$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37fd18e6-5f92-35f1-adf9-ba09addc6047.roa File: 37fd18e6-5f92-35f1-adf9-ba09addc6047.roa (raw, json) Hash identifier: n2Siosd4bz7hzFZj9xiCxNJcjRynhwA7SAJnTYerqlI= Subject key identifier: 01:C0:A8:0F:8E:22:64:86:9E:7D:42:68:D6:1A:C6:4B:54:2D:CC:6C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849287E5A1A4503D55092FB0EC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37fd18e6-5f92-35f1-adf9-ba09addc6047.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 20940 IP address blocks: 104.70.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:5a:1a:45:03:d5:50:92:fb:0e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=3107e7b0-ed49-476b-b4c1-8b019408d86c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:46:f5:54:e1:6b:86:31:ef:09:8b:4f:6d:cd: c8:ec:14:1d:87:34:46:d4:ef:ac:a9:f8:13:f5:7a: 64:bc:09:31:de:46:29:eb:25:bb:39:19:40:89:57: 9e:70:d3:f6:91:6a:2e:87:fa:43:35:f1:1e:a7:16: 41:e3:0b:a1:50:0a:0f:c8:b9:54:ab:59:c5:da:8c: 37:e8:c6:05:de:32:c6:6e:0a:0b:c1:17:89:40:d1: 7b:3d:8f:59:20:68:ff:e8:8b:6e:00:35:e2:79:e0: e4:21:0a:03:5a:00:61:d3:f4:db:7b:21:82:c0:46: ce:4c:ed:eb:26:71:9a:7e:ef:14:51:6d:d9:06:88: 0d:e2:36:f5:70:98:3a:02:ce:2d:fd:4e:19:3c:6a: 2d:8f:ea:a6:39:1b:4c:bf:03:1a:9e:e7:bc:d2:e3: 5c:4d:2a:de:4b:7e:14:57:28:16:3c:82:d9:dc:11: c7:a0:44:d4:36:a1:65:33:e5:be:6e:18:d2:bf:bd: 5a:ef:a3:ed:9d:a1:d1:0d:01:59:2d:b9:6a:38:ef: ae:76:eb:a8:c9:6c:b9:18:0d:dd:99:83:03:1c:58: d6:cd:cf:42:36:5c:df:81:97:d6:78:8c:22:4b:0e: 67:98:da:08:07:f1:45:38:9f:89:00:98:57:da:f7: 4b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:C0:A8:0F:8E:22:64:86:9E:7D:42:68:D6:1A:C6:4B:54:2D:CC:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37fd18e6-5f92-35f1-adf9-ba09addc6047.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.70.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:2c:a7:f9:11:78:7c:d6:41:8b:7e:cd:eb:63:31:28:25:b9: 0c:14:f7:78:5d:19:c2:28:4c:fd:42:86:e3:b4:52:25:7b:c7: 73:f7:6e:e2:6c:71:7a:85:4b:57:5b:de:28:e3:9c:5e:83:43: b6:5e:c2:38:cc:6b:c6:89:d2:8e:00:a6:b1:26:3a:19:e5:2c: b8:89:eb:4a:9c:76:c1:bf:2d:67:c7:10:db:ef:59:15:0a:59: c9:89:59:c7:31:9b:5d:4e:72:b1:c3:f2:25:b4:c0:48:aa:0f: 08:09:27:95:11:c2:a3:45:5f:d3:95:24:54:d0:00:8d:29:cb: 52:bf:74:ff:a2:35:b8:ce:df:a4:39:50:17:22:ed:b6:08:15: 95:da:04:66:24:e2:88:d6:a3:4d:23:22:12:69:66:b8:21:95: 70:bb:f6:4a:bd:02:d3:60:ed:98:95:dd:0a:3a:dc:20:ce:e2: 9a:ff:94:9d:27:c6:0a:de:33:18:f0:7a:77:50:8e:da:61:65: f6:1b:a9:aa:40:ad:e1:32:3a:c1:dc:73:58:f7:5d:c6:9b:6c: a5:f5:87:b4:55:fe:e9:23:37:56:18:ee:e7:f3:02:95:20:37: a3:96:4d:f6:bd:ab:3b:cc:cf:39:35:4c:41:ac:3f:40:ec:6b: 88:f1:c6:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkofloaRQPVUJL7DsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk MzEwN2U3YjAtZWQ0OS00NzZiLWI0YzEtOGIwMTk0MDhkODZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUb1VOFrhjHvCYtPbc3I7BQdhzRG1O+sqfgT 9XpkvAkx3kYp6yW7ORlAiVeecNP2kWouh/pDNfEepxZB4wuhUAoPyLlUq1nF2ow3 6MYF3jLGbgoLwReJQNF7PY9ZIGj/6ItuADXieeDkIQoDWgBh0/TbeyGCwEbOTO3r JnGafu8UUW3ZBogN4jb1cJg6As4t/U4ZPGotj+qmORtMvwManue80uNcTSreS34U VygWPILZ3BHHoETUNqFlM+W+bhjSv71a76PtnaHRDQFZLblqOO+uduuoyWy5GA3d mYMDHFjWzc9CNlzfgZfWeIwiSw5nmNoIB/FFOJ+JAJhX2vdLMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHAqA+OImSGnn1CaNYaxktULcxsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzdmZDE4ZTYtNWY5Mi0z NWYxLWFkZjktYmEwOWFkZGM2MDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaEZ1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0sp/kReHzWQYt+zetjMSgluQwU93hdGcIoTP1ChuO0UiV7x3P3buJs cXqFS1db3ijjnF6DQ7ZewjjMa8aJ0o4AprEmOhnlLLiJ60qcdsG/LWfHENvvWRUK WcmJWccxm11OcrHD8iW0wEiqDwgJJ5URwqNFX9OVJFTQAI0py1K/dP+iNbjO36Q5 UBci7bYIFZXaBGYk4ojWo00jIhJpZrghlXC79kq9AtNg7ZiV3Qo63CDO4pr/lJ0n xgreMxjwendQjtphZfYbqapAreEyOsHcc1j3XcabbKX1h7RV/ukjN1YY7ufzApUg N6OWTfa9qzvMzzk1TEGsP0Dsa4jxxvY= -----END CERTIFICATE-----Generated at Sat Apr 26 19:19:53 2025 by rpki-client