$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3428ef8d-ac0f-3150-a5bb-afb18a26fcf0.roa File: 3428ef8d-ac0f-3150-a5bb-afb18a26fcf0.roa (raw, json) Hash identifier: 6nmwLibxD89XUWrPhGOvF0uGM4psylaCVfl50UKOyNU= Subject key identifier: 2E:74:35:A8:68:C4:CB:9E:DC:BD:22:A3:AC:ED:C6:0D:DB:43:70:D3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849350EC010AAE2DD410D44F980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3428ef8d-ac0f-3150-a5bb-afb18a26fcf0.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 16625 IP address blocks: 104.87.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:c0:10:aa:e2:dd:41:0d:44:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=4c8b04fd-eca8-4ce1-ad9b-d40a18119e98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d9:2b:02:ab:2b:aa:a8:ff:dc:3c:f7:b8:b0: ad:69:c0:b4:da:c7:c0:4e:bb:d0:7d:19:5e:b0:24: 94:3f:92:66:e8:f1:ca:a4:66:18:38:38:7f:d1:73: 91:1e:08:04:19:18:09:15:0e:8b:50:f1:94:70:d4: bd:fb:ba:c2:8c:3a:41:86:7e:6d:1e:a9:d2:24:b2: 07:cb:cb:54:55:7d:8c:be:96:78:22:b0:5e:51:80: 79:c3:3f:bd:05:a4:7f:91:4d:5e:2b:d4:22:37:fa: 90:0d:b0:43:87:a4:d2:21:85:db:c0:38:8d:39:f4: 05:b7:2c:0a:63:d4:d8:d0:f9:77:67:86:5c:ce:e2: 2b:8f:5d:e1:37:6d:f1:c9:53:00:45:fd:38:37:e1: 5f:5c:8a:38:9b:3b:fb:4e:f3:c6:19:af:a9:09:60: b7:17:34:71:20:d7:2c:5e:16:21:e9:5e:a8:eb:e4: 2a:84:6c:f3:d4:fe:c3:29:80:9e:9a:ad:ba:01:c0: 5e:d1:12:e3:0f:69:2f:8b:ba:e2:d9:0c:44:4f:80: 55:50:65:02:0e:ed:64:d3:9f:31:e4:a2:e6:60:7d: 49:55:dc:7e:a1:d5:ce:b3:6a:40:15:58:fa:37:72: 19:4b:42:43:c5:34:4d:f1:44:88:db:a5:92:c0:04: 20:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:74:35:A8:68:C4:CB:9E:DC:BD:22:A3:AC:ED:C6:0D:DB:43:70:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3428ef8d-ac0f-3150-a5bb-afb18a26fcf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.87.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:99:c0:7d:ce:7b:96:77:e0:29:17:af:fa:61:63:a0:26:c7: 14:5a:a9:93:c2:a3:d3:e8:46:20:f9:e3:64:72:72:34:a6:6b: f1:e0:a7:b1:57:ce:da:89:59:f3:dc:a1:05:8b:5a:6c:66:0b: a7:2a:1b:82:6c:ee:d6:c2:de:13:d8:0a:92:e4:9a:51:93:aa: 0f:92:45:9d:0d:47:ef:2f:82:6f:95:3c:1d:5c:a0:8e:aa:c5: d9:82:c0:61:ea:b1:ea:47:7f:1f:00:df:1d:9e:60:02:00:03: 22:2e:be:dc:32:dd:56:54:56:ee:b4:25:14:db:ea:1f:65:17: 18:dd:2f:a7:88:df:c8:f6:82:0c:d0:f4:6f:87:cf:42:64:c6: fc:bd:5b:ac:e7:ca:22:12:fe:a5:cc:6b:5e:a3:e2:61:ea:00: f5:b0:57:e4:e8:e5:ec:86:b5:3d:02:5d:94:66:de:0d:a2:a5: df:e6:7f:c4:b9:ea:d3:26:84:26:bd:61:79:1a:d2:23:51:f8: 99:cb:18:0e:2e:0f:71:74:83:37:38:4d:80:24:73:86:fd:9c: ca:a3:ef:63:2b:30:d2:d5:e7:50:95:0a:fe:f8:37:b9:d8:b7: 5c:01:d7:11:7e:81:3a:1b:40:6c:e3:ec:e2:f5:c4:41:44:9e: db:6c:3d:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DsAQquLdQQ1E+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk NGM4YjA0ZmQtZWNhOC00Y2UxLWFkOWItZDQwYTE4MTE5ZTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tkrAqsrqqj/3Dz3uLCtacC02sfATrvQfRle sCSUP5Jm6PHKpGYYODh/0XORHggEGRgJFQ6LUPGUcNS9+7rCjDpBhn5tHqnSJLIH y8tUVX2MvpZ4IrBeUYB5wz+9BaR/kU1eK9QiN/qQDbBDh6TSIYXbwDiNOfQFtywK Y9TY0Pl3Z4ZczuIrj13hN23xyVMARf04N+FfXIo4mzv7TvPGGa+pCWC3FzRxINcs XhYh6V6o6+QqhGzz1P7DKYCemq26AcBe0RLjD2kvi7ri2QxET4BVUGUCDu1k058x 5KLmYH1JVdx+odXOs2pAFVj6N3IZS0JDxTRN8USI26WSwAQgDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC50NahoxMue3L0io6ztxg3bQ3DTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzQyOGVmOGQtYWMwZi0z MTUwLWE1YmItYWZiMThhMjZmY2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaFdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2ZwH3Oe5Z34CkXr/phY6AmxxRaqZPCo9PoRiD542RycjSma/Hgp7FX ztqJWfPcoQWLWmxmC6cqG4Js7tbC3hPYCpLkmlGTqg+SRZ0NR+8vgm+VPB1coI6q xdmCwGHqsepHfx8A3x2eYAIAAyIuvtwy3VZUVu60JRTb6h9lFxjdL6eI38j2ggzQ 9G+Hz0Jkxvy9W6znyiIS/qXMa16j4mHqAPWwV+To5eyGtT0CXZRm3g2ipd/mf8S5 6tMmhCa9YXka0iNR+JnLGA4uD3F0gzc4TYAkc4b9nMqj72MrMNLV51CVCv74N7nY t1wB1xF+gTobQGzj7OL1xEFEnttsPdQ= -----END CERTIFICATE-----Generated at Sat Apr 5 10:55:56 2025 by rpki-client