$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2bd5d8ba-97da-3b44-a6fb-55687b8a0741.roa File: 2bd5d8ba-97da-3b44-a6fb-55687b8a0741.roa (raw, json) Hash identifier: 3onDy34Lsxtp9mbcixCboQTLKNHefhYaxOnwC+cAW28= Subject key identifier: D9:79:A3:59:29:74:26:82:FC:CF:B1:4A:1D:54:6C:37:71:B0:3A:4D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858493243FB0C6B42EEEEFBCD4F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2bd5d8ba-97da-3b44-a6fb-55687b8a0741.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 20940 IP address blocks: 104.76.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:fb:0c:6b:42:ee:ee:fb:cd:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=6a9b3a14-f8ed-41dd-a9f0-01fe5838cf91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:63:d9:fb:13:bc:f2:c9:f0:fd:41:76:6b:6b: 09:2a:7e:1e:e6:73:40:d8:b5:b9:8b:ec:6f:b1:2b: 1d:9a:ff:1b:7a:37:45:59:37:bb:fb:f1:54:08:d3: 4c:0c:5c:45:52:e4:e7:98:74:36:74:c9:f4:ab:bd: 90:19:ea:bf:86:e3:67:56:f3:57:bd:fb:2a:53:9d: 1e:36:68:c6:48:19:68:9a:43:94:41:75:1c:4f:48: 9a:43:bb:3e:8b:43:d8:38:5b:e8:79:38:28:16:fd: f0:ce:ad:b5:b3:fc:1b:6f:de:20:32:a1:6b:4e:dd: 7a:cf:ba:85:72:6a:04:93:93:fc:4e:41:5a:8b:1e: f3:84:44:82:3f:c8:a1:02:00:89:98:03:7c:7d:54: 2a:ea:cb:97:aa:13:5c:28:ec:4d:72:7a:0a:c0:6e: c0:14:8c:ed:8a:bf:a6:8f:76:04:9f:df:03:92:ab: 8b:7e:d5:5e:0d:8b:60:d9:40:04:4c:f7:37:2c:87: 52:dd:87:41:a3:23:5d:81:3f:a3:68:75:ad:3d:8a: fc:30:ab:68:c1:ed:6d:ab:2b:fe:c1:be:c6:31:f9: fb:aa:99:a1:7d:40:17:cf:14:fb:e3:ce:5c:ce:4d: ac:14:19:19:55:f7:46:11:2d:e3:53:b3:c2:1b:7d: a1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:79:A3:59:29:74:26:82:FC:CF:B1:4A:1D:54:6C:37:71:B0:3A:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2bd5d8ba-97da-3b44-a6fb-55687b8a0741.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.76.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:a9:33:99:38:be:32:5a:11:24:4f:4c:8e:65:54:ac:78:30: ed:7f:9f:f9:b0:0e:73:a9:75:3e:b3:d2:b9:97:58:cf:24:b2: c6:51:8f:d3:d1:dd:e6:91:16:5a:ee:12:ee:c7:05:4a:04:4a: 7b:a4:9b:9e:1a:b3:1d:d4:38:a6:1b:31:2a:70:35:4e:6a:13: 23:bb:f7:31:c2:52:4f:93:96:60:14:c6:9a:2a:6a:9e:98:42: e9:70:21:a8:41:1b:9a:5e:70:c8:fe:64:7e:94:15:db:89:e2: 6a:47:79:d0:bb:b8:ed:c2:0f:e3:c9:ed:ae:f3:53:0b:09:4a: 46:94:e8:8d:ab:be:3e:9e:51:a4:a5:2a:55:14:d3:cc:77:1f: c3:13:df:f6:57:d9:45:0c:b6:de:83:d8:10:fd:4e:f9:1d:27: 50:fe:d4:90:a5:8d:64:36:fb:68:1c:ec:6a:1b:cb:f0:b5:5b: 9b:b9:77:a8:e8:44:9b:c2:81:e9:72:52:bb:a5:64:b6:56:ec: be:97:c2:ec:cd:52:f8:e3:73:98:dd:a0:93:52:16:06:a1:81: 17:91:a0:4c:a8:5c:70:ec:7f:65:99:59:9d:08:d3:de:a9:a5: 28:02:e4:b9:d2:b1:b4:cd:8a:e5:cb:75:0a:68:e6:a0:e1:59: 12:5f:99:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ/sMa0Lu7vvNTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk NmE5YjNhMTQtZjhlZC00MWRkLWE5ZjAtMDFmZTU4MzhjZjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmPZ+xO88snw/UF2a2sJKn4e5nNA2LW5i+xv sSsdmv8bejdFWTe7+/FUCNNMDFxFUuTnmHQ2dMn0q72QGeq/huNnVvNXvfsqU50e NmjGSBlomkOUQXUcT0iaQ7s+i0PYOFvoeTgoFv3wzq21s/wbb94gMqFrTt16z7qF cmoEk5P8TkFaix7zhESCP8ihAgCJmAN8fVQq6suXqhNcKOxNcnoKwG7AFIztir+m j3YEn98DkquLftVeDYtg2UAETPc3LIdS3YdBoyNdgT+jaHWtPYr8MKtowe1tqyv+ wb7GMfn7qpmhfUAXzxT7485czk2sFBkZVfdGES3jU7PCG32hlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNl5o1kpdCaC/M+xSh1UbDdxsDpNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmJkNWQ4YmEtOTdkYS0z YjQ0LWE2ZmItNTU2ODdiOGEwNzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaEzcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGepM5k4vjJaESRPTI5lVKx4MO1/n/mwDnOpdT6z0rmXWM8kssZRj9PR 3eaRFlruEu7HBUoESnukm54asx3UOKYbMSpwNU5qEyO79zHCUk+TlmAUxpoqap6Y QulwIahBG5pecMj+ZH6UFduJ4mpHedC7uO3CD+PJ7a7zUwsJSkaU6I2rvj6eUaSl KlUU08x3H8MT3/ZX2UUMtt6D2BD9TvkdJ1D+1JCljWQ2+2gc7Goby/C1W5u5d6jo RJvCgelyUrulZLZW7L6XwuzNUvjjc5jdoJNSFgahgReRoEyoXHDsf2WZWZ0I096p pSgC5LnSsbTNiuXLdQpo5qDhWRJfmUI= -----END CERTIFICATE-----Generated at Sat Apr 26 19:52:09 2025 by rpki-client