$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584/89cb97ca-7d4a-3637-9cae-6f5745076a6f.roa File: 89cb97ca-7d4a-3637-9cae-6f5745076a6f.roa (raw, json) Hash identifier: 2YLtpPZ2GiEXvlHYf315Xd8DyOZw/9yRYh47AAD14kw= Subject key identifier: FA:49:AA:82:C8:A9:18:70:AE:F8:32:1F:01:B4:AD:0F:29:02:25:18 Certificate issuer: /CN=6c5be2bd-61a2-464a-be54-34e87a4a9584 Certificate serial: 010D0C9F432858491ED6DA36A7F69BDF56EE6300 Authority key identifier: 8C:C1:42:F4:9C:11:05:F4:E8:B0:7B:1A:7F:C5:2A:C4:77:83:D0:71 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584/89cb97ca-7d4a-3637-9cae-6f5745076a6f.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 31851 IP address blocks: 104.219.188.0/22 maxlen: 24 167.88.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584/6c5be2bd-61a2-464a-be54-34e87a4a9584.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584/6c5be2bd-61a2-464a-be54-34e87a4a9584.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:da:36:a7:f6:9b:df:56:ee:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c5be2bd-61a2-464a-be54-34e87a4a9584 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=8949fd40-465c-4b16-91c8-1b551ce0c76c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8f:7f:8c:de:9b:ad:80:a8:9e:04:c3:6d:fd: 8a:a6:b2:80:2b:29:ba:96:f3:93:ba:a3:1d:92:75: c2:1f:49:5e:67:7d:ad:95:36:4c:2d:16:b1:5f:6a: 88:6d:e4:46:29:69:af:1f:59:64:3f:93:5b:88:0c: bf:65:ca:3c:76:ae:b6:35:94:52:fb:e4:04:96:66: dc:6c:16:74:d8:0c:81:fe:10:cc:6e:d9:3c:09:ee: f8:b4:b5:84:b1:97:6a:0b:65:44:57:8e:ab:33:11: 6a:c1:b7:1d:93:f4:71:06:a5:a8:72:74:11:a3:c4: 02:ba:e2:b2:84:55:74:ac:bd:6b:2c:8f:45:2c:8a: 0f:f3:cf:28:30:7f:da:cc:fa:3c:00:c8:fc:14:68: f1:be:1f:d0:80:97:b9:ec:25:ef:a3:61:1c:24:71: f8:1d:a9:13:ae:31:d7:03:83:b9:2e:33:71:12:f1: 57:21:1d:e5:16:93:b3:ff:74:ff:7b:95:dc:9e:b1: ae:00:7a:ce:6c:ad:39:0e:40:2c:ec:61:77:02:e5: 45:e7:c8:75:fc:b5:57:81:4c:6b:53:8b:2e:76:b4: 3a:b7:37:37:c2:93:e5:53:ed:32:38:dc:69:eb:a9: 09:49:04:8a:16:40:ea:59:d4:99:d6:db:e3:28:2e: 39:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:49:AA:82:C8:A9:18:70:AE:F8:32:1F:01:B4:AD:0F:29:02:25:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584/89cb97ca-7d4a-3637-9cae-6f5745076a6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584/6c5be2bd-61a2-464a-be54-34e87a4a9584.crl X509v3 Authority Key Identifier: keyid:8C:C1:42:F4:9C:11:05:F4:E8:B0:7B:1A:7F:C5:2A:C4:77:83:D0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584.cer sbgp-ipAddrBlock: critical IPv4: 104.219.188.0/22 167.88.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:d3:44:64:39:b8:30:75:8d:a0:1c:eb:46:7c:86:e1:96:cb: 63:2c:81:c5:8c:68:63:cc:d1:fe:12:33:fe:b0:ce:42:dc:a0: 8d:11:f5:23:b0:32:3f:09:56:eb:3f:e2:36:3c:aa:67:fa:f2: b6:7b:d0:fe:71:5e:2e:50:75:2c:6a:82:2b:46:42:13:12:99: d4:85:2a:eb:4c:89:2c:db:b9:36:95:73:fc:f9:6c:ea:c1:1d: ae:43:d7:36:12:43:44:38:61:30:20:c2:3b:67:bd:51:2a:3c: a2:1a:f8:4d:e2:45:f7:b5:4d:38:a8:ea:9c:1a:94:6d:45:64: ab:fb:c6:27:63:80:cb:ec:5f:f0:bc:10:75:e5:d6:2d:d4:be: 28:8e:3e:01:e4:15:ae:44:cc:46:99:84:41:c0:e6:c4:ec:12: d3:ad:e8:9a:40:ec:7b:8e:dc:6d:5a:9c:62:c4:27:c1:71:6a: a6:a7:23:df:af:f7:2f:ed:b1:e8:94:74:92:0a:ab:e3:e2:50: bb:48:49:e4:4f:e5:2f:dd:5e:9f:b4:30:b0:ce:7a:23:6d:bb: c3:a1:22:63:e2:1f:6e:b6:dc:3a:8c:b8:cf:9d:b1:1e:74:33: eb:fa:4f:e5:aa:86:db:3c:b8:7a:d6:f4:a2:29:d4:57:24:e2: 85:5f:4c:01 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEke1to2p/ab31buYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmM1YmUyYmQtNjFhMi00NjRhLWJlNTQtMzRlODdhNGE5 NTg0MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk ODk0OWZkNDAtNDY1Yy00YjE2LTkxYzgtMWI1NTFjZTBjNzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI9/jN6brYCongTDbf2KprKAKym6lvOTuqMd knXCH0leZ32tlTZMLRaxX2qIbeRGKWmvH1lkP5NbiAy/Zco8dq62NZRS++QElmbc bBZ02AyB/hDMbtk8Ce74tLWEsZdqC2VEV46rMxFqwbcdk/RxBqWocnQRo8QCuuKy hFV0rL1rLI9FLIoP888oMH/azPo8AMj8FGjxvh/QgJe57CXvo2EcJHH4HakTrjHX A4O5LjNxEvFXIR3lFpOz/3T/e5XcnrGuAHrObK05DkAs7GF3AuVF58h1/LVXgUxr U4sudrQ6tzc3wpPlU+0yONxp66kJSQSKFkDqWdSZ1tvjKC45gwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPpJqoLIqRhwrvgyHwG0rQ8pAiUYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YzVi ZTJiZC02MWEyLTQ2NGEtYmU1NC0zNGU4N2E0YTk1ODQvODljYjk3Y2EtN2Q0YS0z NjM3LTljYWUtNmY1NzQ1MDc2YTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmM1YmUyYmQtNjFhMi00NjRhLWJl NTQtMzRlODdhNGE5NTg0LzZjNWJlMmJkLTYxYTItNDY0YS1iZTU0LTM0ZTg3YTRh OTU4NC5jcmwwHwYDVR0jBBgwFoAUjMFC9JwRBfTosHsaf8UqxHeD0HEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YzViZTJiZC02MWEyLTQ2NGEtYmU1NC0zNGU4 N2E0YTk1ODQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCaNu8AwQC p1g0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABPTRGQ5uDB1jaAc60Z8huGWy2MsgcWMaGPM0f4SM/6wzkLc oI0R9SOwMj8JVus/4jY8qmf68rZ70P5xXi5QdSxqgitGQhMSmdSFKutMiSzbuTaV c/z5bOrBHa5D1zYSQ0Q4YTAgwjtnvVEqPKIa+E3iRfe1TTio6pwalG1FZKv7xidj gMvsX/C8EHXl1i3UviiOPgHkFa5EzEaZhEHA5sTsEtOt6JpA7HuO3G1anGLEJ8Fx aqanI9+v9y/tseiUdJIKq+PiULtISeRP5S/dXp+0MLDOeiNtu8OhImPiH2623DqM uM+dsR50M+v6T+Wqhts8uHrW9KIp1Fck4oVfTAE= -----END CERTIFICATE-----Generated at Tue Apr 22 13:09:12 2025 by rpki-client