$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0d8c2c1-7408-3646-931d-35f4b14d817e.roa File: c0d8c2c1-7408-3646-931d-35f4b14d817e.roa (raw, json) Hash identifier: BDXOjfqxL7a2cXlwJiGNyeWa+nDONUO4QCIQ/MN1Hyw= Subject key identifier: 85:05:14:CA:28:F4:00:69:D7:66:02:22:09:10:12:5A:0A:B4:05:F3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848D641177295A8BB83995A0F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0d8c2c1-7408-3646-931d-35f4b14d817e.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 6762 IP address blocks: 104.83.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:17:72:95:a8:bb:83:99:5a:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=35ec204d-72cf-4f1a-8687-7fb8670dca38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0b:8d:8d:83:41:a9:e4:d9:ff:e0:26:84:7d: 1a:95:10:24:d0:ba:36:fb:4e:b6:cf:f3:93:6d:cd: 61:f7:b0:b0:a3:3d:69:52:1e:c6:95:d6:21:e6:db: a6:6a:d8:e4:45:e1:c8:1c:9b:0c:78:bc:dd:0f:1b: 0b:01:42:f6:25:6e:3b:9c:9d:c2:33:78:1d:6d:95: d4:54:7b:81:28:0c:74:da:15:80:c3:b1:32:f3:43: 96:50:5b:84:b3:49:c6:d2:f1:e4:3a:43:0e:4a:ba: e3:bd:71:f3:60:77:bd:32:8b:83:37:6a:4c:c4:b5: 6e:3c:04:18:9a:66:2d:5f:44:f1:57:db:c8:54:14: ee:ae:c5:d0:7e:b2:e6:09:98:3a:36:97:77:5d:b9: 76:0a:55:d7:29:da:bc:c2:a2:e2:db:60:f3:ec:21: d8:e2:6b:f2:5b:b9:24:49:0a:77:d8:73:91:f6:9e: 0f:e8:60:19:4f:43:5c:83:80:20:2e:bb:91:e7:06: c3:3c:90:b1:34:33:65:38:93:29:43:39:92:0d:8b: 32:4e:51:38:be:cf:3b:02:62:81:b7:ef:04:66:ba: 4a:11:6d:8e:86:77:46:8c:f0:1a:06:2a:08:8e:40: 7c:01:86:ef:d9:f7:81:59:f3:e5:88:67:2d:f1:db: 34:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:05:14:CA:28:F4:00:69:D7:66:02:22:09:10:12:5A:0A:B4:05:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0d8c2c1-7408-3646-931d-35f4b14d817e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.83.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:3c:9e:c2:8e:8d:56:89:1d:b6:c2:58:f3:72:06:6e:bc:ce: c6:59:a3:2d:80:4d:52:5e:3f:c2:b4:1b:f6:dc:9a:18:de:3d: 8f:29:41:c9:38:7d:64:89:13:02:a4:07:7c:69:2d:d7:68:7a: 76:47:66:90:e2:1e:34:a2:19:06:38:a3:17:7c:23:c2:82:59: 54:be:74:c6:d7:87:a0:13:59:b4:db:f2:67:a4:a6:9d:eb:fe: 98:ef:e9:13:6d:f8:2a:51:1a:8c:02:09:9a:85:f4:f6:fb:c8: 33:66:b9:a1:d6:bd:37:40:d2:d3:02:2b:17:ce:ba:b7:7c:14: 57:65:f4:e3:48:52:84:76:4b:0f:be:da:28:c7:f3:eb:15:35: 8c:ec:65:10:a7:b2:26:18:52:c7:2c:f5:b5:35:f9:97:35:79: a5:e4:2c:ac:e0:37:c7:59:84:d6:e2:21:51:8e:ef:85:d5:6f: 1c:dd:37:24:bf:5d:17:a6:f3:9a:79:63:85:a6:7d:b5:9d:5a: aa:1b:d9:8e:5c:e4:c8:11:11:9f:75:83:24:1b:3c:b1:51:09: 02:70:d4:0a:7a:7b:63:21:c5:7d:72:65:67:fc:ba:4e:63:26: 51:49:69:e5:13:de:90:17:ea:6d:44:47:34:8d:ca:93:46:44: 2b:4c:2d:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQRdylai7g5laD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk MzVlYzIwNGQtNzJjZi00ZjFhLTg2ODctN2ZiODY3MGRjYTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAuNjYNBqeTZ/+AmhH0alRAk0Lo2+062z/OT bc1h97Cwoz1pUh7GldYh5tumatjkReHIHJsMeLzdDxsLAUL2JW47nJ3CM3gdbZXU VHuBKAx02hWAw7Ey80OWUFuEs0nG0vHkOkMOSrrjvXHzYHe9MouDN2pMxLVuPAQY mmYtX0TxV9vIVBTursXQfrLmCZg6Npd3Xbl2ClXXKdq8wqLi22Dz7CHY4mvyW7kk SQp32HOR9p4P6GAZT0Ncg4AgLruR5wbDPJCxNDNlOJMpQzmSDYsyTlE4vs87AmKB t+8EZrpKEW2OhndGjPAaBioIjkB8AYbv2feBWfPliGct8ds0OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUFFMoo9ABp12YCIgkQEloKtAXzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzBkOGMyYzEtNzQwOC0z NjQ2LTkzMWQtMzVmNGIxNGQ4MTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaFNYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGo8nsKOjVaJHbbCWPNyBm68zsZZoy2ATVJeP8K0G/bcmhjePY8pQck4 fWSJEwKkB3xpLddoenZHZpDiHjSiGQY4oxd8I8KCWVS+dMbXh6ATWbTb8mekpp3r /pjv6RNt+CpRGowCCZqF9Pb7yDNmuaHWvTdA0tMCKxfOurd8FFdl9ONIUoR2Sw++ 2ijH8+sVNYzsZRCnsiYYUscs9bU1+Zc1eaXkLKzgN8dZhNbiIVGO74XVbxzdNyS/ XRem85p5Y4WmfbWdWqob2Y5c5MgREZ91gyQbPLFRCQJw1Ap6e2MhxX1yZWf8uk5j JlFJaeUT3pAX6m1ERzSNypNGRCtMLbk= -----END CERTIFICATE-----Generated at Fri Mar 14 11:17:50 2025 by rpki-client