$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c2dd224-3249-33f5-9159-c1694c4f1ccf.roa File: 8c2dd224-3249-33f5-9159-c1694c4f1ccf.roa (raw, json) Hash identifier: wiEe8tXBCpwTziNdDDMtLt6yQ5h/9MBLHLiUd7YE35A= Subject key identifier: F7:BE:96:DF:FF:27:9A:CE:0D:FB:B1:D9:48:46:A4:98:9E:D5:13:31 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849393E815617486E62A482E400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c2dd224-3249-33f5-9159-c1694c4f1ccf.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 20940 IP address blocks: 104.125.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:81:56:17:48:6e:62:a4:82:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=0df77124-9c44-43dd-85a8-5a6ebcf1635c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ad:85:55:85:8a:29:12:9c:83:a3:7f:b7:97: 40:22:54:80:d3:c8:e2:13:6f:bf:03:65:b2:b5:13: 35:33:65:ec:ee:db:24:25:c5:81:5e:54:7f:99:95: 3c:d8:5a:22:d0:80:6c:11:bb:fb:28:5e:9c:7d:ce: 9c:0b:c0:5f:f5:8d:59:ea:46:17:1f:92:ed:1e:90: 13:90:0c:2a:37:f1:41:11:e0:68:c0:37:b7:79:d6: 93:af:7c:7e:22:85:1d:5b:a6:eb:b8:9b:21:6f:37: 24:87:b7:ac:16:9d:78:8e:05:59:1f:05:0a:81:4a: 4c:38:a0:ac:9a:13:e2:e3:eb:7c:4c:5a:2a:b6:31: 17:83:b9:bb:8c:70:62:80:2a:c1:f0:65:4b:8b:c6: a5:6a:d1:3d:74:ab:1e:ca:90:58:cd:27:5d:dc:97: 4a:84:34:43:a0:5e:80:3a:27:a3:e2:8f:8e:5f:e7: fd:9d:e2:a0:d5:e3:c5:2b:97:7f:a8:1f:2a:b2:15: 0e:a1:f7:5f:9f:54:4e:de:4f:69:6b:f0:94:8d:d5: 3f:39:eb:61:dd:b9:92:4e:4a:51:e1:7f:75:ae:2b: 1f:63:54:c9:27:08:03:c3:3a:7e:41:8f:be:b2:f3: 55:9d:61:96:24:aa:6a:3f:28:e9:8c:9f:c6:cd:ea: 2a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:BE:96:DF:FF:27:9A:CE:0D:FB:B1:D9:48:46:A4:98:9E:D5:13:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c2dd224-3249-33f5-9159-c1694c4f1ccf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.125.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:8a:a1:3d:e6:cd:b4:87:d8:8a:bc:4e:06:10:13:ac:3c:fb: 4c:e0:87:9b:49:cf:6c:92:16:b1:c2:1d:28:8d:50:9a:c8:2e: 2d:f2:19:d8:4a:fb:3e:e8:db:86:6d:02:47:ba:f2:21:77:5b: ad:eb:21:fa:29:dc:3c:b3:68:47:96:41:d7:ad:0d:ee:45:4e: 7a:50:47:07:41:da:b3:31:e6:82:ff:62:bd:dd:86:a2:21:d0: 6f:9d:3b:82:c2:b7:11:91:56:b5:70:22:f3:53:c7:ea:ba:ba: 7a:9e:ef:ea:73:93:77:73:71:dc:97:7e:3d:95:ba:15:aa:fb: 54:fd:df:22:50:e7:0a:51:4c:5b:97:ed:c1:58:fc:1a:71:b4: 0f:07:4e:27:a9:9a:5e:c2:56:85:48:6b:e8:94:28:a9:50:7e: 0c:37:ad:8f:0f:38:39:2b:1e:16:17:e7:ed:af:b8:8a:b5:77: 37:5c:14:ea:9d:7a:cd:44:ec:8d:99:65:bf:c0:1f:a0:b4:46: 49:a0:a0:e6:4b:41:cb:cd:ab:c3:23:78:08:7c:7a:ee:d6:78: b9:28:0d:33:a3:95:65:4b:d9:43:74:77:e4:e2:94:46:6c:9f: 38:8a:82:53:28:d2:d8:f7:e4:05:7e:b6:0b:df:bf:d0:7e:e4: ab:35:cf:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5PoFWF0huYqSC5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk MGRmNzcxMjQtOWM0NC00M2RkLTg1YTgtNWE2ZWJjZjE2MzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq2FVYWKKRKcg6N/t5dAIlSA08jiE2+/A2Wy tRM1M2Xs7tskJcWBXlR/mZU82Foi0IBsEbv7KF6cfc6cC8Bf9Y1Z6kYXH5LtHpAT kAwqN/FBEeBowDe3edaTr3x+IoUdW6bruJshbzckh7esFp14jgVZHwUKgUpMOKCs mhPi4+t8TFoqtjEXg7m7jHBigCrB8GVLi8alatE9dKseypBYzSdd3JdKhDRDoF6A Oiej4o+OX+f9neKg1ePFK5d/qB8qshUOofdfn1RO3k9pa/CUjdU/Oeth3bmSTkpR 4X91risfY1TJJwgDwzp+QY++svNVnWGWJKpqPyjpjJ/Gzeoq3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPe+lt//J5rODfux2UhGpJie1RMxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGMyZGQyMjQtMzI0OS0z M2Y1LTkxNTktYzE2OTRjNGYxY2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaH1SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmKoT3mzbSH2Iq8TgYQE6w8+0zgh5tJz2ySFrHCHSiNUJrILi3yGdhK +z7o24ZtAke68iF3W63rIfop3DyzaEeWQdetDe5FTnpQRwdB2rMx5oL/Yr3dhqIh 0G+dO4LCtxGRVrVwIvNTx+q6unqe7+pzk3dzcdyXfj2VuhWq+1T93yJQ5wpRTFuX 7cFY/BpxtA8HTiepml7CVoVIa+iUKKlQfgw3rY8PODkrHhYX5+2vuIq1dzdcFOqd es1E7I2ZZb/AH6C0RkmgoOZLQcvNq8MjeAh8eu7WeLkoDTOjlWVL2UN0d+TilEZs nziKglMo0tj35AV+tgvfv9B+5Ks1z5U= -----END CERTIFICATE-----Generated at Sat Apr 5 11:11:37 2025 by rpki-client