$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a6d733cc-f09e-39b7-a1d4-debfc7de662b.roa File: a6d733cc-f09e-39b7-a1d4-debfc7de662b.roa (raw, json) Hash identifier: BRcr+nMCJb9IbcIp6B+AkGdlCg0Gn7QSw3QEmLgrd7I= Subject key identifier: A3:81:88:A8:BC:4B:60:54:2A:94:C9:A3:9C:A4:BF:E0:A0:9A:77:87 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858491246AD4FAE42D655360E2110 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a6d733cc-f09e-39b7-a1d4-debfc7de662b.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 32787 IP address blocks: 104.86.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ad:4f:ae:42:d6:55:36:0e:21:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=590575e0-0c6b-4ea5-9e9a-6bc9c4bb2d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:38:dc:3c:7e:2b:be:cd:6a:1b:18:3f:b3:a4: 0c:e8:7c:97:a0:b2:3e:eb:e2:72:58:84:53:3e:ee: 55:1c:4a:48:13:d1:12:ec:9b:66:ba:68:20:48:99: 93:2d:81:c2:c7:77:39:b4:b6:df:85:5e:4d:6e:de: 7c:e0:19:13:7b:de:a5:5b:54:50:45:3a:54:c8:f5: 82:92:c4:78:fa:12:6c:6a:22:65:67:75:a2:dc:24: ce:a3:0f:a8:49:d4:b9:d3:64:79:22:e6:fc:3a:96: b8:64:13:e3:cb:08:a0:21:c2:31:e4:a4:e5:db:92: 3e:f8:6c:79:da:8f:93:6a:8a:c5:7a:6a:0a:4b:98: 80:43:dd:22:a3:27:d5:52:86:ee:1a:53:05:ff:1d: bb:76:e4:64:40:a0:31:30:aa:3c:9a:2e:3f:34:58: 91:59:24:5d:c8:52:6b:70:79:83:c2:16:d3:95:0e: a0:53:a3:f9:83:21:c7:ad:15:97:78:5b:75:03:8b: 5e:f3:79:8a:b4:9b:5e:25:f7:c7:9c:81:42:ec:91: 36:b3:73:6a:6b:92:28:ce:5f:eb:9d:8b:db:bf:36: 54:23:06:bd:68:02:48:eb:e6:0a:0d:d1:8c:94:18: c6:eb:f0:f3:19:cf:1c:b8:16:55:37:6b:70:ee:2e: 39:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:81:88:A8:BC:4B:60:54:2A:94:C9:A3:9C:A4:BF:E0:A0:9A:77:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a6d733cc-f09e-39b7-a1d4-debfc7de662b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.86.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:bb:db:af:d8:0e:9e:17:42:ce:e3:72:29:b5:62:d3:4f:b6: 19:09:de:3b:8c:cf:14:3b:ed:b0:6b:b2:81:71:01:e3:ef:f1: e4:b3:ed:d9:08:1d:fa:ce:e0:3a:fb:41:ae:2e:44:f8:7d:c5: aa:5f:65:b9:07:c0:d8:58:09:be:98:95:96:6e:f9:7a:cd:7e: 80:f1:cd:a0:6c:57:0e:06:61:97:3b:d1:85:04:83:a7:f9:23: ea:1c:ef:5f:9a:68:64:8b:fc:99:7f:91:49:af:98:24:49:91: ed:05:36:07:94:1e:39:81:7f:eb:64:4b:49:46:58:f4:4b:af: af:ed:49:56:85:01:66:61:11:2d:e7:ca:f4:0b:62:1d:2e:9a: 6e:d3:4f:f4:d5:f3:60:1a:0e:bd:ac:b6:6e:77:47:c6:77:b9: 6e:48:2e:0f:a5:09:e1:cd:10:ee:5e:2c:94:37:77:4c:e6:27: 14:e0:19:c3:1c:db:70:2f:c2:a9:c0:8d:d9:4e:79:a2:fa:3d: 93:0c:4f:19:97:5a:63:5f:72:87:f8:08:cd:e9:18:9e:e6:6a: 4c:bc:06:ea:87:63:71:f9:2e:40:b5:e4:cf:fa:98:e7:a2:50: 0c:84:52:da:3b:32:b4:30:fb:84:8e:19:b4:4d:c1:d2:f6:7a: d1:44:45:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRq1PrkLWVTYOIRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NTkwNTc1ZTAtMGM2Yi00ZWE1LTllOWEtNmJjOWM0YmIyZDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTjcPH4rvs1qGxg/s6QM6HyXoLI+6+JyWIRT Pu5VHEpIE9ES7JtmumggSJmTLYHCx3c5tLbfhV5Nbt584BkTe96lW1RQRTpUyPWC ksR4+hJsaiJlZ3Wi3CTOow+oSdS502R5Iub8Opa4ZBPjywigIcIx5KTl25I++Gx5 2o+TaorFemoKS5iAQ90ioyfVUobuGlMF/x27duRkQKAxMKo8mi4/NFiRWSRdyFJr cHmDwhbTlQ6gU6P5gyHHrRWXeFt1A4te83mKtJteJffHnIFC7JE2s3Nqa5Iozl/r nYvbvzZUIwa9aAJI6+YKDdGMlBjG6/DzGc8cuBZVN2tw7i453wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOBiKi8S2BUKpTJo5ykv+CgmneHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTZkNzMzY2MtZjA5ZS0z OWI3LWExZDQtZGViZmM3ZGU2NjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaFZFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABy726/YDp4XQs7jcim1YtNPthkJ3juMzxQ77bBrsoFxAePv8eSz7dkI HfrO4Dr7Qa4uRPh9xapfZbkHwNhYCb6YlZZu+XrNfoDxzaBsVw4GYZc70YUEg6f5 I+oc71+aaGSL/Jl/kUmvmCRJke0FNgeUHjmBf+tkS0lGWPRLr6/tSVaFAWZhES3n yvQLYh0umm7TT/TV82AaDr2stm53R8Z3uW5ILg+lCeHNEO5eLJQ3d0zmJxTgGcMc 23AvwqnAjdlOeaL6PZMMTxmXWmNfcof4CM3pGJ7maky8BuqHY3H5LkC15M/6mOei UAyEUto7MrQw+4SOGbRNwdL2etFEReY= -----END CERTIFICATE-----Generated at Fri Mar 14 10:53:21 2025 by rpki-client