier: 8hK+MTjSifZGJM/dOljhHFoEWuyZ+E+W3+BJI/IAUpQ= Subject key identifier: 54:47:6C:D5:B8:1D:A7:8F:87:87:DB:ED:26:E6:C8:29:FE:42:3F:38 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848E146FC248D903615ADDBA740 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/97415ebd-8daf-3045-bcc3-885321a5aa2a.roa Signing time: Fri 14 Feb 2025 12:46:47 +0000 ROA not before: Fri 14 Feb 2025 12:46:47 +0000 ROA not after: Thu 15 May 2025 11:46:47 +0000 asID: 213676 IP address blocks: 104.250.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Feb 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:46:fc:24:8d:90:36:15:ad:db:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 14 12:46:47 2025 GMT Not After : May 15 11:46:47 2025 GMT Subject: CN=2936fc09-3920-4cc6-986b-f1fc1b9e4ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:86:60:cb:64:24:69:d7:9c:90:9d:b8:c5:94: e0:6c:dc:9a:b9:0e:2c:14:3b:8d:40:28:ab:c8:89: 6a:d3:c3:87:77:f4:d8:8e:a2:49:4d:81:6a:52:5e: 53:3d:fe:af:e1:1b:3e:39:e6:0e:45:74:2b:ed:73: 7a:a4:c7:15:db:88:9c:e4:19:10:a6:b8:8c:8b:93: 75:88:69:6b:e6:e2:a4:5d:f7:4e:ea:ae:6e:23:2b: 04:62:d0:40:b8:5b:99:39:43:ef:cd:c2:a5:f1:24: d0:b3:63:57:68:90:bd:a2:10:55:4d:65:c5:e6:43: 6e:cf:34:67:3c:14:80:88:02:70:02:93:df:b6:c5: 9e:4c:ca:61:cb:cf:45:21:eb:5c:c8:99:32:29:e4: 35:d3:2d:a8:dd:e5:6f:de:af:bc:97:7b:e9:4f:5f: 1a:d4:b6:08:7c:67:e7:af:1b:12:c5:fa:ed:47:e4: 79:9d:50:6d:0e:80:ec:f8:4b:e4:e6:aa:f7:4d:cf: a8:3e:4c:a8:5a:5e:84:15:f5:63:19:a1:7a:39:90: a2:bd:3a:65:dc:80:17:c3:54:48:b8:64:f8:e2:84: 40:14:ce:7a:84:ac:af:bd:2b:56:1b:ce:b2:51:38: 38:fc:e7:ec:0c:cc:1d:81:1f:69:a6:a9:71:35:3b: 81:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:47:6C:D5:B8:1D:A7:8F:87:87:DB:ED:26:E6:C8:29:FE:42:3F:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/97415ebd-8daf-3045-bcc3-885321a5aa2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:3d:99:59:f1:a9:84:be:cd:da:cb:4f:46:d5:8f:e3:5e:21: 74:0e:36:22:4a:f8:9d:52:83:dd:89:2c:d5:47:b7:e8:d6:86: 5c:ea:c2:b9:9e:c3:2e:5e:f5:31:9a:e3:4d:a2:8b:23:72:8d: 5a:85:ab:6b:4e:09:0f:6c:f2:2d:ba:7c:bd:79:9e:37:b1:48: 0b:81:f8:2b:9b:cb:ed:f0:52:bc:97:19:eb:a4:90:14:b9:de: 0c:28:d8:fb:7b:73:25:b8:33:01:ca:d4:6a:cb:42:1a:48:88: df:a2:23:60:7f:32:f9:78:f7:ad:0a:79:10:c3:55:83:4d:f8: 56:53:e7:a6:ec:ac:04:1e:60:44:10:f0:1e:9c:0d:43:6b:fd: d7:f7:df:f7:79:35:b0:58:72:0f:dc:3a:98:6f:30:b1:0c:1e: 39:4e:51:9c:48:25:31:0a:fe:28:6b:e3:2b:75:f3:30:d2:8f: 77:6b:03:24:9a:9e:f1:60:de:4b:39:8b:e1:d2:58:b2:ad:62: 74:bf:7d:f2:5c:7b:22:81:6e:9d:60:5e:56:d5:c6:5c:df:0e: 30:c3:2a:eb:7c:32:54:19:a9:f6:aa:e5:58:8f:57:2a:53:74: 77:1b:c7:92:a3:2d:5e:d2:fa:0d:3b:8d:11:34:3d:1e:e1:16: 70:c2:93:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjhRvwkjZA2Fa3bp0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIxNDEyNDY0N1oXDTI1MDUxNTExNDY0N1owLzEtMCsGA1UEAxMk MjkzNmZjMDktMzkyMC00Y2M2LTk4NmItZjFmYzFiOWU0ZmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIZgy2QkadeckJ24xZTgbNyauQ4sFDuNQCir yIlq08OHd/TYjqJJTYFqUl5TPf6v4Rs+OeYORXQr7XN6pMcV24ic5BkQpriMi5N1 iGlr5uKkXfdO6q5uIysEYtBAuFuZOUPvzcKl8STQs2NXaJC9ohBVTWXF5kNuzzRn PBSAiAJwApPftsWeTMphy89FIetcyJkyKeQ10y2o3eVv3q+8l3vpT18a1LYIfGfn rxsSxfrtR+R5nVBtDoDs+Evk5qr3Tc+oPkyoWl6EFfVjGaF6OZCivTpl3IAXw1RI uGT44oRAFM56hKyvvStWG86yUTg4/OfsDMwdgR9ppqlxNTuBTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRHbNW4HaePh4fb7SbmyCn+Qj84MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOTc0MTVlYmQtOGRhZi0z MDQ1LWJjYzMtODg1MzIxYTVhYTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAg9mVnxqYS+zdrLT0bVj+NeIXQONiJK+J1Sg92JLNVHt+jWhlzqwrme wy5e9TGa402iiyNyjVqFq2tOCQ9s8i26fL15njexSAuB+Cuby+3wUryXGeukkBS5 3gwo2Pt7cyW4MwHK1GrLQhpIiN+iI2B/Mvl4960KeRDDVYNN+FZT56bsrAQeYEQQ 8B6cDUNr/df33/d5NbBYcg/cOphvMLEMHjlOUZxIJTEK/ihr4yt18zDSj3drAySa nvFg3ks5i+HSWLKtYnS/ffJceyKBbp1gXlbVxlzfDjDDKut8MlQZqfaq5ViPVypT dHcbx5KjLV7S+g07jRE0PR7hFnDCk3o= -----END CERTIFICATE-----Generated at Sat Feb 22 04:58:33 2025 by rpki-client