$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/a569e485-6b37-3b02-a56e-74b826b6659a.roa File: a569e485-6b37-3b02-a56e-74b826b6659a.roa (raw, json) Hash identifier: J8uLP7f1r6sXtF9FyOQ1BRoQvBZqzHfvAp5t4IYF26I= Subject key identifier: AF:D0:34:26:C3:CD:F1:81:6F:FC:C8:DA:66:18:60:E6:72:EC:12:C8 Certificate issuer: /CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86 Certificate serial: 010D0C9F432858493C092473D9820C507EDFEE80 Authority key identifier: 9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/a569e485-6b37-3b02-a56e-74b826b6659a.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 20326 IP address blocks: 208.91.104.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:24:73:d9:82:0c:50:7e:df:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=40714942-ef0a-439a-b095-0d599eaadb55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a1:5a:aa:cc:11:1a:d8:26:80:fc:55:04:4b: 0a:12:5e:9e:c5:af:a5:b0:6e:6e:ab:f2:66:f4:0d: 69:b8:20:a1:a0:13:58:af:9c:cb:2a:78:64:75:1d: ab:3a:8d:40:8c:1d:a0:8d:28:8d:da:bf:52:33:ea: c2:09:1b:9b:75:4f:4a:7e:4b:e5:3a:a9:5d:f4:7d: 16:e5:c5:e4:42:bf:99:e4:ed:3a:ca:73:36:e1:bf: 2e:e9:1a:61:e3:79:05:25:7a:ce:57:47:c2:77:ab: 91:9b:a2:9e:0f:81:21:af:dd:1e:95:b3:89:6d:be: 4c:8c:b4:2d:3f:ff:94:34:eb:86:e6:a1:61:52:9c: 78:16:80:0e:cd:20:84:ad:d5:7d:55:3f:4b:be:50: 51:ce:69:49:fc:29:57:83:7b:10:33:c0:a7:cf:31: 06:95:9e:ce:bc:51:a8:4b:6e:05:e3:5d:ea:d9:dd: 58:60:b4:41:c0:38:72:81:9b:45:3e:aa:85:2d:a5: 9d:f4:a1:ab:34:70:14:e0:72:8b:0c:10:39:b1:ea: ff:27:3c:2d:af:b4:11:f0:6e:59:66:ec:ad:81:52: b3:c0:ca:6e:ef:c9:7a:1f:f7:c5:d3:51:64:be:90: 99:8e:d3:5d:d4:21:b9:d0:8b:08:cd:5c:a5:fc:92: 99:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D0:34:26:C3:CD:F1:81:6F:FC:C8:DA:66:18:60:E6:72:EC:12:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/a569e485-6b37-3b02-a56e-74b826b6659a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl X509v3 Authority Key Identifier: keyid:9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer sbgp-ipAddrBlock: critical IPv4: 208.91.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:6a:20:b8:b3:6e:5b:7f:95:21:63:56:40:c6:86:e9:80:f9: 83:c7:ac:0c:11:0b:11:3a:96:0d:89:84:98:81:94:72:4f:65: 08:a0:cc:e7:59:c5:08:bc:14:fb:c8:53:f2:e4:38:b3:56:2e: a0:fe:bd:12:5f:7e:d5:3e:39:26:d9:87:b8:87:c8:24:d6:0b: 70:73:35:b8:2d:52:7a:5b:34:11:77:4a:90:f6:19:91:53:9b: 1a:4b:0a:cf:47:0d:42:3e:15:5c:c2:04:91:a6:b9:60:bc:72: b9:89:b4:89:1a:2d:2c:a4:ac:18:0e:0b:92:c5:92:18:df:f7: 83:b9:93:cd:62:a5:a3:f2:c3:f1:bc:e6:c0:d1:0f:40:5b:06: 87:e3:b8:3e:38:b4:33:0d:1a:90:ba:78:ca:49:79:1e:59:d5: a0:d8:25:cf:3e:74:47:26:84:73:42:87:0c:44:10:ac:41:d5: ea:ba:65:3f:df:96:20:59:10:86:33:81:23:73:1e:e1:4e:32: ec:34:f5:e6:a7:cf:eb:36:e4:f5:e1:df:99:92:80:5f:18:fc: 50:5a:dc:44:85:3d:05:33:a7:55:df:55:7c:6b:67:78:e8:4a: 03:be:ad:6d:99:7c:5f:eb:d1:37:ef:b3:3e:41:11:6f:6d:de: c8:9c:b8:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CSRz2YIMUH7f7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODYwYjRjMzgtMmNhNi00ZWRkLTgwZWYtMTE3M2E4ZDdl Zjg2MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk NDA3MTQ5NDItZWYwYS00MzlhLWIwOTUtMGQ1OTllYWFkYjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaFaqswRGtgmgPxVBEsKEl6exa+lsG5uq/Jm 9A1puCChoBNYr5zLKnhkdR2rOo1AjB2gjSiN2r9SM+rCCRubdU9KfkvlOqld9H0W 5cXkQr+Z5O06ynM24b8u6Rph43kFJXrOV0fCd6uRm6KeD4Ehr90elbOJbb5MjLQt P/+UNOuG5qFhUpx4FoAOzSCErdV9VT9LvlBRzmlJ/ClXg3sQM8CnzzEGlZ7OvFGo S24F413q2d1YYLRBwDhygZtFPqqFLaWd9KGrNHAU4HKLDBA5ser/Jzwtr7QR8G5Z ZuytgVKzwMpu78l6H/fF01FkvpCZjtNd1CG50IsIzVyl/JKZuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/QNCbDzfGBb/zI2mYYYOZy7BLIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NjBi NGMzOC0yY2E2LTRlZGQtODBlZi0xMTczYThkN2VmODYvYTU2OWU0ODUtNmIzNy0z YjAyLWE1NmUtNzRiODI2YjY2NTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODYwYjRjMzgtMmNhNi00ZWRkLTgw ZWYtMTE3M2E4ZDdlZjg2Lzg2MGI0YzM4LTJjYTYtNGVkZC04MGVmLTExNzNhOGQ3 ZWY4Ni5jcmwwHwYDVR0jBBgwFoAUnBoKe0BtQfxOmXCKeMmGhJl8eI0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84NjBiNGMzOC0yY2E2LTRlZGQtODBlZi0xMTcz YThkN2VmODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FtoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpqILizblt/lSFjVkDGhumA+YPHrAwRCxE6lg2JhJiBlHJPZQigzOdZ xQi8FPvIU/LkOLNWLqD+vRJfftU+OSbZh7iHyCTWC3BzNbgtUnpbNBF3SpD2GZFT mxpLCs9HDUI+FVzCBJGmuWC8crmJtIkaLSykrBgOC5LFkhjf94O5k81ipaPyw/G8 5sDRD0BbBofjuD44tDMNGpC6eMpJeR5Z1aDYJc8+dEcmhHNChwxEEKxB1eq6ZT/f liBZEIYzgSNzHuFOMuw09eanz+s25PXh35mSgF8Y/FBa3ESFPQUzp1XfVXxrZ3jo SgO+rW2ZfF/r0Tfvsz5BEW9t3sicuF8= -----END CERTIFICATE-----Generated at Sat Apr 5 20:16:05 2025 by rpki-client