$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed39322e-5f98-3cb5-9b18-c8bfc5bfbac7.roa File: ed39322e-5f98-3cb5-9b18-c8bfc5bfbac7.roa (raw, json) Hash identifier: gpDSIir5gFiD4W0PI81dKvxJZ+1YK6l2MObCOBcbisw= Subject key identifier: 9C:56:68:8C:FD:BC:49:84:87:DA:F0:81:92:55:D4:BD:61:68:0B:79 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858490881660CA1578DABCD98B300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed39322e-5f98-3cb5-9b18-c8bfc5bfbac7.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 24319 IP address blocks: 104.124.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:66:0c:a1:57:8d:ab:cd:98:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=4060e5c2-c2ff-405d-a439-9c970ca0177a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:dd:d5:a4:84:13:7f:c7:a1:5c:64:86:b4:4f: 5f:c1:14:e9:aa:9f:00:8d:e8:6b:5e:51:85:19:38: d0:1d:4f:4f:09:8a:26:61:54:85:6b:d3:ef:66:55: 69:e9:57:7f:ba:cc:e4:68:4f:52:35:2b:99:3a:51: d5:51:e3:4b:d9:f6:85:ab:0b:65:28:ce:68:81:1e: be:f7:93:6a:24:6b:ef:33:f5:6f:5a:bf:d9:24:66: b5:65:66:02:07:19:ae:d5:8f:d7:9a:99:13:87:b3: 2f:fb:6d:d1:86:3c:78:bb:fd:05:48:52:b2:46:f0: cb:0e:24:ab:1a:80:9f:fd:3d:ec:5b:da:bb:76:3e: 10:fd:28:96:eb:a4:08:61:6e:bc:02:78:31:56:22: 52:9e:20:d7:38:92:78:3b:77:19:af:e6:b3:ab:01: 6b:ed:a3:1d:b3:eb:ce:6d:9a:2d:ff:27:41:1e:59: fc:83:86:75:ab:01:78:4c:ce:c0:02:28:c6:cf:cb: dd:a1:f2:e6:15:3d:40:47:dd:0e:70:88:59:a0:35: e4:6e:77:c3:89:09:8a:ba:ac:1c:60:5b:7f:51:0e: b1:c6:2f:24:71:0d:43:ed:18:03:15:7d:14:4b:2b: b5:5f:eb:44:3e:a0:a9:95:f8:6b:ac:62:63:04:f4: 93:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:56:68:8C:FD:BC:49:84:87:DA:F0:81:92:55:D4:BD:61:68:0B:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed39322e-5f98-3cb5-9b18-c8bfc5bfbac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.124.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:4c:72:d6:91:58:d4:8a:5f:36:2d:f6:31:0f:38:d3:72:d0: e0:02:31:f9:94:64:40:ec:54:6b:46:e4:15:d6:86:2e:56:56: 61:bf:a3:51:96:3c:66:7a:38:5a:c1:eb:53:b1:8f:f5:de:71: 41:06:1b:91:86:4d:38:a0:96:14:bc:31:a4:bd:c6:3d:03:f7: c7:b5:c6:68:3e:bc:3b:32:b8:13:c4:10:e3:38:d7:a1:80:8e: 5d:a6:b6:38:f1:9a:cc:6c:20:28:48:4f:4a:0c:0c:81:f1:b4: 8b:2f:bf:c9:dc:26:77:40:e9:72:80:60:15:d0:65:ad:ac:53: 10:c5:66:fd:1d:b4:10:d1:22:4f:93:e1:17:07:f8:82:3b:6e: c7:b7:9a:04:19:b1:45:16:1a:a8:be:45:e7:99:2f:15:ad:f8: 27:c2:1c:3c:95:4f:4f:bc:25:e9:4e:21:80:03:8b:f2:15:77: 0d:1a:b6:f2:74:ca:a8:29:40:41:e9:c1:a4:08:11:63:e6:0e: 04:64:b3:79:b8:10:7d:80:10:a8:f6:58:ce:85:fe:49:70:a0: 22:dc:67:0d:5a:c7:7b:94:4b:51:53:d9:07:5e:dc:7f:6d:af: 9a:03:f5:8c:8a:3c:5a:d3:1a:45:cc:c2:af:e3:81:d5:2a:ea: 9f:6b:9d:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgWYMoVeNq82YswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk NDA2MGU1YzItYzJmZi00MDVkLWE0MzktOWM5NzBjYTAxNzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA593VpIQTf8ehXGSGtE9fwRTpqp8AjehrXlGF GTjQHU9PCYomYVSFa9PvZlVp6Vd/uszkaE9SNSuZOlHVUeNL2faFqwtlKM5ogR6+ 95NqJGvvM/VvWr/ZJGa1ZWYCBxmu1Y/XmpkTh7Mv+23Rhjx4u/0FSFKyRvDLDiSr GoCf/T3sW9q7dj4Q/SiW66QIYW68AngxViJSniDXOJJ4O3cZr+azqwFr7aMds+vO bZot/ydBHln8g4Z1qwF4TM7AAijGz8vdofLmFT1AR90OcIhZoDXkbnfDiQmKuqwc YFt/UQ6xxi8kcQ1D7RgDFX0USyu1X+tEPqCplfhrrGJjBPSToQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxWaIz9vEmEh9rwgZJV1L1haAt5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWQzOTMyMmUtNWY5OC0z Y2I1LTliMTgtYzhiZmM1YmZiYWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaHwzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZMctaRWNSKXzYt9jEPONNy0OACMfmUZEDsVGtG5BXWhi5WVmG/o1GW PGZ6OFrB61Oxj/XecUEGG5GGTTiglhS8MaS9xj0D98e1xmg+vDsyuBPEEOM416GA jl2mtjjxmsxsIChIT0oMDIHxtIsvv8ncJndA6XKAYBXQZa2sUxDFZv0dtBDRIk+T 4RcH+II7bse3mgQZsUUWGqi+ReeZLxWt+CfCHDyVT0+8JelOIYADi/IVdw0atvJ0 yqgpQEHpwaQIEWPmDgRks3m4EH2AEKj2WM6F/klwoCLcZw1ax3uUS1FT2Qde3H9t r5oD9YyKPFrTGkXMwq/jgdUq6p9rnQI= -----END CERTIFICATE-----Generated at Sun Apr 27 08:58:58 2025 by rpki-client