$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf661fdf-747a-3e47-89c3-b1cbc064c7e1.roa File: bf661fdf-747a-3e47-89c3-b1cbc064c7e1.roa (raw, json) Hash identifier: sq3aSvKw+S19V/ba1qRNonSmN0mWagjyi4rwq2chvWs= Subject key identifier: 7E:30:01:A4:F0:C3:22:47:AE:21:3D:B0:6E:DF:23:3F:21:5C:57:E7 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A1465766638A394187869D1F8 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf661fdf-747a-3e47-89c3-b1cbc064c7e1.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 212238 IP address blocks: 104.243.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:76:66:38:a3:94:18:78:69:d1:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=919634d8-4bc3-4658-a2c5-8991f8fa438d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9e:fa:e6:e5:02:74:6f:47:6d:30:93:ca:81: fd:05:31:f5:bc:79:c7:26:f2:40:d0:63:05:82:df: ef:a1:47:0d:f1:07:2b:29:44:14:f4:b3:eb:78:db: 93:42:f5:90:27:94:7a:a6:73:2c:14:a5:cb:4c:8a: 2a:05:80:6a:63:f6:90:ad:6c:2f:9a:a0:5d:fe:c7: 1b:d6:62:d9:4b:81:59:a8:3c:76:7f:6b:71:c3:07: bb:40:c5:f5:31:c3:17:23:01:2f:b0:e0:18:05:3d: f7:2f:3c:eb:59:0f:64:cd:fc:d2:28:db:09:cf:40: 24:be:af:45:15:5a:c4:96:28:de:1a:b2:b8:9a:ab: a5:0e:e0:2e:e2:5f:69:32:9a:a0:58:6b:82:18:47: 0a:63:c9:93:1d:ad:5f:8a:7c:7e:f6:42:1d:04:75: 42:07:4f:e2:b2:79:67:03:8c:8a:10:ff:84:51:4c: 2b:14:54:d6:aa:b8:cc:0a:63:b3:6d:5a:59:41:b6: f4:27:4d:23:07:50:c1:f9:aa:81:44:5f:76:b9:8a: be:c1:b1:01:82:d4:10:e2:3d:91:84:5d:fe:7e:21: 06:ea:38:8c:37:f5:64:7b:78:38:9a:72:bf:63:d1: d7:76:61:7b:2c:2b:5f:bc:16:00:9a:1e:15:6a:12: 58:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:30:01:A4:F0:C3:22:47:AE:21:3D:B0:6E:DF:23:3F:21:5C:57:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf661fdf-747a-3e47-89c3-b1cbc064c7e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.243.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:5d:c0:fb:5c:86:41:02:7b:5e:33:fe:13:bc:85:2c:05:f1: 1c:b9:2f:39:69:67:62:a7:96:e9:40:84:42:e0:00:ed:55:39: 35:6a:52:9b:a4:2a:eb:21:99:ff:dc:e7:c8:c8:1c:9d:77:02: 9b:d7:5d:09:b7:2c:a3:fb:ef:74:16:51:fe:cf:0f:44:21:c3: f0:26:b3:66:2b:31:f5:af:66:be:f5:ce:b5:98:50:57:11:96: cc:f9:e2:a3:86:40:aa:12:fc:61:d0:48:04:6e:af:a3:98:67: d1:ce:bd:49:67:35:a5:a8:b1:c5:bb:ba:35:0a:8d:3d:b8:1c: 31:0c:88:73:ca:9e:82:63:39:89:ef:79:2f:45:7f:c6:67:a2: 27:93:d1:8a:4d:ee:3b:cf:4f:2e:e6:18:17:af:d6:56:d5:e1: c0:a7:17:b2:cd:0c:1a:2d:26:29:62:15:7b:89:e9:1a:6e:31: 9b:aa:c0:8f:95:c1:3e:d0:0a:b8:54:b7:cd:75:91:01:83:b1: 9e:62:a1:89:b1:51:cb:a1:47:b1:09:61:9c:21:93:be:49:de: 08:ec:73:5e:f0:09:84:f4:b1:cc:31:ed:0b:96:9e:56:26:93: ad:4b:05:1c:94:de:e9:53:05:69:ff:a7:e6:31:b9:5f:aa:9d: c5:21:69:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZXZmOKOUGHhp0fgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk OTE5NjM0ZDgtNGJjMy00NjU4LWEyYzUtODk5MWY4ZmE0MzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ765uUCdG9HbTCTyoH9BTH1vHnHJvJA0GMF gt/voUcN8QcrKUQU9LPreNuTQvWQJ5R6pnMsFKXLTIoqBYBqY/aQrWwvmqBd/scb 1mLZS4FZqDx2f2txwwe7QMX1McMXIwEvsOAYBT33LzzrWQ9kzfzSKNsJz0Akvq9F FVrElijeGrK4mqulDuAu4l9pMpqgWGuCGEcKY8mTHa1finx+9kIdBHVCB0/isnln A4yKEP+EUUwrFFTWqrjMCmOzbVpZQbb0J00jB1DB+aqBRF92uYq+wbEBgtQQ4j2R hF3+fiEG6jiMN/Vke3g4mnK/Y9HXdmF7LCtfvBYAmh4VahJYXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4wAaTwwyJHriE9sG7fIz8hXFfnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmY2NjFmZGYtNzQ3YS0z ZTQ3LTg5YzMtYjFjYmMwNjRjN2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPPzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9dwPtchkECe14z/hO8hSwF8Ry5LzlpZ2KnlulAhELgAO1VOTVqUpuk Kushmf/c58jIHJ13ApvXXQm3LKP773QWUf7PD0Qhw/Ams2YrMfWvZr71zrWYUFcR lsz54qOGQKoS/GHQSARur6OYZ9HOvUlnNaWoscW7ujUKjT24HDEMiHPKnoJjOYnv eS9Ff8ZnoieT0YpN7jvPTy7mGBev1lbV4cCnF7LNDBotJiliFXuJ6RpuMZuqwI+V wT7QCrhUt811kQGDsZ5ioYmxUcuhR7EJYZwhk75J3gjsc17wCYT0scwx7QuWnlYm k61LBRyU3ulTBWn/p+YxuV+qncUhaUA= -----END CERTIFICATE-----Generated at Sat Jun 7 04:53:08 2025 by rpki-client