$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/cb0085db-84a3-3eed-9a41-b2fb4a2b89f5.roa File: cb0085db-84a3-3eed-9a41-b2fb4a2b89f5.roa (raw, json) Hash identifier: IjkakFAFCwqF4en6rukE6r0NFaQr+8tgwPUBySUvXjE= Subject key identifier: 58:64:90:7E:F3:5C:27:3D:A5:0D:C0:5B:81:31:F5:F8:79:6A:99:EE Certificate issuer: /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Certificate serial: 010D0C9F43285848B8F0CE6D55D229C815A25E80 Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/cb0085db-84a3-3eed-9a41-b2fb4a2b89f5.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 26512 IP address blocks: 104.244.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:ce:6d:55:d2:29:c8:15:a2:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=3dbd2e92-3436-417b-8705-ca78eeb5d1bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fb:45:ee:17:e0:23:6c:90:db:30:86:b5:f6: ee:d4:3a:a5:92:f6:80:a6:80:b7:1e:e8:ee:a9:55: 59:98:d0:29:0c:30:30:13:f8:8e:00:47:e6:a1:ae: 58:71:c9:cf:f4:c2:58:26:3e:d8:f4:84:e7:dc:2a: ba:82:b2:82:3f:89:16:e3:4c:4d:83:56:48:93:15: cb:2c:67:75:ed:07:db:65:c4:43:dc:bb:08:b9:97: 52:e3:30:61:22:e9:f6:f7:99:f0:e8:de:6f:9c:73: 0a:27:e9:23:8f:60:92:07:e3:95:73:53:96:ae:f8: 36:a2:00:0c:16:31:da:bd:39:2d:93:c1:e3:96:c1: 66:69:3a:35:5f:9a:a2:09:24:1e:6a:19:0a:c0:b0: 5c:ac:85:05:bd:b5:3c:f0:db:0d:e8:21:b4:e1:95: 35:bf:e3:34:30:33:9f:77:8c:e6:e2:74:5c:08:80: 41:96:6d:25:d2:8a:63:03:9b:8b:6c:bd:0a:75:c7: 87:81:af:f6:9c:af:17:96:80:81:42:03:50:9d:15: e0:5d:53:13:60:25:40:7e:68:53:37:04:55:89:ae: 65:01:3c:a6:b8:57:22:5b:90:02:d5:e4:fc:b3:ff: 9a:6a:b7:70:5b:28:c3:c9:ea:ac:78:6b:be:6a:ea: f8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:64:90:7E:F3:5C:27:3D:A5:0D:C0:5B:81:31:F5:F8:79:6A:99:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/cb0085db-84a3-3eed-9a41-b2fb4a2b89f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl X509v3 Authority Key Identifier: keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.244.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:b6:30:42:a3:74:9d:f3:c7:62:ea:48:1c:47:a6:02:93:78: 3a:19:16:17:86:79:e7:21:89:03:cb:fb:97:e0:f1:8e:8f:0d: 42:e5:0a:f1:d8:48:e5:4b:b0:84:84:73:b8:d8:e0:79:87:53: cf:58:d0:62:ad:0e:2f:56:e5:b6:c3:59:16:5e:96:af:33:98: c2:30:14:88:f5:3f:35:87:e2:42:62:18:60:15:74:9a:2f:bb: cc:f0:72:d7:4b:4c:f5:39:77:5b:b5:06:75:eb:92:8b:32:a7: a4:1e:a4:1f:52:b1:38:92:b0:81:45:33:d3:47:dd:59:1f:2a: d7:e2:86:33:cb:7e:89:a0:84:ca:a8:1b:dc:44:d0:d6:9b:25: 88:9e:05:55:d4:bf:82:4e:1b:67:08:af:a4:89:02:c7:f8:d0: bc:d7:9d:ab:03:44:6a:1f:f3:66:01:e8:17:7a:b1:cc:11:f1: a0:e3:cb:45:07:c3:4a:16:5f:40:ed:40:1b:6c:b3:d9:1a:aa: f0:c4:0c:16:bd:b2:07:7b:99:cd:f0:3e:8f:e7:c3:6f:8c:07: 70:44:8c:62:11:e1:48:1a:01:f9:0b:19:ba:f6:83:60:9d:19: 0f:b2:e4:79:ec:e1:6b:3a:8a:57:ed:e2:c5:06:2f:87:fa:0b: 51:93:4f:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48M5tVdIpyBWiXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVmMmM4MDQtYjNiOS00YjU2LWE3MTktZGQ3MjI2MmE3 YTZkMB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk M2RiZDJlOTItMzQzNi00MTdiLTg3MDUtY2E3OGVlYjVkMWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvtF7hfgI2yQ2zCGtfbu1DqlkvaApoC3Huju qVVZmNApDDAwE/iOAEfmoa5YccnP9MJYJj7Y9ITn3Cq6grKCP4kW40xNg1ZIkxXL LGd17QfbZcRD3LsIuZdS4zBhIun295nw6N5vnHMKJ+kjj2CSB+OVc1OWrvg2ogAM FjHavTktk8HjlsFmaTo1X5qiCSQeahkKwLBcrIUFvbU88NsN6CG04ZU1v+M0MDOf d4zm4nRcCIBBlm0l0opjA5uLbL0KdceHga/2nK8XloCBQgNQnRXgXVMTYCVAfmhT NwRVia5lATymuFciW5AC1eT8s/+aardwWyjDyeqseGu+aur4XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhkkH7zXCc9pQ3AW4Ex9fh5apnuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNWYy YzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcyMjYyYTdhNmQvY2IwMDg1ZGItODRhMy0z ZWVkLTlhNDEtYjJmYjRhMmI4OWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjVmMmM4MDQtYjNiOS00YjU2LWE3 MTktZGQ3MjI2MmE3YTZkL2Y1ZjJjODA0LWIzYjktNGI1Ni1hNzE5LWRkNzIyNjJh N2E2ZC5jcmwwHwYDVR0jBBgwFoAUxGAfl7n2ifTPOb15P9g9I3XsQiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNWYyYzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcy MjYyYTdhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPQTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJa2MEKjdJ3zx2LqSBxHpgKTeDoZFheGeechiQPL+5fg8Y6PDULlCvHY SOVLsISEc7jY4HmHU89Y0GKtDi9W5bbDWRZelq8zmMIwFIj1PzWH4kJiGGAVdJov u8zwctdLTPU5d1u1BnXrkosyp6QepB9SsTiSsIFFM9NH3VkfKtfihjPLfomghMqo G9xE0NabJYieBVXUv4JOG2cIr6SJAsf40LzXnasDRGof82YB6Bd6scwR8aDjy0UH w0oWX0DtQBtss9kaqvDEDBa9sgd7mc3wPo/nw2+MB3BEjGIR4UgaAfkLGbr2g2Cd GQ+y5Hns4Ws6ilft4sUGL4f6C1GTT8c= -----END CERTIFICATE-----Generated at Fri Apr 11 23:38:35 2025 by rpki-client