$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f9138145-8119-3c92-b5aa-1a126c8d347f.roa File: f9138145-8119-3c92-b5aa-1a126c8d347f.roa (raw, json) Hash identifier: O3Rrkhe8DEHUSSl5RDRHqVLpaLHYnRJBgtMpMjRG8xY= Subject key identifier: 9B:F3:D6:75:CB:DB:14:35:63:E0:79:46:09:9B:03:BC:C7:80:8E:77 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858495C2439F811105415EFE96B80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f9138145-8119-3c92-b5aa-1a126c8d347f.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 9009 IP address blocks: 104.243.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:39:f8:11:10:54:15:ef:e9:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=8f48f9a8-d161-4509-a243-e4eb7a9867bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:46:24:d0:31:95:a4:9f:fe:53:66:73:9d:c2: 00:46:6f:8d:ba:d6:28:6b:ed:09:02:12:fc:9f:e9: e0:a0:0a:e3:bb:84:c9:dc:54:fa:a0:db:c9:74:a9: 4f:9c:3c:24:61:8e:8e:6b:b0:71:75:48:8f:01:ce: a4:32:56:ed:9a:71:c5:cc:78:6c:76:29:f8:b6:08: fe:bf:6f:8b:bb:5e:7f:22:a4:03:16:05:9a:c1:c4: 46:a6:74:88:a1:cc:f6:d9:22:39:6e:c1:6f:23:30: 6c:eb:2d:a0:e8:5b:ee:76:f9:63:a0:2f:cb:4a:de: 5a:d2:9a:49:65:76:c5:2d:b7:a3:5d:c5:d2:99:59: 92:91:24:03:8e:35:f8:49:0c:90:89:17:bb:e0:aa: d3:01:a3:d8:b5:2e:ec:a3:98:c2:8f:59:65:fc:08: df:f9:50:dd:30:69:b9:f8:57:0a:a7:ce:be:79:1e: e2:5b:b7:47:03:38:9a:85:97:97:04:81:64:1e:32: 22:1d:d9:2b:46:a1:fa:27:2c:50:d1:e7:cc:8f:a9: df:ad:78:bb:78:21:7c:03:01:cb:79:be:c0:7f:9b: 02:62:24:88:3e:2a:54:8c:11:2d:d8:73:38:31:6e: 47:3b:43:ee:a5:d2:8a:56:00:01:6b:7e:95:10:6a: 03:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F3:D6:75:CB:DB:14:35:63:E0:79:46:09:9B:03:BC:C7:80:8E:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f9138145-8119-3c92-b5aa-1a126c8d347f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.243.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:25:59:1e:a4:a1:66:38:4d:25:3c:08:a1:45:ce:a5:a8:fa: 53:a5:38:61:1b:cc:c2:7b:e8:fb:7b:bd:0e:a6:38:6f:96:f8: c3:53:ca:d1:33:eb:50:18:73:2f:3e:c8:16:c8:84:00:1e:16: d9:ad:f5:2e:53:61:a6:45:6d:a5:00:d6:46:6b:24:d4:74:9d: 84:c8:d9:9f:5d:1f:00:1b:ac:3b:2d:97:22:53:0b:e0:b3:de: 51:f8:b3:59:db:0c:ec:c0:69:8f:ce:d9:d8:8c:16:0c:a0:a6: a2:41:97:3e:6f:30:6b:30:ac:e0:9e:b1:4d:00:4f:13:0b:32: 03:db:20:93:4a:58:3c:1b:d6:db:c9:a0:68:a9:db:b4:90:94: 9b:6d:ed:a2:6a:b2:f0:48:c6:de:ac:ad:19:70:3e:c5:51:34: 37:92:08:e7:1a:5e:b9:fd:9f:99:37:36:56:78:0b:ac:19:7e: 21:47:d2:df:ca:ac:4d:79:2b:86:e1:d7:3b:9f:41:fc:4a:34: e4:a4:51:6d:e0:16:e4:d3:1a:4d:c2:06:ef:32:71:01:ac:d4: 86:8b:07:55:58:b6:60:48:08:61:40:b1:bd:06:6f:c8:ff:6a: 8e:58:47:d6:29:62:97:d8:57:48:e3:a2:28:07:36:38:f6:d5: df:7f:6a:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJDn4ERBUFe/pa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk OGY0OGY5YTgtZDE2MS00NTA5LWEyNDMtZTRlYjdhOTg2N2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskYk0DGVpJ/+U2ZzncIARm+NutYoa+0JAhL8 n+ngoArju4TJ3FT6oNvJdKlPnDwkYY6Oa7BxdUiPAc6kMlbtmnHFzHhsdin4tgj+ v2+Lu15/IqQDFgWawcRGpnSIocz22SI5bsFvIzBs6y2g6FvudvljoC/LSt5a0ppJ ZXbFLbejXcXSmVmSkSQDjjX4SQyQiRe74KrTAaPYtS7so5jCj1ll/Ajf+VDdMGm5 +FcKp86+eR7iW7dHAziahZeXBIFkHjIiHdkrRqH6JyxQ0efMj6nfrXi7eCF8AwHL eb7Af5sCYiSIPipUjBEt2HM4MW5HO0PupdKKVgABa36VEGoD6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvz1nXL2xQ1Y+B5RgmbA7zHgI53MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjkxMzgxNDUtODExOS0z YzkyLWI1YWEtMWExMjZjOGQzNDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPP7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYlWR6koWY4TSU8CKFFzqWo+lOlOGEbzMJ76Pt7vQ6mOG+W+MNTytEz 61AYcy8+yBbIhAAeFtmt9S5TYaZFbaUA1kZrJNR0nYTI2Z9dHwAbrDstlyJTC+Cz 3lH4s1nbDOzAaY/O2diMFgygpqJBlz5vMGswrOCesU0ATxMLMgPbIJNKWDwb1tvJ oGip27SQlJtt7aJqsvBIxt6srRlwPsVRNDeSCOcaXrn9n5k3NlZ4C6wZfiFH0t/K rE15K4bh1zufQfxKNOSkUW3gFuTTGk3CBu8ycQGs1IaLB1VYtmBICGFAsb0Gb8j/ ao5YR9YpYpfYV0jjoigHNjj21d9/aj4= -----END CERTIFICATE-----Generated at Fri Apr 11 23:01:09 2025 by rpki-client