$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25c1edc8-2393-33e5-9a57-416cf07a8189.roa File: 25c1edc8-2393-33e5-9a57-416cf07a8189.roa (raw, json) Hash identifier: uuemTDyTEp31FdoB2lYq8sWJhGATrAf15AP88OEpWCw= Subject key identifier: 19:51:AE:4B:02:0C:AF:76:A9:8C:6D:E4:D5:89:38:DA:9A:54:B6:74 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849350EB576E64C2F0CD1E0EDC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25c1edc8-2393-33e5-9a57-416cf07a8189.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 20940 IP address blocks: 104.86.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:b5:76:e6:4c:2f:0c:d1:e0:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=24956c2c-ef10-44d7-9a24-a1be1a7a71ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:71:ce:c0:a7:e3:8b:e4:b8:4f:54:0b:a7:8a: c6:40:d5:c5:b2:71:01:f9:86:da:4f:1a:a3:17:ed: d0:70:7e:02:cf:fd:ae:42:54:96:14:3f:16:14:6c: 51:03:3b:77:d9:94:76:df:88:00:6a:b9:7c:8f:3b: 6b:9e:ca:ba:bb:06:92:15:f3:8f:88:69:a0:94:3b: 2b:0d:c6:11:0b:f6:ac:b1:ff:87:39:b6:c3:f0:db: c6:11:50:ea:ba:8e:18:6e:64:8a:ec:41:48:2f:c2: ad:79:87:1d:8a:c8:0d:be:2b:17:b3:4b:82:6d:7f: 4e:c2:4a:45:6b:89:e1:3f:1c:d9:50:10:95:dc:93: ab:a9:d9:61:10:a3:7c:18:a3:bf:b2:73:d3:dd:bb: 18:cd:ad:5f:4e:35:77:58:5c:cc:fb:a3:29:1d:86: 45:08:9b:fe:06:05:70:76:ce:1a:f3:fb:43:b9:75: 61:03:72:51:41:d5:a0:e8:f8:23:72:a7:39:ca:af: 97:cd:65:bf:d0:52:13:e8:7c:c6:a7:98:52:2a:ab: 70:52:1c:16:c1:d4:ee:ea:80:0b:89:c7:fa:d0:e4: ab:2f:a0:c2:f2:0a:77:93:78:d3:b1:43:fd:80:d1: f6:a1:05:6b:e9:43:d2:a5:ae:c4:eb:b0:2c:57:7c: 44:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:51:AE:4B:02:0C:AF:76:A9:8C:6D:E4:D5:89:38:DA:9A:54:B6:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25c1edc8-2393-33e5-9a57-416cf07a8189.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.86.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:51:39:6d:6b:7e:b3:f8:10:eb:e5:b6:57:5b:98:f1:3d:77: a5:e7:de:32:18:44:1b:5e:11:7d:68:9d:bc:e9:1f:4b:18:d9: 77:2a:13:70:5d:92:b1:7e:c5:34:26:1d:da:e9:eb:aa:53:7b: 0c:cf:e8:04:8c:f4:df:09:7c:15:ca:2a:6e:ef:f5:2b:00:9c: 77:39:b9:35:09:65:8e:69:ec:a9:86:ef:d1:7c:c9:6f:49:ef: 95:1e:43:a2:fa:39:a9:36:b6:ad:39:27:15:1e:bf:4c:aa:df: dc:68:72:15:a5:bc:37:5b:67:30:49:58:2c:e1:e6:91:8b:94: 57:d3:54:37:c1:87:c5:88:09:69:a7:63:99:fc:65:69:b7:d3: 18:73:32:c5:52:9f:9c:c6:d3:80:24:fb:96:c7:17:a5:ca:18: b2:9e:81:b9:75:d2:74:f6:e5:1e:9c:71:32:1f:7d:d3:a3:0c: 13:a1:cc:33:00:fb:89:f8:a4:f3:e2:d6:70:87:c7:1d:a7:64: 7a:f2:0a:35:98:15:86:57:17:f8:a1:2b:2a:dd:56:95:86:11: a3:59:75:11:48:78:fb:21:f2:6a:87:9a:b6:49:ae:af:3a:17: 7b:56:c8:75:d2:ee:25:dd:78:b8:a1:23:dc:32:ab:0e:73:5e: 65:bf:41:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DrV25kwvDNHg7cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk MjQ5NTZjMmMtZWYxMC00NGQ3LTlhMjQtYTFiZTFhN2E3MWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnHOwKfji+S4T1QLp4rGQNXFsnEB+YbaTxqj F+3QcH4Cz/2uQlSWFD8WFGxRAzt32ZR234gAarl8jztrnsq6uwaSFfOPiGmglDsr DcYRC/assf+HObbD8NvGEVDquo4YbmSK7EFIL8KteYcdisgNvisXs0uCbX9OwkpF a4nhPxzZUBCV3JOrqdlhEKN8GKO/snPT3bsYza1fTjV3WFzM+6MpHYZFCJv+BgVw ds4a8/tDuXVhA3JRQdWg6Pgjcqc5yq+XzWW/0FIT6HzGp5hSKqtwUhwWwdTu6oAL icf60OSrL6DC8gp3k3jTsUP9gNH2oQVr6UPSpa7E67AsV3xETwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlRrksCDK92qYxt5NWJONqaVLZ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjVjMWVkYzgtMjM5My0z M2U1LTlhNTctNDE2Y2YwN2E4MTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaFa/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdROW1rfrP4EOvltldbmPE9d6Xn3jIYRBteEX1onbzpH0sY2XcqE3Bd krF+xTQmHdrp66pTewzP6ASM9N8JfBXKKm7v9SsAnHc5uTUJZY5p7KmG79F8yW9J 75UeQ6L6Oak2tq05JxUev0yq39xochWlvDdbZzBJWCzh5pGLlFfTVDfBh8WICWmn Y5n8ZWm30xhzMsVSn5zG04Ak+5bHF6XKGLKegbl10nT25R6ccTIffdOjDBOhzDMA +4n4pPPi1nCHxx2nZHryCjWYFYZXF/ihKyrdVpWGEaNZdRFIePsh8mqHmrZJrq86 F3tWyHXS7iXdeLihI9wyqw5zXmW/QTU= -----END CERTIFICATE-----Generated at Sat Apr 5 11:08:57 2025 by rpki-client