$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/805c390a-eeb9-3b9e-bb4c-465418c31e30.roa File: 805c390a-eeb9-3b9e-bb4c-465418c31e30.roa (raw, json) Hash identifier: nm4cSLpURe4D7i7QHvSC7zRjTx7DO1MIKmr34bKGAEc= Subject key identifier: 4E:AA:49:09:D6:44:7C:7B:B7:B8:D8:21:B0:4B:95:88:24:3E:BA:8B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858493243F8F1066FD7AEE058F380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/805c390a-eeb9-3b9e-bb4c-465418c31e30.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 24319 IP address blocks: 104.72.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:f8:f1:06:6f:d7:ae:e0:58:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=bfe0a985-7bf9-4b6a-9d84-6209db4d7dee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:aa:8b:06:c1:d8:1a:9e:fc:c9:2e:66:57:ae: 86:90:19:93:6d:a1:3a:2e:f9:5d:68:73:9a:02:40: c7:ae:46:3f:bd:b8:5e:d2:02:9f:17:c5:33:c1:0d: 1f:91:20:f0:bc:69:2e:dc:f3:ad:69:b5:f7:bb:5e: a5:98:c1:16:e7:97:67:96:85:40:47:2f:9b:68:cb: d8:5c:8c:86:9b:7b:91:48:aa:f8:55:55:19:7b:4d: 0a:e4:a5:1c:42:33:52:bc:aa:f4:87:2b:6c:ce:c3: fe:df:db:a8:df:d6:7b:7d:bb:ec:69:a8:1c:0f:ef: 3c:13:b2:33:ec:fb:61:bf:43:86:ae:d0:00:31:1f: a8:57:96:6b:88:5c:6c:09:b8:83:e5:c4:23:f1:d1: 49:54:3a:79:41:bf:7a:32:78:b1:cc:75:e0:43:ad: c1:5a:57:85:b7:e7:bd:68:08:c9:74:0d:8c:22:fe: 0f:b9:97:41:cd:d3:be:15:c4:37:92:59:35:94:70: ab:15:ff:96:a3:30:ee:2c:c5:b0:ec:89:83:da:95: e4:05:85:62:73:16:13:4e:10:96:a2:9e:1f:6d:9e: 0d:35:0e:aa:62:bc:4b:84:15:0c:b5:32:f8:c8:17: 6c:82:84:f4:35:35:e3:f9:bc:2c:46:ee:24:a2:7c: b4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:AA:49:09:D6:44:7C:7B:B7:B8:D8:21:B0:4B:95:88:24:3E:BA:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/805c390a-eeb9-3b9e-bb4c-465418c31e30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.72.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:d8:38:52:1f:4c:4a:bc:f2:89:fd:cc:d6:11:8b:f0:e3:01: d2:12:30:f5:91:6f:3b:20:42:bc:bf:a7:8f:6c:3b:60:57:2c: 67:1a:a2:71:67:ad:d5:3e:1d:20:a0:2c:1d:48:03:b6:c2:a3: ac:ea:5a:06:88:6c:03:6d:18:d0:26:12:0e:ad:f4:45:ba:4f: d5:84:1f:6e:99:af:bd:fc:56:b0:44:98:e4:b5:29:7f:33:2d: 35:57:95:ef:05:45:74:5c:83:1c:cf:d5:54:fe:34:ae:9c:22: 28:92:74:5e:b8:cb:5c:b3:b7:0e:b5:97:7f:b4:e5:16:20:cd: ba:ad:ef:5b:8f:d3:b9:1e:a5:7f:bc:8a:18:91:c6:b8:70:b9: 63:ec:38:5a:06:a2:96:92:ad:7f:0f:f1:cd:d0:aa:2d:93:d7: f9:98:4b:4b:f3:89:7e:f2:ff:b7:e5:3b:3c:76:5e:09:f0:c2: 23:ab:db:51:c8:ab:25:77:53:00:26:30:b0:5c:ef:66:5a:d6: bc:8f:b4:2f:7a:2b:39:b7:85:24:a1:58:83:22:e1:67:08:96: cf:0f:8f:a4:41:aa:b6:47:c1:a8:67:1f:cb:a8:39:ae:6d:39: 22:1f:1a:71:86:d0:fb:ab:9c:c1:02:59:77:88:00:ff:8c:e7: d9:67:bd:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ/jxBm/XruBY84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk YmZlMGE5ODUtN2JmOS00YjZhLTlkODQtNjIwOWRiNGQ3ZGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqqLBsHYGp78yS5mV66GkBmTbaE6LvldaHOa AkDHrkY/vbhe0gKfF8UzwQ0fkSDwvGku3POtabX3u16lmMEW55dnloVARy+baMvY XIyGm3uRSKr4VVUZe00K5KUcQjNSvKr0hytszsP+39uo39Z7fbvsaagcD+88E7Iz 7Pthv0OGrtAAMR+oV5ZriFxsCbiD5cQj8dFJVDp5Qb96MnixzHXgQ63BWleFt+e9 aAjJdA2MIv4PuZdBzdO+FcQ3klk1lHCrFf+WozDuLMWw7ImD2pXkBYVicxYTThCW op4fbZ4NNQ6qYrxLhBUMtTL4yBdsgoT0NTXj+bwsRu4kony0zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6qSQnWRHx7t7jYIbBLlYgkPrqLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODA1YzM5MGEtZWViOS0z YjllLWJiNGMtNDY1NDE4YzMxZTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaEhHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLYOFIfTEq88on9zNYRi/DjAdISMPWRbzsgQry/p49sO2BXLGcaonFn rdU+HSCgLB1IA7bCo6zqWgaIbANtGNAmEg6t9EW6T9WEH26Zr738VrBEmOS1KX8z LTVXle8FRXRcgxzP1VT+NK6cIiiSdF64y1yztw61l3+05RYgzbqt71uP07kepX+8 ihiRxrhwuWPsOFoGopaSrX8P8c3Qqi2T1/mYS0vziX7y/7flOzx2XgnwwiOr21HI qyV3UwAmMLBc72Za1ryPtC96Kzm3hSShWIMi4WcIls8Pj6RBqrZHwahnH8uoOa5t OSIfGnGG0PurnMECWXeIAP+M59lnvXQ= -----END CERTIFICATE-----Generated at Sun Apr 27 11:19:51 2025 by rpki-client