$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bde66e0-ee94-3e23-97de-fad631a974c8.roa File: 0bde66e0-ee94-3e23-97de-fad631a974c8.roa (raw, json) Hash identifier: mPjC3kaIyHueYzE80Egp50vKnNAVp7mFckYqNdp3rmY= Subject key identifier: 48:69:BE:AC:DD:5F:E1:30:CC:99:C0:AD:88:ED:E6:DD:85:9A:31:CE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849350EBD0CB9BDAC59F95B6F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bde66e0-ee94-3e23-97de-fad631a974c8.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 9498 IP address blocks: 104.104.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:bd:0c:b9:bd:ac:59:f9:5b:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=54d424e1-a4e5-4947-93ef-a33f16fabf7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c3:88:e3:f5:7e:cb:be:18:b1:6c:37:2f:45: 88:a4:25:de:73:f3:a0:d9:39:13:bf:c5:b2:c3:34: d5:ab:52:25:8a:62:20:be:71:b0:ad:82:aa:32:76: 21:a9:07:89:c9:15:78:54:72:86:ae:cd:b6:89:24: 1a:1f:7a:84:17:7b:ff:7d:68:77:2c:11:eb:3c:a8: 0a:ad:de:36:e4:14:0e:45:1e:62:7f:da:d5:84:7c: a7:5f:c2:7f:37:23:19:24:b5:66:85:04:69:d1:8c: 5c:cb:69:89:aa:f6:c8:19:c0:8e:61:f8:9e:06:87: 4f:86:17:52:ba:18:92:70:df:d2:a6:5a:46:b8:ef: 33:b0:4c:05:50:74:ad:18:80:4c:ca:aa:f8:fa:a5: f5:46:9c:bb:5b:43:25:4e:29:cc:94:37:a3:cc:aa: 89:7a:3e:20:e8:f6:64:a8:54:aa:04:45:d8:08:ca: b9:39:7d:5f:24:86:57:ba:66:f5:d8:7c:af:29:ae: a9:f5:53:b1:35:6d:4c:49:bc:f6:46:f0:d1:34:1f: ca:60:ce:3c:0a:8d:ae:c6:a5:a7:6b:b6:f7:45:e9: c2:77:a8:4e:38:3e:25:7a:2e:34:1e:fa:26:2d:3f: 96:a2:8a:44:51:5f:25:54:d2:4f:ca:83:93:64:6d: c3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:69:BE:AC:DD:5F:E1:30:CC:99:C0:AD:88:ED:E6:DD:85:9A:31:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bde66e0-ee94-3e23-97de-fad631a974c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.104.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:f0:21:2d:f1:dd:c9:bc:4c:75:41:99:15:51:6c:c4:72:42: 3b:cd:21:d6:60:d9:6a:01:35:17:f8:eb:1e:d3:b0:b7:b4:d1: c2:93:ed:7e:b7:25:c7:f5:88:b3:36:47:f4:63:79:52:d3:0b: 87:bb:3f:e6:f8:de:d2:c1:04:2e:10:00:64:ea:6c:f6:74:55: e3:cc:e6:25:e4:14:26:9a:72:4e:6c:f9:5e:63:e1:c2:1d:4c: 01:be:9c:04:e2:38:96:f5:69:2e:cd:9e:cc:e1:d2:5f:cd:be: c5:ad:6b:db:a0:82:2b:ee:d9:2c:d1:bc:86:ec:d6:04:3b:72: 86:d4:1b:1e:e6:45:72:0d:14:5f:3a:5c:3e:1c:b3:4e:03:9c: ba:be:41:16:fb:7c:07:28:aa:9b:84:e4:43:79:eb:a7:81:fc: d9:29:1f:e5:6b:ee:9b:ec:35:c4:f6:45:77:02:21:fc:d6:59: d2:89:7f:89:90:2c:4d:e6:ce:a7:cb:e1:b9:26:c3:e5:8d:4c: e2:57:f5:69:83:01:12:f8:14:6c:37:5f:f8:95:ad:3b:b7:63: 99:ec:d9:d1:30:83:2d:ba:af:6a:90:77:92:9c:4d:16:a8:74: 7c:90:6d:4f:08:18:cf:9b:1d:9f:c2:05:d2:df:99:85:dc:d7: ab:08:91:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1Dr0Mub2sWflbbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk NTRkNDI0ZTEtYTRlNS00OTQ3LTkzZWYtYTMzZjE2ZmFiZjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsOI4/V+y74YsWw3L0WIpCXec/Og2TkTv8Wy wzTVq1IlimIgvnGwrYKqMnYhqQeJyRV4VHKGrs22iSQaH3qEF3v/fWh3LBHrPKgK rd425BQORR5if9rVhHynX8J/NyMZJLVmhQRp0Yxcy2mJqvbIGcCOYfieBodPhhdS uhiScN/SplpGuO8zsEwFUHStGIBMyqr4+qX1Rpy7W0MlTinMlDejzKqJej4g6PZk qFSqBEXYCMq5OX1fJIZXumb12HyvKa6p9VOxNW1MSbz2RvDRNB/KYM48Co2uxqWn a7b3RenCd6hOOD4lei40HvomLT+WoopEUV8lVNJPyoOTZG3D3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhpvqzdX+EwzJnArYjt5t2FmjHOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGJkZTY2ZTAtZWU5NC0z ZTIzLTk3ZGUtZmFkNjMxYTk3NGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaGiKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDwIS3x3cm8THVBmRVRbMRyQjvNIdZg2WoBNRf46x7TsLe00cKT7X63 Jcf1iLM2R/RjeVLTC4e7P+b43tLBBC4QAGTqbPZ0VePM5iXkFCaack5s+V5j4cId TAG+nATiOJb1aS7Nnszh0l/NvsWta9uggivu2SzRvIbs1gQ7cobUGx7mRXINFF86 XD4cs04DnLq+QRb7fAcoqpuE5EN566eB/NkpH+Vr7pvsNcT2RXcCIfzWWdKJf4mQ LE3mzqfL4bkmw+WNTOJX9WmDARL4FGw3X/iVrTu3Y5ns2dEwgy26r2qQd5KcTRao dHyQbU8IGM+bHZ/CBdLfmYXc16sIkTU= -----END CERTIFICATE-----Generated at Sat Apr 5 06:31:18 2025 by rpki-client