$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e476146-5a77-313e-a103-cbb290cdd307.roa File: 3e476146-5a77-313e-a103-cbb290cdd307.roa (raw, json) Hash identifier: mHJDYHajlv+7KYnE5YPtl+nzh6uAtoSf/o83QrdoZhs= Subject key identifier: 8E:BD:3B:BF:AB:E2:7C:87:CC:B9:5E:0E:18:53:55:2F:71:C9:87:55 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858493243EC1109BA1C1A54614740 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e476146-5a77-313e-a103-cbb290cdd307.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 16625 IP address blocks: 104.79.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:ec:11:09:ba:1c:1a:54:61:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=0b0b18d7-9be7-4539-9df5-af611537724c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6f:79:af:69:15:12:bd:4e:d3:26:5e:ce:81: 3a:dd:c5:35:3d:3e:74:5a:ee:01:3e:f2:53:cb:af: 10:05:aa:5a:7c:b4:5c:82:2d:fd:b5:7a:b1:38:fa: 88:c0:fe:06:93:31:37:66:34:e7:59:12:7f:84:9f: 01:ff:14:08:95:90:89:97:73:94:03:29:be:71:0e: f0:6f:06:6d:78:d5:d8:61:78:ca:32:82:98:8c:0a: 69:b4:f0:aa:4e:dc:e3:28:d8:ad:96:0c:33:34:14: 43:91:8e:b0:4c:ab:3f:03:d3:10:d1:99:1c:0b:eb: 86:a9:4b:7b:d4:e7:9d:e8:56:f1:1d:47:24:2a:d1: 86:47:e9:49:7c:45:29:e3:e9:fe:ee:01:68:53:54: 84:bd:4a:44:8d:0f:ca:6b:bc:82:15:6b:86:aa:b3: 15:38:dd:27:ec:90:3a:1b:1e:4b:f6:fc:08:ce:37: f5:b9:fc:1e:7b:e7:88:77:76:79:a3:a0:77:f6:47: ad:9a:88:ea:a6:07:a7:6e:ab:70:c0:3a:d1:9a:88: d1:b7:40:d0:e7:c5:b5:f1:41:5f:83:6b:ea:b2:58: 77:70:64:cb:3a:4b:00:0d:01:ab:5e:62:5a:8f:d5: 7c:c1:1b:bf:94:a0:76:65:12:10:e1:62:33:01:b3: 53:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:BD:3B:BF:AB:E2:7C:87:CC:B9:5E:0E:18:53:55:2F:71:C9:87:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e476146-5a77-313e-a103-cbb290cdd307.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.79.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:28:b3:8c:fa:40:97:f6:69:6b:6b:68:3f:fd:fe:d3:6e:98: 0b:e6:96:f9:5c:fc:88:43:2e:82:dd:c1:20:bc:01:df:ab:53: 84:16:b0:4c:62:06:38:19:c5:f5:ab:fe:cc:6b:81:5c:dd:53: 7d:7c:32:c4:a9:f8:13:1f:48:cd:db:ea:78:ce:c7:52:72:9f: 34:5a:2c:39:01:ba:21:85:8a:37:8a:35:de:e8:11:9b:6b:93: 31:b6:bc:47:0a:2e:8a:4d:42:ba:e1:d8:b8:a6:59:dc:8d:a4: df:d5:89:65:fc:38:f7:3e:74:7a:8e:94:02:95:64:65:7d:2a: 79:f2:0c:9f:b9:41:80:36:15:94:b7:af:80:5c:53:15:5b:90: 59:a7:4b:f6:98:6e:03:db:cc:df:b2:8e:07:a9:66:5f:52:7b: 65:75:b7:87:c7:a2:40:4e:4e:7d:5a:42:5c:5c:51:c8:5b:c4: 94:45:6b:6f:7a:61:8a:f7:66:bb:bf:0d:29:ac:18:ab:20:04: 61:c1:67:15:cd:1e:89:4a:3f:fd:d7:90:2d:f5:f2:f9:c7:38: 09:0d:5c:26:71:fc:b3:a5:25:36:9b:a9:4e:69:d0:3d:22:63: 88:f4:0d:5f:ee:0c:fc:4e:f1:6b:f1:7e:37:c9:bd:d8:06:99: ce:f9:a6:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ+wRCbocGlRhR0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk MGIwYjE4ZDctOWJlNy00NTM5LTlkZjUtYWY2MTE1Mzc3MjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm95r2kVEr1O0yZezoE63cU1PT50Wu4BPvJT y68QBapafLRcgi39tXqxOPqIwP4GkzE3ZjTnWRJ/hJ8B/xQIlZCJl3OUAym+cQ7w bwZteNXYYXjKMoKYjApptPCqTtzjKNitlgwzNBRDkY6wTKs/A9MQ0ZkcC+uGqUt7 1Oed6FbxHUckKtGGR+lJfEUp4+n+7gFoU1SEvUpEjQ/Ka7yCFWuGqrMVON0n7JA6 Gx5L9vwIzjf1ufwee+eId3Z5o6B39ketmojqpgenbqtwwDrRmojRt0DQ58W18UFf g2vqslh3cGTLOksADQGrXmJaj9V8wRu/lKB2ZRIQ4WIzAbNTSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI69O7+r4nyHzLleDhhTVS9xyYdVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2U0NzYxNDYtNWE3Ny0z MTNlLWExMDMtY2JiMjkwY2RkMzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaE8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwos4z6QJf2aWtraD/9/tNumAvmlvlc/IhDLoLdwSC8Ad+rU4QWsExi BjgZxfWr/sxrgVzdU318MsSp+BMfSM3b6njOx1JynzRaLDkBuiGFijeKNd7oEZtr kzG2vEcKLopNQrrh2LimWdyNpN/ViWX8OPc+dHqOlAKVZGV9KnnyDJ+5QYA2FZS3 r4BcUxVbkFmnS/aYbgPbzN+yjgepZl9Se2V1t4fHokBOTn1aQlxcUchbxJRFa296 YYr3Zru/DSmsGKsgBGHBZxXNHolKP/3XkC318vnHOAkNXCZx/LOlJTabqU5p0D0i Y4j0DV/uDPxO8WvxfjfJvdgGmc75pj0= -----END CERTIFICATE-----Generated at Sat Apr 5 11:08:40 2025 by rpki-client