$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e27cd7e-778a-31b9-bd12-05ac9afccd75.roa File: 0e27cd7e-778a-31b9-bd12-05ac9afccd75.roa (raw, json) Hash identifier: kfLIBdi6QNIaP9pjSGm6FPwA5AoX3myy1uXtOix5Mwk= Subject key identifier: CA:3B:F9:51:11:14:AA:29:82:76:C3:3B:EE:07:45:24:05:03:39:96 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858493243F92D2DB626738731C840 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e27cd7e-778a-31b9-bd12-05ac9afccd75.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 16625 IP address blocks: 104.72.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:f9:2d:2d:b6:26:73:87:31:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=506b1075-ad23-4186-abd9-9eb8976ae38a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a5:16:85:c4:67:60:fb:f0:76:64:82:b2:c5: 8c:e5:cb:71:a4:d2:aa:40:8f:48:b5:f2:e6:08:e4: 33:fd:e3:42:0b:85:f5:c4:fe:77:b7:6f:2c:05:59: e2:92:11:99:de:01:d8:43:c4:d6:2e:5b:f9:b6:97: 57:cc:08:f2:a4:57:8e:0e:4f:f9:33:23:3e:11:89: f2:33:7b:f2:92:18:1c:f9:2c:87:8b:14:f1:e5:90: 2b:92:f0:8b:81:3c:c8:af:8c:34:aa:fc:47:7c:a6: b5:4e:42:00:8e:ce:99:89:ae:b0:56:49:95:45:36: ad:5d:35:df:4b:f9:fb:49:07:8d:1c:6a:75:56:4f: 75:95:55:58:36:6b:e3:a9:dc:6c:36:88:48:36:fc: 5d:60:fe:a6:d4:02:90:5e:1f:19:f9:8e:8d:c1:0b: 4d:1d:5b:ef:33:02:b6:4e:f9:96:7a:6e:58:ad:e0: d2:44:ff:07:d2:da:86:88:16:8d:4d:b1:88:fd:de: 0c:30:6b:7a:e0:3b:08:0c:bd:79:58:ca:23:70:02: 8c:36:c8:b0:a2:28:2f:15:0c:8e:c7:a5:60:a7:1a: 1e:a0:b3:65:3f:e4:73:43:08:a7:5a:72:0b:3c:41: 0b:7b:86:c5:da:cb:33:2f:77:6b:ae:62:a5:16:de: df:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:3B:F9:51:11:14:AA:29:82:76:C3:3B:EE:07:45:24:05:03:39:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e27cd7e-778a-31b9-bd12-05ac9afccd75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.72.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:68:04:ef:59:6e:7c:e7:56:2f:24:69:fa:a2:c6:1a:b2:67: af:c6:63:7c:00:6b:51:4b:48:d2:6f:59:0e:f1:dc:19:f7:7d: 77:1b:2c:b4:c4:97:7c:bc:60:66:24:67:78:08:c4:57:c0:8a: 1b:ac:80:d5:80:08:c5:17:28:5a:18:52:dd:2a:0e:4a:da:3e: 9a:eb:4e:11:14:9e:69:5d:60:51:6e:2b:ce:80:8e:8e:8f:9c: 96:59:12:42:ab:69:54:49:8b:cd:85:76:9b:1f:47:8e:19:f9: fd:34:97:30:6b:0d:fc:21:be:9c:2f:e2:7f:be:18:05:3b:1b: 6d:d5:72:be:f9:3b:7b:59:4f:03:b3:a5:96:d8:f2:ef:23:60: 85:8b:c0:2b:7c:5c:51:33:2d:09:e9:65:cf:93:68:6e:82:cf: d1:bd:e6:5b:5f:4f:15:c6:1d:ef:2b:dc:01:ef:97:ca:c0:d1: ef:2a:df:d8:29:58:49:47:11:a3:49:9c:76:e5:ba:4f:3a:7e: 11:b6:55:2b:76:d6:d9:34:63:90:24:4f:cf:21:cd:f4:b6:34: c8:91:b6:4a:d4:36:13:c7:33:61:2e:d4:d5:69:5d:61:d3:3c: cb:87:16:0b:bb:b2:57:28:75:10:e1:c6:42:05:f4:c7:bf:d6: 75:5f:f0:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ/ktLbYmc4cxyEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk NTA2YjEwNzUtYWQyMy00MTg2LWFiZDktOWViODk3NmFlMzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qUWhcRnYPvwdmSCssWM5ctxpNKqQI9ItfLm COQz/eNCC4X1xP53t28sBVnikhGZ3gHYQ8TWLlv5tpdXzAjypFeODk/5MyM+EYny M3vykhgc+SyHixTx5ZArkvCLgTzIr4w0qvxHfKa1TkIAjs6Zia6wVkmVRTatXTXf S/n7SQeNHGp1Vk91lVVYNmvjqdxsNohINvxdYP6m1AKQXh8Z+Y6NwQtNHVvvMwK2 TvmWem5YreDSRP8H0tqGiBaNTbGI/d4MMGt64DsIDL15WMojcAKMNsiwoigvFQyO x6VgpxoeoLNlP+RzQwinWnILPEELe4bF2sszL3drrmKlFt7fCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMo7+VERFKopgnbDO+4HRSQFAzmWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGUyN2NkN2UtNzc4YS0z MWI5LWJkMTItMDVhYzlhZmNjZDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaEicMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRoBO9ZbnznVi8kafqixhqyZ6/GY3wAa1FLSNJvWQ7x3Bn3fXcbLLTE l3y8YGYkZ3gIxFfAihusgNWACMUXKFoYUt0qDkraPprrThEUnmldYFFuK86Ajo6P nJZZEkKraVRJi82FdpsfR44Z+f00lzBrDfwhvpwv4n++GAU7G23Vcr75O3tZTwOz pZbY8u8jYIWLwCt8XFEzLQnpZc+TaG6Cz9G95ltfTxXGHe8r3AHvl8rA0e8q39gp WElHEaNJnHbluk86fhG2VSt21tk0Y5AkT88hzfS2NMiRtkrUNhPHM2Eu1NVpXWHT PMuHFgu7slcodRDhxkIF9Me/1nVf8AE= -----END CERTIFICATE-----Generated at Sat Apr 5 11:03:47 2025 by rpki-client