$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/d126c33e-9a10-3dd2-867e-fd2b14dabe5f.roa File: d126c33e-9a10-3dd2-867e-fd2b14dabe5f.roa (raw, json) Hash identifier: d3bCDAtbRB1LNEt8GyyU6d8Kbn+fhNsfJ0Ya4RLZCRs= Subject key identifier: EF:1C:09:98:06:08:7A:92:00:12:8C:D8:F3:56:A0:10:42:9F:9B:E5 Certificate issuer: /CN=5d69c2a7-f7d7-48bb-a177-7c0b67654580 Certificate serial: 010D0C9F432858494B6406C4503D6436B4358800 Authority key identifier: 93:D1:0F:40:82:93:2B:AF:BF:B2:20:7D:C6:3C:B3:00:03:5F:00:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/d126c33e-9a10-3dd2-867e-fd2b14dabe5f.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 395950 IP address blocks: 104.232.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:06:c4:50:3d:64:36:b4:35:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d69c2a7-f7d7-48bb-a177-7c0b67654580 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=86a7f266-6cf4-43ab-849b-abbb611a53c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:65:ee:3b:0f:b4:e0:7d:cb:b5:98:dd:f2:58: 69:88:21:5a:f9:de:4f:dc:29:cd:01:9d:9d:95:69: 11:68:ad:2a:92:45:f5:a0:2b:2e:88:4e:72:f6:b1: fb:58:68:b3:32:d4:c6:3c:3d:ff:41:b1:79:0e:34: 9e:62:36:bc:bb:ac:3f:eb:e6:0c:f1:45:17:76:fe: f2:a5:28:b4:15:c9:98:b1:c2:58:bb:93:3b:0f:ab: c9:c8:6e:89:0c:ec:de:89:8e:5d:5f:2f:32:51:b5: cf:8e:03:70:44:bb:c8:48:35:09:3c:79:94:b6:bb: 36:02:9a:b0:e7:c6:7b:f7:23:84:ed:b1:82:0c:cd: fc:16:a7:73:62:b5:f3:83:76:48:89:1a:3a:67:b6: d3:df:cd:e1:e1:11:ec:c2:8c:df:e7:77:0d:85:ca: 51:70:47:5e:62:2b:80:51:64:90:99:ad:e6:0e:ad: 45:98:19:c9:da:37:6e:b0:89:00:a2:c9:97:39:05: fd:8f:18:b9:b0:1c:1d:f1:84:64:33:0e:09:2a:da: c2:e9:9e:6b:01:47:ed:b4:5b:94:e6:f2:5a:45:80: 1c:d4:3b:ca:97:d7:a9:ac:43:63:9a:55:75:a2:53: bb:e2:31:17:9e:4b:ee:14:45:b5:7b:6e:9b:57:6e: 84:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:1C:09:98:06:08:7A:92:00:12:8C:D8:F3:56:A0:10:42:9F:9B:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/d126c33e-9a10-3dd2-867e-fd2b14dabe5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.crl X509v3 Authority Key Identifier: keyid:93:D1:0F:40:82:93:2B:AF:BF:B2:20:7D:C6:3C:B3:00:03:5F:00:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer sbgp-ipAddrBlock: critical IPv4: 104.232.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:9a:c2:8b:44:ac:9c:27:ea:21:60:20:71:66:2a:01:9b:06: 48:3a:b1:fd:f9:95:1f:33:27:15:96:2a:91:35:3f:cf:9e:6d: 40:b3:39:7a:ed:a9:d9:12:55:66:2d:14:12:25:c7:a4:00:a5: e5:1b:31:fc:76:f7:11:99:88:6b:f2:9e:be:e8:56:f4:16:bc: c0:dd:fb:63:33:f6:62:0e:62:5b:57:75:0f:8b:53:4e:41:13: 92:79:1b:d5:97:85:66:8f:25:5e:66:b6:39:ae:2a:75:92:23: 39:2d:71:07:bd:ff:d2:bb:2e:9f:41:58:ee:ce:12:c2:ce:76: 97:08:49:28:12:1c:d2:32:b3:6e:92:fc:25:ac:ea:ae:96:7c: e1:db:bb:15:99:78:9c:9f:01:8d:e7:7a:6f:5f:9a:63:bf:ec: 1b:a8:6e:a0:dc:72:a2:15:82:1f:43:ca:c8:cc:f1:d3:73:f5: dc:f2:9a:c4:70:4f:ce:96:b5:8e:77:22:c1:82:d8:9f:25:33: 5a:8c:83:2e:7b:0d:f1:00:7e:df:d8:7c:94:a8:e7:9c:8c:fa: ba:27:08:8f:7e:d2:e8:54:64:4d:c6:12:97:c9:59:19:bd:84: 30:c7:5d:df:a6:b2:5c:eb:e2:3b:da:75:b8:ef:39:bd:08:0c: 2e:78:33:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZAbEUD1kNrQ1iAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ2OWMyYTctZjdkNy00OGJiLWExNzctN2MwYjY3NjU0 NTgwMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk ODZhN2YyNjYtNmNmNC00M2FiLTg0OWItYWJiYjYxMWE1M2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWXuOw+04H3LtZjd8lhpiCFa+d5P3CnNAZ2d lWkRaK0qkkX1oCsuiE5y9rH7WGizMtTGPD3/QbF5DjSeYja8u6w/6+YM8UUXdv7y pSi0FcmYscJYu5M7D6vJyG6JDOzeiY5dXy8yUbXPjgNwRLvISDUJPHmUtrs2Apqw 58Z79yOE7bGCDM38FqdzYrXzg3ZIiRo6Z7bT383h4RHswozf53cNhcpRcEdeYiuA UWSQma3mDq1FmBnJ2jdusIkAosmXOQX9jxi5sBwd8YRkMw4JKtrC6Z5rAUfttFuU 5vJaRYAc1DvKl9eprENjmlV1olO74jEXnkvuFEW1e26bV26EEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO8cCZgGCHqSABKM2PNWoBBCn5vlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZDY5 YzJhNy1mN2Q3LTQ4YmItYTE3Ny03YzBiNjc2NTQ1ODAvZDEyNmMzM2UtOWExMC0z ZGQyLTg2N2UtZmQyYjE0ZGFiZTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWQ2OWMyYTctZjdkNy00OGJiLWEx NzctN2MwYjY3NjU0NTgwLzVkNjljMmE3LWY3ZDctNDhiYi1hMTc3LTdjMGI2NzY1 NDU4MC5jcmwwHwYDVR0jBBgwFoAUk9EPQIKTK6+/siB9xjyzAANfANQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZDY5YzJhNy1mN2Q3LTQ4YmItYTE3Ny03YzBi Njc2NTQ1ODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaOgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWawotErJwn6iFgIHFmKgGbBkg6sf35lR8zJxWWKpE1P8+ebUCzOXrt qdkSVWYtFBIlx6QApeUbMfx29xGZiGvynr7oVvQWvMDd+2Mz9mIOYltXdQ+LU05B E5J5G9WXhWaPJV5mtjmuKnWSIzktcQe9/9K7Lp9BWO7OEsLOdpcISSgSHNIys26S /CWs6q6WfOHbuxWZeJyfAY3nem9fmmO/7BuobqDccqIVgh9DysjM8dNz9dzymsRw T86WtY53IsGC2J8lM1qMgy57DfEAft/YfJSo55yM+ronCI9+0uhUZE3GEpfJWRm9 hDDHXd+mslzr4jvadbjvOb0IDC54M/k= -----END CERTIFICATE-----Generated at Sat Apr 12 02:10:40 2025 by rpki-client