$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9a8d255d-f1df-38c9-9a43-23ba403e4905.roa File: 9a8d255d-f1df-38c9-9a43-23ba403e4905.roa (raw, json) Hash identifier: mB2Tp8BT/1hGbYuSeWIwaIcdgISUajomjfd/QfvocQ8= Subject key identifier: F0:6C:35:DD:0E:D8:ED:0C:4A:E6:A5:6A:52:D5:52:7B:DD:C9:27:98 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584957F4081C3BD2DA25ED01C280 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9a8d255d-f1df-38c9-9a43-23ba403e4905.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 3223 IP address blocks: 104.250.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:08:1c:3b:d2:da:25:ed:01:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=8a1d3d87-d8b0-4691-9724-8a9b1741303d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2f:f3:f7:05:36:46:70:a5:6a:5e:8d:4e:be: 35:a9:2b:5b:62:40:60:51:92:f8:f7:aa:8d:26:7b: f5:e9:e2:6e:4d:53:ae:cd:2a:8f:e8:ba:e1:e7:84: c0:7f:f2:70:fa:ff:12:ea:86:4f:e4:79:d6:09:39: 61:37:f6:5d:9c:52:47:87:67:f0:7d:ca:23:b3:91: 14:5c:27:ed:05:08:a1:e0:e2:17:7f:76:d7:0b:f2: 15:3d:c6:48:19:c4:53:27:5c:98:b9:8b:fe:e5:22: 5c:80:ed:fe:ef:1e:90:09:6e:04:11:ba:18:82:94: 2b:84:28:51:de:d1:0e:32:c8:31:36:2a:c8:a4:53: 32:a6:67:11:2d:3f:fd:8a:f2:94:a9:a4:60:8e:00: 17:2e:b8:be:9b:cc:2c:e3:87:5b:a9:18:8f:73:d8: 89:41:1c:47:08:da:90:90:c3:9c:f8:d4:b0:09:76: 5a:dd:dd:7f:51:94:94:56:bd:b5:80:32:88:76:a8: fc:62:05:56:c6:e2:97:2b:76:f0:3d:21:08:56:a0: a8:85:77:e3:69:71:c5:de:bc:20:71:5d:b9:32:49: eb:00:b3:9f:d4:f8:9b:09:d1:3a:b3:f1:1e:13:03: af:c1:b4:36:96:85:22:d2:88:0b:a4:48:4a:d1:e1: 72:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:6C:35:DD:0E:D8:ED:0C:4A:E6:A5:6A:52:D5:52:7B:DD:C9:27:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9a8d255d-f1df-38c9-9a43-23ba403e4905.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:00:6a:30:17:96:90:7f:38:df:37:a5:c1:6d:4d:09:0a:0a: f1:9b:fc:d1:19:97:40:16:24:48:6b:2c:7a:ca:b1:a5:58:52: 65:28:3c:2f:6b:98:b9:c0:00:c2:b0:09:e1:3f:58:83:6a:94: ab:62:a2:97:2f:31:b1:59:fc:ca:ae:16:c4:c2:f5:93:c7:bb: a2:d6:78:bb:22:01:31:85:4b:1e:04:3b:0f:82:ca:c8:9b:da: 2b:01:0f:1d:3a:d0:80:ca:d9:4b:63:bf:6a:18:b6:90:72:85: f9:7f:33:f1:fc:fd:f6:5c:80:d9:1a:d8:e3:5e:7e:d5:9a:5d: ed:85:a5:19:d3:67:24:0e:19:93:e7:16:77:af:a5:6b:33:37: 27:ad:b3:c3:c7:e6:61:2c:de:31:08:56:4c:0d:91:d0:ac:2c: 22:39:09:94:ac:59:df:03:53:e0:bb:ca:91:a1:a3:b0:25:c9: 53:89:0e:76:30:3e:c6:a2:9b:1c:15:9a:d9:1d:73:aa:9f:cf: 16:e6:20:fa:16:03:94:43:53:51:0b:f7:bd:f9:c2:bb:00:9b: 96:a7:b6:e0:45:0f:f4:c4:b6:2c:1b:be:52:4b:8e:95:33:54: 0d:ee:dc:59:e0:72:ab:02:d8:bb:2a:88:09:b5:3d:e5:16:1b: 1e:f4:26:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9AgcO9LaJe0BwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk OGExZDNkODctZDhiMC00NjkxLTk3MjQtOGE5YjE3NDEzMDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhy/z9wU2RnClal6NTr41qStbYkBgUZL496qN Jnv16eJuTVOuzSqP6Lrh54TAf/Jw+v8S6oZP5HnWCTlhN/ZdnFJHh2fwfcojs5EU XCftBQih4OIXf3bXC/IVPcZIGcRTJ1yYuYv+5SJcgO3+7x6QCW4EEboYgpQrhChR 3tEOMsgxNirIpFMypmcRLT/9ivKUqaRgjgAXLri+m8ws44dbqRiPc9iJQRxHCNqQ kMOc+NSwCXZa3d1/UZSUVr21gDKIdqj8YgVWxuKXK3bwPSEIVqCohXfjaXHF3rwg cV25MknrALOf1PibCdE6s/EeEwOvwbQ2loUi0ogLpEhK0eFyaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBsNd0O2O0MSualalLVUnvdySeYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOWE4ZDI1NWQtZjFkZi0z OGM5LTlhNDMtMjNiYTQwM2U0OTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPq5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwAajAXlpB/ON83pcFtTQkKCvGb/NEZl0AWJEhrLHrKsaVYUmUoPC9r mLnAAMKwCeE/WINqlKtiopcvMbFZ/MquFsTC9ZPHu6LWeLsiATGFSx4EOw+Cysib 2isBDx060IDK2Utjv2oYtpByhfl/M/H8/fZcgNka2ONeftWaXe2FpRnTZyQOGZPn FnevpWszNyets8PH5mEs3jEIVkwNkdCsLCI5CZSsWd8DU+C7ypGho7AlyVOJDnYw PsaimxwVmtkdc6qfzxbmIPoWA5RDU1EL9735wrsAm5antuBFD/TEtiwbvlJLjpUz VA3u3FngcqsC2LsqiAm1PeUWGx70Jic= -----END CERTIFICATE-----Generated at Sat Apr 5 13:15:04 2025 by rpki-client