$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf661fdf-747a-3e47-89c3-b1cbc064c7e1.roa File: bf661fdf-747a-3e47-89c3-b1cbc064c7e1.roa (raw, json) Hash identifier: Pka4rTNfmhxxvsBYxrsv9nv7zI+6q+I2qbh+P5JEjnk= Subject key identifier: 56:8A:F8:A0:51:33:F7:9D:78:1A:08:AC:12:DD:24:BE:5F:5B:F4:17 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849350E9AE5AEA06F3876B82B24 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf661fdf-747a-3e47-89c3-b1cbc064c7e1.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 212238 IP address blocks: 104.243.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:9a:e5:ae:a0:6f:38:76:b8:2b:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=f8859710-cfb6-4b33-aace-050276851011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:94:e2:2e:87:bf:c1:9b:f7:d9:66:38:ed:a4: 65:52:c5:6b:37:a5:83:aa:04:5f:b9:ce:0e:86:ff: 9c:57:1e:d6:1c:e3:bd:fe:ce:a3:52:59:c8:17:1d: e9:14:ca:5a:c4:ac:2f:fd:f6:91:59:a2:e8:98:5b: 77:44:db:48:7b:46:86:3c:44:92:03:1b:80:96:e8: af:84:bd:a4:22:e0:6b:d4:a1:b1:b0:46:2a:8d:70: 63:ef:11:ce:b0:2e:82:20:15:df:1a:32:77:ab:76: 27:81:ed:83:5b:2c:c8:d7:f6:f6:81:88:ae:fe:c9: 2e:ba:35:f0:ec:34:48:88:93:6b:94:00:96:ba:52: 9d:43:e6:25:2a:a0:2b:65:20:14:5f:55:7e:83:bb: dd:b3:a5:84:c7:84:cb:d2:09:2c:b4:1b:fb:9a:da: 71:f7:ad:75:27:c9:86:47:38:de:80:15:60:77:c8: 43:9a:a3:08:40:0c:8a:d0:65:5d:3c:b3:aa:92:61: 68:29:ab:b2:3a:c2:d4:e3:4f:8b:60:7e:a5:24:00: cb:a6:de:18:5f:5f:cf:84:76:83:3f:ac:15:73:6b: 29:8b:dd:80:46:cc:4a:27:5e:ee:21:f7:66:84:c3: 7a:1c:85:a4:00:c2:02:3a:e0:2b:47:ed:0a:a2:20: 00:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:8A:F8:A0:51:33:F7:9D:78:1A:08:AC:12:DD:24:BE:5F:5B:F4:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf661fdf-747a-3e47-89c3-b1cbc064c7e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.243.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:12:1e:dc:ab:4b:16:5c:95:64:37:2a:96:c0:b4:93:a4:60: 85:e1:df:f1:c3:19:90:02:b0:c3:5d:73:e3:21:d9:74:d6:ef: 40:f3:49:18:17:3c:8e:59:b0:49:c3:4e:89:f5:65:dd:df:34: 67:e8:91:e2:dc:48:a1:fc:1f:fe:0b:02:f7:98:42:72:fa:b7: 15:66:49:91:40:9c:93:a4:e1:0b:ec:64:ed:e7:4f:ab:fe:2a: fd:f7:e1:bb:ab:1c:cd:22:bc:ac:b1:10:b9:8e:19:a5:15:a1: dc:d3:a8:55:c3:cb:95:09:a7:dd:8e:e3:cd:8f:0e:6c:fd:ca: 7c:1d:27:3a:ca:00:8e:a7:27:e2:d0:35:e0:3c:53:96:b4:d3: 0f:ef:39:6a:b0:84:4f:a9:97:58:41:84:12:c4:91:78:50:62: 74:19:2f:6d:0f:40:5c:b7:8a:71:0b:95:be:27:76:fb:09:40: 49:3b:4f:51:06:09:59:12:18:97:b5:a8:8c:a2:4d:e1:d6:5d: 71:03:1b:62:88:f2:c9:a7:d2:37:40:15:91:bb:a8:95:fe:19: 6b:d0:c1:da:73:53:d3:81:94:e3:5b:22:34:31:9d:a9:12:5a: 15:7d:76:39:25:f6:41:15:b9:c2:60:fd:3f:f9:70:d4:16:7d: 1c:66:ae:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DprlrqBvOHa4KyQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk Zjg4NTk3MTAtY2ZiNi00YjMzLWFhY2UtMDUwMjc2ODUxMDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopTiLoe/wZv32WY47aRlUsVrN6WDqgRfuc4O hv+cVx7WHOO9/s6jUlnIFx3pFMpaxKwv/faRWaLomFt3RNtIe0aGPESSAxuAluiv hL2kIuBr1KGxsEYqjXBj7xHOsC6CIBXfGjJ3q3Ynge2DWyzI1/b2gYiu/skuujXw 7DRIiJNrlACWulKdQ+YlKqArZSAUX1V+g7vds6WEx4TL0gkstBv7mtpx9611J8mG RzjegBVgd8hDmqMIQAyK0GVdPLOqkmFoKauyOsLU40+LYH6lJADLpt4YX1/PhHaD P6wVc2spi92ARsxKJ17uIfdmhMN6HIWkAMICOuArR+0KoiAADwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFaK+KBRM/edeBoIrBLdJL5fW/QXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmY2NjFmZGYtNzQ3YS0z ZTQ3LTg5YzMtYjFjYmMwNjRjN2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPPzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUSHtyrSxZclWQ3KpbAtJOkYIXh3/HDGZACsMNdc+Mh2XTW70DzSRgX PI5ZsEnDTon1Zd3fNGfokeLcSKH8H/4LAveYQnL6txVmSZFAnJOk4QvsZO3nT6v+ Kv334burHM0ivKyxELmOGaUVodzTqFXDy5UJp92O482PDmz9ynwdJzrKAI6nJ+LQ NeA8U5a00w/vOWqwhE+pl1hBhBLEkXhQYnQZL20PQFy3inELlb4ndvsJQEk7T1EG CVkSGJe1qIyiTeHWXXEDG2KI8smn0jdAFZG7qJX+GWvQwdpzU9OBlONbIjQxnakS WhV9djkl9kEVucJg/T/5cNQWfRxmruE= -----END CERTIFICATE-----Generated at Sat Apr 12 00:23:19 2025 by rpki-client