$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6a342aeb-a9c4-3fde-ac18-c82ea68991c6.roa File: 6a342aeb-a9c4-3fde-ac18-c82ea68991c6.roa (raw, json) Hash identifier: 0BM0i0fMM3AgiJsPp4Qrtg+DnCpCEa6HGVjb/HE8uPg= Subject key identifier: BF:5A:49:13:80:B9:C1:C2:40:DC:3A:7B:87:9D:B7:DE:12:FA:67:AE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849393E8B9F974BCD2D1778B020 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6a342aeb-a9c4-3fde-ac18-c82ea68991c6.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 16625 IP address blocks: 104.127.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:8b:9f:97:4b:cd:2d:17:78:b0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=5f9a509e-c04d-4376-9b50-0252aa5d1775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:51:aa:09:1e:1d:ed:4d:f8:eb:3c:54:e9:78: ad:b4:d1:7e:2e:70:09:06:8f:12:d1:6d:3e:ba:4b: a6:ae:29:66:ef:2c:a1:2b:fd:22:fa:d1:c1:05:bc: 7d:2a:10:92:e9:33:ce:44:d6:6c:8f:8d:65:44:4b: 9b:e1:e3:05:5b:b4:29:85:f6:e9:87:71:8f:6f:65: fc:5f:f4:6d:fb:32:40:68:35:25:c0:26:98:59:62: ee:90:5c:c3:a8:65:8e:e5:c3:f4:c7:70:8c:e7:1e: 3d:2c:c3:a4:0f:6e:3e:d0:04:89:99:cb:4a:f8:98: 3c:19:9f:c1:47:0c:9b:59:7e:64:e7:a9:95:73:db: c7:3f:0f:e5:3b:3b:e5:57:a5:01:47:ae:29:bd:e7: 27:03:bf:b4:00:33:96:46:68:5b:00:e4:c6:13:e8: ea:98:4d:42:37:88:02:cb:2e:37:4d:9c:30:b2:cc: bf:a3:e8:b0:4c:e6:61:f7:d3:ba:29:e2:96:d7:d9: fb:53:a3:d1:9c:fc:0d:b5:33:5d:3c:12:38:e1:21: 0b:2e:81:03:5f:5a:88:98:73:4d:fa:52:c0:93:d5: 83:98:ea:ef:92:ce:37:eb:f6:4c:34:ed:3a:ef:fc: 33:f7:94:44:6b:fc:3f:ca:aa:75:6a:00:d4:b7:10: f6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:5A:49:13:80:B9:C1:C2:40:DC:3A:7B:87:9D:B7:DE:12:FA:67:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6a342aeb-a9c4-3fde-ac18-c82ea68991c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.127.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:ba:7b:2a:9b:df:88:c4:b0:e8:37:3e:0f:6d:24:97:c2:49: d9:65:3c:3e:32:26:f7:67:c2:fe:ba:86:38:b5:bf:84:e3:d7: bf:49:51:b8:d0:1a:7c:24:16:1a:7b:98:42:63:0d:2d:13:68: 85:28:26:eb:a9:32:f2:e5:9e:bc:eb:e2:b0:90:e0:e9:79:ad: 45:e1:ce:09:7b:fb:95:73:ae:8b:ce:6e:61:ba:d3:c0:fa:36: 90:2f:c3:a0:06:57:55:39:ee:4f:ac:64:6e:4c:7c:df:7f:e1: 64:62:e2:7a:6f:b4:39:80:59:40:fe:a7:01:cd:f5:82:d6:ba: 3b:a4:27:3d:d2:ff:ca:1c:eb:ce:06:1f:64:48:e9:54:db:06: 77:00:f8:c1:1c:34:45:95:2c:73:57:dd:53:98:65:b4:00:3d: fc:82:e0:2d:c1:ea:3f:f8:6c:4d:70:66:3d:3e:52:97:30:5c: 53:8e:e9:c3:2d:06:36:55:f9:3b:2a:55:b1:f5:4c:39:6e:05: 8d:0e:80:fd:98:cb:5a:0f:a6:63:08:a4:87:a5:cc:c8:8b:eb: 16:ab:48:59:7f:83:6f:6f:cd:f6:cb:50:02:43:46:cb:26:8f: 96:79:12:69:aa:05:2b:cb:e9:14:bc:74:d1:51:9e:72:56:e9: ce:03:0b:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5Poufl0vNLRd4sCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk NWY5YTUwOWUtYzA0ZC00Mzc2LTliNTAtMDI1MmFhNWQxNzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VGqCR4d7U346zxU6XittNF+LnAJBo8S0W0+ ukumrilm7yyhK/0i+tHBBbx9KhCS6TPORNZsj41lREub4eMFW7Qphfbph3GPb2X8 X/Rt+zJAaDUlwCaYWWLukFzDqGWO5cP0x3CM5x49LMOkD24+0ASJmctK+Jg8GZ/B RwybWX5k56mVc9vHPw/lOzvlV6UBR64pvecnA7+0ADOWRmhbAOTGE+jqmE1CN4gC yy43TZwwssy/o+iwTOZh99O6KeKW19n7U6PRnPwNtTNdPBI44SELLoEDX1qImHNN +lLAk9WDmOrvks436/ZMNO067/wz95REa/w/yqp1agDUtxD2CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9aSROAucHCQNw6e4edt94S+meuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmEzNDJhZWItYTljNC0z ZmRlLWFjMTgtYzgyZWE2ODk5MWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaH8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHm6eyqb34jEsOg3Pg9tJJfCSdllPD4yJvdnwv66hji1v4Tj179JUbjQ GnwkFhp7mEJjDS0TaIUoJuupMvLlnrzr4rCQ4Ol5rUXhzgl7+5VzrovObmG608D6 NpAvw6AGV1U57k+sZG5MfN9/4WRi4npvtDmAWUD+pwHN9YLWujukJz3S/8oc684G H2RI6VTbBncA+MEcNEWVLHNX3VOYZbQAPfyC4C3B6j/4bE1wZj0+UpcwXFOO6cMt BjZV+TsqVbH1TDluBY0OgP2Yy1oPpmMIpIelzMiL6xarSFl/g29vzfbLUAJDRssm j5Z5EmmqBSvL6RS8dNFRnnJW6c4DC/Q= -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:07 2025 by rpki-client