$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1ce32b8c-2876-3830-95f9-04a466d6cb1d.roa File: 1ce32b8c-2876-3830-95f9-04a466d6cb1d.roa (raw, json) Hash identifier: q2FafLubkghuB3JLFbEGdGrN5LRFJKmsbfsOScF1AyQ= Subject key identifier: BD:65:B9:E9:CE:E8:D9:2C:65:45:F3:F2:CB:F2:F4:57:D5:EB:69:9E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849AC470041A71FD9DE4B645E20 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1ce32b8c-2876-3830-95f9-04a466d6cb1d.roa Signing time: Mon 28 Apr 2025 05:55:55 +0000 ROA not before: Mon 28 Apr 2025 05:55:55 +0000 ROA not after: Sun 27 Jul 2025 05:55:55 +0000 asID: 55154 IP address blocks: 104.250.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ac:47:00:41:a7:1f:d9:de:4b:64:5e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 28 05:55:55 2025 GMT Not After : Jul 27 05:55:55 2025 GMT Subject: CN=f5c59380-27ec-4974-9bf9-36395693405d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f9:3e:78:e3:32:93:07:e2:45:b8:9b:33:c7: c9:bc:34:eb:61:9a:4f:3b:32:4f:1c:b3:89:b7:78: 8c:34:2d:57:44:21:e3:cc:a8:07:f1:a4:cc:3c:1f: 43:7b:1a:e7:e3:4c:8d:d4:d1:40:92:7a:b6:3f:ef: 98:15:7e:85:42:98:a6:19:8b:c5:99:ef:3f:4c:fe: 7e:40:2f:ff:91:01:08:49:ec:ec:8f:d7:7f:2c:6c: 71:eb:76:60:72:15:e2:66:53:dd:3c:ed:93:7c:07: 37:cc:5f:fc:c9:52:71:1a:28:4a:be:ad:fe:40:d2: 43:25:5f:f3:10:af:cb:da:64:c5:02:c0:3e:28:ab: 30:36:7b:e0:46:74:49:6a:08:73:ec:7c:8e:96:ac: 02:16:2a:7f:34:d6:5a:df:78:82:94:19:31:37:9b: a0:b9:ba:6b:ba:50:74:bd:24:a5:60:e2:6f:96:21: fd:b4:23:3f:37:4d:e8:aa:4a:85:af:6d:a0:94:8e: 24:6e:92:d0:4c:89:51:52:dd:39:03:63:29:cc:e5: 5c:d6:0f:74:be:06:5d:33:bf:4a:f2:6e:d3:17:9f: a8:0c:da:d1:29:ba:be:40:28:2e:22:1b:fd:d4:1b: 7b:6d:33:0a:00:29:8f:a1:a1:b0:a5:0f:54:6f:f6: 86:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:65:B9:E9:CE:E8:D9:2C:65:45:F3:F2:CB:F2:F4:57:D5:EB:69:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1ce32b8c-2876-3830-95f9-04a466d6cb1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:5a:0d:75:e0:9d:39:57:1a:5f:81:2a:2c:12:65:07:8e:9f: 11:9e:3e:8e:ed:d9:cc:e8:ae:40:23:50:ff:de:74:c1:70:37: 9e:42:b4:18:00:6a:55:5b:76:6c:02:76:e9:a5:60:d9:98:1d: 69:03:70:90:11:32:7b:cd:2a:5f:74:05:c1:b4:40:5d:25:af: d3:dc:fd:69:24:d3:0a:a0:38:19:97:36:4e:ca:93:51:11:c4: 24:9a:c7:1d:4e:29:cb:e7:15:1f:19:e7:c1:31:d5:7e:02:93: 63:df:e5:94:f0:87:ee:6a:53:d2:49:69:d9:a1:c6:bc:43:81: fe:0c:95:a7:53:ff:0e:6f:b1:ef:16:7b:6f:02:8b:49:b0:ad: df:b0:9e:27:12:93:14:f8:1f:f5:d0:2a:ac:9e:b0:b8:8d:f0: a0:ef:d0:20:d9:08:82:da:a7:01:fb:fa:e4:05:21:b6:9f:98: 23:3a:9f:8b:13:f0:9d:1b:6b:79:aa:be:a8:45:a1:ad:96:7f: 87:ef:20:77:6a:5f:9b:2a:78:24:38:97:8a:5e:9a:26:d2:68: 0a:a2:eb:5a:58:9e:d7:a0:53:b9:24:8c:8a:31:f0:97:ce:47: 6e:54:3e:4a:93:d8:1d:ca:ac:57:ab:58:ab:5a:e2:21:a1:b2: e9:d8:39:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmsRwBBpx/Z3ktkXiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQyODA1NTU1NVoXDTI1MDcyNzA1NTU1NVowLzEtMCsGA1UEAxMk ZjVjNTkzODAtMjdlYy00OTc0LTliZjktMzYzOTU2OTM0MDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/k+eOMykwfiRbibM8fJvDTrYZpPOzJPHLOJ t3iMNC1XRCHjzKgH8aTMPB9Dexrn40yN1NFAknq2P++YFX6FQpimGYvFme8/TP5+ QC//kQEISezsj9d/LGxx63ZgchXiZlPdPO2TfAc3zF/8yVJxGihKvq3+QNJDJV/z EK/L2mTFAsA+KKswNnvgRnRJaghz7HyOlqwCFip/NNZa33iClBkxN5ugubprulB0 vSSlYOJvliH9tCM/N03oqkqFr22glI4kbpLQTIlRUt05A2MpzOVc1g90vgZdM79K 8m7TF5+oDNrRKbq+QCguIhv91Bt7bTMKACmPoaGwpQ9Ub/aGuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1luenO6NksZUXz8svy9FfV62meMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMWNlMzJiOGMtMjg3Ni0z ODMwLTk1ZjktMDRhNDY2ZDZjYjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1aDXXgnTlXGl+BKiwSZQeOnxGePo7t2czorkAjUP/edMFwN55CtBgA alVbdmwCdumlYNmYHWkDcJARMnvNKl90BcG0QF0lr9Pc/Wkk0wqgOBmXNk7Kk1ER xCSaxx1OKcvnFR8Z58Ex1X4Ck2Pf5ZTwh+5qU9JJadmhxrxDgf4MladT/w5vse8W e28Ci0mwrd+wnicSkxT4H/XQKqyesLiN8KDv0CDZCILapwH7+uQFIbafmCM6n4sT 8J0ba3mqvqhFoa2Wf4fvIHdqX5sqeCQ4l4pemibSaAqi61pYntegU7kkjIox8JfO R25UPkqT2B3KrFerWKta4iGhsunYOUk= -----END CERTIFICATE-----Generated at Thu May 8 09:56:37 2025 by rpki-client