$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dc307f77-9b1a-329f-8b2b-521316b747ea.roa File: dc307f77-9b1a-329f-8b2b-521316b747ea.roa (raw, json) Hash identifier: gRkVHmJf8gZCwnhr7UzTMaM9RsCpwvWhztAIDHssqWs= Subject key identifier: 15:B7:FB:5C:D4:7A:CA:5A:10:7E:BA:D2:5F:BA:23:E6:14:1C:BA:ED Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849C900D157003E8D7D22DCABA0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dc307f77-9b1a-329f-8b2b-521316b747ea.roa Signing time: Thu 08 May 2025 12:52:57 +0000 ROA not before: Thu 08 May 2025 12:52:57 +0000 ROA not after: Wed 06 Aug 2025 12:52:57 +0000 asID: 55154 IP address blocks: 104.37.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:00:d1:57:00:3e:8d:7d:22:dc:ab:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 8 12:52:57 2025 GMT Not After : Aug 6 12:52:57 2025 GMT Subject: CN=8fb943f6-cd25-4b1f-8365-0b3a97085e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:35:3c:f2:42:c1:17:2e:ed:b6:b1:ca:21:ec: fe:22:7b:92:ff:e5:b1:c5:32:d8:86:aa:04:27:70: 7b:d6:e7:58:cc:78:b1:4c:af:9a:eb:2f:c6:a2:dd: 80:f5:b5:c1:d9:9f:16:eb:7e:7a:bc:21:68:f3:26: 93:99:b1:73:84:4f:eb:27:53:cc:f1:2f:61:24:1c: 42:f2:64:78:1a:2c:d1:9d:6a:e8:b3:12:10:68:0a: 6c:ef:83:b3:8f:59:45:39:65:0b:f8:55:9e:ec:8e: 2e:65:d6:cc:16:e3:c0:96:9c:d5:b7:9c:a2:56:3e: f1:42:c1:de:a3:b2:f5:c5:df:9f:c7:b2:21:0d:19: a1:8a:a0:51:97:d4:fc:f1:e3:22:db:2f:38:f5:37: a0:18:47:9c:5b:91:64:3d:66:fa:44:94:7c:72:cf: ba:ce:bd:f9:26:f1:51:f0:cd:f7:18:76:bf:3c:b3: f9:4c:72:c3:08:93:66:67:a9:e5:2d:3e:cf:9d:3a: 0a:f2:45:32:e4:bd:b1:37:dc:d0:4d:41:b6:0b:f3: 0e:9b:46:74:84:8a:03:e9:e7:8f:de:01:b9:7e:d6: 63:15:ce:6c:18:e1:99:60:42:42:98:22:79:bb:cb: d2:f4:37:29:02:49:0b:3d:7b:d3:2f:e4:8c:75:c8: f7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B7:FB:5C:D4:7A:CA:5A:10:7E:BA:D2:5F:BA:23:E6:14:1C:BA:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dc307f77-9b1a-329f-8b2b-521316b747ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.37.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:b6:de:28:1d:53:b4:2c:56:24:e7:16:1d:2e:54:7c:61:f2: 36:1c:73:ab:c8:ee:58:df:3c:94:18:d6:b7:cd:1d:79:d5:b8: 9f:a4:3b:91:4d:6e:d2:03:d9:de:ba:9e:bb:e5:3d:66:ce:40: 6b:8c:b6:04:f1:a6:81:53:42:29:f8:c6:50:5b:ff:fc:b5:28: 7d:c8:e9:03:06:de:db:d6:57:68:34:5e:25:b9:51:68:b4:e3: dc:61:25:c6:e9:8d:f1:1d:7d:58:7d:b0:8d:55:ce:f7:51:24: 25:ef:b2:4b:4c:8b:78:b5:d3:cd:26:3a:35:61:6e:0f:fd:c3: 04:bc:e4:dd:54:b5:f8:e6:7d:aa:fa:19:9b:c3:f1:89:74:a9: e7:b9:68:22:9c:a6:da:10:65:2e:48:72:de:6a:43:97:09:90: 97:f4:1b:86:ab:66:2a:95:03:72:0d:79:4a:5d:2d:b4:17:7c: 7f:8f:9c:d1:fd:5e:80:ae:32:15:50:d0:0c:55:2d:0e:7b:9f: ae:a6:20:c4:ed:91:9f:91:20:d0:d4:26:2f:89:4e:58:d4:d4: 4a:ea:1b:51:42:2e:de:2c:22:b2:fd:0b:c5:1a:b6:3b:86:dd: 91:9c:aa:ff:d1:bf:1b:46:fe:c4:c4:29:06:9b:87:6d:8d:2d: fb:10:4d:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJANFXAD6NfSLcq6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUwODEyNTI1N1oXDTI1MDgwNjEyNTI1N1owLzEtMCsGA1UEAxMk OGZiOTQzZjYtY2QyNS00YjFmLTgzNjUtMGIzYTk3MDg1ZTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDU88kLBFy7ttrHKIez+InuS/+WxxTLYhqoE J3B71udYzHixTK+a6y/Got2A9bXB2Z8W6356vCFo8yaTmbFzhE/rJ1PM8S9hJBxC 8mR4GizRnWrosxIQaAps74Ozj1lFOWUL+FWe7I4uZdbMFuPAlpzVt5yiVj7xQsHe o7L1xd+fx7IhDRmhiqBRl9T88eMi2y849TegGEecW5FkPWb6RJR8cs+6zr35JvFR 8M33GHa/PLP5THLDCJNmZ6nlLT7PnToK8kUy5L2xN9zQTUG2C/MOm0Z0hIoD6eeP 3gG5ftZjFc5sGOGZYEJCmCJ5u8vS9DcpAkkLPXvTL+SMdcj3kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBW3+1zUespaEH660l+6I+YUHLrtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZGMzMDdmNzctOWIxYS0z MjlmLThiMmItNTIxMzE2Yjc0N2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaCUBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFK23igdU7QsViTnFh0uVHxh8jYcc6vI7ljfPJQY1rfNHXnVuJ+kO5FN btID2d66nrvlPWbOQGuMtgTxpoFTQin4xlBb//y1KH3I6QMG3tvWV2g0XiW5UWi0 49xhJcbpjfEdfVh9sI1VzvdRJCXvsktMi3i1080mOjVhbg/9wwS85N1Utfjmfar6 GZvD8Yl0qee5aCKcptoQZS5Ict5qQ5cJkJf0G4arZiqVA3INeUpdLbQXfH+PnNH9 XoCuMhVQ0AxVLQ57n66mIMTtkZ+RINDUJi+JTljU1ErqG1FCLt4sIrL9C8UatjuG 3ZGcqv/RvxtG/sTEKQabh22NLfsQTQU= -----END CERTIFICATE-----Generated at Sat May 10 06:59:30 2025 by rpki-client