$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/968332ec-c5e0-337e-84e2-d19764525274.roa File: 968332ec-c5e0-337e-84e2-d19764525274.roa (raw, json) Hash identifier: Zs3ipWgHvKYevElsoasDulyj99H1XaPtCo9opDieM2I= Subject key identifier: 3E:98:D3:B5:69:78:4A:F1:D1:F9:25:DC:A3:91:61:ED:A5:2E:92:B1 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849CE9A660FDE1E1A1A30DC0100 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/968332ec-c5e0-337e-84e2-d19764525274.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 3223 IP address blocks: 104.37.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:66:0f:de:1e:1a:1a:30:dc:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=86c89bd7-f0bc-492f-a267-02fef5b5b537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:82:50:7c:bf:c2:d0:a9:33:49:69:5b:af:92: 5c:b2:8b:e3:8e:d5:5b:f6:a1:a6:0b:99:d6:2a:fb: 37:dc:b5:19:28:fe:39:cb:26:d9:62:e5:5a:18:a3: b9:1b:12:f2:e4:a3:33:f5:cd:dc:a3:3a:8a:a2:b0: e2:5d:d7:cc:5c:d1:39:28:1f:57:cb:6b:a9:9e:8f: 5a:9d:5d:44:eb:6f:be:6b:82:ff:9f:14:bd:b8:ed: c6:89:e5:a8:a1:d4:56:35:5f:2c:47:ee:aa:92:f3: 0d:ae:86:23:b7:bc:66:12:3f:e0:f9:5f:e4:c6:06: ce:00:40:71:21:52:e6:64:17:6b:12:14:72:e1:54: c4:0f:ff:6b:25:cd:d7:a4:12:21:9d:a8:14:16:29: 65:e4:77:4a:b1:58:a3:af:a0:4b:6c:93:ab:4b:7f: b8:52:09:c8:aa:f5:3b:b6:c6:43:d2:8c:71:22:90: d5:da:41:59:65:45:99:49:b2:20:5a:8a:b1:b0:fa: ec:8b:54:26:d3:c8:85:69:10:91:b7:3d:11:13:05: 90:13:2b:22:9d:d5:04:75:99:b4:cc:f2:68:3e:2c: e1:6d:65:e9:23:89:5e:4f:ec:42:dd:fe:ad:40:52: c4:ed:49:f6:e6:27:f0:5e:d1:9a:2c:bb:0d:69:75: 2c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:98:D3:B5:69:78:4A:F1:D1:F9:25:DC:A3:91:61:ED:A5:2E:92:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/968332ec-c5e0-337e-84e2-d19764525274.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.37.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:e5:32:58:14:53:ae:32:be:ea:ee:ad:61:ca:a5:c3:c0:92: 92:2e:8c:dd:a6:c3:21:66:0b:bb:93:30:6b:fd:80:f0:45:40: 2a:bc:7f:ef:a8:02:af:ba:af:e2:a7:29:24:61:c1:b8:0c:66: 27:f2:5a:55:31:b1:84:f5:90:44:1d:c6:a7:a9:45:d5:21:08: f0:51:56:a7:7b:3b:fe:57:93:af:9a:aa:63:cf:e8:7f:a7:d7: a0:a2:e9:f2:67:ac:1f:fd:f9:da:a5:38:61:10:21:84:a2:49: e1:39:af:46:05:57:d2:a6:5c:e5:a7:e5:b4:0d:42:7e:94:fe: 38:e8:01:bf:fe:70:f6:6a:ac:6f:c2:be:ec:6b:23:82:44:92: 9c:6d:ac:b9:d1:f2:56:ca:a4:ee:40:ce:9e:35:c5:e2:c4:2e: 85:eb:90:aa:27:7d:4e:55:03:f6:0c:fb:1b:b0:d8:a1:ba:9e: 8c:05:90:e3:90:d0:5d:df:cd:4e:1d:2e:6b:0e:ad:4f:05:00: fe:4f:ad:05:30:e1:e3:16:06:38:c7:43:88:af:ef:53:1a:58: 1f:7c:e9:b8:86:5c:42:b8:a2:fd:07:a5:85:5c:b1:26:1c:32: 8a:b7:5a:8b:69:68:b6:0b:83:ec:39:f2:cc:ac:3f:57:0e:a3: 42:25:90:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmmYP3h4aGjDcAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ODZjODliZDctZjBiYy00OTJmLWEyNjctMDJmZWY1YjViNTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooJQfL/C0KkzSWlbr5JcsovjjtVb9qGmC5nW Kvs33LUZKP45yybZYuVaGKO5GxLy5KMz9c3cozqKorDiXdfMXNE5KB9Xy2upno9a nV1E62++a4L/nxS9uO3GieWoodRWNV8sR+6qkvMNroYjt7xmEj/g+V/kxgbOAEBx IVLmZBdrEhRy4VTED/9rJc3XpBIhnagUFill5HdKsVijr6BLbJOrS3+4UgnIqvU7 tsZD0oxxIpDV2kFZZUWZSbIgWoqxsPrsi1Qm08iFaRCRtz0REwWQEysindUEdZm0 zPJoPizhbWXpI4leT+xC3f6tQFLE7Un25ifwXtGaLLsNaXUshQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6Y07VpeErx0fkl3KORYe2lLpKxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOTY4MzMyZWMtYzVlMC0z MzdlLTg0ZTItZDE5NzY0NTI1Mjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaCUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETlMlgUU64yvururWHKpcPAkpIujN2mwyFmC7uTMGv9gPBFQCq8f++o Aq+6r+KnKSRhwbgMZifyWlUxsYT1kEQdxqepRdUhCPBRVqd7O/5Xk6+aqmPP6H+n 16Ci6fJnrB/9+dqlOGEQIYSiSeE5r0YFV9KmXOWn5bQNQn6U/jjoAb/+cPZqrG/C vuxrI4JEkpxtrLnR8lbKpO5Azp41xeLELoXrkKonfU5VA/YM+xuw2KG6nowFkOOQ 0F3fzU4dLmsOrU8FAP5PrQUw4eMWBjjHQ4iv71MaWB986biGXEK4ov0HpYVcsSYc Moq3WotpaLYLg+w58sysP1cOo0IlkPM= -----END CERTIFICATE-----Generated at Mon May 12 12:03:37 2025 by rpki-client