$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ce0aee3-1008-344c-a400-65bec657ab76.roa File: 0ce0aee3-1008-344c-a400-65bec657ab76.roa (raw, json) Hash identifier: xp1Af7WWI7dLPJMOdarXuZDynZxAX6LtXIrFqy6zGxs= Subject key identifier: 78:D4:78:89:25:50:40:16:68:F4:DE:3E:88:4C:8F:21:A1:EF:4A:68 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849350EB92F5C694C540CCF8C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ce0aee3-1008-344c-a400-65bec657ab76.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 16625 IP address blocks: 104.96.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:b9:2f:5c:69:4c:54:0c:cf:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=bb241538-94f2-4da6-b637-e9839e0613ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ef:19:35:7f:11:66:85:15:78:27:f6:a4:a8: 3f:49:74:e8:a4:0c:7e:a3:ef:9d:29:45:5c:a1:c2: b8:35:48:a7:15:34:20:ba:39:e3:66:03:5e:4e:79: 1f:df:b1:47:ab:37:12:9a:23:e3:42:e2:72:44:96: aa:91:79:43:11:43:4d:31:6a:0d:54:59:ea:2c:81: b2:ae:41:47:e2:0b:9b:02:d7:74:33:96:7b:ef:44: 43:57:96:4f:26:89:42:07:c8:5c:0c:be:e2:40:14: 8d:46:37:d6:81:ad:db:76:93:db:cb:b9:80:15:db: 5d:31:50:3a:1e:80:3a:40:29:e4:83:94:d9:24:21: 3e:f6:ae:df:69:18:7c:3f:06:f2:3a:39:bc:85:56: 7d:8c:83:3e:6a:71:c0:cc:a7:3b:ce:a3:73:9b:e1: 77:6c:44:42:01:92:58:82:e6:73:e8:1c:8b:1f:ed: 33:21:b3:9d:58:4c:e8:3d:15:da:0d:dd:d2:ae:97: 7b:d8:09:00:7b:60:88:e2:90:e4:35:8a:51:99:d5: cb:08:1c:81:60:72:45:7e:ef:42:9c:73:06:9b:94: cd:84:a8:bb:bf:30:7a:43:de:f6:d8:4a:03:04:e1: 37:ed:60:1a:16:e9:15:f1:17:f3:5a:c8:92:d1:10: bb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D4:78:89:25:50:40:16:68:F4:DE:3E:88:4C:8F:21:A1:EF:4A:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ce0aee3-1008-344c-a400-65bec657ab76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.96.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:8c:4a:62:1e:1e:d9:c9:6f:ea:02:6b:02:4a:d4:ca:97:d2: 44:52:aa:9b:4f:60:24:e6:9c:d4:61:95:55:25:fb:29:05:5d: 60:70:1e:51:b7:4e:3c:71:dd:95:c4:12:07:0d:b5:99:9c:a6: a5:bb:4e:34:b5:fc:ef:b4:97:8a:31:f9:48:08:36:dc:80:e4: ba:87:d2:dc:bb:25:97:35:67:49:78:5f:34:33:f0:a1:7f:99: 66:70:4d:f9:33:5b:3f:22:91:73:ec:a0:4b:90:b9:88:7e:4d: 5e:28:4e:6e:ad:d2:72:b5:a4:33:40:98:1e:01:0a:96:26:d2: c4:18:90:93:90:10:f2:44:20:7a:3a:ca:f8:e9:b7:af:f1:0b: e8:30:b2:72:1e:3d:01:2a:96:92:8b:c8:eb:92:61:3f:96:2d: 1e:8d:5d:07:f8:76:71:12:04:65:93:d1:44:5e:a3:67:db:84: f0:f3:8d:dc:31:09:b4:ab:50:80:64:81:04:1c:cc:85:20:4a: d4:7e:21:8f:39:c4:41:42:39:4e:d9:16:d4:1b:55:6e:a2:45: 3e:dd:29:bc:f3:4e:ed:72:a8:5e:61:be:0d:c4:84:ff:7e:1a: 67:2c:8a:e8:9b:4c:1b:fb:c8:c0:5e:29:c9:83:8c:f9:c8:77: cf:34:ef:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DrkvXGlMVAzPjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk YmIyNDE1MzgtOTRmMi00ZGE2LWI2MzctZTk4MzllMDYxM2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlO8ZNX8RZoUVeCf2pKg/SXTopAx+o++dKUVc ocK4NUinFTQgujnjZgNeTnkf37FHqzcSmiPjQuJyRJaqkXlDEUNNMWoNVFnqLIGy rkFH4gubAtd0M5Z770RDV5ZPJolCB8hcDL7iQBSNRjfWga3bdpPby7mAFdtdMVA6 HoA6QCnkg5TZJCE+9q7faRh8PwbyOjm8hVZ9jIM+anHAzKc7zqNzm+F3bERCAZJY guZz6ByLH+0zIbOdWEzoPRXaDd3Srpd72AkAe2CI4pDkNYpRmdXLCByBYHJFfu9C nHMGm5TNhKi7vzB6Q9722EoDBOE37WAaFukV8RfzWsiS0RC7LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjUeIklUEAWaPTePohMjyGh70poMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGNlMGFlZTMtMTAwOC0z NDRjLWE0MDAtNjViZWM2NTdhYjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaGC4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSMSmIeHtnJb+oCawJK1MqX0kRSqptPYCTmnNRhlVUl+ykFXWBwHlG3 Tjxx3ZXEEgcNtZmcpqW7TjS1/O+0l4ox+UgINtyA5LqH0ty7JZc1Z0l4XzQz8KF/ mWZwTfkzWz8ikXPsoEuQuYh+TV4oTm6t0nK1pDNAmB4BCpYm0sQYkJOQEPJEIHo6 yvjpt6/xC+gwsnIePQEqlpKLyOuSYT+WLR6NXQf4dnESBGWT0UReo2fbhPDzjdwx CbSrUIBkgQQczIUgStR+IY85xEFCOU7ZFtQbVW6iRT7dKbzzTu1yqF5hvg3EhP9+ GmcsiuibTBv7yMBeKcmDjPnId8807+c= -----END CERTIFICATE-----Generated at Sat Apr 5 11:04:09 2025 by rpki-client