$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08032e54-8bac-3dc7-a02a-242753a12434.roa File: 08032e54-8bac-3dc7-a02a-242753a12434.roa (raw, json) Hash identifier: B4zgekmLdRa9+l9N3sE2zPZD2mYUZ9hEAOpV5bo0gCE= Subject key identifier: F1:57:EE:A5:F2:51:18:A6:20:16:46:11:6A:68:8B:77:CE:D2:CA:D9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858493243E8F7609BC11CF460912F Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08032e54-8bac-3dc7-a02a-242753a12434.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 20940 IP address blocks: 104.71.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:e8:f7:60:9b:c1:1c:f4:60:91:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=7abcd8d9-f9e9-45fe-80c2-ecf99b24a57f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f7:2a:76:98:14:af:27:7e:b8:bf:31:9e:8c: 6e:31:4f:57:e4:6f:cb:42:f4:16:11:66:a3:c3:67: de:85:2a:84:26:9b:29:a9:80:40:ac:21:ab:ca:e2: 1d:c1:23:5c:10:6a:f8:91:07:51:f7:50:e5:0f:32: 93:8f:d2:9d:23:d2:77:48:d2:78:0f:c2:44:89:1b: 3c:e3:a5:f9:67:f1:c6:ab:d1:27:87:f0:38:39:f8: b5:0a:c7:73:39:7b:1c:09:1a:fc:5f:a2:8c:f0:10: dc:ac:33:d5:d7:cd:a7:8a:25:60:a4:4e:d4:7c:21: 01:bd:45:fa:c7:0b:d7:31:9e:8e:3f:34:bc:24:89: 68:6c:fe:58:20:ca:35:20:1c:6a:c3:0d:d9:88:58: 29:e1:53:a4:0c:df:e4:36:78:0f:fb:e7:5f:55:9c: d5:db:70:81:93:d5:e6:ce:9a:72:0a:e3:c3:ba:f7: 6a:53:36:e3:de:d4:a0:aa:ec:50:6a:be:3e:7a:5f: fa:9d:39:b9:ea:76:19:fc:25:e5:d4:83:2c:63:d1: 0c:e6:88:9b:0c:b4:19:b0:94:2e:36:a2:d2:19:5b: a4:a9:99:ef:e1:0d:a7:1d:4e:59:b5:42:d8:b5:1b: 2b:79:c9:2f:59:ba:72:51:29:c6:f0:5f:28:1e:bd: 9e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:57:EE:A5:F2:51:18:A6:20:16:46:11:6A:68:8B:77:CE:D2:CA:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08032e54-8bac-3dc7-a02a-242753a12434.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.71.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:0c:10:75:76:2d:b0:f7:3f:24:a5:88:6e:72:28:7e:47:a4: 6b:9e:22:47:aa:f9:18:e0:b4:e9:bf:eb:a6:7f:7c:1d:10:2c: b4:b8:6b:f1:d3:9e:78:a8:1d:28:4e:c1:45:58:37:70:0b:69: b8:82:de:62:75:80:a3:14:6a:cc:ff:0c:92:ef:d4:85:96:35: ba:50:c6:c5:59:ce:d7:65:3f:ac:ab:cf:52:9d:49:4b:42:f6: e7:13:ba:26:bf:db:c0:06:57:32:4e:90:c8:71:cd:06:01:d7: 31:cb:dc:ef:fd:8a:49:c8:74:71:03:ac:ae:67:ac:28:ef:0e: ed:c5:a0:01:23:4f:97:94:bb:5a:f0:2e:56:d8:85:17:77:a4: 0f:f5:2a:ac:61:be:82:fa:15:14:da:59:8c:63:20:c1:c7:16: a2:93:a2:43:40:fd:40:5a:53:cd:22:60:06:d5:91:32:43:06: ba:8a:47:ad:ab:cd:f2:c4:d0:d5:1a:46:c8:96:f5:f5:53:26: 31:91:5e:f7:e4:f6:b7:b4:60:86:f5:5d:f1:0f:4d:35:8f:80: 68:c9:65:c1:a1:23:51:79:7e:64:f2:d8:2b:cc:6d:5c:61:36: 84:12:b3:1d:66:56:2a:2f:6e:c9:fa:48:9d:d9:b2:7b:bc:dc: 54:db:d5:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ+j3YJvBHPRgkS8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk N2FiY2Q4ZDktZjllOS00NWZlLTgwYzItZWNmOTliMjRhNTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvcqdpgUryd+uL8xnoxuMU9X5G/LQvQWEWaj w2fehSqEJpspqYBArCGryuIdwSNcEGr4kQdR91DlDzKTj9KdI9J3SNJ4D8JEiRs8 46X5Z/HGq9Enh/A4Ofi1CsdzOXscCRr8X6KM8BDcrDPV182niiVgpE7UfCEBvUX6 xwvXMZ6OPzS8JIlobP5YIMo1IBxqww3ZiFgp4VOkDN/kNngP++dfVZzV23CBk9Xm zppyCuPDuvdqUzbj3tSgquxQar4+el/6nTm56nYZ/CXl1IMsY9EM5oibDLQZsJQu NqLSGVukqZnv4Q2nHU5ZtULYtRsreckvWbpyUSnG8F8oHr2e9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFX7qXyURimIBZGEWpoi3fO0srZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDgwMzJlNTQtOGJhYy0z ZGM3LWEwMmEtMjQyNzUzYTEyNDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaEeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoMEHV2LbD3PySliG5yKH5HpGueIkeq+RjgtOm/66Z/fB0QLLS4a/HT nnioHShOwUVYN3ALabiC3mJ1gKMUasz/DJLv1IWWNbpQxsVZztdlP6yrz1KdSUtC 9ucTuia/28AGVzJOkMhxzQYB1zHL3O/9iknIdHEDrK5nrCjvDu3FoAEjT5eUu1rw LlbYhRd3pA/1KqxhvoL6FRTaWYxjIMHHFqKTokNA/UBaU80iYAbVkTJDBrqKR62r zfLE0NUaRsiW9fVTJjGRXvfk9re0YIb1XfEPTTWPgGjJZcGhI1F5fmTy2CvMbVxh NoQSsx1mViovbsn6SJ3Zsnu83FTb1T0= -----END CERTIFICATE-----Generated at Sat Apr 26 19:09:10 2025 by rpki-client