$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/533121b1-eec9-3ac4-9831-2a2cb57bd3d8.roa File: 533121b1-eec9-3ac4-9831-2a2cb57bd3d8.roa (raw, json) Hash identifier: PjSQz8KYqMBFB3GRYADmjoVNaf3hdHXQzgRdL8RNCzU= Subject key identifier: C5:C8:49:9B:57:60:B8:59:67:4D:23:12:91:72:9D:4E:A0:2A:87:31 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849350EB4FAC0D87E2671C46220 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/533121b1-eec9-3ac4-9831-2a2cb57bd3d8.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 35994 IP address blocks: 104.85.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:b4:fa:c0:d8:7e:26:71:c4:62:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=aecdc83d-79eb-4ce2-9655-d953fa2e1783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:09:fc:ce:2f:d7:c8:f9:d4:82:7f:d9:e3:a8: 51:01:36:af:81:98:7b:64:b6:ea:0c:dc:a9:76:0b: 95:a6:b9:36:ca:3a:94:a1:f8:63:11:02:3d:f1:91: 62:2a:16:52:46:91:3a:58:3c:cb:0c:28:77:79:fc: 01:fd:51:e7:52:5f:20:3f:2a:e1:d4:14:4b:0f:fc: 71:f6:f2:8e:ee:62:11:f7:2b:4c:45:8c:32:12:55: 89:be:52:50:ef:71:04:a2:51:25:45:b9:45:b9:77: a1:33:20:51:a5:78:b6:d9:6e:59:71:81:f0:66:91: 57:c3:26:71:9a:fc:3b:50:a3:6e:84:33:10:10:dd: a3:57:ce:f4:3d:28:00:41:e7:45:a6:1f:2c:f2:5b: f6:af:f4:a7:70:c1:3c:6c:04:9c:48:f9:f0:07:a0: 5a:35:94:11:96:4d:60:f6:9e:04:d2:19:1e:fc:71: 54:1a:de:e2:de:7e:53:6d:8f:ec:4b:9b:93:26:44: 97:4f:47:da:18:aa:f6:b0:e0:ff:d8:2a:ba:64:38: 1e:63:8f:9d:7c:77:93:08:c0:95:3e:93:77:f9:68: c0:bc:7d:86:fc:ef:3c:6f:1c:e2:da:91:b6:64:98: 5d:5c:7c:98:38:32:c6:11:53:a1:12:6c:74:37:99: eb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C8:49:9B:57:60:B8:59:67:4D:23:12:91:72:9D:4E:A0:2A:87:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/533121b1-eec9-3ac4-9831-2a2cb57bd3d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.85.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:de:69:85:f2:52:6e:b8:a4:91:36:f7:0e:7b:80:29:4c:e5: c9:a0:cf:2d:82:e2:5c:f8:5f:92:9c:6f:73:f8:56:ef:2a:2f: 4b:92:f5:00:bd:d4:ac:82:e3:a9:b7:ca:f8:83:2a:ba:9d:c4: bf:65:72:d4:d4:a4:37:9a:43:a2:fb:de:8a:9c:42:6c:52:78: 2b:4f:9f:85:92:2f:82:44:3d:19:c0:54:5f:9b:ab:ed:07:0f: 9c:a1:bc:e6:84:59:f4:96:3b:fd:4b:45:65:c2:e7:ba:97:78: 99:48:25:91:17:d3:7e:c9:13:7d:d8:0b:15:b0:37:c2:28:6d: 53:16:cf:31:73:95:91:1f:91:8c:f3:fa:44:03:76:ed:dc:bf: 9e:70:07:fa:3b:bd:fc:32:9a:df:bc:70:3a:d4:dc:1c:1d:3b: 4e:8d:70:2d:5b:75:95:3c:84:1c:5d:7b:29:a4:f0:f4:da:26: e1:fb:ea:a2:c9:f3:84:df:dd:10:6e:b4:68:59:61:ce:a8:a9: a2:7d:50:0c:2d:df:fe:b5:3f:7c:dd:88:88:23:0c:bc:61:19: 6f:34:f6:3d:ef:1f:b3:09:86:52:1a:22:69:6a:f6:2c:fa:99: e1:d6:59:60:00:45:dc:86:b7:e5:36:50:dc:1c:96:73:79:dd: 2a:1e:4b:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DrT6wNh+JnHEYiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk YWVjZGM4M2QtNzllYi00Y2UyLTk2NTUtZDk1M2ZhMmUxNzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygn8zi/XyPnUgn/Z46hRATavgZh7ZLbqDNyp dguVprk2yjqUofhjEQI98ZFiKhZSRpE6WDzLDCh3efwB/VHnUl8gPyrh1BRLD/xx 9vKO7mIR9ytMRYwyElWJvlJQ73EEolElRblFuXehMyBRpXi22W5ZcYHwZpFXwyZx mvw7UKNuhDMQEN2jV870PSgAQedFph8s8lv2r/SncME8bAScSPnwB6BaNZQRlk1g 9p4E0hke/HFUGt7i3n5TbY/sS5uTJkSXT0faGKr2sOD/2Cq6ZDgeY4+dfHeTCMCV PpN3+WjAvH2G/O88bxzi2pG2ZJhdXHyYODLGEVOhEmx0N5nrJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXISZtXYLhZZ00jEpFynU6gKocxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTMzMTIxYjEtZWVjOS0z YWM0LTk4MzEtMmEyY2I1N2JkM2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaFWuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITeaYXyUm64pJE29w57gClM5cmgzy2C4lz4X5Kcb3P4Vu8qL0uS9QC9 1KyC46m3yviDKrqdxL9lctTUpDeaQ6L73oqcQmxSeCtPn4WSL4JEPRnAVF+bq+0H D5yhvOaEWfSWO/1LRWXC57qXeJlIJZEX037JE33YCxWwN8IobVMWzzFzlZEfkYzz +kQDdu3cv55wB/o7vfwymt+8cDrU3BwdO06NcC1bdZU8hBxdeymk8PTaJuH76qLJ 84Tf3RButGhZYc6oqaJ9UAwt3/61P3zdiIgjDLxhGW809j3vH7MJhlIaImlq9iz6 meHWWWAARdyGt+U2UNwclnN53SoeSzM= -----END CERTIFICATE-----Generated at Sat Apr 5 11:09:04 2025 by rpki-client