$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f6e1e13-bbc1-3f0f-b2fb-e56ade84b19e.roa File: 4f6e1e13-bbc1-3f0f-b2fb-e56ade84b19e.roa (raw, json) Hash identifier: bt2pkeGUaUGehV6qntPgulDbJxDgBA2BQsLR2tVAPZ4= Subject key identifier: 24:A4:BB:BD:A9:BE:0C:6D:53:BC:BE:78:D7:8A:1C:8A:A4:A9:B2:F0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849393E87E71DEDAFC1206D74C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f6e1e13-bbc1-3f0f-b2fb-e56ade84b19e.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 16625 IP address blocks: 104.118.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:87:e7:1d:ed:af:c1:20:6d:74:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=4fe23970-59ff-4fa8-95f1-166300316654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:01:78:f6:85:59:f3:80:de:8a:b1:7f:69:79: 34:21:f1:99:77:de:26:9d:6d:2c:62:a6:0e:79:75: 99:25:32:d9:15:fc:4b:69:06:88:31:1b:39:bb:3d: 0a:2c:c5:9f:73:94:49:57:49:0d:d5:00:7c:fc:54: fa:a9:44:79:8c:ff:72:cc:a2:4a:a9:71:73:61:69: 6c:6e:ba:07:d6:1d:83:bb:6d:91:3b:97:37:6d:26: 94:06:94:38:5f:ea:bf:64:14:c9:5e:21:17:57:5a: 7f:0d:bf:49:0a:35:a1:49:eb:c3:99:54:5f:c8:0e: 7f:f5:95:cb:87:c9:11:ed:3a:14:bc:3d:11:6d:25: 8e:73:ed:9c:13:ad:75:d8:7b:fd:29:4d:37:4c:4e: 10:a7:47:86:db:05:6b:50:e4:ed:5f:12:04:58:bc: 6f:7b:95:63:f2:d6:44:de:ae:7d:9b:7c:17:ef:c9: 23:d2:a8:24:df:5a:0f:27:b7:2b:00:99:4c:0e:ed: b7:1f:65:fe:15:cf:bc:18:0c:2d:d3:c5:ab:54:4b: 95:01:3c:7f:84:db:97:65:f8:d5:03:0b:92:00:5b: 26:98:e2:f9:96:cb:80:c1:0e:ee:e2:ad:0f:7d:86: f7:ad:1e:1a:4f:a4:a5:7f:59:a4:8b:39:c0:5d:74: 4a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A4:BB:BD:A9:BE:0C:6D:53:BC:BE:78:D7:8A:1C:8A:A4:A9:B2:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f6e1e13-bbc1-3f0f-b2fb-e56ade84b19e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.118.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:b9:97:50:ce:36:d1:55:c6:dc:4b:50:9e:2c:9f:96:52:42: 91:d1:ab:88:b1:5e:09:24:1f:a1:80:96:ee:39:58:22:3b:c8: 7a:eb:61:fc:f0:b3:d5:8f:e6:84:b8:61:15:78:bb:a0:1b:e8: 8f:9a:e5:4b:73:5c:5c:01:34:4e:99:bd:8d:e8:d3:30:21:51: 2f:6b:54:1e:96:af:29:4c:0c:4c:eb:e9:76:94:26:c9:db:fd: 96:47:65:70:62:96:85:92:05:b6:31:23:73:a9:7c:7d:d1:e4: b1:c6:44:00:e0:07:9d:4a:32:66:22:a3:cd:ac:9f:bd:95:4b: 61:d4:67:7b:38:19:0e:8c:13:b3:f2:f3:f2:3a:a1:7d:8d:63: 6d:5e:62:23:34:3f:b9:37:64:0b:8d:e0:2b:0e:2a:04:ee:3f: 2c:69:b1:1b:41:6f:ae:d3:36:14:c4:63:e5:b5:9c:71:46:47: a6:6f:f4:80:2f:e5:f0:80:4c:d1:bb:66:a0:97:94:00:a5:49: 44:b5:82:99:b4:d3:34:28:fa:f5:3c:e0:1a:08:55:c2:11:d5: d8:11:76:e7:46:6e:a0:05:a7:2d:b8:cb:8f:a2:b0:16:07:5d: 1b:2b:e3:db:e2:b6:51:40:93:ad:4e:1a:9e:a3:8a:d2:fe:48: b7:bf:ae:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5PofnHe2vwSBtdMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk NGZlMjM5NzAtNTlmZi00ZmE4LTk1ZjEtMTY2MzAwMzE2NjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwF49oVZ84DeirF/aXk0IfGZd94mnW0sYqYO eXWZJTLZFfxLaQaIMRs5uz0KLMWfc5RJV0kN1QB8/FT6qUR5jP9yzKJKqXFzYWls broH1h2Du22RO5c3bSaUBpQ4X+q/ZBTJXiEXV1p/Db9JCjWhSevDmVRfyA5/9ZXL h8kR7ToUvD0RbSWOc+2cE6112Hv9KU03TE4Qp0eG2wVrUOTtXxIEWLxve5Vj8tZE 3q59m3wX78kj0qgk31oPJ7crAJlMDu23H2X+Fc+8GAwt08WrVEuVATx/hNuXZfjV AwuSAFsmmOL5lsuAwQ7u4q0PfYb3rR4aT6Slf1mkiznAXXRKoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSku72pvgxtU7y+eNeKHIqkqbLwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGY2ZTFlMTMtYmJjMS0z ZjBmLWIyZmItZTU2YWRlODRiMTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaHYcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFy5l1DONtFVxtxLUJ4sn5ZSQpHRq4ixXgkkH6GAlu45WCI7yHrrYfzw s9WP5oS4YRV4u6Ab6I+a5UtzXFwBNE6ZvY3o0zAhUS9rVB6WrylMDEzr6XaUJsnb /ZZHZXBiloWSBbYxI3OpfH3R5LHGRADgB51KMmYio82sn72VS2HUZ3s4GQ6ME7Py 8/I6oX2NY21eYiM0P7k3ZAuN4CsOKgTuPyxpsRtBb67TNhTEY+W1nHFGR6Zv9IAv 5fCATNG7ZqCXlAClSUS1gpm00zQo+vU84BoIVcIR1dgRdudGbqAFpy24y4+isBYH XRsr49vitlFAk61OGp6jitL+SLe/rtY= -----END CERTIFICATE-----Generated at Sat Apr 5 10:52:26 2025 by rpki-client