$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b86f7222-040a-3683-ae94-e141ad30a9a2.roa File: b86f7222-040a-3683-ae94-e141ad30a9a2.roa (raw, json) Hash identifier: LfEk6Az4P63/ya496ueo2GTPMNa8i4lsZnYi37WAXb8= Subject key identifier: CD:DB:28:6C:A7:ED:27:B1:CC:E3:BB:1B:B2:7D:53:CE:7A:29:01:56 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849393E89B475BBB703758F0840 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b86f7222-040a-3683-ae94-e141ad30a9a2.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 24319 IP address blocks: 104.123.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:89:b4:75:bb:b7:03:75:8f:08:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=ac123790-cb27-425b-a472-a76c7e654ec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:04:8e:52:0e:95:fb:5b:f4:ae:71:00:eb:ce: 95:aa:12:6a:b5:e2:b1:8e:e8:b2:50:3c:76:ec:5e: 80:b2:4c:55:7c:aa:65:88:9b:27:b0:0a:c6:d9:1c: 50:01:f9:90:e0:a1:7a:8c:8b:0e:12:b0:2a:d3:09: 59:4c:e0:b8:c1:1b:86:5b:b6:6d:64:c7:86:ee:13: dd:ba:27:5d:62:5d:8a:eb:6d:7d:cf:3a:95:28:d1: ed:be:c2:24:4f:ee:75:44:b2:e1:15:64:38:88:e9: 9a:78:2a:d5:98:02:6c:a0:94:bf:17:4f:37:f0:c1: d4:1c:1c:cd:f8:23:cd:9f:38:9f:8a:1d:d3:8c:2a: 8b:9a:44:7b:1b:6d:25:b8:b5:fe:4f:ca:40:4d:0f: e9:c5:ba:4e:e7:42:c5:85:f1:71:c4:49:18:9b:a2: dd:a0:d0:7e:72:0d:6e:34:38:c9:73:0f:d8:7b:ba: b8:90:33:55:cf:03:12:28:16:d7:a2:a1:e2:cc:4a: db:3a:06:0f:8f:c6:dd:42:6a:34:db:39:f5:3d:ba: 09:50:85:10:7b:f0:95:74:90:54:53:9c:8c:fc:99: 08:11:56:fc:58:09:65:0d:56:c2:83:da:47:d7:9f: 0b:ea:f4:c9:c5:52:96:11:37:ee:05:1e:fa:ce:02: 7b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:DB:28:6C:A7:ED:27:B1:CC:E3:BB:1B:B2:7D:53:CE:7A:29:01:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b86f7222-040a-3683-ae94-e141ad30a9a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.123.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:a2:2a:96:c6:a7:03:83:f0:3b:df:eb:1c:6d:bb:6c:86:17: b8:df:b2:92:c1:d5:81:c2:77:e5:aa:34:86:ce:3c:b5:f4:1b: 92:d9:5a:32:33:7c:f9:30:53:07:5b:f3:41:d7:3d:9d:e6:1b: 43:69:cb:0f:58:30:0f:c3:7f:6f:17:5b:83:f2:56:cc:78:f2: a2:15:b2:c2:45:df:3c:c6:56:2a:02:29:13:de:c1:4d:81:b3: 7d:43:3f:c2:da:6f:59:37:a1:87:91:96:b2:50:a9:a4:37:96: e9:4d:25:5a:79:12:60:32:60:5f:42:b7:33:91:04:f3:82:ea: 92:c5:bc:7d:b9:d7:29:d5:0b:55:55:0b:f5:38:e6:1e:2e:78: 4b:80:04:08:ff:2e:75:dd:c1:6a:b9:94:15:02:fd:c7:f9:d6: 3f:a8:b1:40:ee:95:3a:25:3d:37:0b:e2:a4:b9:3e:23:43:0b: 90:1a:81:45:b0:48:e1:73:55:4b:ed:0c:16:bc:0d:69:12:03: 8b:97:d8:c8:b0:a5:2c:d3:0e:20:6f:e1:36:9d:f7:4c:e4:dc: 6c:b0:ff:21:65:ae:a6:0c:72:80:6b:f2:3b:2a:2e:a7:27:ba: 6b:c7:74:fa:f3:53:bd:bc:98:dd:b1:a5:a3:48:24:1f:1a:6e: 8f:09:3b:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5Pom0dbu3A3WPCEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk YWMxMjM3OTAtY2IyNy00MjViLWE0NzItYTc2YzdlNjU0ZWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQSOUg6V+1v0rnEA686VqhJqteKxjuiyUDx2 7F6AskxVfKpliJsnsArG2RxQAfmQ4KF6jIsOErAq0wlZTOC4wRuGW7ZtZMeG7hPd uiddYl2K6219zzqVKNHtvsIkT+51RLLhFWQ4iOmaeCrVmAJsoJS/F0838MHUHBzN +CPNnzifih3TjCqLmkR7G20luLX+T8pATQ/pxbpO50LFhfFxxEkYm6LdoNB+cg1u NDjJcw/Ye7q4kDNVzwMSKBbXoqHizErbOgYPj8bdQmo02zn1PboJUIUQe/CVdJBU U5yM/JkIEVb8WAllDVbCg9pH158L6vTJxVKWETfuBR76zgJ7YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3bKGyn7SexzOO7G7J9U856KQFWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjg2ZjcyMjItMDQwYS0z NjgzLWFlOTQtZTE0MWFkMzBhOWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaHsxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWiKpbGpwOD8Dvf6xxtu2yGF7jfspLB1YHCd+WqNIbOPLX0G5LZWjIz fPkwUwdb80HXPZ3mG0Npyw9YMA/Df28XW4PyVsx48qIVssJF3zzGVioCKRPewU2B s31DP8Lab1k3oYeRlrJQqaQ3lulNJVp5EmAyYF9CtzORBPOC6pLFvH251ynVC1VV C/U45h4ueEuABAj/LnXdwWq5lBUC/cf51j+osUDulTolPTcL4qS5PiNDC5AagUWw SOFzVUvtDBa8DWkSA4uX2MiwpSzTDiBv4Tad90zk3Gyw/yFlrqYMcoBr8jsqLqcn umvHdPrzU728mN2xpaNIJB8abo8JO5Q= -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:48 2025 by rpki-client