$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d9143bf-97bd-3549-b8aa-a7693399fae4.roa File: 2d9143bf-97bd-3549-b8aa-a7693399fae4.roa (raw, json) Hash identifier: cSqsqJBPb6tJ6v1wFcs8eGbc9OOkVHuQCqxTHDSdbMc= Subject key identifier: 97:9B:2C:10:E7:FC:6B:EC:16:73:28:7D:6D:6B:C3:1A:96:67:A5:E8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858497DA46B83AB9B56CFB417CF00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d9143bf-97bd-3549-b8aa-a7693399fae4.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 63949 IP address blocks: 172.104.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:6b:83:ab:9b:56:cf:b4:17:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=d1ccd992-1788-4632-ade0-d9d0fc1dfc3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b2:b6:17:9f:54:51:04:c3:6c:4a:72:57:ef: e9:82:92:8d:0d:34:5f:cc:84:59:04:3a:de:3b:ae: 61:a4:97:3a:2b:35:5b:37:58:53:56:3e:21:9e:f0: c9:7a:95:10:16:a8:37:0a:3c:c6:2d:40:f7:38:3f: ce:f2:cf:6b:3e:cd:c8:4d:d9:c4:45:59:33:6a:35: 2a:01:a4:c3:f0:03:cb:cb:ea:ea:15:ec:6b:1d:7f: 35:24:f4:3e:9f:c5:95:3a:8d:e0:a0:ff:3b:66:46: ee:d8:32:f7:0d:10:e2:c6:88:d7:98:af:5e:5a:6c: 62:a8:64:39:63:53:77:fb:96:47:a4:34:3f:cd:13: f1:4f:96:50:30:79:45:bf:31:aa:2d:f3:48:4d:1b: 47:d8:88:70:c4:a7:7c:0f:2c:af:36:c1:01:36:b5: c4:30:71:1e:d1:18:80:42:c6:1f:8f:14:7b:ce:43: 0d:9e:73:62:7c:f5:10:c3:64:6c:7b:de:9a:8e:21: b6:33:86:15:c8:33:8b:a1:8f:1f:2d:87:d2:58:6a: e9:27:d9:07:9f:c1:2e:9d:df:f1:5b:d9:bc:63:96: 30:dd:94:3a:c4:7c:f6:1d:02:88:26:f4:22:3b:be: 97:36:6f:22:f5:d5:b6:b9:02:b1:79:e4:7d:49:a3: df:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:9B:2C:10:E7:FC:6B:EC:16:73:28:7D:6D:6B:C3:1A:96:67:A5:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d9143bf-97bd-3549-b8aa-a7693399fae4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.104.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:da:ad:12:59:c4:69:af:63:9d:20:f3:2f:05:f9:c8:93:83: 2f:1f:79:ba:be:28:9a:4e:3e:ea:80:c4:ca:91:2c:98:64:92: 4a:25:e1:7f:db:5c:50:fb:1a:e2:16:63:7d:f0:f9:8b:e1:d7: 5a:83:e6:b8:ba:b7:b5:0c:be:70:0e:c5:b5:d0:df:85:a3:1d: e0:2b:a4:2d:9d:6c:93:95:cf:38:00:d4:d6:58:1e:2c:c5:46: 5e:45:5d:de:bf:de:ac:48:da:26:af:a6:e6:47:8d:27:96:d9: 04:9f:a4:e3:9a:e6:d4:49:2f:ef:9c:21:05:a2:75:e4:0e:1e: 26:07:3c:35:58:d9:94:7f:6f:d2:35:b6:be:8a:70:b7:07:ad: ad:d1:7d:69:ea:9f:d4:f1:57:50:94:80:eb:6e:a4:c8:58:3d: e7:fd:76:ce:5f:e9:cf:e5:f5:bf:81:6a:4c:e7:a7:8d:ff:84: 22:49:b2:4e:55:7b:bc:14:97:f1:e3:6c:d8:68:1f:78:5e:56: 08:a6:21:e8:22:84:be:4f:db:c4:1e:66:37:5d:f0:01:51:53: 3a:98:23:a1:3e:02:62:6f:da:9d:62:48:03:e8:15:e8:c1:ad: d7:2d:be:ce:f6:e9:59:39:e1:38:5a:9c:9f:6f:2a:ff:7c:e7: 04:a8:a5:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pGuDq5tWz7QXzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZDFjY2Q5OTItMTc4OC00NjMyLWFkZTAtZDlkMGZjMWRmYzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLK2F59UUQTDbEpyV+/pgpKNDTRfzIRZBDre O65hpJc6KzVbN1hTVj4hnvDJepUQFqg3CjzGLUD3OD/O8s9rPs3ITdnERVkzajUq AaTD8APLy+rqFexrHX81JPQ+n8WVOo3goP87Zkbu2DL3DRDixojXmK9eWmxiqGQ5 Y1N3+5ZHpDQ/zRPxT5ZQMHlFvzGqLfNITRtH2IhwxKd8DyyvNsEBNrXEMHEe0RiA QsYfjxR7zkMNnnNifPUQw2Rse96ajiG2M4YVyDOLoY8fLYfSWGrpJ9kHn8Eund/x W9m8Y5Yw3ZQ6xHz2HQKIJvQiO76XNm8i9dW2uQKxeeR9SaPfawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJebLBDn/GvsFnMofW1rwxqWZ6XoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmQ5MTQzYmYtOTdiZC0z NTQ5LWI4YWEtYTc2OTMzOTlmYWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrGhAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7arRJZxGmvY50g8y8F+ciTgy8febq+KJpOPuqAxMqRLJhkkkol4X/b XFD7GuIWY33w+Yvh11qD5ri6t7UMvnAOxbXQ34WjHeArpC2dbJOVzzgA1NZYHizF Rl5FXd6/3qxI2iavpuZHjSeW2QSfpOOa5tRJL++cIQWideQOHiYHPDVY2ZR/b9I1 tr6KcLcHra3RfWnqn9TxV1CUgOtupMhYPef9ds5f6c/l9b+Bakznp43/hCJJsk5V e7wUl/HjbNhoH3heVgimIegihL5P28QeZjdd8AFRUzqYI6E+AmJv2p1iSAPoFejB rdctvs726Vk54ThanJ9vKv985wSopag= -----END CERTIFICATE-----Generated at Sun Apr 27 01:43:09 2025 by rpki-client