$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1aeb20f-3bff-304a-8815-9792e7c0d8a7.roa File: c1aeb20f-3bff-304a-8815-9792e7c0d8a7.roa (raw, json) Hash identifier: baszMdTFeWIYcX9LozWU3BhI5Lypxw+N6D03WoJNr6g= Subject key identifier: A4:7D:40:CC:4F:A4:25:50:3F:A6:0C:8A:8E:E5:B9:38:C4:36:9B:07 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849393E8B5C65844913FDC2EC80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1aeb20f-3bff-304a-8815-9792e7c0d8a7.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 16625 IP address blocks: 104.125.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:8b:5c:65:84:49:13:fd:c2:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=cbdb5c82-edb7-4173-b9b8-8f2fc9265023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:01:b5:62:2f:0d:31:2b:bb:82:c3:33:5b:91: 2f:bb:28:c9:d9:49:52:a3:fc:5e:30:e5:4e:93:75: a2:a4:04:5a:b8:fa:21:26:d3:fe:82:17:46:ba:89: be:3e:25:f1:5f:0a:44:ec:4f:8e:2e:86:ea:27:c2: 2c:26:f3:92:c1:52:6b:0d:7c:54:70:ee:5c:45:7f: e2:af:1e:3c:38:5f:23:20:0a:98:63:e2:39:3c:c4: cc:5f:60:4f:fb:29:f5:37:66:bd:2b:3e:95:a9:47: 29:4a:65:49:c9:46:44:64:1b:42:88:bf:0d:2c:a1: 95:c8:4e:27:f8:3e:09:a6:58:96:a3:58:5b:63:a7: 75:74:9f:8a:15:d2:da:5e:a8:94:8a:e2:66:61:56: 30:37:6a:de:2e:c2:9c:da:2e:a7:5a:91:a1:fa:e7: 64:ec:5e:a6:f6:f8:32:2a:5a:e9:79:5d:a0:4e:51: 49:6f:4a:38:2e:23:57:d3:61:9f:2b:01:bb:75:04: b8:77:d2:28:19:dc:e4:1e:4e:47:2c:1a:21:bf:40: 1e:19:8c:a2:93:47:61:e4:7e:e2:a1:8e:a4:ba:57: 1d:b2:70:5b:ca:fa:9d:5c:6e:30:9c:c0:6c:a5:aa: 41:82:ec:06:26:fc:05:68:79:7f:ed:28:b3:6b:52: 79:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:7D:40:CC:4F:A4:25:50:3F:A6:0C:8A:8E:E5:B9:38:C4:36:9B:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1aeb20f-3bff-304a-8815-9792e7c0d8a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.125.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:55:90:38:7d:fb:1f:60:0a:6f:d5:d7:aa:dc:41:7a:60:61: f5:ae:8a:7d:22:d4:d4:e8:0e:3b:1b:3d:d0:3b:88:6b:c9:0a: cb:c5:99:84:d2:0e:ab:7d:a7:45:3f:b7:d5:18:a8:1b:77:62: da:b2:d7:5e:ac:a6:88:d7:ab:4b:18:0e:cd:86:64:32:a8:7a: 3e:db:b3:ea:80:ac:ce:e1:95:69:b1:3b:6b:c9:47:5c:ef:82: e8:91:75:0c:96:4e:f9:43:1d:50:94:6b:ba:8b:aa:3b:29:cf: 99:26:e6:5e:2c:6d:3a:e1:37:85:c7:85:3b:96:6b:30:53:f2: d0:57:c9:02:5c:da:98:ac:ad:4a:27:ae:90:97:6b:66:8a:cb: dc:06:55:e6:d0:34:73:8f:f9:0d:93:73:b1:bb:ea:b2:17:d3: ca:c1:d2:4e:48:45:7a:97:94:c0:80:8a:80:7f:7b:09:14:ad: 7d:7f:4b:08:80:69:46:32:2d:76:6a:ce:ef:4e:70:a9:95:e5: ed:f3:24:8a:c7:1b:25:41:f6:bc:ec:75:3c:89:ef:f5:ca:d5: 4b:09:00:76:79:fa:a9:4f:13:47:ce:fd:08:f9:54:bf:eb:ad: f5:80:e9:5a:98:45:4b:73:47:ee:d8:c1:d4:1c:af:34:6c:80: 0e:59:f8:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5PotcZYRJE/3C7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk Y2JkYjVjODItZWRiNy00MTczLWI5YjgtOGYyZmM5MjY1MDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAG1Yi8NMSu7gsMzW5EvuyjJ2UlSo/xeMOVO k3WipARauPohJtP+ghdGuom+PiXxXwpE7E+OLobqJ8IsJvOSwVJrDXxUcO5cRX/i rx48OF8jIAqYY+I5PMTMX2BP+yn1N2a9Kz6VqUcpSmVJyUZEZBtCiL8NLKGVyE4n +D4JpliWo1hbY6d1dJ+KFdLaXqiUiuJmYVYwN2reLsKc2i6nWpGh+udk7F6m9vgy KlrpeV2gTlFJb0o4LiNX02GfKwG7dQS4d9IoGdzkHk5HLBohv0AeGYyik0dh5H7i oY6kulcdsnBbyvqdXG4wnMBspapBguwGJvwFaHl/7Siza1J5PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKR9QMxPpCVQP6YMio7luTjENpsHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzFhZWIyMGYtM2JmZi0z MDRhLTg4MTUtOTc5MmU3YzBkOGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaH3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApVkDh9+x9gCm/V16rcQXpgYfWuin0i1NToDjsbPdA7iGvJCsvFmYTS Dqt9p0U/t9UYqBt3Ytqy116spojXq0sYDs2GZDKoej7bs+qArM7hlWmxO2vJR1zv guiRdQyWTvlDHVCUa7qLqjspz5km5l4sbTrhN4XHhTuWazBT8tBXyQJc2pisrUon rpCXa2aKy9wGVebQNHOP+Q2Tc7G76rIX08rB0k5IRXqXlMCAioB/ewkUrX1/SwiA aUYyLXZqzu9OcKmV5e3zJIrHGyVB9rzsdTyJ7/XK1UsJAHZ5+qlPE0fO/Qj5VL/r rfWA6VqYRUtzR+7YwdQcrzRsgA5Z+Ek= -----END CERTIFICATE-----Generated at Sat Apr 5 10:59:41 2025 by rpki-client