$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/11a001cc-88de-32eb-a7ec-453613c9f731.roa File: 11a001cc-88de-32eb-a7ec-453613c9f731.roa (raw, json) Hash identifier: mD/6HXZOq4frz4S+xEDWEc33wkWqok4rCTH2qiH+JvQ= Subject key identifier: 9A:04:50:E2:08:57:B0:E4:E4:02:09:A1:E5:FF:7B:E4:EC:71:F7:FF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584937D9418CCC0C1D032C3AB980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/11a001cc-88de-32eb-a7ec-453613c9f731.roa Signing time: Mon 17 Mar 2025 13:00:52 +0000 ROA not before: Mon 17 Mar 2025 13:00:52 +0000 ROA not after: Sun 15 Jun 2025 13:00:52 +0000 asID: 16625 IP address blocks: 104.108.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:37:d9:41:8c:cc:0c:1d:03:2c:3a:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 17 13:00:52 2025 GMT Not After : Jun 15 13:00:52 2025 GMT Subject: CN=a9788a35-ee4c-44e1-9c29-6f2a99f6c27e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d2:fd:39:bc:84:e8:b3:35:35:42:0f:ab:e7: 2a:51:d8:2f:76:68:f7:ce:d6:e0:84:c7:93:2e:9a: 85:a5:5b:23:58:ec:c3:04:cd:78:76:6d:d1:ef:52: 83:82:3f:58:f8:01:ee:ec:53:09:1c:89:a0:76:83: bc:89:2b:20:6d:b5:ac:cd:ee:5b:0c:0f:9e:01:87: 99:47:d7:4b:08:4f:03:ff:3c:18:8b:03:2f:4d:a0: 68:68:3d:eb:5b:6b:dd:74:48:22:e3:22:86:08:bb: 81:36:4b:64:5d:59:78:65:48:a5:08:4e:5a:21:84: 5e:5b:88:a0:30:c8:6c:b3:23:59:1e:0b:64:c4:8e: e8:f7:af:d1:49:08:49:9c:9f:8b:9d:52:5f:ff:34: e4:78:74:e9:bb:95:0d:3a:88:df:b9:05:37:7d:10: eb:07:ca:a5:98:aa:71:5e:e0:ab:60:ec:aa:60:92: 54:b7:50:e9:89:8e:0f:62:3c:a4:e5:54:f2:af:e0: 32:23:53:8c:45:79:64:62:36:10:c8:7d:d2:08:8e: 23:56:06:f6:67:9b:a8:b7:2f:5c:18:c2:93:44:72: 21:3b:33:3a:2f:60:76:b1:3c:b0:08:71:4f:e9:38: 08:02:95:7a:24:29:c9:78:e2:4b:24:7a:76:80:26: 18:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:04:50:E2:08:57:B0:E4:E4:02:09:A1:E5:FF:7B:E4:EC:71:F7:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/11a001cc-88de-32eb-a7ec-453613c9f731.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.108.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:0c:28:cc:5e:e8:e1:62:92:31:40:8d:51:42:78:c9:09:0f: 47:7f:db:de:a4:38:3d:95:25:cc:a2:cc:34:db:33:6d:3e:2b: 59:f2:92:10:1e:2d:57:71:ca:44:a7:9b:d2:a4:37:39:d0:59: a6:04:b8:be:88:9e:d1:3e:8d:3f:cd:ae:d6:b2:c1:d8:22:17: e1:9f:5f:d7:0d:69:45:b4:19:42:65:c4:ba:b4:5c:d4:b7:df: d9:a2:6e:2e:ea:4a:01:59:96:c9:8d:dc:67:e6:32:e7:76:76: 03:61:4e:1c:4c:8d:ef:ba:1e:bb:0e:b7:a0:dd:37:7e:11:ad: d7:98:59:63:ec:37:ad:f9:90:44:ea:c7:22:94:1f:51:8c:dd: 38:fa:0e:10:4a:06:b2:50:f0:78:b4:69:e8:e9:97:36:70:27: 9f:c7:dc:60:b2:f4:4e:d6:ab:9f:06:c6:e1:53:5a:1e:69:7a: 9d:28:c3:fe:88:44:24:b3:96:82:69:fa:a3:4e:24:4b:69:52: 91:b9:a9:dc:62:79:91:07:f1:eb:85:6f:60:7c:98:1e:69:54: 0d:9e:ef:4a:0f:e9:b5:05:ca:0a:ac:0a:cd:5f:5d:88:b6:a2: 2d:0c:4a:76:e0:bd:1b:b5:64:0a:e7:9e:a0:2b:8e:42:e6:0f: ff:e1:7a:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk32UGMzAwdAyw6uYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxNzEzMDA1MloXDTI1MDYxNTEzMDA1MlowLzEtMCsGA1UEAxMk YTk3ODhhMzUtZWU0Yy00NGUxLTljMjktNmYyYTk5ZjZjMjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdL9ObyE6LM1NUIPq+cqUdgvdmj3ztbghMeT LpqFpVsjWOzDBM14dm3R71KDgj9Y+AHu7FMJHImgdoO8iSsgbbWsze5bDA+eAYeZ R9dLCE8D/zwYiwMvTaBoaD3rW2vddEgi4yKGCLuBNktkXVl4ZUilCE5aIYReW4ig MMhssyNZHgtkxI7o96/RSQhJnJ+LnVJf/zTkeHTpu5UNOojfuQU3fRDrB8qlmKpx XuCrYOyqYJJUt1DpiY4PYjyk5VTyr+AyI1OMRXlkYjYQyH3SCI4jVgb2Z5uoty9c GMKTRHIhOzM6L2B2sTywCHFP6TgIApV6JCnJeOJLJHp2gCYYaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoEUOIIV7Dk5AIJoeX/e+Tscff/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTFhMDAxY2MtODhkZS0z MmViLWE3ZWMtNDUzNjEzYzlmNzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaGxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEMKMxe6OFikjFAjVFCeMkJD0d/296kOD2VJcyizDTbM20+K1nykhAe LVdxykSnm9KkNznQWaYEuL6IntE+jT/NrtaywdgiF+GfX9cNaUW0GUJlxLq0XNS3 39mibi7qSgFZlsmN3GfmMud2dgNhThxMje+6HrsOt6DdN34RrdeYWWPsN635kETq xyKUH1GM3Tj6DhBKBrJQ8Hi0aejplzZwJ5/H3GCy9E7Wq58GxuFTWh5pep0ow/6I RCSzloJp+qNOJEtpUpG5qdxieZEH8euFb2B8mB5pVA2e70oP6bUFygqsCs1fXYi2 oi0MSnbgvRu1ZArnnqArjkLmD//hetY= -----END CERTIFICATE-----Generated at Sat Apr 5 11:04:02 2025 by rpki-client