$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/800d7b08-0479-3bdf-801f-2e9c0c33474e.roa File: 800d7b08-0479-3bdf-801f-2e9c0c33474e.roa (raw, json) Hash identifier: A/srPo1gV3D5vpqJ3kUzIS5RJv7xtUgSPfQ8wPd0O/g= Subject key identifier: C7:0C:4B:73:85:F9:D8:F7:39:C0:B6:3A:6D:DF:D8:88:9E:48:D1:30 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849350EBF174CADD4D5A991FA00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/800d7b08-0479-3bdf-801f-2e9c0c33474e.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 20940 IP address blocks: 104.84.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:bf:17:4c:ad:d4:d5:a9:91:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=2b3e0286-4c52-44a6-9fe2-e168a2bfe49b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:87:54:cc:ab:2d:70:9e:a3:f6:10:3b:ce:73: 53:20:2c:14:d0:dc:9b:d7:98:d6:fe:f5:d2:c3:e2: 91:21:2b:92:48:00:3f:32:7e:d8:6c:85:30:15:51: fd:ac:d4:d5:e1:01:a3:0d:59:f3:6c:3d:0b:30:62: e2:1b:aa:76:07:41:55:ae:ae:d2:19:17:53:bc:e6: ab:c6:35:9e:6c:79:e3:57:e8:f1:65:4f:b9:0f:cc: d2:2b:c4:bb:a7:43:0e:f9:11:aa:91:79:e7:bd:3e: 79:65:3e:77:48:cc:d1:c6:55:15:66:ff:96:12:3e: b4:a9:11:8f:28:dd:ca:7f:e9:35:cf:7a:64:51:b7: 18:b9:e1:12:6d:9b:76:d6:c0:11:d8:e5:1c:bb:71: 81:33:23:9c:c6:01:67:bc:f9:ae:85:9f:e6:f8:72: 15:f4:b8:c2:93:33:1d:0b:1a:0e:0a:59:a3:09:ac: ce:8e:a9:cd:f9:90:24:c0:ac:a5:a6:1f:97:b9:5f: 24:38:e7:5a:74:14:4e:f3:89:64:03:be:f5:ea:1c: 31:ee:da:6d:4b:aa:3c:35:5f:ad:3a:56:d2:e8:75: bb:15:a2:e2:bc:11:ea:af:f2:03:79:dc:34:ff:f7: ea:ea:6d:bf:d6:b7:56:40:38:13:0b:9d:2a:79:39: 8d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:0C:4B:73:85:F9:D8:F7:39:C0:B6:3A:6D:DF:D8:88:9E:48:D1:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/800d7b08-0479-3bdf-801f-2e9c0c33474e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.84.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:7b:52:db:00:fd:58:1d:ba:9b:3a:6f:ee:c7:13:14:38:46: ee:f7:65:82:bb:bc:1b:c2:cd:36:3c:b5:0a:4a:a2:ab:53:e0: e8:cc:70:82:6a:aa:bb:06:cb:bf:ab:88:ef:b4:c6:5f:44:98: 91:3c:4a:26:72:f9:73:cb:a0:a7:87:52:1a:c2:6e:57:fa:75: fb:06:ee:fd:8a:df:4d:84:e6:63:66:63:e1:cc:8d:5d:ec:7f: 5a:ef:a9:21:8e:a4:a2:2b:49:00:06:1e:0e:8e:9b:46:5e:06: e2:13:0b:a7:98:dc:f7:d6:61:54:e2:18:79:5b:35:8b:c2:92: 47:dc:d0:95:0e:7b:1f:ab:55:0e:ff:0b:09:02:9b:b0:3c:3f: f1:b8:aa:e7:bb:25:59:e0:6b:d4:13:17:05:4c:d3:ee:4f:81: 52:f9:45:bc:c1:f9:fa:f9:c2:c7:ba:9b:95:39:22:e5:e0:12: 0a:67:d4:0d:39:c8:05:62:df:94:ff:34:86:30:67:02:81:e7: 72:91:ce:81:98:11:43:67:6e:92:6a:7a:a2:72:ac:a3:78:9a: aa:49:f4:93:52:26:a1:57:22:38:68:7e:2f:89:9e:57:1f:29: c9:c2:1c:83:c9:fb:1f:a2:ab:c7:81:bf:2a:13:99:88:e9:6c: 7e:4c:4f:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1Dr8XTK3U1amR+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk MmIzZTAyODYtNGM1Mi00NGE2LTlmZTItZTE2OGEyYmZlNDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YdUzKstcJ6j9hA7znNTICwU0Nyb15jW/vXS w+KRISuSSAA/Mn7YbIUwFVH9rNTV4QGjDVnzbD0LMGLiG6p2B0FVrq7SGRdTvOar xjWebHnjV+jxZU+5D8zSK8S7p0MO+RGqkXnnvT55ZT53SMzRxlUVZv+WEj60qRGP KN3Kf+k1z3pkUbcYueESbZt21sAR2OUcu3GBMyOcxgFnvPmuhZ/m+HIV9LjCkzMd CxoOClmjCazOjqnN+ZAkwKylph+XuV8kOOdadBRO84lkA7716hwx7tptS6o8NV+t OlbS6HW7FaLivBHqr/IDedw0//fq6m2/1rdWQDgTC50qeTmNTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcMS3OF+dj3OcC2Om3f2IieSNEwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODAwZDdiMDgtMDQ3OS0z YmRmLTgwMWYtMmU5YzBjMzM0NzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaFSYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG57UtsA/Vgdups6b+7HExQ4Ru73ZYK7vBvCzTY8tQpKoqtT4OjMcIJq qrsGy7+riO+0xl9EmJE8SiZy+XPLoKeHUhrCblf6dfsG7v2K302E5mNmY+HMjV3s f1rvqSGOpKIrSQAGHg6Om0ZeBuITC6eY3PfWYVTiGHlbNYvCkkfc0JUOex+rVQ7/ CwkCm7A8P/G4que7JVnga9QTFwVM0+5PgVL5RbzB+fr5wse6m5U5IuXgEgpn1A05 yAVi35T/NIYwZwKB53KRzoGYEUNnbpJqeqJyrKN4mqpJ9JNSJqFXIjhofi+Jnlcf KcnCHIPJ+x+iq8eBvyoTmYjpbH5MT3s= -----END CERTIFICATE-----Generated at Sat Apr 5 12:23:25 2025 by rpki-client