$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0643ade-3839-3331-9c9f-1ef3f2e9ac17.roa File: a0643ade-3839-3331-9c9f-1ef3f2e9ac17.roa (raw, json) Hash identifier: mTb1addswPDNByEgjDwJ/1o5K5ELhKGKRN+y3agT96w= Subject key identifier: 17:C5:62:8E:73:07:62:17:4E:2A:17:C9:87:52:78:1B:45:3B:68:5A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849350EB99DF5B729B82735EC00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0643ade-3839-3331-9c9f-1ef3f2e9ac17.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 20940 IP address blocks: 104.97.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:b9:9d:f5:b7:29:b8:27:35:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=5bae0e1c-e1e2-4971-bb1e-6cec84e186a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:43:e6:66:a3:e4:ef:c9:78:d9:72:cc:eb:3d: 41:49:c2:ac:bf:37:be:a5:3a:f0:0f:d2:27:92:08: bb:04:d5:66:07:1b:e7:e4:d2:3d:81:14:f5:90:0b: d4:f5:90:fe:b0:d7:3d:fa:89:b3:8d:75:c7:a1:01: ef:97:2a:d7:5e:40:ca:76:65:7a:0b:b4:28:4f:8f: 4c:d3:76:6f:c1:b7:3f:4f:ec:ea:20:2b:5b:c5:be: 90:26:0f:11:95:43:78:1a:da:b8:d7:49:31:0d:31: b1:e3:b7:c0:39:1c:43:1f:74:a5:ca:71:ca:de:32: 2e:e6:18:56:27:69:29:df:83:08:32:68:c0:0b:79: 0d:b2:28:4c:fb:12:c6:c6:71:b8:61:b4:12:f3:51: 29:eb:58:2c:e4:0b:29:18:b8:11:c3:f4:77:17:07: 77:b8:64:d6:7f:a1:06:ec:45:c9:a1:26:31:48:ec: d3:38:1b:f7:9a:ef:b4:d6:47:4c:95:b2:47:36:38: e7:fa:56:1d:41:ec:c7:67:a0:81:bf:bc:c8:84:a5: f9:b1:ce:23:e7:c8:64:7e:f8:76:16:b4:0b:c9:a9: 18:31:63:89:63:3f:58:3b:aa:98:c0:c5:ed:94:6e: 3c:68:99:0d:3d:c8:1d:1d:8e:6e:43:e6:46:e2:5c: a1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C5:62:8E:73:07:62:17:4E:2A:17:C9:87:52:78:1B:45:3B:68:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0643ade-3839-3331-9c9f-1ef3f2e9ac17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.97.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:ae:9f:e9:58:ec:7c:1b:bc:15:0f:e0:6e:8c:19:58:d3:63: d6:f1:53:35:b7:61:24:2c:c2:6b:56:5a:5b:48:ec:69:42:b6: 36:cf:9f:41:5d:b2:5a:2a:93:94:b1:2c:d5:3d:1e:b2:df:e4: 89:a4:25:f0:44:b2:09:3f:dc:7d:b7:80:47:06:8b:40:c9:ef: 11:51:c9:88:38:53:59:80:d0:a7:c4:ad:6b:13:65:90:e1:a9: ed:d1:46:2e:a0:98:df:46:0f:4c:1f:b9:23:fd:14:b4:ef:1d: d6:bf:8e:d9:86:71:a0:8e:9e:90:b8:4f:ea:db:d9:7c:16:4b: 3d:7e:cb:0e:57:aa:ec:c6:a6:a5:97:8d:8e:e7:02:06:1f:18: 8b:5a:ea:4e:bd:d7:74:e3:1b:a1:43:8c:30:a3:f0:3d:27:1f: 26:f6:dc:45:29:56:c3:8c:c4:eb:39:b5:9e:41:81:c7:42:94: b7:3b:c5:69:ce:cc:1c:f5:7c:18:f7:95:9c:92:32:27:9b:f0: f8:38:a8:68:cb:c0:d1:c7:75:56:fa:a5:43:d2:41:86:82:7b: e5:e3:d2:72:b5:7c:71:30:f3:5c:a7:09:9d:2c:b7:66:77:1f: e1:81:01:f8:35:28:21:86:92:da:b0:76:22:7c:8d:71:64:50: 07:ce:91:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1Drmd9bcpuCc17AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk NWJhZTBlMWMtZTFlMi00OTcxLWJiMWUtNmNlYzg0ZTE4NmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0PmZqPk78l42XLM6z1BScKsvze+pTrwD9In kgi7BNVmBxvn5NI9gRT1kAvU9ZD+sNc9+omzjXXHoQHvlyrXXkDKdmV6C7QoT49M 03Zvwbc/T+zqICtbxb6QJg8RlUN4Gtq410kxDTGx47fAORxDH3SlynHK3jIu5hhW J2kp34MIMmjAC3kNsihM+xLGxnG4YbQS81Ep61gs5AspGLgRw/R3Fwd3uGTWf6EG 7EXJoSYxSOzTOBv3mu+01kdMlbJHNjjn+lYdQezHZ6CBv7zIhKX5sc4j58hkfvh2 FrQLyakYMWOJYz9YO6qYwMXtlG48aJkNPcgdHY5uQ+ZG4lyhoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfFYo5zB2IXTioXyYdSeBtFO2haMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTA2NDNhZGUtMzgzOS0z MzMxLTljOWYtMWVmM2YyZTlhYzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaGECMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGun+lY7HwbvBUP4G6MGVjTY9bxUzW3YSQswmtWWltI7GlCtjbPn0Fd sloqk5SxLNU9HrLf5ImkJfBEsgk/3H23gEcGi0DJ7xFRyYg4U1mA0KfErWsTZZDh qe3RRi6gmN9GD0wfuSP9FLTvHda/jtmGcaCOnpC4T+rb2XwWSz1+yw5XquzGpqWX jY7nAgYfGIta6k6913TjG6FDjDCj8D0nHyb23EUpVsOMxOs5tZ5BgcdClLc7xWnO zBz1fBj3lZySMieb8Pg4qGjLwNHHdVb6pUPSQYaCe+Xj0nK1fHEw81ynCZ0st2Z3 H+GBAfg1KCGGktqwdiJ8jXFkUAfOkfA= -----END CERTIFICATE-----Generated at Wed Apr 9 16:08:52 2025 by rpki-client