$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b0d592a-d0b8-3283-953e-473f5487025c.roa File: 8b0d592a-d0b8-3283-953e-473f5487025c.roa (raw, json) Hash identifier: XjYSqmGJ8i5vpUHDDi0ey5BVVmZA+h6CAZlbP7r5lh4= Subject key identifier: 71:C6:0F:75:6F:78:D0:4D:8A:CC:AA:9A:EF:84:6D:15:10:C7:E6:C8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858493243FA5B2654A3F0D82BE980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b0d592a-d0b8-3283-953e-473f5487025c.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 16625 IP address blocks: 104.75.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:fa:5b:26:54:a3:f0:d8:2b:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=8ba929ac-9b0a-4dc7-b4df-5b0c7070040a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:61:61:55:ed:c6:d9:de:3d:ef:28:81:da:76: 1b:8e:13:c5:3a:1b:75:27:b1:5f:15:2c:8d:9e:db: a7:0a:05:f2:c3:56:84:e2:9f:eb:12:49:43:f2:3e: c2:a9:7e:10:d7:59:48:a0:e9:6b:fd:b8:ac:62:c4: a1:c8:38:14:d0:c7:03:2e:1d:8f:90:c0:b2:fe:25: bc:aa:ee:e4:b3:3e:e0:8f:d1:41:16:4c:e2:59:56: 0a:ab:93:7e:e5:56:3f:2f:01:5c:db:8f:2f:e2:07: f0:98:26:9b:7f:fe:65:05:22:e4:ef:f0:d6:e6:7b: 37:25:8e:b9:31:8e:8b:8b:f8:fb:f7:31:ac:11:b2: 60:54:22:1b:e3:c1:ac:1e:4a:64:8f:67:4c:9d:76: cf:75:27:b6:a2:bd:89:32:ef:66:9a:90:b3:9a:be: 20:ad:02:a4:4d:0b:f3:36:12:18:21:5f:61:bd:19: 3c:c2:11:56:fb:aa:7f:79:f1:47:a2:75:cd:80:3a: dc:96:e5:4a:69:50:5d:f7:5b:e3:35:62:61:bc:2c: a4:7e:d2:6b:fd:82:f8:36:5b:a9:e1:6b:de:9a:34: 7e:32:73:33:da:db:c8:78:51:a3:a2:1b:f5:7f:04: 67:7f:d3:44:a1:d4:0d:75:56:cc:35:f1:0b:c8:c5: a6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C6:0F:75:6F:78:D0:4D:8A:CC:AA:9A:EF:84:6D:15:10:C7:E6:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b0d592a-d0b8-3283-953e-473f5487025c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.75.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:ee:66:f0:22:1c:2a:93:df:0e:41:f1:62:8f:cc:22:bf:04: d2:ea:ab:43:c5:26:c8:8f:a3:65:3d:22:eb:c7:b5:fb:42:b5: a6:72:a8:65:6d:aa:db:bf:bd:ee:21:87:ee:22:5d:73:bf:06: 00:fc:0f:3e:e9:a4:44:c2:91:91:71:82:2d:0b:a8:37:c8:e1: 5b:d3:8f:fd:a8:5b:56:fd:2e:b0:a4:68:e0:df:06:16:ea:17: f3:cd:7a:11:0c:2e:5b:97:3f:70:fd:ec:23:7c:c9:be:05:c5: 86:23:84:44:70:ea:bb:30:d2:29:12:c5:5d:92:93:7c:5e:eb: 8e:65:97:27:6e:e0:64:47:85:7f:c5:07:0e:57:5b:dd:ca:7a: 5a:94:c0:8e:59:40:d3:88:20:21:64:25:06:07:e3:b1:d4:b9: b5:d8:c5:e1:c0:fb:1e:6b:91:1a:a4:68:da:3c:89:6f:e8:b0: 04:82:58:30:b7:c1:88:cf:84:a2:1f:52:79:14:26:6c:c0:23: 46:ce:ac:fc:7f:c8:69:ad:88:4d:63:d7:cc:b1:2a:f4:de:55: 87:97:e3:be:04:7b:36:7a:2e:cd:60:e3:32:03:7d:ba:90:9e: 5c:03:a2:a8:5c:37:d2:ab:6f:a5:35:2f:3e:cd:f6:b4:c6:df: 7c:d9:63:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ/pbJlSj8Ngr6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk OGJhOTI5YWMtOWIwYS00ZGM3LWI0ZGYtNWIwYzcwNzAwNDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2FhVe3G2d497yiB2nYbjhPFOht1J7FfFSyN ntunCgXyw1aE4p/rEklD8j7CqX4Q11lIoOlr/bisYsShyDgU0McDLh2PkMCy/iW8 qu7ksz7gj9FBFkziWVYKq5N+5VY/LwFc248v4gfwmCabf/5lBSLk7/DW5ns3JY65 MY6Li/j79zGsEbJgVCIb48GsHkpkj2dMnXbPdSe2or2JMu9mmpCzmr4grQKkTQvz NhIYIV9hvRk8whFW+6p/efFHonXNgDrcluVKaVBd91vjNWJhvCykftJr/YL4Nlup 4WvemjR+MnMz2tvIeFGjohv1fwRnf9NEodQNdVbMNfELyMWmTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHGD3VveNBNisyqmu+EbRUQx+bIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGIwZDU5MmEtZDBiOC0z MjgzLTk1M2UtNDczZjU0ODcwMjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaEvoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDuZvAiHCqT3w5B8WKPzCK/BNLqq0PFJsiPo2U9IuvHtftCtaZyqGVt qtu/ve4hh+4iXXO/BgD8Dz7ppETCkZFxgi0LqDfI4VvTj/2oW1b9LrCkaODfBhbq F/PNehEMLluXP3D97CN8yb4FxYYjhERw6rsw0ikSxV2Sk3xe645llydu4GRHhX/F Bw5XW93KelqUwI5ZQNOIICFkJQYH47HUubXYxeHA+x5rkRqkaNo8iW/osASCWDC3 wYjPhKIfUnkUJmzAI0bOrPx/yGmtiE1j18yxKvTeVYeX474EezZ6Ls1g4zIDfbqQ nlwDoqhcN9Krb6U1Lz7N9rTG33zZYww= -----END CERTIFICATE-----Generated at Sun Apr 27 01:00:27 2025 by rpki-client