$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c9acc95-b3f7-3d08-aefe-5523dd0e52ee.roa File: 7c9acc95-b3f7-3d08-aefe-5523dd0e52ee.roa (raw, json) Hash identifier: LYqjmjlegk7Xn/XGpHLrShnF/in/M2ZL57MEXgFbXbQ= Subject key identifier: 12:F8:46:9B:C0:73:A6:29:3E:5B:77:52:1D:B2:35:98:F7:5F:AD:27 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849287E5A0B9CA6E08D341408CE Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c9acc95-b3f7-3d08-aefe-5523dd0e52ee.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 20940 IP address blocks: 104.70.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:5a:0b:9c:a6:e0:8d:34:14:08:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=3ba158c5-2084-4c4f-bf1e-19184c49800c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:10:9b:23:cb:26:7c:96:fa:67:cf:fb:da:78: 48:26:69:1b:51:1d:e6:24:50:2b:67:a8:42:bb:6e: f3:a6:f1:c9:2c:92:9f:b9:10:3b:d0:61:98:56:1a: 14:b1:4c:d1:4a:0d:ab:4f:9b:82:8b:34:d4:7b:f3: b0:e9:aa:d7:6f:3a:e9:50:7a:69:75:b4:19:f0:80: b0:56:f8:ee:a9:59:7b:8a:aa:82:b6:82:5a:01:42: 7b:ac:0e:d9:cf:df:72:63:53:8d:0e:74:88:80:27: 57:5d:17:e4:2d:05:23:82:8f:1d:83:ac:3a:59:5a: 92:76:5d:c4:50:b5:8a:be:cd:99:94:2a:88:60:72: d0:45:a7:bc:84:40:2a:2a:46:d3:89:62:e5:eb:4b: a5:33:d3:21:3b:6a:2c:6a:c1:01:2f:1c:30:84:f4: 95:84:f9:28:bc:17:51:93:f9:b7:f0:aa:ce:bf:1a: ca:62:d0:0e:c8:43:8d:7c:1f:3b:f7:d2:65:16:ae: 47:6e:48:68:8c:f0:2b:0d:ff:17:01:78:30:57:5c: 08:e0:23:d8:c3:66:b4:69:91:ac:81:ba:25:2c:af: dd:0c:01:17:90:5e:53:e2:75:61:ce:d9:b3:9e:eb: 57:e6:35:5e:a1:c0:da:a7:5c:2f:29:bf:b7:0a:d8: ac:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F8:46:9B:C0:73:A6:29:3E:5B:77:52:1D:B2:35:98:F7:5F:AD:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c9acc95-b3f7-3d08-aefe-5523dd0e52ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.70.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:d7:77:0d:85:0d:ef:7e:24:83:9f:ee:03:79:29:62:f2:ad: ad:08:9f:5f:6c:62:ae:37:dd:ff:a7:27:89:5f:cd:82:a0:c0: b0:01:22:22:bd:98:60:d6:01:9c:82:08:d9:02:94:0a:de:2d: fe:05:bb:e6:b2:63:d0:b8:a8:a3:3d:ec:e3:49:fc:9f:7e:91: f2:16:b6:06:6a:4e:17:d5:8d:f6:68:e0:c2:6a:63:c7:c8:52: 9f:82:a5:01:a5:c0:5c:e4:92:00:49:c4:93:74:3f:a8:41:8a: d6:a6:88:64:9d:0d:2c:a3:55:e9:2e:c7:84:27:f0:f4:30:bc: c6:8b:f5:f6:f9:14:b1:e4:c6:29:24:2e:99:c5:d4:55:6d:21: 8e:4a:2d:ef:ea:b9:e0:5c:e8:70:d9:3f:ad:05:66:7e:b8:d0: 40:60:61:4b:b6:2c:b0:ae:03:cf:47:3f:f3:cb:7d:46:70:fa: e5:4d:ba:1b:52:70:ba:86:59:01:fc:1b:fc:a3:1a:4e:a0:c5: 92:3a:02:12:19:7a:03:5e:cd:32:ba:77:8b:27:2f:81:86:ff: 8f:35:37:c6:1d:da:1c:be:9f:e6:e2:3a:44:0d:04:dc:41:76: e4:cc:31:50:a9:7c:27:e4:3f:3d:da:bc:d6:b6:e8:25:a3:51: a3:90:b4:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkofloLnKbgjTQUCM4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk M2JhMTU4YzUtMjA4NC00YzRmLWJmMWUtMTkxODRjNDk4MDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghCbI8smfJb6Z8/72nhIJmkbUR3mJFArZ6hC u27zpvHJLJKfuRA70GGYVhoUsUzRSg2rT5uCizTUe/Ow6arXbzrpUHppdbQZ8ICw VvjuqVl7iqqCtoJaAUJ7rA7Zz99yY1ONDnSIgCdXXRfkLQUjgo8dg6w6WVqSdl3E ULWKvs2ZlCqIYHLQRae8hEAqKkbTiWLl60ulM9MhO2osasEBLxwwhPSVhPkovBdR k/m38KrOvxrKYtAOyEONfB8799JlFq5HbkhojPArDf8XAXgwV1wI4CPYw2a0aZGs gbolLK/dDAEXkF5T4nVhztmznutX5jVeocDap1wvKb+3CtisQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBL4RpvAc6YpPlt3Uh2yNZj3X60nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2M5YWNjOTUtYjNmNy0z ZDA4LWFlZmUtNTUyM2RkMGU1MmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaEZ0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHXdw2FDe9+JIOf7gN5KWLyra0In19sYq433f+nJ4lfzYKgwLABIiK9 mGDWAZyCCNkClAreLf4Fu+ayY9C4qKM97ONJ/J9+kfIWtgZqThfVjfZo4MJqY8fI Up+CpQGlwFzkkgBJxJN0P6hBitamiGSdDSyjVekux4Qn8PQwvMaL9fb5FLHkxikk LpnF1FVtIY5KLe/queBc6HDZP60FZn640EBgYUu2LLCuA89HP/PLfUZw+uVNuhtS cLqGWQH8G/yjGk6gxZI6AhIZegNezTK6d4snL4GG/481N8Yd2hy+n+biOkQNBNxB duTMMVCpfCfkPz3avNa26CWjUaOQtOY= -----END CERTIFICATE-----Generated at Sat Apr 5 10:56:21 2025 by rpki-client