$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e89ab32c-63fe-39e5-ac9f-39a83fdb6d0e.roa File: e89ab32c-63fe-39e5-ac9f-39a83fdb6d0e.roa (raw, json) Hash identifier: EZ5mE1kAb0wFiSHItsdqw4LauOAHxUnH/9UFxiKBlis= Subject key identifier: 30:7D:54:F9:C6:C0:42:5D:05:B7:79:37:CC:07:22:17:78:06:F7:51 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849350EBE1DF4C80C22E38F1F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e89ab32c-63fe-39e5-ac9f-39a83fdb6d0e.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 20940 IP address blocks: 104.81.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:be:1d:f4:c8:0c:22:e3:8f:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=dfc494c0-60ac-4e94-b298-855af4870bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:46:60:9c:bd:98:14:f8:16:20:12:50:e2:30: 3d:6a:86:76:fd:82:24:82:38:4b:39:41:90:fb:20: be:66:38:4d:1a:48:d8:97:9c:a7:42:18:0f:58:56: db:eb:57:92:2f:2f:01:56:c9:0f:83:60:ea:5f:16: 82:fc:b1:da:28:50:50:b4:5e:81:f8:e8:19:db:5e: d6:0f:a6:50:39:a2:d3:5a:42:fc:36:b3:b1:82:5b: d9:4b:a4:f3:47:76:43:74:6d:87:98:58:d6:78:68: f8:3b:5c:72:0b:f0:b7:30:a3:36:19:3b:43:45:2a: 27:13:d6:79:c8:36:30:3c:22:b9:cf:06:5e:64:eb: 99:01:cc:eb:e9:ed:2a:83:47:6d:4a:fa:12:9d:fe: 9c:50:28:89:35:1f:21:19:c7:58:94:9b:62:8e:40: 89:65:55:48:92:2e:1f:d6:20:e1:24:ff:e6:62:ba: 80:61:e5:c2:97:fc:9d:eb:fc:9e:a3:67:1e:fb:45: 4a:96:9a:fd:49:69:ee:76:73:39:69:d9:3b:e0:26: 8c:67:07:73:bb:dc:68:12:24:ad:8d:b8:bb:e9:97: 7c:7d:88:24:29:c7:86:14:47:82:6f:9d:9a:87:4d: 72:59:5c:ac:70:6c:f0:1e:86:0b:07:7d:df:af:37: 25:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:7D:54:F9:C6:C0:42:5D:05:B7:79:37:CC:07:22:17:78:06:F7:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e89ab32c-63fe-39e5-ac9f-39a83fdb6d0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.81.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:56:3b:07:32:17:4c:07:6e:c6:df:2d:c9:fd:46:36:a9:71: 94:cc:d2:db:e5:ea:b6:8e:37:22:cc:17:e1:53:fd:14:e0:bd: e4:5d:15:6c:31:38:d7:96:6b:7d:d7:9d:c1:5a:ad:f5:17:0b: b2:f3:c9:fd:b4:83:b4:f9:14:b3:6c:55:be:c5:ab:4a:62:92: 87:b5:2e:14:af:ee:58:46:8a:79:78:9c:ba:f2:aa:42:de:6c: 4f:be:e6:f8:a1:7e:98:95:0e:a8:25:bd:ec:a1:f3:0c:ae:24: d2:ae:27:ac:57:5f:6d:74:cd:b5:1b:d7:92:8f:2e:b2:c5:62: 0d:62:3d:e2:d3:5d:18:af:a5:28:5b:05:81:73:31:4d:67:5b: 82:7b:be:ef:45:77:7c:b3:b0:9a:61:6d:dc:7d:10:15:df:af: 95:ae:af:f0:60:44:d0:7d:94:c9:09:e0:c7:8f:94:4a:de:fb: ae:8b:51:df:44:56:01:95:7d:dc:7b:19:26:1f:3a:67:fd:2a: 66:50:6a:ee:ad:29:c9:0e:ca:8b:c8:55:5c:f4:42:50:c5:4c: f1:3a:08:09:1d:e6:de:5c:09:8e:f8:54:0b:c1:1e:8d:6c:70: 9d:5b:f2:7a:e0:25:f8:aa:73:ca:a1:32:37:34:3c:0d:48:12: 01:01:42:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1Dr4d9MgMIuOPHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk ZGZjNDk0YzAtNjBhYy00ZTk0LWIyOTgtODU1YWY0ODcwYmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUZgnL2YFPgWIBJQ4jA9aoZ2/YIkgjhLOUGQ +yC+ZjhNGkjYl5ynQhgPWFbb61eSLy8BVskPg2DqXxaC/LHaKFBQtF6B+OgZ217W D6ZQOaLTWkL8NrOxglvZS6TzR3ZDdG2HmFjWeGj4O1xyC/C3MKM2GTtDRSonE9Z5 yDYwPCK5zwZeZOuZAczr6e0qg0dtSvoSnf6cUCiJNR8hGcdYlJtijkCJZVVIki4f 1iDhJP/mYrqAYeXCl/yd6/yeo2ce+0VKlpr9SWnudnM5adk74CaMZwdzu9xoEiSt jbi76Zd8fYgkKceGFEeCb52ah01yWVyscGzwHoYLB33frzcljwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDB9VPnGwEJdBbd5N8wHIhd4BvdRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTg5YWIzMmMtNjNmZS0z OWU1LWFjOWYtMzlhODNmZGI2ZDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaFE8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRWOwcyF0wHbsbfLcn9RjapcZTM0tvl6raONyLMF+FT/RTgveRdFWwx ONeWa33XncFarfUXC7Lzyf20g7T5FLNsVb7Fq0pikoe1LhSv7lhGinl4nLryqkLe bE++5vihfpiVDqglveyh8wyuJNKuJ6xXX210zbUb15KPLrLFYg1iPeLTXRivpShb BYFzMU1nW4J7vu9Fd3yzsJphbdx9EBXfr5Wur/BgRNB9lMkJ4MePlEre+66LUd9E VgGVfdx7GSYfOmf9KmZQau6tKckOyovIVVz0QlDFTPE6CAkd5t5cCY74VAvBHo1s cJ1b8nrgJfiqc8qhMjc0PA1IEgEBQk8= -----END CERTIFICATE-----Generated at Sun Apr 27 18:40:43 2025 by rpki-client