$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/59d3491f-83b0-3bba-b102-7ed1d537a0af.roa File: 59d3491f-83b0-3bba-b102-7ed1d537a0af.roa (raw, json) Hash identifier: SoMaTcpbBQz+GFmXAwCyI+0XIuQh6DLX68mbjKp9gbQ= Subject key identifier: 3A:B7:57:68:B9:9C:BD:53:41:75:6A:90:E2:09:E0:74:2F:73:B6:6F Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849A1AF10123C8BF2664FD2C600 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/59d3491f-83b0-3bba-b102-7ed1d537a0af.roa Signing time: Thu 24 Apr 2025 10:51:42 +0000 ROA not before: Thu 24 Apr 2025 10:51:42 +0000 ROA not after: Wed 23 Jul 2025 10:51:42 +0000 asID: 43260 IP address blocks: 104.250.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:af:10:12:3c:8b:f2:66:4f:d2:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 24 10:51:42 2025 GMT Not After : Jul 23 10:51:42 2025 GMT Subject: CN=18240c25-61dd-487e-bebe-4e5c7fbdda93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e9:c8:58:53:39:2d:a3:d5:a4:06:7d:ac:3d: 85:3a:f3:73:f0:3b:c5:d2:14:fc:69:1b:eb:4a:04: 74:a8:5c:4c:60:65:93:b2:59:e2:21:bb:f6:f5:f4: fd:d3:0e:cb:5d:a4:a8:41:1e:99:91:eb:7e:cd:73: 8e:0e:3d:6c:02:02:d9:f4:63:94:d0:7c:44:ea:cb: f9:18:79:66:45:05:76:d5:fa:39:ed:07:53:cf:97: 3f:d3:9e:14:3a:39:3c:96:f2:d6:45:59:35:f7:34: 7d:2e:7f:38:01:e1:1e:61:ea:7c:2d:21:e4:c8:48: 13:3a:c8:dd:26:d9:41:8b:2c:64:03:2e:7d:51:1d: 07:23:a4:ea:5a:15:2d:e8:72:5f:25:cb:96:28:17: 5f:b9:3a:e2:d9:41:75:e3:60:8b:bc:13:af:ea:97: e8:83:12:b9:76:55:ee:dd:ab:22:31:5c:1d:dd:1d: 03:5f:2a:34:8c:cf:00:4c:ce:ed:e6:ad:f8:0c:f7: 81:c3:e0:86:53:78:16:e2:99:27:f2:81:93:dd:8a: 6f:99:ab:03:b1:6d:33:ca:13:f6:b5:7e:35:ce:90: ff:af:5f:82:52:64:48:35:79:08:7d:dc:4e:f6:93: 4d:4c:da:d5:c8:39:f9:ab:e6:9b:fa:4d:0e:96:7d: 4c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B7:57:68:B9:9C:BD:53:41:75:6A:90:E2:09:E0:74:2F:73:B6:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/59d3491f-83b0-3bba-b102-7ed1d537a0af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:27:c0:ed:5d:e4:7d:25:af:6f:ee:a2:69:71:96:dc:83:fb: a0:08:fc:81:33:97:33:de:f5:b5:c7:05:af:ca:47:88:1a:66: 7d:ff:ea:c7:2b:0f:c5:1e:95:9e:26:4d:b6:95:87:80:4a:c0: 1d:84:08:b2:bc:84:7d:eb:e3:4d:07:78:77:5b:88:9f:96:e1: 6b:9d:28:a5:82:87:3f:3d:19:fe:a7:f0:76:2f:23:3b:10:da: d2:ea:1e:c3:0a:51:75:6b:37:5a:b4:a5:72:ab:c0:95:38:d1: a9:01:d0:d9:75:80:dc:ea:41:18:c2:a8:9e:0c:18:d4:82:a6: 66:27:06:07:02:24:44:2b:fa:7e:a8:8a:6f:6b:65:49:e4:cb: 80:3f:3d:ff:af:7f:3c:2a:6d:b9:7f:ef:0d:b0:4d:7a:f6:64: b8:c9:43:26:4b:2e:39:77:6b:99:f4:c1:55:51:6b:60:ea:ba: e7:a9:98:73:c1:cc:68:f1:7c:2c:7f:a0:06:05:8b:be:f3:f9: 40:06:7c:6b:57:cd:f3:96:00:f7:b0:04:eb:54:2b:45:c7:d7: 48:40:b6:6d:b0:04:eb:08:15:bd:fc:2a:f6:10:f1:f9:09:c6: 96:38:6e:c6:ad:88:7f:3b:9a:34:5f:59:fc:eb:11:5d:5b:ed: 0a:fd:7e:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhrxASPIvyZk/SxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQyNDEwNTE0MloXDTI1MDcyMzEwNTE0MlowLzEtMCsGA1UEAxMk MTgyNDBjMjUtNjFkZC00ODdlLWJlYmUtNGU1YzdmYmRkYTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhunIWFM5LaPVpAZ9rD2FOvNz8DvF0hT8aRvr SgR0qFxMYGWTslniIbv29fT90w7LXaSoQR6Zket+zXOODj1sAgLZ9GOU0HxE6sv5 GHlmRQV21fo57QdTz5c/054UOjk8lvLWRVk19zR9Ln84AeEeYep8LSHkyEgTOsjd JtlBiyxkAy59UR0HI6TqWhUt6HJfJcuWKBdfuTri2UF142CLvBOv6pfogxK5dlXu 3asiMVwd3R0DXyo0jM8ATM7t5q34DPeBw+CGU3gW4pkn8oGT3YpvmasDsW0zyhP2 tX41zpD/r1+CUmRINXkIfdxO9pNNTNrVyDn5q+ab+k0Oln1M8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDq3V2i5nL1TQXVqkOIJ4HQvc7ZvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNTlkMzQ5MWYtODNiMC0z YmJhLWIxMDItN2VkMWQ1MzdhMGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEnwO1d5H0lr2/uomlxltyD+6AI/IEzlzPe9bXHBa/KR4gaZn3/6scr D8UelZ4mTbaVh4BKwB2ECLK8hH3r400HeHdbiJ+W4WudKKWChz89Gf6n8HYvIzsQ 2tLqHsMKUXVrN1q0pXKrwJU40akB0Nl1gNzqQRjCqJ4MGNSCpmYnBgcCJEQr+n6o im9rZUnky4A/Pf+vfzwqbbl/7w2wTXr2ZLjJQyZLLjl3a5n0wVVRa2DquuepmHPB zGjxfCx/oAYFi77z+UAGfGtXzfOWAPewBOtUK0XH10hAtm2wBOsIFb38KvYQ8fkJ xpY4bsatiH87mjRfWfzrEV1b7Qr9fpA= -----END CERTIFICATE-----Generated at Sat May 10 03:49:42 2025 by rpki-client