$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b439b6fa-b358-3c6d-b1d6-6aff3b147bf2.roa File: b439b6fa-b358-3c6d-b1d6-6aff3b147bf2.roa (raw, json) Hash identifier: y1B8bXA7Xex3Qx4UQEIr6ZGnmqomMcYAY+Lua9X8xHQ= Subject key identifier: FA:A1:94:1E:FE:0E:0D:42:B6:17:90:0B:7A:FD:80:37:BA:91:30:86 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584900215184CD397FD83E276A60 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b439b6fa-b358-3c6d-b1d6-6aff3b147bf2.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 24319 IP address blocks: 104.100.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:51:84:cd:39:7f:d8:3e:27:6a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=87d37042-32a9-428e-966f-d7f91ad8acd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:83:ea:3a:e0:a2:55:d2:02:7f:3f:25:e3:e9: f8:eb:40:82:f4:a1:28:51:85:82:dd:66:3c:60:57: b7:55:c9:b5:93:0e:b4:05:33:ae:87:13:b9:e7:41: 9a:8c:80:8a:33:a7:70:3a:85:db:85:8a:a5:41:ef: ce:ec:f9:1e:a7:fd:4c:d2:47:50:14:ed:6a:c8:28: 2e:5a:c3:f2:39:7f:23:08:7c:f5:33:5f:5a:98:34: 32:8b:ae:a3:bc:8e:85:c6:c9:73:71:29:a0:73:ae: 99:0a:84:3a:ec:a7:b9:83:65:8a:23:74:1e:01:fc: ae:59:9a:00:ad:cc:fa:52:28:dd:31:5a:5f:ad:5d: 12:aa:77:5a:48:28:ba:c8:7a:08:ad:f2:d6:9f:d1: 0c:50:e9:62:00:77:53:40:9e:19:9f:fb:92:a2:8b: 35:e5:97:0d:f3:5d:55:c7:ba:26:67:ff:63:75:2a: 23:ec:72:d3:a3:f6:1a:42:1c:3c:cf:cc:1f:6d:5f: 23:45:04:be:10:33:1b:fa:1f:85:9f:cc:0a:cc:9e: 49:78:82:16:dd:e1:29:4f:fd:b3:3b:d7:ad:e8:c1: a1:cd:63:e1:c1:20:65:b9:93:fb:97:4c:e5:f5:49: 90:ef:3d:a6:b0:c4:56:05:a8:7e:f5:7a:45:38:72: 67:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A1:94:1E:FE:0E:0D:42:B6:17:90:0B:7A:FD:80:37:BA:91:30:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b439b6fa-b358-3c6d-b1d6-6aff3b147bf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.100.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:16:da:15:0e:c7:6d:16:35:c7:78:28:f1:5c:d0:06:2a:0a: 10:20:08:05:76:9c:31:4d:45:e6:a7:7b:77:89:74:29:b3:fa: 51:e1:db:cc:c5:3c:cd:60:12:df:6b:c5:d8:a3:8f:52:15:a4: eb:c4:c3:48:25:b5:9c:cf:9b:e7:20:2b:1c:5b:31:c8:57:32: e3:47:4a:52:33:22:f4:55:fd:60:6a:1a:b1:89:e2:ef:80:d6: c9:5a:0b:e4:d7:af:c3:81:09:53:5c:f7:43:4b:ba:c0:1e:0b: 53:83:f6:8e:8a:ec:c1:83:27:a9:ed:83:4c:4c:a8:32:2b:2b: fa:36:1a:9a:0e:31:2b:a1:1e:02:80:c8:30:5c:b1:5f:64:b5: b9:9d:4b:eb:82:3b:fa:ff:95:02:27:b5:3f:69:ad:bf:a5:b7: 4b:2e:1d:eb:32:6a:9e:d0:e5:7b:ef:40:d5:61:23:ba:e5:ef: 79:07:95:c6:2c:4a:61:57:99:ce:a6:97:ee:b5:9d:bb:29:02: d6:89:3f:85:1b:43:e8:2d:57:9b:c7:97:b4:af:37:90:c2:01: 92:7f:b2:4e:ea:62:5e:27:5c:aa:c4:e1:61:07:ab:64:93:33: 7d:3b:b0:2f:db:46:b0:f9:76:ca:73:0b:df:58:af:bd:0f:25: 5f:94:e7:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIVGEzTl/2D4namAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk ODdkMzcwNDItMzJhOS00MjhlLTk2NmYtZDdmOTFhZDhhY2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoPqOuCiVdICfz8l4+n460CC9KEoUYWC3WY8 YFe3Vcm1kw60BTOuhxO550GajICKM6dwOoXbhYqlQe/O7Pkep/1M0kdQFO1qyCgu WsPyOX8jCHz1M19amDQyi66jvI6FxslzcSmgc66ZCoQ67Ke5g2WKI3QeAfyuWZoA rcz6UijdMVpfrV0SqndaSCi6yHoIrfLWn9EMUOliAHdTQJ4Zn/uSoos15ZcN811V x7omZ/9jdSoj7HLTo/YaQhw8z8wfbV8jRQS+EDMb+h+Fn8wKzJ5JeIIW3eEpT/2z O9et6MGhzWPhwSBluZP7l0zl9UmQ7z2msMRWBah+9XpFOHJntwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqhlB7+Dg1CtheQC3r9gDe6kTCGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjQzOWI2ZmEtYjM1OC0z YzZkLWIxZDYtNmFmZjNiMTQ3YmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaGReMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0W2hUOx20WNcd4KPFc0AYqChAgCAV2nDFNReane3eJdCmz+lHh28zF PM1gEt9rxdijj1IVpOvEw0gltZzPm+cgKxxbMchXMuNHSlIzIvRV/WBqGrGJ4u+A 1slaC+TXr8OBCVNc90NLusAeC1OD9o6K7MGDJ6ntg0xMqDIrK/o2GpoOMSuhHgKA yDBcsV9ktbmdS+uCO/r/lQIntT9prb+lt0suHesyap7Q5XvvQNVhI7rl73kHlcYs SmFXmc6ml+61nbspAtaJP4UbQ+gtV5vHl7SvN5DCAZJ/sk7qYl4nXKrE4WEHq2ST M307sC/bRrD5dspzC99Yr70PJV+U51Y= -----END CERTIFICATE-----Generated at Sat Apr 26 23:53:37 2025 by rpki-client