$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20a97c26-da6e-398c-96b3-adb7f27c2bba.roa File: 20a97c26-da6e-398c-96b3-adb7f27c2bba.roa (raw, json) Hash identifier: Xl4TvTh+QL13WGjsz79oakuhKdhD8XUc1Tn7DdIQ1RQ= Subject key identifier: 70:9F:63:5F:EE:69:9C:7E:D8:10:5A:C1:45:9B:1C:93:E1:C6:41:35 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A830B20F92F160C492E08C20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20a97c26-da6e-398c-96b3-adb7f27c2bba.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 9299 IP address blocks: 104.67.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:b2:0f:92:f1:60:c4:92:e0:8c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=87aa47bc-772c-46f4-8457-aa08794cab29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:45:ff:53:3a:42:75:fe:05:f7:72:da:a5:c3: 7d:2f:9f:a5:71:0a:e4:a9:26:6d:f0:be:da:e8:3d: 57:24:52:f4:44:ca:1c:b8:e7:12:8b:59:a1:a4:3c: 94:d0:10:e7:47:05:47:36:60:91:85:7f:73:c0:cb: a6:36:b7:80:fd:09:ae:7d:45:cf:8a:fb:20:da:4c: 4c:31:03:63:83:b2:24:55:2a:11:4e:99:30:83:ba: 36:0a:21:c4:cc:83:c2:f9:22:12:8c:56:29:8d:99: 7a:f1:55:6d:f9:98:63:16:9c:1a:fc:fe:2d:49:ea: 2a:af:f6:e9:9a:43:76:dd:77:c6:b6:99:d3:ee:24: fe:63:ca:c2:01:ad:5b:e9:32:9e:c1:23:4a:61:19: c3:c0:dc:7e:9d:c8:0a:37:b1:98:7e:20:e3:d4:60: 5b:4a:a9:1e:5e:5d:96:a7:ed:3e:20:f1:70:2b:f8: e9:54:26:95:7f:59:47:7d:ca:e5:7e:67:72:50:cd: 29:15:27:72:20:a1:d3:21:53:de:70:09:95:0a:49: 62:a7:ee:e1:d7:7d:4b:d1:65:44:b0:d4:c0:aa:12: e6:d2:82:79:a6:00:c3:27:2d:bd:07:4d:65:4a:e2: 9a:8a:34:a9:c6:f7:b0:66:48:ef:30:a3:53:de:22: 88:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:9F:63:5F:EE:69:9C:7E:D8:10:5A:C1:45:9B:1C:93:E1:C6:41:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20a97c26-da6e-398c-96b3-adb7f27c2bba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.67.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:25:93:29:ba:fd:52:ed:ea:c3:c2:ab:35:07:f4:ff:38:03: 82:0e:19:27:4e:cf:09:e7:be:6d:1a:15:da:7a:5a:bc:eb:a9: 5c:9f:84:4b:89:58:15:0b:c5:f7:33:19:b5:4f:bd:e0:78:81: fd:df:01:5e:8a:61:fb:6d:2b:37:9c:22:fd:b0:f1:ff:d4:67: f8:5f:00:e9:a8:07:c6:71:3d:93:01:b4:d9:a6:19:4d:f4:e3: c1:9e:b1:38:a2:c2:58:a8:3e:da:aa:f8:89:61:77:a0:8d:e3: 09:28:42:77:e6:95:c4:7e:09:fe:9b:7c:e3:15:0e:be:a2:59: 9c:c8:c9:64:17:18:15:6f:7f:35:f8:3d:d8:9a:98:cc:ec:15: 25:6b:36:86:14:e2:cf:ea:0b:b6:08:61:94:e7:26:a7:4b:1e: 9b:4c:43:13:64:4e:bb:7f:a4:3a:ad:18:c1:ca:e9:ca:d1:ca: 62:0c:03:d6:b1:a5:c0:fe:f3:64:b2:0f:86:d8:7f:2f:00:60: 0f:be:ed:59:5d:b0:49:72:11:e5:3e:54:77:0b:fc:0b:f6:32: 60:ca:6d:bd:e0:7e:a9:21:d1:ce:7b:04:cc:38:0b:1e:a5:34: c9:18:f6:06:27:5c:58:a1:3a:9f:cf:75:98:a4:39:e3:2b:ea: 5b:a3:8a:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMLIPkvFgxJLgjCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk ODdhYTQ3YmMtNzcyYy00NmY0LTg0NTctYWEwODc5NGNhYjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUX/UzpCdf4F93LapcN9L5+lcQrkqSZt8L7a 6D1XJFL0RMocuOcSi1mhpDyU0BDnRwVHNmCRhX9zwMumNreA/QmufUXPivsg2kxM MQNjg7IkVSoRTpkwg7o2CiHEzIPC+SISjFYpjZl68VVt+ZhjFpwa/P4tSeoqr/bp mkN23XfGtpnT7iT+Y8rCAa1b6TKewSNKYRnDwNx+ncgKN7GYfiDj1GBbSqkeXl2W p+0+IPFwK/jpVCaVf1lHfcrlfmdyUM0pFSdyIKHTIVPecAmVCklip+7h131L0WVE sNTAqhLm0oJ5pgDDJy29B01lSuKaijSpxvewZkjvMKNT3iKIsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCfY1/uaZx+2BBawUWbHJPhxkE1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjBhOTdjMjYtZGE2ZS0z OThjLTk2YjMtYWRiN2YyN2MyYmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaEOgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4lkym6/VLt6sPCqzUH9P84A4IOGSdOzwnnvm0aFdp6WrzrqVyfhEuJ WBULxfczGbVPveB4gf3fAV6KYfttKzecIv2w8f/UZ/hfAOmoB8ZxPZMBtNmmGU30 48GesTiiwlioPtqq+Ilhd6CN4wkoQnfmlcR+Cf6bfOMVDr6iWZzIyWQXGBVvfzX4 PdiamMzsFSVrNoYU4s/qC7YIYZTnJqdLHptMQxNkTrt/pDqtGMHK6crRymIMA9ax pcD+82SyD4bYfy8AYA++7VldsElyEeU+VHcL/Av2MmDKbb3gfqkh0c57BMw4Cx6l NMkY9gYnXFihOp/PdZikOeMr6lujigY= -----END CERTIFICATE-----Generated at Sat Apr 5 10:53:40 2025 by rpki-client