$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72e795f5-60df-3423-9f93-1780d7ce2d6c.roa File: 72e795f5-60df-3423-9f93-1780d7ce2d6c.roa (raw, json) Hash identifier: hHSAgik4PoR12o8P82D1jWQ7jTA3lRCtV7wFXIQJkrA= Subject key identifier: 4D:1C:74:B5:26:DD:17:C5:82:BE:CA:E5:91:EA:21:33:04:AA:A1:B9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849287E5918C93811CEA6712C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72e795f5-60df-3423-9f93-1780d7ce2d6c.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 20940 IP address blocks: 104.119.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:59:18:c9:38:11:ce:a6:71:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=a43b7551-cfc9-4891-8167-01cfbb583fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3e:23:79:c6:33:7a:09:e1:a2:93:da:cf:8e: 72:e7:e2:02:e5:6f:56:02:5c:11:68:3c:b1:05:96: b8:5e:57:2d:00:13:28:70:93:15:82:d4:1c:29:42: 74:9c:64:b4:15:c0:a9:ed:d1:ae:68:71:58:e4:7a: e4:5c:20:52:bc:3a:bb:ba:3f:13:cb:e3:15:36:ab: 3b:d8:59:15:59:47:0d:1b:ff:86:e5:d9:14:a4:b2: 43:ae:dc:33:ea:36:40:48:b3:d2:12:e2:4c:50:61: 94:6a:39:6c:3b:9f:2b:55:a3:80:c7:86:e9:df:0a: 8d:5e:10:3f:3b:f7:c2:de:bf:1d:0a:e5:92:8e:01: b6:8e:98:39:d0:a6:a6:c5:e8:09:48:a3:35:38:e4: 9b:5b:7b:28:d5:9a:ee:4f:12:32:12:01:7e:dd:66: a8:de:88:f2:f0:fd:2d:9f:0e:d7:91:16:31:90:97: 75:80:a5:42:f5:97:d2:92:67:a2:0d:c0:f9:5b:65: 7e:2a:07:de:85:06:bb:c9:6e:0d:bc:25:3d:f7:2a: 54:98:31:9f:bd:fe:7a:57:89:d9:bf:78:87:6a:7e: ae:6f:47:50:d5:09:74:66:6a:3d:70:d2:cf:1f:c0: 32:a7:21:8c:24:92:73:3a:94:79:db:40:bd:0e:05: 88:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:1C:74:B5:26:DD:17:C5:82:BE:CA:E5:91:EA:21:33:04:AA:A1:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72e795f5-60df-3423-9f93-1780d7ce2d6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.119.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:c7:83:62:60:28:dc:83:68:14:39:8b:d7:e3:d7:88:5e:62: 78:9d:02:7f:c6:46:bf:11:e4:86:e9:f8:fd:d6:e9:85:fb:fc: b1:dc:be:af:6e:fb:95:a0:f4:83:f8:cf:b9:d6:9d:44:a8:c3: 9a:8e:b4:51:0f:a7:c0:1c:e0:ad:78:e4:5c:68:59:4e:6d:1d: 7a:4d:a5:de:2c:be:f7:46:6a:da:70:2a:6b:f0:5d:18:97:07: b4:2a:92:32:2f:97:68:b1:66:04:52:a8:13:36:7b:4a:11:e9: 2e:60:62:c2:2d:bb:5c:01:46:e8:03:53:d0:8a:c5:de:b7:a3: 8d:70:bd:fc:13:19:df:9a:8a:97:a4:a9:ef:a7:0a:73:0a:c4: 29:31:42:b8:3e:98:be:c3:3b:4a:3c:9c:15:b5:8d:1e:e0:27: 92:f3:ea:08:07:c9:69:56:0b:1e:77:df:9f:74:43:1c:6a:f6: 5f:d9:6b:a2:0f:d1:8d:b8:d1:21:cb:d7:66:ba:8b:63:ab:a5: dc:a3:76:55:ef:ad:58:0b:5f:24:16:c3:1b:9a:29:7e:d7:57: 23:17:e9:5e:38:4e:69:7d:26:ff:6d:3d:23:7d:54:b2:5b:db: 05:b0:e0:76:5a:84:7f:8f:5a:9b:c4:ec:da:68:3d:0b:07:e1: 46:85:4b:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkoflkYyTgRzqZxLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk YTQzYjc1NTEtY2ZjOS00ODkxLTgxNjctMDFjZmJiNTgzZmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhD4jecYzegnhopPaz45y5+IC5W9WAlwRaDyx BZa4XlctABMocJMVgtQcKUJ0nGS0FcCp7dGuaHFY5HrkXCBSvDq7uj8Ty+MVNqs7 2FkVWUcNG/+G5dkUpLJDrtwz6jZASLPSEuJMUGGUajlsO58rVaOAx4bp3wqNXhA/ O/fC3r8dCuWSjgG2jpg50KamxegJSKM1OOSbW3so1ZruTxIyEgF+3Wao3ojy8P0t nw7XkRYxkJd1gKVC9ZfSkmeiDcD5W2V+KgfehQa7yW4NvCU99ypUmDGfvf56V4nZ v3iHan6ub0dQ1Ql0Zmo9cNLPH8AypyGMJJJzOpR520C9DgWIqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0cdLUm3RfFgr7K5ZHqITMEqqG5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzJlNzk1ZjUtNjBkZi0z NDIzLTlmOTMtMTc4MGQ3Y2UyZDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaHcpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjHg2JgKNyDaBQ5i9fj14heYnidAn/GRr8R5Ibp+P3W6YX7/LHcvq9u +5Wg9IP4z7nWnUSow5qOtFEPp8Ac4K145FxoWU5tHXpNpd4svvdGatpwKmvwXRiX B7QqkjIvl2ixZgRSqBM2e0oR6S5gYsItu1wBRugDU9CKxd63o41wvfwTGd+aipek qe+nCnMKxCkxQrg+mL7DO0o8nBW1jR7gJ5Lz6ggHyWlWCx533590Qxxq9l/Za6IP 0Y240SHL12a6i2OrpdyjdlXvrVgLXyQWwxuaKX7XVyMX6V44Tml9Jv9tPSN9VLJb 2wWw4HZahH+PWpvE7NpoPQsH4UaFSzo= -----END CERTIFICATE-----Generated at Sat Apr 5 11:03:59 2025 by rpki-client