$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b2622cb-9341-3268-9c0e-db7be0fc2c82.roa File: 9b2622cb-9341-3268-9c0e-db7be0fc2c82.roa (raw, json) Hash identifier: p79QvjRbFjKgD8RNbtV2moNQSHNScYCe+ra5ZkjfOeA= Subject key identifier: B7:F8:1F:68:F5:BC:C6:9D:17:BD:00:D3:B9:DF:A9:7C:6F:C6:26:0F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858493243F87BEFB636D9E0CEAF80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b2622cb-9341-3268-9c0e-db7be0fc2c82.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 20940 IP address blocks: 104.70.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:f8:7b:ef:b6:36:d9:e0:ce:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=6b4d9103-c034-45f9-89c8-e2d733163e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c3:f8:5d:fa:dc:07:70:dd:f2:f7:a3:b9:ac: 01:1e:ac:26:37:1f:3b:ec:17:67:a6:c8:cb:c3:95: 94:a5:4c:3b:40:d4:70:af:59:06:b5:e7:2d:08:e8: 8d:da:7c:ef:b7:82:13:03:96:f6:60:e4:ba:0e:2a: 33:08:b8:f6:e0:45:df:9b:3f:5c:58:de:2a:92:49: 09:9c:6f:ff:7b:80:46:bd:62:b9:c4:ba:a0:73:2b: e1:f8:44:12:96:70:cf:04:d4:d4:31:9a:39:0f:77: e8:a2:5f:95:74:56:8a:e0:0c:be:aa:8f:63:7e:b5: 57:95:08:5e:c1:c2:4f:4e:9b:64:1a:8c:99:05:c6: fc:25:2a:2a:ac:30:83:0e:f3:1e:85:18:a3:79:c7: 5a:42:d8:d3:dc:cb:7a:67:6d:ce:53:c8:45:b6:1d: ff:8a:93:39:fa:b4:65:26:29:22:af:70:d9:8b:b8: 33:60:63:27:2e:f3:d9:dc:8a:1e:8b:b2:cc:fc:be: 51:ff:ec:79:65:e3:28:bf:e5:4b:98:d2:dc:b9:dc: 7f:29:41:d0:b9:94:a8:a1:2a:a4:43:b0:66:f1:09: 17:ad:bf:ed:57:89:ae:24:62:c5:9a:ea:fb:1a:51: 64:1d:d4:20:cb:ee:1f:80:55:d7:7d:06:fd:10:03: 24:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F8:1F:68:F5:BC:C6:9D:17:BD:00:D3:B9:DF:A9:7C:6F:C6:26:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b2622cb-9341-3268-9c0e-db7be0fc2c82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.70.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:32:23:30:26:ca:80:e5:8a:e5:5f:96:ab:be:b4:52:41:45: ad:64:11:2e:c7:7b:ec:c5:c4:22:a5:69:31:6f:6e:dd:99:6e: 4a:92:f9:dd:ec:69:65:26:56:5c:5d:fa:9e:03:a3:e9:36:d3: 52:9a:3e:e8:ed:7b:fa:5f:36:92:aa:31:ef:14:6e:6d:ac:32: 26:b6:4b:f6:a1:e8:69:70:f8:03:7a:44:7f:be:7c:16:75:e1: d7:49:f3:e1:3a:e1:1c:c4:be:a2:62:80:c7:f3:b5:3e:73:c8: 41:a2:3c:cc:04:67:99:69:b2:17:d3:b4:fb:70:7f:fe:da:ae: 50:63:21:9c:d9:4b:d1:0f:b1:60:98:af:4e:2a:4e:d3:3c:ff: cf:30:70:ce:43:98:1e:b0:b9:83:fd:80:90:cd:9d:0f:86:4c: fe:03:dc:24:98:05:89:99:e0:e3:b2:c0:47:3f:09:0b:fd:ac: 1d:cb:ae:e4:de:1c:9d:d6:6f:6f:39:79:97:33:47:ed:d9:5e: 03:a7:37:64:5a:0d:80:e1:7f:09:b6:66:d6:d9:9e:34:17:b2: ec:92:35:19:26:07:db:b4:20:46:fd:11:60:ed:f2:a3:7f:b8: b6:50:85:4b:74:f5:74:14:16:fa:02:49:15:53:98:aa:78:03: e0:ce:51:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ/h777Y22eDOr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk NmI0ZDkxMDMtYzAzNC00NWY5LTg5YzgtZTJkNzMzMTYzZTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMP4XfrcB3Dd8vejuawBHqwmNx877BdnpsjL w5WUpUw7QNRwr1kGtectCOiN2nzvt4ITA5b2YOS6DiozCLj24EXfmz9cWN4qkkkJ nG//e4BGvWK5xLqgcyvh+EQSlnDPBNTUMZo5D3fool+VdFaK4Ay+qo9jfrVXlQhe wcJPTptkGoyZBcb8JSoqrDCDDvMehRijecdaQtjT3Mt6Z23OU8hFth3/ipM5+rRl Jikir3DZi7gzYGMnLvPZ3Ioei7LM/L5R/+x5ZeMov+VLmNLcudx/KUHQuZSooSqk Q7Bm8QkXrb/tV4muJGLFmur7GlFkHdQgy+4fgFXXfQb9EAMkhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLf4H2j1vMadF70A07nfqXxvxiYPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWIyNjIyY2ItOTM0MS0z MjY4LTljMGUtZGI3YmUwZmMyYzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaEamMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUyIzAmyoDliuVflqu+tFJBRa1kES7He+zFxCKlaTFvbt2ZbkqS+d3s aWUmVlxd+p4Do+k201KaPujte/pfNpKqMe8Ubm2sMia2S/ah6Glw+AN6RH++fBZ1 4ddJ8+E64RzEvqJigMfztT5zyEGiPMwEZ5lpshfTtPtwf/7arlBjIZzZS9EPsWCY r04qTtM8/88wcM5DmB6wuYP9gJDNnQ+GTP4D3CSYBYmZ4OOywEc/CQv9rB3LruTe HJ3Wb285eZczR+3ZXgOnN2RaDYDhfwm2ZtbZnjQXsuySNRkmB9u0IEb9EWDt8qN/ uLZQhUt09XQUFvoCSRVTmKp4A+DOUaQ= -----END CERTIFICATE-----Generated at Sat Apr 5 11:03:53 2025 by rpki-client