$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb08152e-b32b-3310-9bce-be12c11c8498.roa File: bb08152e-b32b-3310-9bce-be12c11c8498.roa (raw, json) Hash identifier: l3S4NDclZcBl9XhTa4fZo6dEQ+jED0OjRrqII7PQVf4= Subject key identifier: 41:F5:22:C8:4C:B1:7D:92:89:86:2A:2D:48:E1:0F:45:91:49:06:C2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849287E59D57081CE9CDF26E700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb08152e-b32b-3310-9bce-be12c11c8498.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 20940 IP address blocks: 104.70.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:59:d5:70:81:ce:9c:df:26:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=7c3dbe1b-ad09-405a-b1c8-659f546331f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:22:63:5e:26:1b:63:8a:01:50:01:f6:3f:01: e1:6a:12:64:24:55:f7:b4:f1:9e:fa:57:cc:fb:93: 83:3e:67:0a:27:64:fb:ec:86:23:62:cb:6d:0d:aa: b8:83:d4:95:a1:ec:ed:4a:f6:59:6f:61:44:e8:fa: 9a:ad:ca:38:c2:bf:48:97:09:c2:4f:3e:bb:6d:3f: 41:83:ae:ba:eb:c6:d8:96:1c:5d:29:86:a5:25:d9: 67:38:0b:55:11:7c:4d:b4:77:cf:31:c4:99:55:d1: 18:80:5f:63:36:a1:06:7b:8f:99:2b:2a:56:27:83: 4f:9d:4a:76:04:48:65:3d:06:8d:d3:d9:d9:7f:ee: e9:1a:d2:b4:dd:a6:e2:fb:fa:7e:88:d7:c0:45:be: 82:f6:f7:07:44:6c:84:42:18:35:f0:d3:6b:0e:45: ea:41:a5:5f:69:e7:0d:84:73:1a:0f:57:ad:71:82: 3b:ff:f1:96:cb:42:72:cf:75:ce:45:01:ac:a1:58: 7b:1d:b6:79:ea:2c:92:3b:d1:55:1b:4b:d7:97:1b: e2:7e:22:b8:2d:9a:69:33:28:45:00:d2:ee:02:47: 88:76:80:e4:e8:04:a1:30:a4:1c:ef:72:2d:69:90: 8d:66:d7:96:5b:0f:59:d5:bc:86:81:0f:ec:05:de: 3e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F5:22:C8:4C:B1:7D:92:89:86:2A:2D:48:E1:0F:45:91:49:06:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb08152e-b32b-3310-9bce-be12c11c8498.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.70.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:99:e8:06:9b:d9:2e:da:24:4c:19:3d:48:1a:26:01:90:fa: 65:b3:a1:43:25:b1:2a:8d:b2:99:d7:dd:df:2c:a2:76:ec:92: 7a:b0:a3:be:42:c4:04:cd:ec:21:c6:72:e7:69:4d:4f:16:b2: 75:0b:4e:86:73:4e:db:66:bc:4e:a2:24:d6:d5:fe:30:46:13: d7:d1:0c:04:9a:3a:f4:e3:1c:a8:cb:9c:9d:ea:00:66:f2:12: 2c:f7:0b:9f:4f:33:f8:23:4b:07:84:ed:e2:9b:75:89:ee:ab: a9:ca:f5:27:07:38:54:52:0f:a7:f0:e0:d1:ec:87:48:a7:44: 1f:d0:83:0e:ff:0f:22:36:16:a3:93:27:ee:90:f3:5d:2b:a3: 72:f5:44:a2:b4:8b:4d:14:4c:ec:6f:7e:e2:1f:3f:41:af:47: 8f:27:67:e6:71:99:c7:ab:8e:54:60:51:15:10:4f:25:80:dc: ff:5e:51:64:8b:14:03:54:05:98:43:08:d1:7f:33:d8:4e:6a: d7:df:c8:38:6f:b0:ea:42:e4:13:e6:66:31:23:26:f5:bf:fb: ab:88:99:83:3f:86:2b:f2:13:f4:de:32:d3:1d:a0:bb:88:16: dc:a0:24:20:90:1c:b6:75:2f:de:a5:85:31:18:b7:f2:c3:81: bb:71:3d:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkoflnVcIHOnN8m5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk N2MzZGJlMWItYWQwOS00MDVhLWIxYzgtNjU5ZjU0NjMzMWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yJjXiYbY4oBUAH2PwHhahJkJFX3tPGe+lfM +5ODPmcKJ2T77IYjYsttDaq4g9SVoeztSvZZb2FE6Pqarco4wr9IlwnCTz67bT9B g66668bYlhxdKYalJdlnOAtVEXxNtHfPMcSZVdEYgF9jNqEGe4+ZKypWJ4NPnUp2 BEhlPQaN09nZf+7pGtK03abi+/p+iNfARb6C9vcHRGyEQhg18NNrDkXqQaVfaecN hHMaD1etcYI7//GWy0Jyz3XORQGsoVh7HbZ56iySO9FVG0vXlxvifiK4LZppMyhF ANLuAkeIdoDk6AShMKQc73ItaZCNZteWWw9Z1byGgQ/sBd4+qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEH1IshMsX2SiYYqLUjhD0WRSQbCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmIwODE1MmUtYjMyYi0z MzEwLTliY2UtYmUxMmMxMWM4NDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaEZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGZ6Aab2S7aJEwZPUgaJgGQ+mWzoUMlsSqNspnX3d8sonbsknqwo75C xATN7CHGcudpTU8WsnULToZzTttmvE6iJNbV/jBGE9fRDASaOvTjHKjLnJ3qAGby Eiz3C59PM/gjSweE7eKbdYnuq6nK9ScHOFRSD6fw4NHsh0inRB/Qgw7/DyI2FqOT J+6Q810ro3L1RKK0i00UTOxvfuIfP0GvR48nZ+ZxmcerjlRgURUQTyWA3P9eUWSL FANUBZhDCNF/M9hOatffyDhvsOpC5BPmZjEjJvW/+6uImYM/hivyE/TeMtMdoLuI FtygJCCQHLZ1L96lhTEYt/LDgbtxPfY= -----END CERTIFICATE-----Generated at Sat Apr 5 12:23:29 2025 by rpki-client