$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0acd480d-a7e0-3d11-b2f0-38c073d67f40.roa File: 0acd480d-a7e0-3d11-b2f0-38c073d67f40.roa (raw, json) Hash identifier: gebNlEXw13b95POuKRC98pNqYyhmT+CBcRfZ3VI2uCE= Subject key identifier: 03:A9:65:D1:3C:E3:BC:9F:5E:21:FF:0F:DF:67:0C:25:A0:C5:FB:37 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848FD56AE8A48F78162F4507C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0acd480d-a7e0-3d11-b2f0-38c073d67f40.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 35994 IP address blocks: 104.99.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:ae:8a:48:f7:81:62:f4:50:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=b9a77cc8-12aa-43a1-95cb-1c68b5f2e77f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:9b:a2:e4:36:0f:51:13:33:94:56:fd:dd:15: f7:5c:84:10:fc:15:64:88:4a:4f:5e:c8:41:2c:07: e7:9c:39:c9:5c:12:03:30:f4:69:a5:da:25:68:8a: f3:52:10:42:c8:9a:98:4c:2a:0f:f4:2b:73:96:07: 77:27:9b:a4:be:53:e7:4e:53:b4:23:f8:35:36:3f: cc:cc:61:d0:39:ae:3f:25:53:d5:b3:35:9e:e6:52: 5c:a9:64:df:a6:5d:29:68:93:93:e8:a6:49:34:ee: 8e:26:38:24:83:dc:23:42:dd:3e:6d:31:e1:16:93: 82:2e:3d:fb:08:b4:a3:26:23:d7:ee:bd:e6:1e:24: ce:3a:42:c6:3d:00:2c:68:71:6b:31:f6:ad:7d:8a: a2:d9:17:f0:b6:2a:85:ca:a9:4c:55:4b:21:b8:fe: 39:5c:d6:11:f4:19:67:ad:64:cd:f5:be:ef:25:e4: 8a:fe:40:5e:4e:dc:25:4b:c0:c9:bb:ab:f7:48:7f: 78:79:e6:d6:d8:d4:19:43:13:1a:45:9f:c9:ae:d6: 1f:0f:49:ef:51:ba:63:86:88:92:67:60:03:5d:86: 9c:c8:da:61:ad:12:67:77:d7:0f:c3:dd:10:db:27: 98:44:96:ef:59:1d:32:31:21:fd:43:36:86:1d:14: 59:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A9:65:D1:3C:E3:BC:9F:5E:21:FF:0F:DF:67:0C:25:A0:C5:FB:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0acd480d-a7e0-3d11-b2f0-38c073d67f40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.99.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:6e:36:a2:5f:57:0f:8e:69:06:35:5d:5f:ff:81:73:b4:31: 1e:e5:6e:8d:cb:26:87:02:7f:a2:5a:51:7f:b5:30:c1:6a:31: c4:58:cb:0a:1c:e9:be:48:2a:60:51:5d:b3:64:af:49:ac:cf: f8:34:f2:ee:6f:7e:0b:d6:22:9d:6a:59:2b:2d:c7:b8:95:1c: 15:7c:75:92:14:4d:ee:7c:d5:b1:e2:2a:19:3a:c9:bb:c0:71: 08:f5:61:dd:31:fd:b9:48:3b:25:34:a5:63:d3:28:b8:a8:f8: 97:a0:51:40:bd:b1:3f:b4:fa:87:a8:47:2c:c9:2c:fa:54:b9: f8:82:50:26:b9:8c:92:db:da:c1:66:10:5a:2c:0c:d2:b4:aa: dd:19:16:25:5d:91:6a:99:3d:c7:9e:b7:8c:36:74:79:c3:7d: db:3d:bf:f9:2a:49:4d:d2:2b:de:20:29:6a:ce:5f:12:31:0b: 19:b3:90:b5:a5:6d:d5:09:db:67:cf:61:f3:66:1d:95:45:76: 94:aa:7c:59:37:d8:bc:ab:00:f7:9c:60:e9:0c:55:2c:10:33: 3f:78:e3:77:c3:44:17:8e:51:85:bb:af:a3:4b:01:54:87:71: 16:16:ab:58:36:fc:bf:cf:09:56:5e:ec:e5:88:91:15:53:12: fd:19:15:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9Vq6KSPeBYvRQfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk YjlhNzdjYzgtMTJhYS00M2ExLTk1Y2ItMWM2OGI1ZjJlNzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpui5DYPURMzlFb93RX3XIQQ/BVkiEpPXshB LAfnnDnJXBIDMPRppdolaIrzUhBCyJqYTCoP9Ctzlgd3J5ukvlPnTlO0I/g1Nj/M zGHQOa4/JVPVszWe5lJcqWTfpl0paJOT6KZJNO6OJjgkg9wjQt0+bTHhFpOCLj37 CLSjJiPX7r3mHiTOOkLGPQAsaHFrMfatfYqi2RfwtiqFyqlMVUshuP45XNYR9Bln rWTN9b7vJeSK/kBeTtwlS8DJu6v3SH94eebW2NQZQxMaRZ/JrtYfD0nvUbpjhoiS Z2ADXYacyNphrRJnd9cPw90Q2yeYRJbvWR0yMSH9QzaGHRRZzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOpZdE847yfXiH/D99nDCWgxfs3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGFjZDQ4MGQtYTdlMC0z ZDExLWIyZjAtMzhjMDczZDY3ZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaGONMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFluNqJfVw+OaQY1XV//gXO0MR7lbo3LJocCf6JaUX+1MMFqMcRYywoc 6b5IKmBRXbNkr0msz/g08u5vfgvWIp1qWSstx7iVHBV8dZIUTe581bHiKhk6ybvA cQj1Yd0x/blIOyU0pWPTKLio+JegUUC9sT+0+oeoRyzJLPpUufiCUCa5jJLb2sFm EFosDNK0qt0ZFiVdkWqZPceet4w2dHnDfds9v/kqSU3SK94gKWrOXxIxCxmzkLWl bdUJ22fPYfNmHZVFdpSqfFk32LyrAPecYOkMVSwQMz9443fDRBeOUYW7r6NLAVSH cRYWq1g2/L/PCVZe7OWIkRVTEv0ZFQk= -----END CERTIFICATE-----Generated at Sat Apr 5 12:26:32 2025 by rpki-client