$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/19c2b9f2-a24e-3f63-a00a-b6d5ffc00d1a.roa File: 19c2b9f2-a24e-3f63-a00a-b6d5ffc00d1a.roa (raw, json) Hash identifier: Wd5ea2azlnk8s3ydqf5OB1sGQkIIwp2A7vFIY90qblM= Subject key identifier: 9C:02:23:32:CC:70:E1:50:CF:36:AC:D7:43:39:31:63:C1:B6:3F:52 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849350EBF6B4E97D67997993480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/19c2b9f2-a24e-3f63-a00a-b6d5ffc00d1a.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 20940 IP address blocks: 104.85.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:bf:6b:4e:97:d6:79:97:99:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=fe1d41b1-9ba0-40ee-b4a8-88f53bc9223b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:35:e5:a3:10:4c:7c:4a:e9:e8:1a:71:95:27: 58:50:75:84:f4:9c:54:c4:00:3f:09:92:76:f7:c8: 18:74:69:66:7b:48:b1:54:79:c5:51:c8:3c:7e:05: 2c:c7:5a:ac:47:1d:5d:19:50:68:93:9c:8d:55:a2: ec:40:f4:49:14:e4:be:62:b8:90:00:45:43:e2:31: 50:9a:3e:a5:c7:fc:bd:e0:3f:2f:a7:68:04:ea:45: a4:0c:23:56:d9:09:30:50:33:44:09:5b:10:53:30: c3:03:a2:9f:73:e2:9c:d8:a7:d0:82:a9:a8:2d:cc: 73:fc:8d:1c:cf:1c:a2:fc:4b:cc:16:5f:df:2d:bf: 41:12:69:89:56:4b:7b:56:06:bf:e8:a0:2b:0c:e0: 98:15:0d:0c:ce:8d:1c:aa:4f:00:ad:14:de:e6:2e: 30:63:66:0f:5a:10:d2:f8:1f:81:da:5d:70:81:ba: ea:e9:85:3e:10:b2:01:d7:f1:7f:f2:e2:a3:f7:36: 98:e1:ad:4a:ec:6a:5e:d2:96:93:bc:5b:55:0c:61: 03:27:95:1e:cc:7b:5b:69:a4:4c:3f:e6:f7:38:78: c1:21:60:09:fa:ac:d0:46:2f:70:3b:d1:58:c4:7c: fb:a7:27:a5:cf:78:7d:25:67:fd:d1:b0:79:03:c9: 2b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:02:23:32:CC:70:E1:50:CF:36:AC:D7:43:39:31:63:C1:B6:3F:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/19c2b9f2-a24e-3f63-a00a-b6d5ffc00d1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.85.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:2d:c4:ff:23:39:c6:11:ed:b1:c0:01:c0:a3:57:83:42:e6: b8:68:31:c8:b8:a7:2b:65:1e:16:01:f6:6f:9a:5e:6e:17:27: f1:9f:88:c4:61:02:33:4b:bd:d3:aa:75:3c:8f:b8:87:65:57: 9d:9a:0e:fb:eb:46:ec:b1:16:de:c4:13:5c:3a:44:61:0c:11: 94:0d:ec:74:23:7e:c1:8f:74:3c:df:9a:6f:15:85:d0:da:fb: b9:90:f5:e1:66:88:c2:68:48:a8:cc:f0:66:84:56:b8:3e:78: b7:02:97:d9:1f:8a:48:1d:d9:6c:c1:83:13:72:44:e4:72:68: ae:ec:f8:18:e1:9f:8c:88:50:7c:7e:07:6d:84:c1:e0:f3:d6: 85:11:ae:d8:3b:b2:39:ef:1d:5f:25:95:89:30:c7:17:00:2c: 80:9c:f2:2f:8a:9d:98:ae:b4:25:59:7f:f7:b2:58:00:2b:d5: cc:d2:21:48:92:9f:08:58:98:55:0b:32:b0:a9:1d:85:08:9e: 27:e5:ed:94:47:45:66:c4:b8:60:6e:3b:7e:b0:5a:b6:b8:e4: 77:ef:98:92:38:22:2d:9e:0d:21:bb:e1:58:89:ee:02:84:85: 91:d1:8d:0e:13:bc:5c:ed:15:0b:3e:5d:20:af:6f:75:32:91: b9:25:cf:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1Dr9rTpfWeZeZNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk ZmUxZDQxYjEtOWJhMC00MGVlLWI0YTgtODhmNTNiYzkyMjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TXloxBMfErp6BpxlSdYUHWE9JxUxAA/CZJ2 98gYdGlme0ixVHnFUcg8fgUsx1qsRx1dGVBok5yNVaLsQPRJFOS+YriQAEVD4jFQ mj6lx/y94D8vp2gE6kWkDCNW2QkwUDNECVsQUzDDA6Kfc+Kc2KfQgqmoLcxz/I0c zxyi/EvMFl/fLb9BEmmJVkt7Vga/6KArDOCYFQ0Mzo0cqk8ArRTe5i4wY2YPWhDS +B+B2l1wgbrq6YU+ELIB1/F/8uKj9zaY4a1K7Gpe0paTvFtVDGEDJ5UezHtbaaRM P+b3OHjBIWAJ+qzQRi9wO9FYxHz7pyelz3h9JWf90bB5A8krQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwCIzLMcOFQzzas10M5MWPBtj9SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTljMmI5ZjItYTI0ZS0z ZjYzLWEwMGEtYjZkNWZmYzAwZDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaFX5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4txP8jOcYR7bHAAcCjV4NC5rhoMci4pytlHhYB9m+aXm4XJ/GfiMRh AjNLvdOqdTyPuIdlV52aDvvrRuyxFt7EE1w6RGEMEZQN7HQjfsGPdDzfmm8VhdDa +7mQ9eFmiMJoSKjM8GaEVrg+eLcCl9kfikgd2WzBgxNyRORyaK7s+Bjhn4yIUHx+ B22EweDz1oURrtg7sjnvHV8llYkwxxcALICc8i+KnZiutCVZf/eyWAAr1czSIUiS nwhYmFULMrCpHYUInifl7ZRHRWbEuGBuO36wWra45HfvmJI4Ii2eDSG74ViJ7gKE hZHRjQ4TvFztFQs+XSCvb3Uykbklz68= -----END CERTIFICATE-----Generated at Sat Apr 26 15:51:14 2025 by rpki-client