$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ec66764-de3c-396b-8fb9-7220c150b28e.roa File: 1ec66764-de3c-396b-8fb9-7220c150b28e.roa (raw, json) Hash identifier: 1/I9VBb6BnWK3NVH2NgJ7blAiK6aKEWyVRbIHSbAtEw= Subject key identifier: A5:45:08:C5:98:1F:8B:54:93:08:EC:A6:C4:9C:42:82:BF:F9:CB:10 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849350EB638758BA9BE101BBF80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ec66764-de3c-396b-8fb9-7220c150b28e.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 20940 IP address blocks: 104.89.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:b6:38:75:8b:a9:be:10:1b:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=6d3dd394-20b9-46b3-815d-e557435446d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d6:aa:92:83:a2:13:3b:d6:77:8d:37:09:ba: d8:e5:bc:7a:5e:62:0f:f2:dd:cb:91:41:51:30:b1: 00:f1:24:a6:9a:6d:92:30:54:74:ee:6d:2f:9d:8d: 16:16:72:b5:2c:e8:96:a8:54:05:02:3b:ba:fe:57: a0:57:f2:b6:a8:58:92:7c:5b:08:0d:b3:c4:66:8f: 61:89:d4:fa:20:89:ca:64:e3:dc:c7:db:b6:7f:40: 43:a1:66:7d:76:e5:b6:0c:9b:54:93:4c:f1:40:d0: 47:79:de:84:30:4e:9a:f0:df:a5:9c:8b:9f:ba:6f: be:0d:02:57:94:a5:1f:e5:0a:d7:57:df:e3:91:35: 67:55:55:e9:dc:bb:d2:29:f3:12:79:c0:2b:4c:0e: 04:69:03:93:29:f2:81:68:9f:9d:ef:cf:e0:53:cc: 9a:36:34:82:b4:b1:b7:dc:81:93:19:aa:4c:ff:32: 17:76:9c:65:82:11:8c:17:dd:0a:a8:52:35:ae:8d: a2:22:42:7a:5a:6d:97:c7:92:f0:50:be:0d:e1:3d: 0b:8f:94:59:8d:49:eb:da:04:4f:cc:d9:18:e0:c6: bf:f5:60:0c:47:88:d3:46:b7:19:05:eb:0f:03:a9: 47:18:93:3d:ab:95:d3:9b:ee:30:be:be:93:95:b6: 0c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:45:08:C5:98:1F:8B:54:93:08:EC:A6:C4:9C:42:82:BF:F9:CB:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ec66764-de3c-396b-8fb9-7220c150b28e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.89.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:b7:9b:dc:2f:b1:7b:8b:ee:ce:ff:17:d6:a9:f6:f5:2a:9a: fb:af:61:f7:4c:2a:03:50:6a:81:d4:28:ad:3f:7b:5a:83:a1: 43:f4:8f:37:d5:b7:3b:60:45:d2:6d:4b:5a:9d:dd:5a:46:c9: 9c:c0:c1:9b:dc:4b:df:51:d2:b0:c5:5c:6b:ad:90:23:73:d0: 69:18:1d:b9:03:ea:cd:12:65:0b:87:60:43:2e:a1:34:f3:c7: 5b:f2:8f:39:a9:4c:6b:38:c0:2e:19:2a:37:8e:cc:2a:64:df: 8b:38:a1:10:bc:62:a0:65:ab:55:b3:53:9e:cb:25:01:ac:e5: 34:ea:be:48:d0:70:88:d1:70:d0:a3:8c:15:2f:d3:d9:ab:16: 96:bf:af:a7:96:ac:e4:ed:9a:ad:f7:de:78:c2:ba:fa:1d:57: d1:67:8e:f1:5b:07:83:8a:fa:bc:29:f4:55:68:75:e1:1f:f6: 9f:2e:34:15:32:52:7a:7a:8b:2b:b4:b0:e8:3f:72:64:89:f3: c7:87:79:b8:1d:08:4a:31:0a:a6:4f:29:d6:61:bf:81:09:a7: 69:1a:6a:7d:0d:d2:ea:d2:12:aa:fd:bb:5b:d6:20:18:c2:f5: ad:73:bd:cb:f0:44:63:00:ff:4e:b6:c1:5c:af:94:4d:ab:6e: 18:2a:9c:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DrY4dYupvhAbv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk NmQzZGQzOTQtMjBiOS00NmIzLTgxNWQtZTU1NzQzNTQ0NmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidaqkoOiEzvWd403CbrY5bx6XmIP8t3LkUFR MLEA8SSmmm2SMFR07m0vnY0WFnK1LOiWqFQFAju6/legV/K2qFiSfFsIDbPEZo9h idT6IInKZOPcx9u2f0BDoWZ9duW2DJtUk0zxQNBHed6EME6a8N+lnIufum++DQJX lKUf5QrXV9/jkTVnVVXp3LvSKfMSecArTA4EaQOTKfKBaJ+d78/gU8yaNjSCtLG3 3IGTGapM/zIXdpxlghGMF90KqFI1ro2iIkJ6Wm2Xx5LwUL4N4T0Lj5RZjUnr2gRP zNkY4Ma/9WAMR4jTRrcZBesPA6lHGJM9q5XTm+4wvr6TlbYMuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVFCMWYH4tUkwjspsScQoK/+csQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWVjNjY3NjQtZGUzYy0z OTZiLThmYjktNzIyMGMxNTBiMjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaFmqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADi3m9wvsXuL7s7/F9ap9vUqmvuvYfdMKgNQaoHUKK0/e1qDoUP0jzfV tztgRdJtS1qd3VpGyZzAwZvcS99R0rDFXGutkCNz0GkYHbkD6s0SZQuHYEMuoTTz x1vyjzmpTGs4wC4ZKjeOzCpk34s4oRC8YqBlq1WzU57LJQGs5TTqvkjQcIjRcNCj jBUv09mrFpa/r6eWrOTtmq333njCuvodV9FnjvFbB4OK+rwp9FVodeEf9p8uNBUy Unp6iyu0sOg/cmSJ88eHebgdCEoxCqZPKdZhv4EJp2kaan0N0urSEqr9u1vWIBjC 9a1zvcvwRGMA/062wVyvlE2rbhgqnMY= -----END CERTIFICATE-----Generated at Sat Apr 5 11:01:28 2025 by rpki-client