$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/93e3d12f-b4e5-3217-8e55-eaf5f1064d8a.roa File: 93e3d12f-b4e5-3217-8e55-eaf5f1064d8a.roa (raw, json) Hash identifier: NRNGj+IxU4DIt18YQuJLRmPJ8p96fzvt0/tCxvLd16Y= Subject key identifier: EA:E2:CD:5D:BA:08:B2:6C:D9:5C:07:5B:BE:72:91:A6:2C:8C:AA:FF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858493243E904F256797A3D4DACC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/93e3d12f-b4e5-3217-8e55-eaf5f1064d8a.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 20940 IP address blocks: 104.71.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:e9:04:f2:56:79:7a:3d:4d:ac:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=5d1a39d9-2336-49ca-952e-86603787bfb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:51:aa:c9:12:75:18:b6:81:16:dc:d3:87:64: 50:01:91:7c:b8:e6:f0:5a:19:e2:48:6f:c8:09:3c: e5:fc:bb:6f:2b:89:bf:7f:6f:b5:c0:1c:c1:00:06: 7d:36:cd:00:55:bd:bc:b4:ed:bc:19:2e:6f:0a:f5: f0:b0:66:4d:0e:19:66:85:1b:bf:9a:a2:ec:ac:41: 88:fc:95:24:b8:c1:28:d9:51:87:ec:d6:4b:2b:b0: fb:7f:bf:4b:b4:5f:0a:0f:0e:8f:7c:be:cc:30:31: 52:26:9c:80:05:b7:d5:07:d7:06:25:0c:67:15:17: d1:64:a8:d6:19:85:2a:5c:95:f2:5b:51:df:0a:e2: cf:89:9a:2f:4b:55:ca:2c:a8:c6:e1:72:a2:95:ac: a3:75:5f:f2:84:c9:33:1f:54:0a:17:43:f1:24:7d: 6c:6f:bd:36:36:5c:be:8a:f9:cf:06:f0:b2:3c:3e: cd:f1:d4:04:8d:02:69:ee:e0:af:90:4c:09:81:94: fb:34:a5:ea:c5:eb:f1:c8:96:73:73:14:54:35:72: 6c:27:59:24:74:60:6d:ee:e9:cb:e9:fa:ca:d9:ed: 57:d9:6a:66:16:81:ee:f7:5b:ad:4a:4e:cd:54:6d: c2:24:a9:94:6f:f3:d0:9c:77:2a:d8:27:2f:32:2b: 73:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E2:CD:5D:BA:08:B2:6C:D9:5C:07:5B:BE:72:91:A6:2C:8C:AA:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/93e3d12f-b4e5-3217-8e55-eaf5f1064d8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.71.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:93:27:e8:15:e0:ca:7c:5f:ef:7f:98:09:73:43:44:bc:f2: 4b:78:ec:79:3c:ac:a3:8c:9a:9e:51:4a:99:f1:dd:c9:19:f6: 1f:73:2b:86:d5:6f:5d:e4:22:48:23:79:ca:30:58:ea:84:44: d9:40:cd:ad:c6:67:bf:39:ea:fd:9e:7d:a3:2a:8a:9b:d4:1b: aa:9d:69:f7:05:28:93:b6:96:a4:bd:ac:fa:00:bd:66:0f:65: fc:7b:fd:c8:01:a8:3c:31:34:0f:e6:0f:1a:a9:27:29:2f:37: b7:91:d7:6b:d7:79:49:6e:5c:0c:d5:00:ed:1c:17:79:46:e5: 55:fe:ec:54:06:2f:f0:d9:66:34:38:c2:1f:f2:02:76:e5:c2: f6:06:b3:d0:7e:f3:e9:fb:59:3a:70:dc:16:df:58:72:23:5e: 8b:b2:b3:02:53:8d:d0:d8:c6:b3:7e:14:e0:c8:b6:43:b1:32: a1:a6:b1:f8:48:ee:4f:03:f8:a3:f8:8b:09:f9:1c:15:32:5d: 9a:6b:f8:71:4c:34:85:71:0a:09:3e:21:7b:7f:65:09:b4:c3: 59:62:fd:44:59:04:e2:de:2e:2c:04:ea:c1:01:68:0d:19:74: 33:bb:1d:2f:5c:5c:9a:51:ac:33:3d:28:e2:35:57:12:6a:1f: 79:2e:37:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ+kE8lZ5ej1NrMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk NWQxYTM5ZDktMjMzNi00OWNhLTk1MmUtODY2MDM3ODdiZmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1GqyRJ1GLaBFtzTh2RQAZF8uObwWhniSG/I CTzl/LtvK4m/f2+1wBzBAAZ9Ns0AVb28tO28GS5vCvXwsGZNDhlmhRu/mqLsrEGI /JUkuMEo2VGH7NZLK7D7f79LtF8KDw6PfL7MMDFSJpyABbfVB9cGJQxnFRfRZKjW GYUqXJXyW1HfCuLPiZovS1XKLKjG4XKilayjdV/yhMkzH1QKF0PxJH1sb702Nly+ ivnPBvCyPD7N8dQEjQJp7uCvkEwJgZT7NKXqxevxyJZzcxRUNXJsJ1kkdGBt7unL 6frK2e1X2WpmFoHu91utSk7NVG3CJKmUb/PQnHcq2CcvMitziwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOrizV26CLJs2VwHW75ykaYsjKr/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTNlM2QxMmYtYjRlNS0z MjE3LThlNTUtZWFmNWYxMDY0ZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaEeCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWTJ+gV4Mp8X+9/mAlzQ0S88kt47Hk8rKOMmp5RSpnx3ckZ9h9zK4bV b13kIkgjecowWOqERNlAza3GZ7856v2efaMqipvUG6qdafcFKJO2lqS9rPoAvWYP Zfx7/cgBqDwxNA/mDxqpJykvN7eR12vXeUluXAzVAO0cF3lG5VX+7FQGL/DZZjQ4 wh/yAnblwvYGs9B+8+n7WTpw3BbfWHIjXouyswJTjdDYxrN+FODItkOxMqGmsfhI 7k8D+KP4iwn5HBUyXZpr+HFMNIVxCgk+IXt/ZQm0w1li/URZBOLeLiwE6sEBaA0Z dDO7HS9cXJpRrDM9KOI1VxJqH3kuN7w= -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:46 2025 by rpki-client