$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39e0e04b-b689-3423-865a-6744ad40e802.roa File: 39e0e04b-b689-3423-865a-6744ad40e802.roa (raw, json) Hash identifier: c2xV0UqtPV5rfi8iAql0pfWykNnACjUZiuDnKlvADLo= Subject key identifier: C2:68:A6:5E:D6:9C:C0:61:CC:D4:BE:0D:26:6F:DF:0C:92:95:32:1D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849350EC4AB34C4C7BAB613E500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39e0e04b-b689-3423-865a-6744ad40e802.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 16625 IP address blocks: 104.103.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:c4:ab:34:c4:c7:ba:b6:13:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=4db3fbf8-fac4-4ae2-ad8f-a1375a7306a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c0:06:41:0b:ab:62:0a:7d:8b:13:71:71:89: 39:f6:ee:d7:a1:ce:11:cc:fc:8f:33:7a:4f:55:3e: ac:6f:b8:d2:b7:f4:41:1e:d0:13:f7:42:6a:9a:e7: 7c:f6:73:b9:87:76:a3:d4:2c:05:8e:34:c8:cb:ac: b3:cc:bc:15:af:2d:e5:41:bf:b7:c9:db:58:f2:d7: 29:a2:16:07:8b:2f:22:8f:59:bd:31:d2:0b:11:1e: 7a:6a:07:3a:dc:4a:1f:54:1e:76:ce:93:ae:1f:07: d9:fa:20:e2:a8:6f:5a:86:c5:95:fb:a2:ca:85:44: 42:db:43:d7:63:ed:19:0d:aa:0b:54:d2:8e:70:73: ee:dc:f1:ce:f5:ab:c1:ce:d9:00:b8:1f:22:1b:79: 3a:f1:b5:d2:a8:92:c1:3e:d4:c8:15:d1:43:b9:04: 48:bd:da:f8:cf:e6:72:8b:f6:6b:78:8e:89:12:b9: bc:63:f0:50:76:71:ed:26:a1:bd:36:c2:39:6f:04: db:a7:7c:67:e3:4a:69:be:40:4c:1a:eb:16:e1:7c: af:d1:2c:39:86:2e:d7:58:01:7c:5a:7a:b5:a8:1d: 89:b0:db:c0:90:20:ad:6f:b1:63:fa:d3:76:0c:8f: cd:d5:c3:80:92:23:9e:78:f5:8d:2c:36:62:ff:a2: f8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:68:A6:5E:D6:9C:C0:61:CC:D4:BE:0D:26:6F:DF:0C:92:95:32:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39e0e04b-b689-3423-865a-6744ad40e802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.103.74.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:77:38:20:ae:10:c0:44:9e:2b:44:ed:82:02:2b:66:39:63: 36:68:36:36:c9:fd:a5:ec:c1:f1:b6:2b:d5:44:b9:6d:83:48: 43:47:46:54:15:4d:e6:6c:b6:7b:b7:a1:05:6f:a6:fc:21:a1: e3:83:b9:e5:8e:47:ca:5a:89:f4:32:42:3d:75:77:60:2c:1f: 51:15:ec:8f:0a:70:5b:78:9b:60:ee:3d:b8:21:36:af:d2:43: 4a:5b:08:5a:62:70:ec:01:a8:01:48:bf:56:8a:9c:40:fb:42: c2:bc:00:0b:ba:06:d6:61:67:08:a5:cd:55:35:57:97:fb:19: c1:d5:67:96:97:f9:68:b5:87:7a:4f:28:7b:bb:71:d1:af:04: 1b:d8:0a:83:09:45:6b:a6:5c:80:8b:78:c7:3d:74:f3:3e:43: 29:a4:46:2b:ad:37:56:b0:04:10:bf:bb:b6:8c:c6:71:47:28: e7:0e:6b:5a:64:17:ad:28:4c:5e:cc:82:a2:b7:fa:fd:d2:d0: 8d:bd:2d:cd:6b:0c:b2:21:8b:9f:53:63:4a:90:cc:fb:00:9a: 2c:b9:41:53:91:fc:05:b9:d3:00:01:de:8c:5d:99:78:4d:57: ef:f4:2c:3b:71:60:cd:1c:71:d4:78:cb:db:b8:ca:fc:21:4c: 83:cb:67:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DsSrNMTHurYT5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk NGRiM2ZiZjgtZmFjNC00YWUyLWFkOGYtYTEzNzVhNzMwNmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsAGQQurYgp9ixNxcYk59u7Xoc4RzPyPM3pP VT6sb7jSt/RBHtAT90Jqmud89nO5h3aj1CwFjjTIy6yzzLwVry3lQb+3ydtY8tcp ohYHiy8ij1m9MdILER56agc63EofVB52zpOuHwfZ+iDiqG9ahsWV+6LKhURC20PX Y+0ZDaoLVNKOcHPu3PHO9avBztkAuB8iG3k68bXSqJLBPtTIFdFDuQRIvdr4z+Zy i/ZreI6JErm8Y/BQdnHtJqG9NsI5bwTbp3xn40ppvkBMGusW4Xyv0Sw5hi7XWAF8 Wnq1qB2JsNvAkCCtb7Fj+tN2DI/N1cOAkiOeePWNLDZi/6L45QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJopl7WnMBhzNS+DSZv3wySlTIdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzllMGUwNGItYjY4OS0z NDIzLTg2NWEtNjc0NGFkNDBlODAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaGdKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAh3OCCuEMBEnitE7YICK2Y5YzZoNjbJ/aXswfG2K9VEuW2DSENHRlQV TeZstnu3oQVvpvwhoeODueWOR8paifQyQj11d2AsH1EV7I8KcFt4m2DuPbghNq/S Q0pbCFpicOwBqAFIv1aKnED7QsK8AAu6BtZhZwilzVU1V5f7GcHVZ5aX+Wi1h3pP KHu7cdGvBBvYCoMJRWumXICLeMc9dPM+QymkRiutN1awBBC/u7aMxnFHKOcOa1pk F60oTF7MgqK3+v3S0I29Lc1rDLIhi59TY0qQzPsAmiy5QVOR/AW50wAB3oxdmXhN V+/0LDtxYM0ccdR4y9u4yvwhTIPLZ0g= -----END CERTIFICATE-----Generated at Sat Apr 5 18:26:40 2025 by rpki-client