$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88874c79-a36a-334f-93cf-4dfb58395bd7.roa File: 88874c79-a36a-334f-93cf-4dfb58395bd7.roa (raw, json) Hash identifier: J8KITR/RqUmHxamPjXi5o0S8nJyOD/GqQobWX8pIlHc= Subject key identifier: EB:78:FC:4E:15:18:2E:22:9E:ED:2D:55:90:07:4D:D3:49:8A:1B:79 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849287E578D08B37010FEECA1C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88874c79-a36a-334f-93cf-4dfb58395bd7.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 16625 IP address blocks: 104.71.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:57:8d:08:b3:70:10:fe:ec:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=fd1571b8-a2a1-494d-b4f1-5da6726ae738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:45:15:72:61:a1:aa:7a:1c:83:a2:13:c6:31: e5:d4:70:9d:c6:d5:ce:1c:ae:24:e1:3c:66:95:3a: e0:6e:d8:12:d1:3a:76:f7:2c:4d:d5:5d:e4:4b:45: 2d:44:b5:cb:e5:60:18:25:c4:ed:25:43:48:e2:12: 0d:75:41:91:2c:38:a0:0c:27:bb:65:6f:26:d9:7c: df:79:86:e4:d5:98:07:45:d3:d8:ae:76:ec:ec:6c: d3:59:80:6c:b4:89:56:c3:13:0d:31:66:36:c0:6d: 65:b7:30:4d:30:7d:84:15:1e:c5:71:26:ea:fc:6b: 8a:35:56:6f:0b:21:32:58:fe:b1:06:f8:be:20:d4: 91:8a:0f:eb:20:79:b3:30:d6:61:0d:fa:1b:0b:24: 2c:6b:7d:13:d2:b3:41:34:19:2f:d3:42:62:c5:2a: 9b:00:c0:ae:46:18:5f:76:04:88:e1:d1:58:68:19: f3:e3:3f:99:f3:ca:4c:09:6f:e7:88:8b:22:af:0b: 13:a3:52:42:50:22:76:2a:65:a1:5e:49:47:12:31: b1:1a:35:5f:1c:97:f4:b9:37:84:6d:7b:22:8f:2e: 27:56:bb:f5:00:91:30:fb:b4:c2:c5:9c:2f:05:65: 68:b2:0c:e7:5c:0b:d2:f6:1d:d0:3e:e3:15:48:17: 00:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:78:FC:4E:15:18:2E:22:9E:ED:2D:55:90:07:4D:D3:49:8A:1B:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88874c79-a36a-334f-93cf-4dfb58395bd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.71.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:27:d1:50:18:21:14:f7:bd:22:7c:51:8b:cd:8d:a3:3f:66: dd:1e:13:7f:c1:d1:b8:5b:04:8e:24:0d:72:5f:7f:44:0a:e3: d6:2b:81:40:50:52:51:3c:a5:e6:8e:57:29:bd:f0:4b:40:ba: 55:80:d0:5f:86:6b:f3:8c:d5:4e:39:4a:65:7e:31:99:8b:cc: 22:15:db:56:84:75:d0:fc:41:4e:40:86:81:7b:53:ad:2a:33: 0b:43:11:7a:38:85:07:01:26:87:a6:44:cb:cf:37:ea:93:cd: 7d:83:2e:ae:2a:b9:00:fd:cf:26:27:f0:01:8c:f8:30:8f:f6: 71:16:dc:c0:a0:20:1a:32:cc:13:c8:9c:4f:68:21:eb:ba:0d: 68:3b:dc:c0:a7:8a:12:d3:fd:2f:8e:8b:4e:73:56:7e:35:d2: f2:05:17:37:fc:49:06:2a:e8:1a:6b:d6:be:ab:87:60:6e:32: 12:c5:f6:36:6c:13:28:64:2a:a2:9e:52:f6:fe:c9:c7:c6:0f: a2:f7:70:6f:1c:a8:f6:25:e4:c6:8b:ff:99:f8:09:9c:ce:18: 1f:e7:88:b8:f0:88:a5:c5:5a:73:af:7c:a2:3f:6a:76:76:11: fa:c4:bb:a9:06:8f:a0:9e:87:a6:4f:0b:f7:2b:21:e6:0f:24: 31:cb:31:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkofleNCLNwEP7socAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZmQxNTcxYjgtYTJhMS00OTRkLWI0ZjEtNWRhNjcyNmFlNzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUUVcmGhqnocg6ITxjHl1HCdxtXOHK4k4Txm lTrgbtgS0Tp29yxN1V3kS0UtRLXL5WAYJcTtJUNI4hINdUGRLDigDCe7ZW8m2Xzf eYbk1ZgHRdPYrnbs7GzTWYBstIlWwxMNMWY2wG1ltzBNMH2EFR7FcSbq/GuKNVZv CyEyWP6xBvi+INSRig/rIHmzMNZhDfobCyQsa30T0rNBNBkv00JixSqbAMCuRhhf dgSI4dFYaBnz4z+Z88pMCW/niIsirwsTo1JCUCJ2KmWhXklHEjGxGjVfHJf0uTeE bXsijy4nVrv1AJEw+7TCxZwvBWVosgznXAvS9h3QPuMVSBcApwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOt4/E4VGC4inu0tVZAHTdNJiht5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODg4NzRjNzktYTM2YS0z MzRmLTkzY2YtNGRmYjU4Mzk1YmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaEeQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMn0VAYIRT3vSJ8UYvNjaM/Zt0eE3/B0bhbBI4kDXJff0QK49YrgUBQ UlE8peaOVym98EtAulWA0F+Ga/OM1U45SmV+MZmLzCIV21aEddD8QU5AhoF7U60q MwtDEXo4hQcBJoemRMvPN+qTzX2DLq4quQD9zyYn8AGM+DCP9nEW3MCgIBoyzBPI nE9oIeu6DWg73MCnihLT/S+Oi05zVn410vIFFzf8SQYq6Bpr1r6rh2BuMhLF9jZs EyhkKqKeUvb+ycfGD6L3cG8cqPYl5MaL/5n4CZzOGB/niLjwiKXFWnOvfKI/anZ2 EfrEu6kGj6Ceh6ZPC/crIeYPJDHLMUQ= -----END CERTIFICATE-----Generated at Sat Apr 5 10:56:57 2025 by rpki-client