$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d79cabe6-8fdf-3ea4-9cbd-8a1771200d52.roa File: d79cabe6-8fdf-3ea4-9cbd-8a1771200d52.roa (raw, json) Hash identifier: SvEY/pDvVWHIXzHN99YJWzSrE9vSPeu9zq7o6KgLD/8= Subject key identifier: 8F:F9:07:2E:CD:8E:BE:27:1B:DD:89:34:A1:6F:E9:B2:82:13:97:1D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849393E88446284BA721A65E080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d79cabe6-8fdf-3ea4-9cbd-8a1771200d52.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 16625 IP address blocks: 104.119.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:88:44:62:84:ba:72:1a:65:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=21adb944-71c6-4a06-a755-3dd9157cc171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:69:ba:c3:14:f8:3e:42:2f:c1:90:8d:49:d6: bc:2d:23:16:d3:2d:5a:91:d0:08:a4:fa:9a:d1:38: 85:c8:86:10:95:ff:4f:90:b4:30:2d:8a:ba:d2:1a: f4:22:3e:7e:c0:1d:2f:ec:64:fa:66:62:b1:39:a1: d4:82:42:88:0e:ba:16:5f:e0:ee:31:5c:76:f7:27: 0f:ea:dc:b4:7c:d1:a8:ab:ec:b5:22:01:79:33:d3: fe:bc:6e:f1:95:30:39:c5:62:22:76:8e:b1:fc:eb: bb:98:ce:33:b3:01:9c:86:ca:35:63:ad:62:42:e8: af:05:a2:f9:26:b3:88:9b:38:9d:16:de:4f:94:76: 9c:bc:1a:b2:91:0a:2a:70:f1:3e:05:d7:06:50:0f: d1:24:9b:c4:8e:28:1a:3b:0a:72:b0:39:ae:4a:1d: 72:45:b3:c4:d9:6e:0d:cc:a5:31:52:ae:c0:51:c8: dc:84:5a:5e:38:e7:a8:4b:80:e1:ba:9a:20:37:a2: 8a:3a:d6:b2:64:cc:0d:ba:f2:a0:1c:26:86:e6:76: 3c:8f:55:9c:a4:de:e0:a4:9b:c1:18:68:21:73:94: 52:8a:f1:91:22:52:e1:c1:91:ce:d2:6c:c3:d1:b2: d1:9a:ac:52:cc:d9:60:60:15:8d:12:a0:31:07:25: 4f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F9:07:2E:CD:8E:BE:27:1B:DD:89:34:A1:6F:E9:B2:82:13:97:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d79cabe6-8fdf-3ea4-9cbd-8a1771200d52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.119.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:14:04:1d:37:b8:48:14:c5:b5:e9:0f:3a:e3:eb:fb:23:bc: a0:cc:3a:30:14:21:f9:46:f5:ca:40:d1:57:67:57:93:19:e7: 48:0e:76:3a:3b:c2:2b:0f:02:fc:78:5b:95:23:7c:0b:5e:bf: 63:8f:56:27:23:59:93:a8:6e:bb:c6:b2:a5:bd:44:ea:e7:97: 71:bb:a4:98:84:eb:6a:39:36:e1:ca:69:52:fe:ab:98:42:dd: 35:39:f3:36:5e:a3:89:0c:5b:7d:bf:11:6f:e2:17:1d:20:58: db:53:a9:d4:69:cc:ed:c3:8d:6e:1e:c8:89:40:d4:aa:50:65: 47:71:2b:ab:77:dc:6b:6e:9d:ed:0b:e9:78:2e:df:5b:de:8e: ed:0e:48:33:6c:d7:a6:f8:8e:b9:47:a2:b2:28:7c:a5:2c:ae: 7e:70:aa:45:7b:7a:bc:b5:1e:44:72:1a:7e:2f:eb:71:8f:a6: d7:34:f8:1b:f3:20:ae:82:fb:d9:84:68:8c:31:f0:ae:d2:f5: 65:9c:f9:d1:0d:2e:f7:46:25:7c:bc:e4:c5:6b:44:c4:5e:2c: 18:c0:31:53:47:6a:00:e0:2c:d0:fa:48:e4:15:8c:c2:e7:9d: be:32:7f:d6:4a:91:e3:3a:a0:ae:82:51:4d:46:7a:fa:50:67: 7d:89:d5:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5PohEYoS6chpl4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk MjFhZGI5NDQtNzFjNi00YTA2LWE3NTUtM2RkOTE1N2NjMTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGm6wxT4PkIvwZCNSda8LSMW0y1akdAIpPqa 0TiFyIYQlf9PkLQwLYq60hr0Ij5+wB0v7GT6ZmKxOaHUgkKIDroWX+DuMVx29ycP 6ty0fNGoq+y1IgF5M9P+vG7xlTA5xWIido6x/Ou7mM4zswGchso1Y61iQuivBaL5 JrOImzidFt5PlHacvBqykQoqcPE+BdcGUA/RJJvEjigaOwpysDmuSh1yRbPE2W4N zKUxUq7AUcjchFpeOOeoS4DhupogN6KKOtayZMwNuvKgHCaG5nY8j1WcpN7gpJvB GGghc5RSivGRIlLhwZHO0mzD0bLRmqxSzNlgYBWNEqAxByVPjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/5By7Njr4nG92JNKFv6bKCE5cdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDc5Y2FiZTYtOGZkZi0z ZWE0LTljYmQtOGExNzcxMjAwZDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaHe4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkUBB03uEgUxbXpDzrj6/sjvKDMOjAUIflG9cpA0VdnV5MZ50gOdjo7 wisPAvx4W5UjfAtev2OPVicjWZOobrvGsqW9ROrnl3G7pJiE62o5NuHKaVL+q5hC 3TU58zZeo4kMW32/EW/iFx0gWNtTqdRpzO3DjW4eyIlA1KpQZUdxK6t33Gtune0L 6Xgu31veju0OSDNs16b4jrlHorIofKUsrn5wqkV7ery1HkRyGn4v63GPptc0+Bvz IK6C+9mEaIwx8K7S9WWc+dENLvdGJXy85MVrRMReLBjAMVNHagDgLND6SOQVjMLn nb4yf9ZKkeM6oK6CUU1GevpQZ32J1eI= -----END CERTIFICATE-----Generated at Sat Apr 5 11:04:51 2025 by rpki-client