$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/169e68fd-e9e4-3a73-baad-afb0efa4b6be.roa File: 169e68fd-e9e4-3a73-baad-afb0efa4b6be.roa (raw, json) Hash identifier: vS3ePvAVUaSkhl2KNBwQ3vCyZhgRKAcnMBNBssXVLhE= Subject key identifier: B2:89:BF:5D:4F:53:0B:4E:58:DE:05:58:71:31:52:D7:1D:7E:A4:0B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849350EB9AE391C6A47755A3900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/169e68fd-e9e4-3a73-baad-afb0efa4b6be.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 20940 IP address blocks: 104.97.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:b9:ae:39:1c:6a:47:75:5a:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=ebac37f1-7d37-4f05-8c59-04f7a82c9d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:72:08:97:c9:a3:3a:29:1d:a0:e3:bb:e3:c6: ab:66:41:06:b8:4b:82:e9:e0:26:4b:fd:80:6d:86: 97:90:ea:94:2f:6a:5c:2a:af:71:f9:46:b7:bb:f8: 65:40:79:3b:1f:1d:a8:4b:a5:ac:19:ba:9c:06:bf: 78:21:2f:45:43:b4:2f:fc:57:d6:12:fc:19:27:de: 31:79:1f:7e:2e:1f:7c:e3:d3:d5:a6:23:ce:93:3a: 44:1f:da:4f:4d:36:8f:70:b1:6e:a1:a4:57:9e:a7: 55:59:bb:7e:14:6e:9a:25:a0:37:db:89:54:d2:c3: f4:56:28:ce:3b:bc:cb:2e:eb:32:e9:17:8e:4b:6c: 43:78:f6:eb:81:51:6a:10:70:e8:81:9a:3c:89:24: 71:ab:26:81:6e:c1:f0:49:48:88:ed:f6:6c:2e:fc: 86:8d:bb:58:54:f6:b6:19:5f:28:4a:ee:1f:b4:ff: 98:ae:a6:0e:6f:be:ee:34:9a:b3:a9:31:76:68:6d: 8b:26:2f:f7:4d:be:5e:c8:61:18:91:de:cc:f5:e1: 53:81:9e:7b:5e:d6:5f:e3:fc:a8:e3:16:bb:af:ea: 26:44:bf:8c:05:36:08:22:d0:e0:3e:5c:dd:db:bc: a6:1d:f8:95:41:e4:38:94:72:05:58:06:6b:90:f2: ed:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:89:BF:5D:4F:53:0B:4E:58:DE:05:58:71:31:52:D7:1D:7E:A4:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/169e68fd-e9e4-3a73-baad-afb0efa4b6be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.97.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:35:91:7d:4e:ea:2a:8e:c5:00:89:a4:fb:ff:a7:9a:31:bc: d4:b5:c5:c1:84:cb:13:74:11:31:3d:c9:8e:f0:1e:54:9f:52: b1:18:4c:4e:9a:33:c4:c6:41:07:e0:23:06:c6:2f:f6:cf:09: e1:63:5e:15:19:29:ee:f0:07:ef:0c:40:ae:57:6c:f4:bb:32: dd:f8:04:75:b1:ad:38:e7:b5:dc:40:d1:75:d1:16:da:c1:96: 41:fb:a6:ef:e8:8a:8a:1d:4f:6c:a0:27:45:2f:38:09:5e:44: 95:a5:85:ce:39:f0:eb:05:c6:0a:05:8c:db:7d:c0:f8:a8:e5: d4:87:82:6f:0f:dd:9b:ca:ea:63:4a:9b:fe:5a:78:69:1c:2f: 4d:a0:a4:80:82:76:7f:93:98:0f:6c:d8:43:fa:9e:4f:ad:0e: 43:2f:9b:9e:6a:a9:5f:70:44:ce:c7:77:fe:8c:10:cc:c5:3d: 1f:c0:79:61:1c:b3:27:b4:72:e5:f6:ad:29:76:1d:28:40:58: 85:cc:74:03:42:15:7c:3f:33:53:d9:70:60:71:d6:6f:0e:8a: e1:48:73:d7:f4:66:9a:cc:d7:a3:f4:b6:8d:f7:03:14:6f:03: a3:d8:b3:7e:c3:b7:35:bc:c5:89:a8:87:5d:f5:11:39:57:9f: b7:98:a9:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DrmuORxqR3VaOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk ZWJhYzM3ZjEtN2QzNy00ZjA1LThjNTktMDRmN2E4MmM5ZDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HIIl8mjOikdoOO748arZkEGuEuC6eAmS/2A bYaXkOqUL2pcKq9x+Ua3u/hlQHk7Hx2oS6WsGbqcBr94IS9FQ7Qv/FfWEvwZJ94x eR9+Lh9849PVpiPOkzpEH9pPTTaPcLFuoaRXnqdVWbt+FG6aJaA324lU0sP0VijO O7zLLusy6ReOS2xDePbrgVFqEHDogZo8iSRxqyaBbsHwSUiI7fZsLvyGjbtYVPa2 GV8oSu4ftP+YrqYOb77uNJqzqTF2aG2LJi/3Tb5eyGEYkd7M9eFTgZ57XtZf4/yo 4xa7r+omRL+MBTYIItDgPlzd27ymHfiVQeQ4lHIFWAZrkPLtmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKJv11PUwtOWN4FWHExUtcdfqQLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTY5ZTY4ZmQtZTllNC0z YTczLWJhYWQtYWZiMGVmYTRiNmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaGEDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHY1kX1O6iqOxQCJpPv/p5oxvNS1xcGEyxN0ETE9yY7wHlSfUrEYTE6a M8TGQQfgIwbGL/bPCeFjXhUZKe7wB+8MQK5XbPS7Mt34BHWxrTjntdxA0XXRFtrB lkH7pu/oioodT2ygJ0UvOAleRJWlhc458OsFxgoFjNt9wPio5dSHgm8P3ZvK6mNK m/5aeGkcL02gpICCdn+TmA9s2EP6nk+tDkMvm55qqV9wRM7Hd/6MEMzFPR/AeWEc sye0cuX2rSl2HShAWIXMdANCFXw/M1PZcGBx1m8OiuFIc9f0ZprM16P0to33AxRv A6PYs37DtzW8xYmoh131ETlXn7eYqZE= -----END CERTIFICATE-----Generated at Sat Apr 5 11:09:03 2025 by rpki-client