$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c343994f-040b-3280-a0d1-5da21cce5c11.roa File: c343994f-040b-3280-a0d1-5da21cce5c11.roa (raw, json) Hash identifier: XNcGEo1n66EmJGsUW8lEFZ52eY9WPCYZ6iXFO2+uTPw= Subject key identifier: E6:94:A1:D3:D2:FD:7E:70:59:DC:1A:1B:A6:3A:53:71:E7:07:B4:F6 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848E1463699056AA6AA22B5C1C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c343994f-040b-3280-a0d1-5da21cce5c11.roa Signing time: Fri 14 Feb 2025 12:45:14 +0000 ROA not before: Fri 14 Feb 2025 12:45:14 +0000 ROA not after: Thu 15 May 2025 11:45:14 +0000 asID: 213676 IP address blocks: 104.250.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Feb 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:46:36:99:05:6a:a6:aa:22:b5:c1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 14 12:45:14 2025 GMT Not After : May 15 11:45:14 2025 GMT Subject: CN=45d1a4ab-3f1e-4e4a-9e73-b7a72b23439e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c2:85:1d:28:d7:ff:30:6c:c3:0b:3f:9b:96: 07:5e:ee:41:21:d1:2b:07:e0:fd:83:3d:df:83:17: 90:66:28:71:e5:e8:74:d0:1c:ca:a2:11:32:f8:8a: bf:aa:4d:05:6c:a0:1f:23:41:37:6e:cc:aa:7c:54: 37:ac:4b:65:64:08:ef:ae:51:9a:73:5d:4f:4f:65: ae:12:94:ad:d5:97:ce:41:9c:c4:3e:bf:02:82:44: 07:66:10:5b:db:ba:b2:92:65:4d:3f:08:a9:39:33: b2:5e:8b:c5:78:64:ae:9c:79:eb:6c:c4:42:b1:a1: 88:96:e4:3d:6f:07:66:82:d2:44:bc:a1:5d:89:d8: 85:41:79:79:f5:0e:96:a0:ec:f6:95:19:51:a4:bf: 11:f4:ed:37:e4:0d:ac:79:b1:3d:5f:16:3a:49:41: d5:c9:2b:bd:cb:7f:e3:db:a8:d8:f7:e7:99:3a:26: e7:e8:9f:8c:f9:eb:b1:73:af:22:f2:a4:6e:cd:d2: 86:b3:c6:dc:99:11:3c:e8:1f:3e:67:69:8c:e3:65: fc:5f:ba:3c:8e:f8:bd:19:0e:fe:94:7e:f6:ee:df: b3:12:28:67:d8:56:5a:63:37:46:aa:21:64:91:59: 02:d0:36:7b:fd:3f:f7:ef:0a:b9:d1:ba:c0:65:de: 82:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:94:A1:D3:D2:FD:7E:70:59:DC:1A:1B:A6:3A:53:71:E7:07:B4:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c343994f-040b-3280-a0d1-5da21cce5c11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.182.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:c8:79:54:94:55:25:ff:52:e9:c1:54:01:4e:c5:21:70:88: 73:d7:b5:6b:57:8e:22:9e:60:52:7c:ca:99:78:be:59:44:82: b7:65:a9:71:93:eb:30:79:c5:ab:0b:a4:fc:3f:92:59:e1:87: 0e:ac:1b:09:e0:44:79:bd:d0:b7:3c:cf:68:f0:df:5b:84:87: 7d:8b:50:10:5f:e2:b1:e6:6f:38:4f:38:00:0c:05:60:9b:e1: d6:f1:44:3b:f1:34:fd:2b:27:6e:0e:7a:f3:23:52:a8:2d:fc: e0:c4:b5:0f:47:cb:06:3f:96:1b:be:6e:b5:96:32:41:77:c6: 1f:17:39:0d:6f:b9:d0:4e:57:87:c6:27:fb:ba:8a:fd:3a:1b: 98:b1:c4:62:6e:6e:c7:a9:72:79:b6:5a:b7:99:47:f7:1a:d2: a7:80:4b:97:46:60:d7:a5:53:9d:96:49:32:53:1e:2b:a7:1f: 17:f0:8e:e2:91:ff:a2:5d:32:f4:f6:8d:2f:33:a8:84:fa:83: 86:80:a5:b2:83:7d:bd:53:f6:a9:5f:99:86:ae:34:ee:83:a0: 57:98:56:a5:39:b5:2f:8d:d7:d0:29:cb:95:09:01:41:7e:d3: 50:46:36:88:cf:13:8b:8e:e6:34:82:32:7e:50:6e:49:86:8b: 72:50:d2:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjhRjaZBWqmqiK1wcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIxNDEyNDUxNFoXDTI1MDUxNTExNDUxNFowLzEtMCsGA1UEAxMk NDVkMWE0YWItM2YxZS00ZTRhLTllNzMtYjdhNzJiMjM0MzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcKFHSjX/zBswws/m5YHXu5BIdErB+D9gz3f gxeQZihx5eh00BzKohEy+Iq/qk0FbKAfI0E3bsyqfFQ3rEtlZAjvrlGac11PT2Wu EpSt1ZfOQZzEPr8CgkQHZhBb27qykmVNPwipOTOyXovFeGSunHnrbMRCsaGIluQ9 bwdmgtJEvKFdidiFQXl59Q6WoOz2lRlRpL8R9O035A2sebE9XxY6SUHVySu9y3/j 26jY9+eZOibn6J+M+euxc68i8qRuzdKGs8bcmRE86B8+Z2mM42X8X7o8jvi9GQ7+ lH727t+zEihn2FZaYzdGqiFkkVkC0DZ7/T/37wq50brAZd6C7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOaUodPS/X5wWdwaG6Y6U3HnB7T2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzM0Mzk5NGYtMDQwYi0z MjgwLWEwZDEtNWRhMjFjY2U1YzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPq2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTIeVSUVSX/UunBVAFOxSFwiHPXtWtXjiKeYFJ8ypl4vllEgrdlqXGT 6zB5xasLpPw/klnhhw6sGwngRHm90Lc8z2jw31uEh32LUBBf4rHmbzhPOAAMBWCb 4dbxRDvxNP0rJ24OevMjUqgt/ODEtQ9HywY/lhu+brWWMkF3xh8XOQ1vudBOV4fG J/u6iv06G5ixxGJubsepcnm2WreZR/ca0qeAS5dGYNelU52WSTJTHiunHxfwjuKR /6JdMvT2jS8zqIT6g4aApbKDfb1T9qlfmYauNO6DoFeYVqU5tS+N19Apy5UJAUF+ 01BGNojPE4uO5jSCMn5QbkmGi3JQ0rc= -----END CERTIFICATE-----Generated at Sat Feb 22 04:18:12 2025 by rpki-client