$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e207e0e-34da-35a3-bfca-fbfad0282556.roa File: 8e207e0e-34da-35a3-bfca-fbfad0282556.roa (raw, json) Hash identifier: n0hM4wIVmhKRlc1hQEiWOPPvfayc15AKJ1xXuWx5aY8= Subject key identifier: E9:D2:1F:00:DB:D2:FD:32:33:65:8A:7C:A6:47:11:F3:E8:46:62:29 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849350EBA5B2C3D704597E44F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e207e0e-34da-35a3-bfca-fbfad0282556.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 20940 IP address blocks: 104.98.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:ba:5b:2c:3d:70:45:97:e4:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=f9e7453e-f6c2-418f-a4af-4a9569f86e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:dc:13:9f:d7:6f:f7:84:d9:9a:54:68:d8:0a: 90:b7:f3:2a:7b:6a:72:e8:41:5b:74:f2:15:d2:d6: f7:e8:75:ba:93:22:4c:cc:2f:bb:cd:1e:73:67:54: 5f:7e:50:61:d6:12:1f:74:40:33:7b:e8:6c:b7:34: 04:b2:6f:a3:b1:d6:ae:2f:e9:55:e3:17:09:e4:6a: 05:14:26:a6:af:8b:85:f8:8f:70:e9:a8:f7:85:05: f6:02:8d:e5:15:4a:95:19:0a:ca:36:64:64:90:a8: 9a:d3:38:64:a5:28:9f:21:b8:f3:a6:32:16:73:49: 8d:e2:63:1a:1d:39:c1:c2:c9:17:68:c2:04:0a:01: 25:ed:98:d7:1b:20:e5:e5:0b:30:12:99:2f:bf:2b: 7e:05:fa:a8:71:6e:74:57:4c:54:19:af:ed:97:53: a9:d4:c4:9e:19:83:62:e4:1c:ff:e3:71:c9:e9:01: 16:f3:a8:39:64:4b:36:bf:46:f5:1b:6f:18:58:57: 25:68:6f:60:77:fb:96:04:73:41:47:97:09:da:18: a6:f0:f1:8d:06:6c:d5:14:eb:03:3d:41:fc:e8:b0: 58:0b:dd:c5:c1:ec:9f:cb:ca:aa:88:6e:41:64:d2: 19:a2:4b:2f:ee:8b:87:49:68:ba:e3:07:f8:64:73: e9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D2:1F:00:DB:D2:FD:32:33:65:8A:7C:A6:47:11:F3:E8:46:62:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e207e0e-34da-35a3-bfca-fbfad0282556.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.98.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:80:8f:7b:f4:de:a0:44:fe:0f:cf:8c:0b:1c:f9:15:e2:4f: 23:69:10:0c:db:7a:69:6b:25:04:3c:bf:cf:c6:0e:0d:89:17: be:91:23:95:b1:67:c0:0b:df:f5:b1:8c:ea:b9:d1:9d:c6:c0: 89:e9:b4:a6:73:e4:29:c7:0a:02:4e:02:ac:02:af:46:40:a4: f3:c6:b8:53:a2:e7:c6:f2:84:95:af:d5:f4:6b:23:e8:49:0a: 1d:51:06:fd:2a:fa:aa:e5:3a:49:92:c8:54:22:2c:cb:e1:cf: 47:96:fd:cc:65:7d:2f:45:bb:3c:1e:b2:9a:a7:49:57:87:39: 95:c8:64:71:27:0d:42:ca:78:a9:cb:c2:aa:1c:01:a3:8d:da: 3d:80:ef:a5:62:18:2d:e1:68:20:d5:87:99:bd:15:02:56:13: 8e:e0:84:4f:63:f1:c0:03:31:34:39:33:25:ed:73:d1:0c:11: 51:c8:83:2e:0d:13:e1:5d:63:bb:26:44:16:ec:1b:d0:dd:e7: d3:3d:fa:2f:44:c5:7f:cf:75:01:93:d2:6d:09:f1:fd:db:bf: de:7c:f6:87:ce:58:37:30:01:ea:6b:65:c4:80:77:77:69:40: ab:d0:62:d9:b6:ae:c3:8d:9b:6d:d6:e5:a9:3b:3a:cb:dd:10: 60:6f:40:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DrpbLD1wRZfkT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk ZjllNzQ1M2UtZjZjMi00MThmLWE0YWYtNGE5NTY5Zjg2ZTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktwTn9dv94TZmlRo2AqQt/Mqe2py6EFbdPIV 0tb36HW6kyJMzC+7zR5zZ1RfflBh1hIfdEAze+hstzQEsm+jsdauL+lV4xcJ5GoF FCamr4uF+I9w6aj3hQX2Ao3lFUqVGQrKNmRkkKia0zhkpSifIbjzpjIWc0mN4mMa HTnBwskXaMIECgEl7ZjXGyDl5QswEpkvvyt+BfqocW50V0xUGa/tl1Op1MSeGYNi 5Bz/43HJ6QEW86g5ZEs2v0b1G28YWFclaG9gd/uWBHNBR5cJ2him8PGNBmzVFOsD PUH86LBYC93Fweyfy8qqiG5BZNIZoksv7ouHSWi64wf4ZHPp0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnSHwDb0v0yM2WKfKZHEfPoRmIpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGUyMDdlMGUtMzRkYS0z NWEzLWJmY2EtZmJmYWQwMjgyNTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaGIDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOAj3v03qBE/g/PjAsc+RXiTyNpEAzbemlrJQQ8v8/GDg2JF76RI5Wx Z8AL3/WxjOq50Z3GwInptKZz5CnHCgJOAqwCr0ZApPPGuFOi58byhJWv1fRrI+hJ Ch1RBv0q+qrlOkmSyFQiLMvhz0eW/cxlfS9FuzwespqnSVeHOZXIZHEnDULKeKnL wqocAaON2j2A76ViGC3haCDVh5m9FQJWE47ghE9j8cADMTQ5MyXtc9EMEVHIgy4N E+FdY7smRBbsG9Dd59M9+i9ExX/PdQGT0m0J8f3bv9589ofOWDcwAeprZcSAd3dp QKvQYtm2rsONm23W5ak7OsvdEGBvQIk= -----END CERTIFICATE-----Generated at Sat Apr 26 16:13:57 2025 by rpki-client