$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/786b73d3-2d89-3dda-8235-522e814ff853.roa File: 786b73d3-2d89-3dda-8235-522e814ff853.roa (raw, json) Hash identifier: L6/nJ5zpteP0qL+sygZr0vX2Yk31C2jjTBN5nRf1ynk= Subject key identifier: D9:1A:2C:75:9F:7F:2E:52:2C:AA:2C:82:6A:80:04:81:2D:C7:B7:EB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849350EB62717D2473EC97C7A40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/786b73d3-2d89-3dda-8235-522e814ff853.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 8657 IP address blocks: 104.89.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:b6:27:17:d2:47:3e:c9:7c:7a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=9b15dbf0-9223-4d91-af75-c0512f42aad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3c:23:62:0b:66:e9:38:84:69:df:1b:5d:f6: 62:ea:8e:c4:a4:e0:42:d2:e9:de:52:73:68:48:2e: c8:e7:c0:6a:2d:09:20:14:d7:5c:fe:a9:7c:dc:a7: e1:3e:4c:8a:99:ae:c0:e9:89:e2:68:c4:5e:78:f3: a8:29:10:6d:36:88:44:e0:b6:9d:12:aa:b8:f3:07: 21:24:00:00:d6:b8:df:7e:af:55:75:2d:46:5f:8d: 0e:e9:b7:89:b8:e6:ef:51:18:8b:4d:ad:65:ec:7c: 7a:cb:e8:ff:92:5c:6e:ea:8c:59:54:d4:83:7f:09: 20:d3:4b:8e:9d:2f:08:df:b1:b7:a0:f8:00:b2:30: 8c:ce:6a:7f:68:5a:26:f4:8e:df:7a:a6:f2:e1:b1: 20:3c:c8:22:da:cb:58:2d:9c:ee:c8:99:39:99:3e: d5:6f:76:d0:a4:cf:a0:e2:1b:d4:c8:44:cd:93:e5: 25:2e:42:d5:df:06:8c:81:a3:6b:86:9d:10:c4:c7: 29:ed:d1:fb:ef:a0:e8:08:89:6d:50:8b:e4:bb:a1: 1e:bd:eb:0c:0d:18:9b:94:ab:83:cd:60:be:60:30: 93:b7:8f:4b:97:70:c0:c8:08:23:33:9f:63:a7:17: 06:7d:34:a0:56:cd:2b:69:4f:58:87:4a:8c:19:8b: 28:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:1A:2C:75:9F:7F:2E:52:2C:AA:2C:82:6A:80:04:81:2D:C7:B7:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/786b73d3-2d89-3dda-8235-522e814ff853.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.89.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:53:7e:10:9a:ec:cf:7c:55:9b:8e:2c:df:f9:b6:82:0c:3b: 23:f9:4e:51:99:35:7b:d4:d5:07:6a:ef:63:a5:37:9b:fe:69: 89:53:d1:66:67:c8:e9:e1:e5:78:17:52:00:5d:6a:38:fb:7c: a8:90:2d:7d:ac:6c:4a:31:46:8f:d9:ae:0b:b0:22:0b:31:2b: fd:32:19:d7:10:29:2e:3e:21:dc:ad:a8:73:c0:3f:13:94:38: dc:76:8d:d9:a1:dc:ea:58:f3:75:8f:62:c0:bd:62:53:71:2d: 48:94:56:88:e0:3c:93:86:b8:31:0c:8e:40:60:e8:ee:f9:09: fb:0b:08:96:f4:44:cb:ac:f8:5b:df:6c:93:8d:ab:a4:54:c8: 98:39:3d:0f:56:8d:62:84:da:b3:33:da:02:cd:c0:5c:17:95: d4:1a:29:71:9d:57:7a:f1:0e:73:17:7b:4f:93:94:32:ce:6f: 0d:fc:5c:ba:92:3a:2c:f5:85:82:b2:57:be:b3:38:8a:a0:96: 63:f7:4d:ec:b4:35:7b:e1:67:33:b6:c3:dd:74:c8:f3:d9:0c: e7:55:e7:ef:0c:38:b6:24:16:8a:1e:97:ea:38:28:ea:c4:f2: 63:dc:d5:cb:c2:9c:c5:cb:fd:07:a4:17:95:37:45:9e:e6:03: 06:c4:b0:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DrYnF9JHPsl8ekAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk OWIxNWRiZjAtOTIyMy00ZDkxLWFmNzUtYzA1MTJmNDJhYWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDwjYgtm6TiEad8bXfZi6o7EpOBC0uneUnNo SC7I58BqLQkgFNdc/ql83KfhPkyKma7A6YniaMReePOoKRBtNohE4LadEqq48wch JAAA1rjffq9VdS1GX40O6beJuObvURiLTa1l7Hx6y+j/klxu6oxZVNSDfwkg00uO nS8I37G3oPgAsjCMzmp/aFom9I7feqby4bEgPMgi2stYLZzuyJk5mT7Vb3bQpM+g 4hvUyETNk+UlLkLV3waMgaNrhp0QxMcp7dH776DoCIltUIvku6EevesMDRiblKuD zWC+YDCTt49Ll3DAyAgjM59jpxcGfTSgVs0raU9Yh0qMGYsoWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkaLHWffy5SLKosgmqABIEtx7frMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzg2YjczZDMtMmQ4OS0z ZGRhLTgyMzUtNTIyZTgxNGZmODUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaFmkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZTfhCa7M98VZuOLN/5toIMOyP5TlGZNXvU1Qdq72OlN5v+aYlT0WZn yOnh5XgXUgBdajj7fKiQLX2sbEoxRo/ZrguwIgsxK/0yGdcQKS4+IdytqHPAPxOU ONx2jdmh3OpY83WPYsC9YlNxLUiUVojgPJOGuDEMjkBg6O75CfsLCJb0RMus+Fvf bJONq6RUyJg5PQ9WjWKE2rMz2gLNwFwXldQaKXGdV3rxDnMXe0+TlDLObw38XLqS Oiz1hYKyV76zOIqglmP3Tey0NXvhZzO2w910yPPZDOdV5+8MOLYkFooel+o4KOrE 8mPc1cvCnMXL/QekF5U3RZ7mAwbEsB0= -----END CERTIFICATE-----Generated at Sat Apr 5 11:06:44 2025 by rpki-client